Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
File: fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft (raw, json)
Hash identifier: MioNwaaH0DCVOsDKP9maY2QEy1TDQ4Nk+ZTnkSbuM/E=
Subject key identifier: 2F:16:98:37:9C:91:EB:4F:A5:AC:AC:F5:28:AE:69:E7:DA:7A:82:60
Authority key identifier: 7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76
Certificate issuer: /CN=7c1bbb08037a876230406fa67379f980b5ab3276
Certificate serial: 019B50050DF770A578380F4230F158566635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
Manifest number: 105C
Signing time: Wed 24 Dec 2025 11:01:06 +0000
Manifest this update: Wed 24 Dec 2025 11:01:06 +0000
Manifest next update: Thu 25 Dec 2025 11:01:06 +0000
Files and hashes: 1: fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl (hash: Qq1cGDbkXDXbbUX6Z3wWXNJVQ8xyKiRZTD2QY1EHxBU=)
2: mZO8S467jgcFzt406x0GmuRgZrg.roa (hash: LBo6nvo9ZS8C5pN/ZxvETZsZeRn1wNqdsDaMcfQFY7I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:50:05:0d:f7:70:a5:78:38:0f:42:30:f1:58:56:66:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c1bbb08037a876230406fa67379f980b5ab3276
Validity
Not Before: Dec 24 11:01:06 2025 GMT
Not After : Dec 25 11:01:06 2025 GMT
Subject: CN=2f1698379c91eb4fa5acacf528ae69e7da7a8260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:58:49:5e:ca:fc:2d:35:b0:71:83:9c:41:
dd:a2:c5:8f:91:99:79:3e:c9:a6:02:b4:c0:f5:9e:
10:75:2e:5a:32:90:c0:5c:35:a7:ab:5c:34:f2:38:
af:c6:b9:38:b9:43:96:76:c1:1d:c9:01:4a:da:d7:
d1:d9:f8:70:0a:32:3a:b7:82:86:5b:b9:68:36:81:
33:14:43:4c:a6:33:24:5f:6e:9d:51:82:bc:e3:b7:
8e:a4:dc:9b:8e:32:7f:29:68:43:6f:78:52:38:27:
b7:38:97:4c:96:1d:3d:43:46:c0:54:1e:4c:d0:07:
03:b4:db:36:b4:2d:f6:b9:dd:92:74:b8:36:27:df:
ee:04:43:c5:b9:b2:41:88:45:61:d2:12:54:77:14:
77:96:18:0f:26:75:67:55:95:9d:a6:68:16:78:46:
42:dd:3f:8b:4d:cd:7e:03:94:8e:ad:77:50:1d:ea:
2e:e9:1a:14:77:62:fa:62:00:74:dd:54:9e:50:9f:
e2:55:9b:f3:ed:49:25:d5:73:0e:0c:c8:62:42:87:
c6:9b:ad:87:a5:6c:33:45:60:db:e6:d5:a3:cf:51:
2d:db:f2:99:a0:5c:a1:ad:98:3a:cf:d1:b1:13:a4:
f0:03:fd:1a:d9:f9:f1:8f:ef:90:c7:e9:6c:09:bb:
17:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:16:98:37:9C:91:EB:4F:A5:AC:AC:F5:28:AE:69:E7:DA:7A:82:60
X509v3 Authority Key Identifier:
keyid:7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e1:3a:03:6f:71:3b:bc:cd:ad:e3:81:83:ea:04:0d:28:0d:
