Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft
File: nYy-lCn5RJlbPJNL2vZglrURSNQ.mft (raw, json)
Hash identifier: UIsILDZBs1OqlUgGb8abx6R8cAjnVmARgAW+w99gW7g=
Subject key identifier: FD:37:A0:0F:56:B4:00:81:2D:0D:CC:B7:25:DB:EF:B5:7D:12:7F:67
Authority key identifier: 9D:8C:BE:94:29:F9:44:99:5B:3C:93:4B:DA:F6:60:96:B5:11:48:D4
Certificate issuer: /CN=9d8cbe9429f944995b3c934bdaf66096b51148d4
Certificate serial: 019B695767D614E98983648AA675F21D711D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYy-lCn5RJlbPJNL2vZglrURSNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft
Manifest number: 06EC
Signing time: Mon 29 Dec 2025 09:01:34 +0000
Manifest this update: Mon 29 Dec 2025 09:01:34 +0000
Manifest next update: Tue 30 Dec 2025 09:01:34 +0000
Files and hashes: 1: nYy-lCn5RJlbPJNL2vZglrURSNQ.crl (hash: WVwZLAyqcpNgoDK01JmVeo6hG+WF2xSLN4AXYGhHSUg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:69:57:67:d6:14:e9:89:83:64:8a:a6:75:f2:1d:71:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8cbe9429f944995b3c934bdaf66096b51148d4
Validity
Not Before: Dec 29 09:01:34 2025 GMT
Not After : Dec 30 09:01:34 2025 GMT
Subject: CN=fd37a00f56b400812d0dccb725dbefb57d127f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:14:4e:26:d0:26:dc:10:eb:5f:e8:d6:ed:
87:fa:e7:2c:a8:00:3a:eb:93:0a:23:a5:7f:3b:a4:
e4:32:60:a0:7f:5b:f6:2f:8a:b9:4a:e4:16:27:2c:
95:c0:c1:e4:f2:0c:ca:95:dd:91:b0:9c:00:a6:94:
07:95:01:b8:28:76:40:f8:8c:30:66:42:9d:cd:3f:
62:c0:91:2f:fe:ab:f7:9e:11:79:5f:be:5e:0d:b2:
3c:d8:57:81:30:c9:08:bc:9d:08:28:45:a3:99:0b:
8b:82:c6:ef:14:6f:35:ea:90:f3:48:34:a9:30:76:
ba:e1:cf:32:3a:4a:58:b4:87:f6:b0:c9:04:1d:b7:
0c:f0:2f:74:68:15:2d:f1:b1:c9:87:f7:3a:b5:02:
c1:45:25:69:39:15:49:2b:8b:e8:cb:d5:b5:43:c0:
d0:11:3f:b9:31:e8:ea:fe:aa:5e:b1:f2:a1:a1:51:
89:64:2b:5f:70:83:d4:91:1e:8f:85:a6:b8:62:af:
cc:c0:bd:8c:de:27:23:df:8a:64:89:42:19:17:04:
da:b9:a2:2e:ac:29:8a:02:2f:2f:02:b3:5d:a9:9d:
71:29:11:90:a2:f8:df:5c:50:00:59:33:ed:3e:51:
93:57:49:4a:89:37:c1:cf:81:7f:0e:d9:45:cf:cf:
ba:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:37:A0:0F:56:B4:00:81:2D:0D:CC:B7:25:DB:EF:B5:7D:12:7F:67
X509v3 Authority Key Identifier:
keyid:9D:8C:BE:94:29:F9:44:99:5B:3C:93:4B:DA:F6:60:96:B5:11:48:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYy-lCn5RJlbPJNL2vZglrURSNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e5:3b:65:00:8e:14:36:93:5e:d5:b8:90:33:45:eb:8d:d5:
c9:e9:32:f2:64:f4:3a:91:36:ac:6f:c7:bf:3e:39:49:40:4d:
0f:05:f5:40:d4:a0:a4:f4:d2:dc:b7:eb:41:75:18:2d:66:d0:
2f:fb:01:74:bc:ea:2a:4f:6a:35:36:23:bc:e5:a3:65:42:8b:
35:97:45:fb:35:f3:5f:09:0a:57:5f:9f:f9:82:cc:d6:a8:18:
f4:0c:29:18:29:45:70:30:0d:e6:3d:87:b1:fc:a8:c1:22:f1:
a7:f9:7e:2d:7f:9d:76:e3:6b:fb:c5:8e:e5:d3:70:b9:70:41:
d9:b8:06:ca:57:0b:5a:67:9b:4b:64:c8:9b:2c:5c:8f:c5:dd:
26:44:24:79:86:73:4d:62:ce:53:a9:50:cb:0c:a5:38:2a:47:
e5:2a:47:52:72:33:03:31:85:4e:ce:50:23:d1:de:2b:9a:9c:
82:8c:c3:83:78:4a:bc:2e:e0:0b:64:fc:35:4e:ab:4f:81:49:
73:e5:f7:1b:75:e6:b9:35:65:c7:60:c6:bd:9e:ca:ed:cb:c4:
e8:ec:97:c3:95:c7:0d:01:cc:d8:6b:5e:05:c0:ae:26:d5:bb:
4e:b6:0f:e8:02:8f:96:0a:ad:08:ca:5a:88:f8:fd:1a:7c:33:
91:75:e7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:44 2026 by rpki-client