Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ba7a80-5d54-4e24-99f9-e2994534495a/1/MN-QKoFpKFoeCclwPGOg89St7kg.mft
File: MN-QKoFpKFoeCclwPGOg89St7kg.mft (raw, json)
Hash identifier: LmBdKRIjyksJSRp4z9R2moiKohxQyyQanUAMj6w0+34=
Subject key identifier: 34:E0:69:DE:25:F4:D0:5F:55:9D:52:2E:AF:87:36:4A:D3:2A:18:0E
Authority key identifier: 30:DF:90:2A:81:69:28:5A:1E:09:C9:70:3C:63:A0:F3:D4:AD:EE:48
Certificate issuer: /CN=30df902a8169285a1e09c9703c63a0f3d4adee48
Certificate serial: 019B72FEA4648A3B215A586111CC8A98A9BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MN-QKoFpKFoeCclwPGOg89St7kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ba7a80-5d54-4e24-99f9-e2994534495a/1/MN-QKoFpKFoeCclwPGOg89St7kg.mft
Manifest number: 07F0
Signing time: Wed 31 Dec 2025 06:00:49 +0000
Manifest this update: Wed 31 Dec 2025 06:00:49 +0000
Manifest next update: Thu 01 Jan 2026 06:00:49 +0000
Files and hashes: 1: MN-QKoFpKFoeCclwPGOg89St7kg.crl (hash: K/JCvyfKT3W7PUs+RxNSzCAVN9H+2uF5jMnnY2YqIpw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:72:fe:a4:64:8a:3b:21:5a:58:61:11:cc:8a:98:a9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30df902a8169285a1e09c9703c63a0f3d4adee48
Validity
Not Before: Dec 31 06:00:49 2025 GMT
Not After : Jan 1 06:00:49 2026 GMT
Subject: CN=34e069de25f4d05f559d522eaf87364ad32a180e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ef:39:44:21:52:18:d5:e3:96:0e:ff:05:8d:
5a:4b:74:9c:16:26:dd:4d:95:08:fc:71:f4:1f:35:
88:4a:a7:d6:81:0b:af:35:d8:a9:3e:d3:fa:ac:c4:
af:52:d8:61:8b:c8:44:ac:7d:65:f2:93:96:51:7e:
f8:7e:92:4a:13:03:0d:f5:0f:16:cb:ac:3a:46:e8:
e1:df:23:36:90:17:65:e9:64:c5:67:cc:64:95:10:
f2:00:b5:78:aa:9a:8b:41:35:25:76:9e:d0:9f:a6:
cb:60:4a:75:d7:29:41:9d:2b:78:3a:e5:38:56:8f:
8f:3c:18:64:c1:e6:78:d4:0c:9d:01:d0:12:17:26:
b0:cd:8c:8b:91:95:d6:84:0d:4e:ed:65:a0:53:6d:
e1:72:8b:25:86:7e:ac:04:9a:25:31:be:57:27:9a:
ea:81:a4:4e:8b:78:96:56:8f:cf:48:5a:e9:df:95:
04:58:f3:6c:49:ce:72:91:16:02:09:3f:8a:94:9f:
ef:dc:f7:bc:9b:d1:66:68:d6:9a:2f:a1:82:0d:ca:
a5:a3:18:c8:c0:54:c7:8e:c9:f6:ed:36:4c:6d:97:
b1:a0:50:c5:ff:67:96:3d:71:8c:1d:a2:f5:03:f9:
a4:65:01:29:0f:23:9e:fa:3d:eb:df:18:71:94:0b:
99:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E0:69:DE:25:F4:D0:5F:55:9D:52:2E:AF:87:36:4A:D3:2A:18:0E
X509v3 Authority Key Identifier:
keyid:30:DF:90:2A:81:69:28:5A:1E:09:C9:70:3C:63:A0:F3:D4:AD:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MN-QKoFpKFoeCclwPGOg89St7kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ba7a80-5d54-4e24-99f9-e2994534495a/1/MN-QKoFpKFoeCclwPGOg89St7kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ba7a80-5d54-4e24-99f9-e2994534495a/1/MN-QKoFpKFoeCclwPGOg89St7kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d4:aa:d6:51:89:94:83:1c:0e:89:09:46:69:4c:ff:7e:72:
e3:c2:6e:4f:79:b7:4d:24:69:53:36:7f:91:e4:0c:d1:bc:0e:
ac:62:bf:d5:a6:04:56:41:6f:8e:f8:61:88:ac:4f:dd:2d:e5:
95:47:fc:20:c0:85:01:ec:79:29:29:9b:29:fd:6f:2b:85:1a:
21:f0:b4:d9:cb:7a:0b:5e:47:80:42:33:1b:6a:75:a5:e9:78:
0b:a9:ee:9f:28:c9:a6:e1:69:b3:c1:b3:61:e3:8e:03:56:3a:
e0:2c:30:1c:06:0d:7b:e9:c9:dc:77:2c:39:91:83:9c:5f:4e:
3f:cb:cc:cb:5b:3e:82:d2:7a:a8:5e:c4:13:2c:a7:3d:fe:62:
2d:b3:f8:21:52:5d:45:8c:52:73:5c:bc:35:50:57:b9:8b:61:
6d:db:ad:ea:91:da:7d:2c:97:87:d4:22:8a:ff:22:44:2f:b4:
be:38:d3:4f:65:4b:36:8c:fa:21:31:a4:1c:cc:48:c2:5e:2c:
28:79:e6:54:7b:33:e4:20:b7:a4:51:66:16:f4:fc:2a:b8:8b:
2e:b1:ce:98:64:03:74:7a:ad:dc:c4:99:af:8a:ae:98:1e:2a:
0f:55:39:24:9a:4e:07:13:93:79:2a:c1:5c:bc:ef:9f:e7:f0:
69:6d:69:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:13 2026 by rpki-client