97:76:04:88:b5:2a:32:0b:50:a1:97:4a:79:c1:f1:cd:17:18:
58:d3:c9:d1:43:ad:8d:25:56:5d:89:cc:84:f0:c1:f9:7c:49:
10:0b:27:68:79:bd:b2:0e:1e:cf:38:2b:87:e7:e6:99:51:3c:
06:e7:f0:00:9d:13:8f:10:54:e0:70:3c:62:5e:9a:71:8d:52:
b1:1c:15:c4:ac:87:e5:80:c1:ea:38:d9:e9:66:a0:65:ec:8f:
fa:88:18:e1:fd:42:36:f3:18:c0:01:78:63:69:f5:54:15:d9:
f4:c7:b8:01:86:23:16:eb:54:cb:d5:2d:1a:86:3c:1a:ba:94:
a6:38:e3:80:22:db:bf:0e:d4:3f:0a:5c:34:fd:93:31:8d:11:
e1:3c:a6:53:fd:df:d1:09:fe:a1:51:e2:33:1a:81:b9:6e:4a:
78:30:d6:38:1b:d2:91:9c:50:8b:c0:9a:d1:a0:75:77:e2:5c:
3e:49:f5:bc:f6:90:c9:94:84:23:38:c0:1d:cf:6d:4e:8b:8d:
94:73:91:d2:da:15:94:54:dc:9b:6c:b6:db:cf:4f:25:f6:42:
04:60:d5:58:ca:58:53:30:06:5c:a6:c6:17:05:f2:06:36:4e:
70:12:64:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtQBQ33cKV4OA9CMPFYVmY1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMWJiYjA4MDM3YTg3NjIzMDQwNmZhNjczNzlmOTgwYjVh
YjMyNzYwHhcNMjUxMjI0MTEwMTA2WhcNMjUxMjI1MTEwMTA2WjAzMTEwLwYDVQQD
EygyZjE2OTgzNzljOTFlYjRmYTVhY2FjZjUyOGFlNjllN2RhN2E4MjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsolYSV7K/C01sHGDnEHdosWPkZl5
PsmmArTA9Z4QdS5aMpDAXDWnq1w08jivxrk4uUOWdsEdyQFK2tfR2fhwCjI6t4KG
W7loNoEzFENMpjMkX26dUYK847eOpNybjjJ/KWhDb3hSOCe3OJdMlh09Q0bAVB5M
0AcDtNs2tC32ud2SdLg2J9/uBEPFubJBiEVh0hJUdxR3lhgPJnVnVZWdpmgWeEZC
3T+LTc1+A5SOrXdQHeou6RoUd2L6YgB03VSeUJ/iVZvz7Ukl1XMODMhiQofGm62H
pWwzRWDb5tWjz1Et2/KZoFyhrZg6z9GxE6TwA/0a2fnxj++Qx+lsCbsXswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8WmDecketPpays9SiuaefaeoJgMB8GA1UdIwQY
MBaAFHwbuwgDeodiMEBvpnN5+YC1qzJ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkJ1N0NBTjZoMkl3UUctbWMzbjVnTFdyTW5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hY2E5OWItODJhZi00YWJhLTk5Njct
MDhkNWNkMTZmNTQ5LzEvZkJ1N0NBTjZoMkl3UUctbWMzbjVnTFdyTW5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9hY2E5OWItODJhZi00YWJhLTk5NjctMDhkNWNkMTZmNTQ5
LzEvZkJ1N0NBTjZoMkl3UUctbWMzbjVnTFdyTW5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAouE6A29x
O7zNreOBg+oEDSgNl3YEiLUqMgtQoZdKecHxzRcYWNPJ0UOtjSVWXYnMhPDB+XxJ
EAsnaHm9sg4ezzgrh+fmmVE8BufwAJ0TjxBU4HA8Yl6acY1SsRwVxKyH5YDB6jjZ
6WagZeyP+ogY4f1CNvMYwAF4Y2n1VBXZ9Me4AYYjFutUy9UtGoY8GrqUpjjjgCLb
vw7UPwpcNP2TMY0R4TymU/3f0Qn+oVHiMxqBuW5KeDDWOBvSkZxQi8Ca0aB1d+Jc
Pkn1vPaQyZSEIzjAHc9tTouNlHOR0toVlFTcm2y2289PJfZCBGDVWMpYUzAGXKbG
FwXyBjZOcBJkXw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:28 2026 by rpki-client