
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
File: j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft (raw, json)
Hash identifier: 1nYkJy+ZEuO6uxoM1skWCftNisw5KBKCH9kvk+wO4Bk=
Subject key identifier: F8:AE:6F:24:1A:BE:68:BE:4F:46:D5:D1:57:A9:BD:1F:95:AE:E2:30
Authority key identifier: 8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32
Certificate issuer: /CN=8fac851d9982896a765876d311b97b509357ec32
Certificate serial: 019B6E0F0F55ED73E0B19ED5524D599F8149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
Manifest number: 082B
Signing time: Tue 30 Dec 2025 07:00:39 +0000
Manifest this update: Tue 30 Dec 2025 07:00:39 +0000
Manifest next update: Wed 31 Dec 2025 07:00:39 +0000
Files and hashes: 1: j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl (hash: ate6OzDNa3veqtwZ1m3JRQsJULC0fwpRTsBMJXM+WP8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:6e:0f:0f:55:ed:73:e0:b1:9e:d5:52:4d:59:9f:81:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fac851d9982896a765876d311b97b509357ec32
Validity
Not Before: Dec 30 07:00:39 2025 GMT
Not After : Dec 31 07:00:39 2025 GMT
Subject: CN=f8ae6f241abe68be4f46d5d157a9bd1f95aee230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2c:ee:74:e4:23:4d:31:49:db:68:cc:23:bd:
7f:d5:c6:9a:ed:57:c0:98:d3:1e:c8:d9:90:f9:0a:
a6:9c:7f:79:05:63:5e:35:3b:e1:2c:6b:6d:54:09:
9f:2d:ba:05:90:34:ab:ab:6c:43:c8:b9:23:47:b2:
cc:88:ab:12:6f:25:63:45:85:80:9a:fe:a2:9e:bf:
1a:bd:2e:3a:2c:7c:d4:ff:b4:fb:c2:ce:49:f1:11:
20:ea:15:e2:0b:16:c5:d0:10:aa:01:40:85:89:08:
b8:57:2a:72:da:5d:e9:87:21:90:f5:d5:fe:f4:0c:
5e:79:32:99:b6:e3:b3:b3:94:8d:44:3e:6d:37:6d:
55:63:71:57:30:a1:b7:1a:a9:8c:35:47:5f:39:b8:
a1:8a:06:e7:71:c8:22:b9:8f:06:f3:0b:cb:2e:5c:
a1:2c:4a:da:0f:23:6c:fc:13:2b:0a:6c:04:28:af:
0b:39:9a:41:55:eb:5d:f6:98:51:48:ed:73:6c:28:
31:1c:19:bf:25:e9:61:39:88:96:db:5e:8c:65:ec:
6e:3b:65:c7:a8:7f:47:12:9c:72:8a:37:06:4d:17:
ab:fb:45:c2:df:aa:99:67:3f:d5:fe:6d:cc:01:26:
63:ff:b5:89:5f:0f:01:6b:38:45:60:64:06:d3:b1:
e6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AE:6F:24:1A:BE:68:BE:4F:46:D5:D1:57:A9:BD:1F:95:AE:E2:30
X509v3 Authority Key Identifier:
keyid:8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:dd:7f:dd:22:c1:1b:da:ba:83:98:45:b8:65:14:61:9c:8e:
59:73:f6:6f:fa:3d:b5:62:3c:15:a5:6a:02:53:ab:8b:45:3f:
3d:28:33:ee:d3:5b:52:74:ac:83:7a:49:fc:6e:6d:27:af:d4:
7c:e9:37:db:10:7a:f2:aa:c3:6b:01:f7:ee:2a:9c:a1:04:bb:
95:27:18:95:ee:d8:17:f0:73:7a:06:c3:36:43:e1:87:78:0c:
28:69:92:0c:6c:68:30:21:79:f3:50:c3:76:b2:e0:38:58:62:
49:88:ba:d0:a1:a3:e1:b0:d0:99:98:ab:98:ba:31:32:37:06:
8e:bc:1b:df:7b:43:47:07:9b:d3:98:04:dd:8f:3c:cd:2f:0c:
e9:c1:88:11:42:1b:ec:72:52:47:7b:b2:a1:d1:1d:ef:ef:73:
ad:f3:bd:13:5a:2b:e5:17:34:2e:f6:cc:c9:d5:67:0e:b1:2f:
48:26:82:3d:73:9a:80:2a:3e:d5:1e:7e:5c:9f:91:c2:3f:05:
07:e5:81:c8:11:f3:0b:4e:42:e0:9f:a6:eb:6d:54:81:85:c7:
31:cb:00:57:28:9b:c4:d2:9a:be:6a:97:76:85:71:62:2e:5d:
47:80:e4:71:d7:16:68:8f:82:f2:f8:a3:44:79:74:a4:8f:89:
e9:6c:0b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:19 2026 by rpki-client