Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
File: TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft (raw, json)
Hash identifier: 5snaDW2/2BlmBFCzbA/R+416Gt2E9w1tXHX+67/PYVc=
Subject key identifier: ED:8D:9C:2D:91:79:BC:B0:ED:38:8F:02:DD:2F:71:24:65:B6:94:9B
Authority key identifier: 4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
Certificate issuer: /CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Certificate serial: 019B72598251318372AE07D60693BC2D747B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
Manifest number: 0EE9
Signing time: Wed 31 Dec 2025 03:00:27 +0000
Manifest this update: Wed 31 Dec 2025 03:00:27 +0000
Manifest next update: Thu 01 Jan 2026 03:00:27 +0000
Files and hashes: 1: NgIKF8jcDLCHN3aJD8aULMWPG30.roa (hash: 9imCN3WetXg8Q1ELNvwqDIt+zXYLct6tp7egk/4AdG8=)
2: TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl (hash: sLtG9ZLRdwpSikZUNmzRIg6BP6LFlqkbJaWC8l6BDX8=)
3: k_nIf6wVx1Xdxat4zYtnBqTL13Y.roa (hash: HaoM7rJ6dUREUsX3C7dLkVUY9dcgJCaHV1PnH/ISMtE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:72:59:82:51:31:83:72:ae:07:d6:06:93:bc:2d:74:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Validity
Not Before: Dec 31 03:00:27 2025 GMT
Not After : Jan 1 03:00:27 2026 GMT
Subject: CN=ed8d9c2d9179bcb0ed388f02dd2f712465b6949b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:ed:8f:74:c5:e1:eb:57:62:fb:bb:61:2a:
4a:42:4d:41:be:6d:a5:28:1f:81:12:97:98:a3:4f:
28:92:2a:e4:59:ca:e6:32:ca:96:d4:a3:0c:07:00:
22:0f:6f:d5:f1:8e:10:42:6c:40:bb:66:30:39:fe:
65:84:0b:65:84:28:dd:37:30:33:47:83:5f:ad:58:
a7:b4:26:a6:4b:f9:88:e0:46:e6:cb:f3:c7:84:d2:
ce:4c:bf:e9:02:05:ff:7c:fe:b9:34:9e:7c:02:98:
16:f0:90:80:f6:95:cf:5c:bf:77:b7:83:d9:a0:b1:
53:07:51:69:91:c6:a3:2b:cc:2b:42:02:26:ec:e4:
46:d4:c6:6f:43:b3:7a:91:4d:92:65:03:49:44:6c:
68:a4:b1:3a:ab:43:b3:50:2b:15:72:7f:36:1a:64:
45:72:be:cc:2e:f6:92:30:62:fe:a5:7e:78:e1:5f:
2c:20:d0:b1:d4:af:0b:c7:f9:bf:2c:80:06:41:62:
02:47:83:6e:2d:bc:b2:26:2d:65:43:26:51:43:a6:
50:65:91:96:46:5a:db:dd:b5:ab:bd:71:ec:d4:2b:
b1:66:5e:b3:5b:b5:a5:c9:d4:76:e5:6d:16:1d:aa:
4d:c6:08:f6:47:f4:4a:0b:d7:56:6e:b1:fd:a5:99:
f9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8D:9C:2D:91:79:BC:B0:ED:38:8F:02:DD:2F:71:24:65:B6:94:9B
X509v3 Authority Key Identifier:
keyid:4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a3:28:c8:a5:2e:c7:5a:55:d7:76:96:40:17:98:fd:a9:c1:
