Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
File: 1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft (raw, json)
Hash identifier: gPUzNBHqsbB/vWGINejHIA3cPkWBiuS8qGLXehPxOEA=
Subject key identifier: B9:70:25:81:34:B5:D5:7B:8D:CD:74:B6:51:57:55:7E:59:04:F3:F3
Authority key identifier: D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
Certificate issuer: /CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Certificate serial: 019B700BC382875E05F7B09FC3F163C1086D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
Manifest number: 17A5
Signing time: Tue 30 Dec 2025 16:16:17 +0000
Manifest this update: Tue 30 Dec 2025 16:16:17 +0000
Manifest next update: Wed 31 Dec 2025 16:16:17 +0000
Files and hashes: 1: 1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl (hash: ab0j7BNWR237DULYKKHKbNMWPoJcNUKKmBGqDej3a6U=)
2: rpRgekkmJ-v_7vKrJqugF96QRTo.roa (hash: fwTcHjEaF15w21s8IS/kOgW8pHFkDEAyZT+fMpIoLfI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:70:0b:c3:82:87:5e:05:f7:b0:9f:c3:f1:63:c1:08:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Validity
Not Before: Dec 30 16:16:17 2025 GMT
Not After : Dec 31 16:16:17 2025 GMT
Subject: CN=b970258134b5d57b8dcd74b65157557e5904f3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:30:98:8b:ee:79:37:6b:8a:ed:9d:7e:9a:
77:b3:23:4d:00:75:55:cc:7f:e4:7b:f4:25:1e:f3:
4a:69:0c:e6:2c:c7:70:cb:54:fe:79:27:05:8c:e9:
f4:39:9a:d0:b6:ec:ee:0b:89:0c:21:ea:3d:f8:0c:
ee:46:fe:09:62:c2:80:7d:7d:46:47:27:93:d4:b0:
e9:65:91:58:85:a9:04:30:ec:cd:f5:3e:92:48:be:
66:70:5c:76:51:49:22:5b:a8:27:8d:65:8c:cd:be:
e1:0e:c5:1d:71:9d:2f:fe:01:7a:00:49:9d:7b:9a:
ac:a6:ab:49:c4:46:d2:08:59:e6:1f:b0:2b:99:9b:
d7:44:ed:4f:dc:8a:e1:de:96:2f:ca:51:b3:73:5d:
18:d8:96:13:db:13:26:14:b0:70:ad:37:34:a3:33:
04:32:12:52:3d:4a:e1:1f:cb:06:61:c1:87:46:61:
23:78:7c:d1:76:c0:3a:11:ee:23:aa:c9:af:bc:c1:
bc:af:2b:56:d8:e2:e4:54:b9:ff:99:d7:ac:4c:8f:
a0:79:2c:bf:76:b0:97:10:25:15:e6:14:e3:29:92:
a1:30:26:31:63:3c:53:27:a5:5b:32:3d:73:6c:4a:
1d:d7:7d:14:35:f7:1c:40:14:77:d2:ec:18:c2:5e:
fa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:70:25:81:34:B5:D5:7B:8D:CD:74:B6:51:57:55:7E:59:04:F3:F3
X509v3 Authority Key Identifier:
keyid:D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:08:2f:08:20:10:04:6c:51:5d:a6:ac:ba:fd:ba:be:15:bf:
db:de:3c:8d:3f:2c:09:69:57:a6:52:f6:bd:7a:c1:c3:ed:83:
8c:d6:c6:da:d5:26:7e:ad:b9:89:d9:ff:7d:59:40:43:c6:e1:
ad:fb:c8:02:29:d6:e6:5a:a5:ba:1a:88:9b:3e:b8:fd:d2:bd:
05:a7:7b:5c:12:87:5b:40:a3:86:c8:15:0c:0d:1f:4b:3b:9a:
e6:9f:10:89:d8:05:ec:44:db:6c:62:5b:57:e5:29:f6:ff:cf:
07:06:8c:53:80:e0:b9:ad:26:74:bb:0c:ef:85:e0:1a:00:d9:
37:1a:3e:9b:d0:c4:16:48:50:87:37:3f:f6:e4:bd:7f:d7:b5:
4a:da:28:a9:41:0f:9b:c7:d8:3b:dd:fd:33:31:b8:5a:4d:2c:
40:2b:47:1f:5a:01:02:7e:54:4d:81:19:f2:7d:ba:e8:91:d8:
9d:23:fb:04:9b:d9:e6:7e:7c:8d:16:5f:c6:54:c3:b7:54:0c:
ed:d6:76:d8:7b:91:07:18:7b:84:b6:4a:af:22:6d:4e:c1:15:
20:a4:59:e4:52:c1:cf:f5:65:28:05:cf:d7:dc:ce:34:11:27:
27:7b:84:0f:e7:d1:f4:07:b4:e0:fa:9b:b5:95:de:e4:ad:db:
f1:e5:d5:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtwC8OCh14F97Cfw/FjwQhtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NWMxYjdkOWYwNGM3ZjA0MzI3ZTZjNDQ2NDE2ZTJmOGMz
MWQ1N2QwHhcNMjUxMjMwMTYxNjE3WhcNMjUxMjMxMTYxNjE3WjAzMTEwLwYDVQQD
EyhiOTcwMjU4MTM0YjVkNTdiOGRjZDc0YjY1MTU3NTU3ZTU5MDRmM2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfkwmIvueTdriu2dfpp3syNNAHVV
zH/ke/QlHvNKaQzmLMdwy1T+eScFjOn0OZrQtuzuC4kMIeo9+AzuRv4JYsKAfX1G
RyeT1LDpZZFYhakEMOzN9T6SSL5mcFx2UUkiW6gnjWWMzb7hDsUdcZ0v/gF6AEmd
e5qspqtJxEbSCFnmH7ArmZvXRO1P3Irh3pYvylGzc10Y2JYT2xMmFLBwrTc0ozME
MhJSPUrhH8sGYcGHRmEjeHzRdsA6Ee4jqsmvvMG8rytW2OLkVLn/mdesTI+geSy/
drCXECUV5hTjKZKhMCYxYzxTJ6VbMj1zbEod130UNfccQBR30uwYwl76WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlwJYE0tdV7jc10tlFXVX5ZBPPzMB8GA1UdIwQY
MBaAFNZcG32fBMfwQyfmxEZBbi+MMdV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWx3YmZaOEV4X0JESi1iRVJrRnVMNHd4MVgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NmQwNzItZDEyOS00MmJlLWE3NWYt
MTEwZWE4NTg1MzU0LzEvMWx3YmZaOEV4X0JESi1iRVJrRnVMNHd4MVgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85NmQwNzItZDEyOS00MmJlLWE3NWYtMTEwZWE4NTg1MzU0
LzEvMWx3YmZaOEV4X0JESi1iRVJrRnVMNHd4MVgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwgvCCAQ
BGxRXaasuv26vhW/2948jT8sCWlXplL2vXrBw+2DjNbG2tUmfq25idn/fVlAQ8bh
rfvIAinW5lqluhqImz64/dK9Bad7XBKHW0CjhsgVDA0fSzua5p8QidgF7ETbbGJb
V+Up9v/PBwaMU4Dgua0mdLsM74XgGgDZNxo+m9DEFkhQhzc/9uS9f9e1StooqUEP
m8fYO939MzG4Wk0sQCtHH1oBAn5UTYEZ8n266JHYnSP7BJvZ5n58jRZfxlTDt1QM
7dZ22HuRBxh7hLZKryJtTsEVIKRZ5FLBz/VlKAXP19zONBEnJ3uED+fR9Ae04Pqb
tZXe5K3b8eXVfA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:46 2026 by rpki-client