Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
File: 2ckTFygydpN9Q29LIW3No---Kog.mft (raw, json)
Hash identifier: kiaaLFQDC/aQzgjuToz4kFw29gWwRTmkDrs5Eac8PFg=
Subject key identifier: 25:05:5E:94:79:19:82:AC:11:09:6E:90:31:E6:94:89:51:51:34:20
Authority key identifier: D9:C9:13:17:28:32:76:93:7D:43:6F:4B:21:6D:CD:A3:EF:BE:2A:88
Certificate issuer: /CN=d9c91317283276937d436f4b216dcda3efbe2a88
Certificate serial: 019B2B1CBC44B02E2BA6E35BC73E1E8A3FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
Manifest number: 0BE7
Signing time: Wed 17 Dec 2025 07:01:02 +0000
Manifest this update: Wed 17 Dec 2025 07:01:02 +0000
Manifest next update: Thu 18 Dec 2025 07:01:02 +0000
Files and hashes: 1: 2ckTFygydpN9Q29LIW3No---Kog.crl (hash: uH2D0hqEIcsSbkPHQOcNjS4e6I7VSbE9XsdrXSCnMos=)
2: Pz6k83CSFf4CwoCzfq-E_4QuJkM.roa (hash: Yi7bnBLtpl6BWUzAuBFtj4QFE/dVNDobJF3M3VD/k5c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2b:1c:bc:44:b0:2e:2b:a6:e3:5b:c7:3e:1e:8a:3f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9c91317283276937d436f4b216dcda3efbe2a88
Validity
Not Before: Dec 17 07:01:02 2025 GMT
Not After : Dec 18 07:01:02 2025 GMT
Subject: CN=25055e94791982ac11096e9031e6948951513420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:74:4e:a0:30:77:c4:9e:09:3f:2c:83:ab:
ee:75:45:50:3f:91:62:77:1a:2b:1f:5a:4e:7d:02:
b7:5c:6d:f9:10:15:e9:56:87:3e:4b:31:91:0a:a7:
6a:8c:88:25:91:05:04:e0:38:94:77:ff:32:75:7a:
54:df:c2:34:9f:5f:47:da:44:98:1e:83:fe:ed:6c:
2a:6f:30:43:39:89:68:7f:5f:53:28:c5:27:52:d3:
5a:de:32:62:3e:7a:d9:6b:cf:45:c6:bd:4a:23:4c:
00:da:0f:77:f8:51:4e:57:45:26:63:ea:ce:b7:ab:
a9:38:a9:c9:6d:c9:cc:24:07:86:a2:c8:8d:c0:6e:
92:f9:ba:c1:a0:81:5f:bb:b7:aa:c8:7f:0d:05:32:
76:3c:44:ca:2d:10:77:c2:a3:28:5c:f3:7e:27:5b:
ef:c2:8a:e5:b1:b0:5d:4a:5b:18:95:be:9e:6c:2b:
f9:68:b3:51:1b:00:ee:ad:e8:a4:eb:e7:19:9b:52:
a1:16:5a:72:d0:f1:2d:50:52:e5:79:c9:db:3c:3d:
73:df:f9:ec:d8:42:b4:1f:3e:9b:ea:96:00:33:a3:
2b:1a:d3:59:c0:57:a0:21:39:90:93:ee:cc:47:48:
6f:3e:be:bc:b3:cd:bf:6e:f2:45:4a:3f:95:21:5d:
4b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:05:5E:94:79:19:82:AC:11:09:6E:90:31:E6:94:89:51:51:34:20
X509v3 Authority Key Identifier:
keyid:D9:C9:13:17:28:32:76:93:7D:43:6F:4B:21:6D:CD:A3:EF:BE:2A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ea:c2:27:c0:0b:76:2a:7d:83:ee:85:24:55:63:b8:ef:01:
77:74:c4:3b:cd:73:5e:77:cf:a8:d2:80:c2:ff:7c:f7:01:65:
1a:7c:2c:ed:ef:83:e5:51:8c:04:ad:2b:51:0c:ca:99:04:6a:
07:ae:6f:ff:6e:e1:23:b1:58:5b:91:2a:f1:04:2b:1f:62:f3:
46:a2:12:6b:b3:8a:f3:b9:cd:18:7d:a5:c3:20:ea:9c:5a:9e:
90:be:9c:a1:94:89:c2:b9:cb:62:9c:35:bc:45:56:62:7c:08:
ad:e3:f9:b0:53:76:e0:de:5e:be:97:a6:d8:c6:54:0c:e5:d9:
1b:40:08:e8:8f:24:a9:d1:22:54:5d:6e:8f:d9:af:c8:45:d9:
6a:e7:5a:2a:8b:68:01:ff:66:f4:a2:ca:df:ed:a5:90:78:db:
2b:54:07:ca:c0:c6:4b:0d:cf:ab:54:56:c5:99:fd:a3:e1:ec:
11:c3:39:29:12:ce:a7:7b:21:63:83:49:cc:fa:2e:fe:44:10:
14:93:06:98:19:ea:d7:82:95:01:7d:f0:a9:d6:77:b4:29:2a:
42:9b:8b:2a:58:a0:4d:2d:ac:ff:1e:d5:bb:2e:10:25:b4:d3:
c4:13:c9:53:ac:35:c3:83:07:37:52:46:21:5c:cc:db:e2:47:
e5:fe:a6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:41:48 2026 by rpki-client