9b:56:63:3a:e5:35:b8:2f:51:5c:18:67:79:bf:a6:aa:5c:d2:
af:7f:db:69:0f:04:c1:10:45:24:e0:a7:61:ed:70:15:94:9c:
93:e9:a7:e4:96:36:25:66:21:8e:e8:a7:b8:e1:89:57:dc:16:
2e:44:ce:b8:76:f4:d5:c5:cf:f9:99:40:0e:c9:de:46:0b:d6:
af:a9:ce:15:97:aa:12:9f:67:f7:b2:1d:cc:e0:77:5c:5a:36:
c1:a3:ed:2e:bc:50:bc:4c:a2:22:4f:9e:bd:19:32:ec:6e:32:
ba:d3:c3:6b:e5:2a:c8:c6:10:4c:9f:7c:80:77:64:88:f8:f4:
33:f5:46:ea:e5:40:73:29:0e:4a:a8:56:11:3c:34:b2:be:ae:
44:f2:65:a2:88:bd:43:7c:7e:07:f7:2b:b7:ab:02:24:f5:73:
98:fa:f0:38:b7:d6:2a:de:ac:2b:a8:ca:51:f9:a8:3a:ee:8b:
53:b0:94:03:57:2b:13:8c:c0:07:2a:40:0a:99:b8:b6:2f:61:
98:c4:c9:e3:2d:f4:61:4f:24:19:da:53:6c:79:98:dc:1d:77:
6a:65:de:a5:78:e8:ea:6d:51:58:dc:6a:6c:c4:50:54:03:45:
d6:13:7b:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtyWYJRMYNyrgfWBpO8LXR7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzNjMGUxNGQ1N2VhYmMzYjY1ZTM4YTc3MzZiZWJlNDkw
OTJlOWUwHhcNMjUxMjMxMDMwMDI3WhcNMjYwMTAxMDMwMDI3WjAzMTEwLwYDVQQD
EyhlZDhkOWMyZDkxNzliY2IwZWQzODhmMDJkZDJmNzEyNDY1YjY5NDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9Ptj3TF4etXYvu7YSpKQk1Bvm2l
KB+BEpeYo08okirkWcrmMsqW1KMMBwAiD2/V8Y4QQmxAu2YwOf5lhAtlhCjdNzAz
R4NfrVintCamS/mI4Ebmy/PHhNLOTL/pAgX/fP65NJ58ApgW8JCA9pXPXL93t4PZ
oLFTB1FpkcajK8wrQgIm7ORG1MZvQ7N6kU2SZQNJRGxopLE6q0OzUCsVcn82GmRF
cr7MLvaSMGL+pX544V8sINCx1K8Lx/m/LIAGQWICR4NuLbyyJi1lQyZRQ6ZQZZGW
Rlrb3bWrvXHs1CuxZl6zW7WlydR25W0WHapNxgj2R/RKC9dWbrH9pZn5ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2NnC2Rebyw7TiPAt0vcSRltpSbMB8GA1UdIwQY
MBaAFEwzwOFNV+q8O2Xjinc2vr5JCS6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERQQTRVMVg2cnc3WmVPS2R6YS12a2tKTHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9jNzJhYmUtMzJkYy00ZjE4LTkwNWYt
YzFmZjA1NmZjNzZmLzEvVERQQTRVMVg2cnc3WmVPS2R6YS12a2tKTHA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9jNzJhYmUtMzJkYy00ZjE4LTkwNWYtYzFmZjA1NmZjNzZm
LzEvVERQQTRVMVg2cnc3WmVPS2R6YS12a2tKTHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgaMoyKUu
x1pV13aWQBeY/anBm1ZjOuU1uC9RXBhneb+mqlzSr3/baQ8EwRBFJOCnYe1wFZSc
k+mn5JY2JWYhjuinuOGJV9wWLkTOuHb01cXP+ZlADsneRgvWr6nOFZeqEp9n97Id
zOB3XFo2waPtLrxQvEyiIk+evRky7G4yutPDa+UqyMYQTJ98gHdkiPj0M/VG6uVA
cykOSqhWETw0sr6uRPJlooi9Q3x+B/crt6sCJPVzmPrwOLfWKt6sK6jKUfmoOu6L
U7CUA1crE4zABypACpm4ti9hmMTJ4y30YU8kGdpTbHmY3B13amXepXjo6m1RWNxq
bMRQVANF1hN7vQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:16:50 2026 by rpki-client