Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft
File: TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft (raw, json)
Hash identifier: AU7E4YKXJnogTAZGerkaLb76VH88x4bs3iOH2geB4rU=
Subject key identifier: 0F:7A:60:49:93:38:DA:C9:83:77:32:37:2C:29:4C:36:9D:CF:FE:8E
Authority key identifier: 4C:00:06:E0:58:96:F6:FF:B3:01:61:E7:C8:DD:A2:F9:AD:05:B5:61
Certificate issuer: /CN=4c0006e05896f6ffb30161e7c8dda2f9ad05b561
Certificate serial: 019B44A57F6273661A82C21BC022130B3B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAAG4FiW9v-zAWHnyN2i-a0FtWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft
Manifest number: 16E9
Signing time: Mon 22 Dec 2025 06:00:55 +0000
Manifest this update: Mon 22 Dec 2025 06:00:55 +0000
Manifest next update: Tue 23 Dec 2025 06:00:55 +0000
Files and hashes: 1: TAAG4FiW9v-zAWHnyN2i-a0FtWE.crl (hash: 8sxjvRKWc1Em/gE7l6U/LdPmu3YtGuXmLgicrwnlUhs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:44:a5:7f:62:73:66:1a:82:c2:1b:c0:22:13:0b:3b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c0006e05896f6ffb30161e7c8dda2f9ad05b561
Validity
Not Before: Dec 22 06:00:55 2025 GMT
Not After : Dec 23 06:00:55 2025 GMT
Subject: CN=0f7a60499338dac9837732372c294c369dcffe8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e0:b0:73:ab:23:60:a9:eb:86:8b:c1:97:7b:
01:f0:fe:39:b2:f5:52:68:ce:65:9f:25:e2:f5:5a:
13:74:45:a3:42:a3:7c:45:b3:60:db:b6:a8:1d:cd:
01:da:6e:83:ac:ab:5d:d8:df:2d:75:fd:83:e2:09:
c3:32:9a:05:ca:70:2d:6d:5f:60:9f:37:18:0f:e4:
f5:71:82:81:21:6d:45:0b:46:94:c1:ad:c1:77:e8:
9f:49:3c:fe:11:dd:00:9e:c1:08:29:50:f5:cf:e9:
b5:af:25:7f:5f:58:7a:36:41:83:e1:be:f6:72:4e:
56:71:20:c1:1c:bd:37:ba:56:6d:29:e9:e4:2d:5b:
62:0e:e6:a6:ac:eb:96:60:3c:e8:f8:17:24:05:a7:
df:5e:ca:ca:09:42:b7:f6:06:83:70:d1:7d:63:b3:
bf:58:4f:40:a8:f0:c3:e3:0a:e2:b9:06:84:59:26:
48:b4:99:64:38:fd:7d:20:3f:87:0c:4d:d3:4c:06:
a2:bc:d3:63:28:85:8c:27:6d:36:61:42:26:07:cb:
0a:1d:1a:a4:3e:0e:fd:23:db:d9:06:fb:4f:fd:42:
10:5f:14:98:d5:8b:e3:57:5e:63:3c:6b:55:07:95:
72:fa:e8:b1:83:e3:49:a4:9d:c7:43:7b:42:17:49:
4b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7A:60:49:93:38:DA:C9:83:77:32:37:2C:29:4C:36:9D:CF:FE:8E
X509v3 Authority Key Identifier:
keyid:4C:00:06:E0:58:96:F6:FF:B3:01:61:E7:C8:DD:A2:F9:AD:05:B5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAAG4FiW9v-zAWHnyN2i-a0FtWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:dc:9e:a1:7d:db:08:01:da:c8:73:ce:49:79:a9:12:18:5e:
af:d8:99:e4:82:a0:7f:5d:45:32:f9:cf:79:6e:10:0d:23:7e:
ed:42:d2:a1:2c:83:b5:68:be:c3:a6:20:28:b4:bf:2a:6c:84:
48:eb:ec:52:69:3c:f2:87:a9:a2:70:17:5c:ea:d9:12:01:66:
18:6a:6c:c2:a1:11:f6:08:69:60:e6:f1:e2:ed:f3:d1:69:76:
37:ac:15:ee:90:8b:d8:19:aa:4b:16:37:77:f6:c6:0a:cf:6b:
c6:91:69:db:ad:52:2a:e3:b1:5a:f8:4c:5f:28:c1:b4:2f:15:
8d:14:5e:7e:ea:6e:c9:f5:77:9a:1a:87:29:0f:7a:d6:16:63:
78:42:16:ab:50:5c:a3:7c:81:3f:2e:3e:6d:2c:8f:f1:a2:b6:
36:42:1c:75:8c:64:a9:96:59:cb:71:e7:d9:84:e2:17:a9:d6:
10:48:39:cb:d3:1d:e6:f3:fb:fb:02:0a:8e:c2:39:f0:75:97:
89:91:95:db:df:f1:bf:e3:36:a5:b1:0c:10:01:f1:3f:59:a1:
f8:1a:0c:49:a6:9b:21:ec:ef:f7:1a:63:6a:21:4b:e5:a7:f9:
b3:93:33:e3:95:fb:be:b4:83:0a:75:21:7b:bd:a3:46:b1:1b:
29:85:1e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:13 2026 by rpki-client