Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
File: laWt9q8fzAVwrfhY_Vv74oeRoYY.mft (raw, json)
Hash identifier: SO1tQyHYSy+NvsP1BWrcwrQ+PO8hv3Pflwh9B+cVqXc=
Subject key identifier: D2:2A:F6:B7:E6:09:EA:76:50:B2:B2:FC:9F:A4:4E:5F:2B:46:F6:76
Authority key identifier: 95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
Certificate issuer: /CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Certificate serial: 019B49273666F158425C38FFC08043A94BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
Manifest number: 123F
Signing time: Tue 23 Dec 2025 03:01:05 +0000
Manifest this update: Tue 23 Dec 2025 03:01:05 +0000
Manifest next update: Wed 24 Dec 2025 03:01:05 +0000
Files and hashes: 1: laWt9q8fzAVwrfhY_Vv74oeRoYY.crl (hash: kj5UD1iqVx+hEOUyjgwITn6E/Pie5bArfIPP/t21zMc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:49:27:36:66:f1:58:42:5c:38:ff:c0:80:43:a9:4b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Validity
Not Before: Dec 23 03:01:05 2025 GMT
Not After : Dec 24 03:01:05 2025 GMT
Subject: CN=d22af6b7e609ea7650b2b2fc9fa44e5f2b46f676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7b:fd:f7:6a:f5:15:d0:f2:fe:18:c2:b8:63:
cd:ff:20:a6:a6:a8:d2:bd:82:f1:09:f4:97:a1:ac:
a0:e3:5b:e7:89:58:d9:f6:e0:3a:14:ff:3b:21:7e:
05:78:5e:65:43:cc:f8:f5:a6:e4:fe:57:e7:53:ee:
b3:36:af:86:60:93:be:bd:a9:76:7f:77:70:d4:bd:
9a:99:d7:49:b9:33:eb:6e:80:82:5f:fd:0a:51:42:
b1:f9:65:ac:1b:c6:27:0b:94:cb:3b:5f:10:62:80:
65:3a:14:f4:c4:70:38:04:7f:e7:e6:02:1a:ae:a3:
82:67:37:63:0a:a2:c6:aa:a8:82:ec:46:b3:8d:da:
c5:4c:8e:f4:b2:28:8a:5f:86:42:20:4e:3b:f2:bc:
35:cc:da:10:7c:ad:62:86:24:bc:fe:72:8a:4c:1f:
41:d8:9f:5e:75:13:c9:df:11:61:d3:7e:2c:23:8a:
4b:6d:47:7b:8d:70:6c:d0:4d:d8:90:a5:1f:95:42:
a5:05:e8:9f:1c:f7:7a:9d:47:1a:31:f8:87:f3:e1:
55:ff:b4:be:99:2d:aa:6f:ec:08:bc:ce:9a:a0:f6:
ee:2d:3e:76:08:22:0e:02:e5:36:06:0d:9d:04:b9:
ca:f7:f7:16:3c:8d:42:da:1e:0f:96:de:03:b7:11:
26:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2A:F6:B7:E6:09:EA:76:50:B2:B2:FC:9F:A4:4E:5F:2B:46:F6:76
X509v3 Authority Key Identifier:
keyid:95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ef:8f:0e:d0:ef:7e:cf:a2:fd:f8:59:8c:54:e9:a2:90:6a:
8f:25:ad:cc:28:75:df:c6:e0:a7:b3:3b:51:e7:4c:02:6d:be:
6b:c3:bd:a9:61:60:ba:eb:8c:bd:d5:af:f5:9f:8d:b3:48:ee:
84:7e:23:bf:03:3a:33:86:a8:4b:84:7a:82:b1:82:0c:56:69:
0f:d2:62:ef:46:a4:40:4d:a6:a1:3d:49:fa:6c:30:46:ab:7f:
bd:3e:bb:4b:ae:17:43:c8:09:20:7b:8b:4e:17:ff:8d:30:76:
a5:14:37:36:5f:e6:56:39:3e:50:41:0c:88:d4:b5:89:89:b3:
76:a9:21:b3:f0:86:05:02:c8:32:13:c9:0b:63:ec:5b:96:66:
f6:a2:cb:65:86:a4:8b:7c:a4:d8:b9:9b:3f:76:09:5c:1c:ec:
22:5f:01:ad:f2:88:48:e0:31:1f:f6:45:61:f5:f7:da:92:63:
aa:2a:4b:52:13:0a:a9:a4:0f:ce:f9:23:73:ff:5d:81:10:4a:
55:6f:fb:bb:d7:3b:01:62:da:3f:0f:07:33:64:e1:72:d1:6f:
f2:5c:e2:25:e6:44:65:85:42:51:19:4f:14:78:99:1b:f2:3b:
26:d3:35:9a:a8:91:96:a8:a6:d0:63:e4:f4:07:d4:71:42:eb:
63:d5:bf:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtJJzZm8VhCXDj/wIBDqUvoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YTVhZGY2YWYxZmNjMDU3MGFkZjg1OGZkNWJmYmUyODc5
MWExODYwHhcNMjUxMjIzMDMwMTA1WhcNMjUxMjI0MDMwMTA1WjAzMTEwLwYDVQQD
EyhkMjJhZjZiN2U2MDllYTc2NTBiMmIyZmM5ZmE0NGU1ZjJiNDZmNjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinv992r1FdDy/hjCuGPN/yCmpqjS
vYLxCfSXoayg41vniVjZ9uA6FP87IX4FeF5lQ8z49abk/lfnU+6zNq+GYJO+val2
f3dw1L2amddJuTPrboCCX/0KUUKx+WWsG8YnC5TLO18QYoBlOhT0xHA4BH/n5gIa
rqOCZzdjCqLGqqiC7EazjdrFTI70siiKX4ZCIE478rw1zNoQfK1ihiS8/nKKTB9B
2J9edRPJ3xFh034sI4pLbUd7jXBs0E3YkKUflUKlBeifHPd6nUcaMfiH8+FV/7S+
mS2qb+wIvM6aoPbuLT52CCIOAuU2Bg2dBLnK9/cWPI1C2h4Plt4DtxEmZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIq9rfmCep2ULKy/J+kTl8rRvZ2MB8GA1UdIwQY
MBaAFJWlrfavH8wFcK34WP1b++KHkaGGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGFXdDlxOGZ6QVZ3cmZoWV9Wdjc0b2VSb1lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kM2YxYmEtZDllNS00NWM1LWJjYTIt
MTYxOWQwOGM2OTY1LzEvbGFXdDlxOGZ6QVZ3cmZoWV9Wdjc0b2VSb1lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9kM2YxYmEtZDllNS00NWM1LWJjYTItMTYxOWQwOGM2OTY1
LzEvbGFXdDlxOGZ6QVZ3cmZoWV9Wdjc0b2VSb1lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARO+PDtDv
fs+i/fhZjFTpopBqjyWtzCh138bgp7M7UedMAm2+a8O9qWFguuuMvdWv9Z+Ns0ju
hH4jvwM6M4aoS4R6grGCDFZpD9Ji70akQE2moT1J+mwwRqt/vT67S64XQ8gJIHuL
Thf/jTB2pRQ3Nl/mVjk+UEEMiNS1iYmzdqkhs/CGBQLIMhPJC2PsW5Zm9qLLZYak
i3yk2LmbP3YJXBzsIl8BrfKISOAxH/ZFYfX32pJjqipLUhMKqaQPzvkjc/9dgRBK
VW/7u9c7AWLaPw8HM2ThctFv8lziJeZEZYVCURlPFHiZG/I7JtM1mqiRlqim0GPk
9AfUcULrY9W/9A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:41 2026 by rpki-client