Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
File: 8gI-dqaOpsn3DT6nLfhOU9whck8.mft (raw, json)
Hash identifier: kQSanZWMUFGcRog7aKpGYpHXi2Za1ysNJ5nXz6h29uk=
Subject key identifier: E4:96:A8:C5:03:02:02:82:15:14:BB:40:66:88:42:DE:11:D9:A1:EE
Authority key identifier: F2:02:3E:76:A6:8E:A6:C9:F7:0D:3E:A7:2D:F8:4E:53:DC:21:72:4F
Certificate issuer: /CN=f2023e76a68ea6c9f70d3ea72df84e53dc21724f
Certificate serial: 019A812B8551647BC1EDD107E7401EF19A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gI-dqaOpsn3DT6nLfhOU9whck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
Manifest number: 0F7B
Signing time: Fri 14 Nov 2025 07:01:44 +0000
Manifest this update: Fri 14 Nov 2025 07:01:44 +0000
Manifest next update: Sat 15 Nov 2025 07:01:44 +0000
Files and hashes: 1: 8gI-dqaOpsn3DT6nLfhOU9whck8.crl (hash: q0PHvUfUhbnZxQnhLjY8CMNimOGJAQYW7XyRPmXXinM=)
2: xmm2JL7TcI6ebRwScNNxmj8JWuo.roa (hash: fkFUQl1m0mbIlDS4H4YUitr8IcfvKPdCtORJm2ZIyMA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:81:2b:85:51:64:7b:c1:ed:d1:07:e7:40:1e:f1:9a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2023e76a68ea6c9f70d3ea72df84e53dc21724f
Validity
Not Before: Nov 14 07:01:44 2025 GMT
Not After : Nov 15 07:01:44 2025 GMT
Subject: CN=e496a8c5030202821514bb40668842de11d9a1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:49:96:be:36:91:d1:f4:31:ac:d2:f4:bd:08:
5e:11:4c:91:7e:2d:cb:c4:0a:e1:c9:d9:4c:d9:b9:
29:e9:ad:d0:49:38:7e:fa:fd:68:fc:0b:4d:7c:4b:
d3:a9:3c:87:e2:fc:da:3d:2d:15:a0:fc:54:f2:e3:
17:02:98:5b:9b:ed:85:59:68:9c:b7:67:6c:5b:39:
2e:52:9f:78:1a:6e:77:93:90:6c:08:33:88:29:e2:
98:d8:65:ba:45:70:41:88:a3:e7:62:6c:60:58:c8:
b1:9e:78:b9:64:0b:75:10:6e:b4:ef:79:b9:79:3f:
af:40:93:8a:e2:7f:74:42:03:55:eb:f6:d3:f1:51:
a7:93:ea:14:6c:be:ca:a5:46:49:36:6c:75:a6:1f:
47:04:eb:b6:6a:49:75:ee:53:00:41:e6:76:2f:7d:
c4:ff:4c:20:ff:61:29:bf:57:b8:f2:76:8a:04:60:
8a:a2:91:4e:aa:4e:87:66:c2:e0:85:84:82:4f:83:
75:ab:c2:bc:e1:4f:db:f3:43:90:b3:96:ce:2c:84:
ec:e8:f5:f5:ff:bd:b8:aa:e9:f3:d3:af:bd:15:23:
9f:1a:fd:36:f2:e8:70:66:87:85:e4:f3:5d:4f:e8:
8c:f8:49:c9:b1:c7:10:9f:a9:f2:47:6f:02:4a:ac:
6a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:96:A8:C5:03:02:02:82:15:14:BB:40:66:88:42:DE:11:D9:A1:EE
X509v3 Authority Key Identifier:
keyid:F2:02:3E:76:A6:8E:A6:C9:F7:0D:3E:A7:2D:F8:4E:53:DC:21:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gI-dqaOpsn3DT6nLfhOU9whck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:73:f3:22:54:86:40:de:c6:f6:9f:ad:d0:fc:83:91:a7:fd:
2e:62:bc:73:aa:9a:ef:71:50:d9:a6:e3:90:78:20:42:b6:3b:
c4:10:7a:09:a1:d6:a1:ee:66:8c:0a:a3:02:48:67:8b:8e:c0:
f0:de:f9:bc:86:02:f1:9d:89:d2:be:98:4c:87:bd:36:60:20:
ef:28:68:59:60:ab:90:12:ed:77:5c:13:28:2a:ef:0d:7b:66:
02:ef:bb:c8:da:a4:5b:1e:db:9c:91:48:e4:de:3e:3f:02:c4:
18:6d:b3:ee:b7:02:e1:79:3e:aa:93:10:d4:db:24:30:53:86:
4f:eb:ca:09:5c:74:3f:5c:aa:cd:cc:b2:67:bd:3b:c8:53:38:
8c:61:9c:1d:98:0a:a7:6d:e4:63:77:6b:3e:4c:2c:87:c0:1c:
6c:99:30:fe:a7:c7:ac:0a:4c:fe:fd:2e:2d:35:22:36:24:11:
b1:b3:90:0f:69:c9:f8:b9:81:ad:11:2e:0f:fe:f3:3d:31:68:
c7:74:d4:d2:3f:11:dc:0f:37:4e:60:16:d2:93:b1:ca:0d:9d:
a5:d4:67:de:7f:a1:d4:16:36:f8:ff:23:88:1e:05:64:80:1d:
2e:15:6b:63:d5:5d:66:29:3e:93:8f:cf:f6:5a:5c:22:88:6d:
61:ad:08:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:25:58 2026 by rpki-client