Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
File: 2Z6pWH5epOljrXrn8SV2HA4pJWM.mft (raw, json)
Hash identifier: diy4jmLjqO6OY2tFUH3u3XqBQfKxNBm8QQmppNzpRfU=
Subject key identifier: 25:31:FE:E7:96:7E:47:E1:EA:DC:20:2F:54:43:76:71:AA:B7:A2:0B
Authority key identifier: D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63
Certificate issuer: /CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563
Certificate serial: 019B4A3A24A437E46066116AD58361F5615E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
Manifest number: 178E
Signing time: Tue 23 Dec 2025 08:01:22 +0000
Manifest this update: Tue 23 Dec 2025 08:01:22 +0000
Manifest next update: Wed 24 Dec 2025 08:01:22 +0000
Files and hashes: 1: 2Z6pWH5epOljrXrn8SV2HA4pJWM.crl (hash: WQacC3hNquk/Z7FWnRbU7g4bTuvbNjBNuZDBsYjzDLA=)
2: fRfYTFrvzDmGp4DgYCf5CTa4BWk.roa (hash: 8+ivyjKOK9XU+rYZkbxFvkTVk6Yv/MHnjxmXiO2eTsc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:4a:3a:24:a4:37:e4:60:66:11:6a:d5:83:61:f5:61:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563
Validity
Not Before: Dec 23 08:01:22 2025 GMT
Not After : Dec 24 08:01:22 2025 GMT
Subject: CN=2531fee7967e47e1eadc202f54437671aab7a20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5e:28:ba:9d:41:99:e3:c3:7f:c1:4d:c7:06:
84:1c:f6:b5:8a:a7:ed:11:e9:4d:c9:ec:e3:2b:5f:
2a:b4:fa:62:7d:90:6f:a9:95:7c:0d:8a:cf:da:b5:
b6:35:35:3c:c4:07:02:91:19:3a:9f:31:ef:6c:6b:
96:b7:e6:eb:13:b8:15:b2:e8:44:45:ef:3a:f8:11:
b4:53:54:12:99:f9:43:63:fe:23:05:9b:9a:30:e7:
db:18:4e:b9:64:97:f0:aa:12:f0:88:14:d9:6f:b1:
06:7e:35:4f:34:97:e0:f6:22:0c:28:b0:d3:ae:a5:
61:db:43:21:57:ff:f9:f2:2a:37:c0:5e:50:38:a7:
2b:0f:ed:95:75:40:de:ac:07:cc:c2:19:89:72:52:
bf:5c:5c:f3:a3:ad:15:81:7a:e2:08:53:68:c6:5c:
5a:b2:f6:64:c0:48:a8:a4:b6:81:50:49:63:4e:dd:
31:16:5b:d4:1d:af:43:2e:ca:ec:22:dc:e5:12:65:
f3:75:73:f9:8f:32:6e:76:0b:18:53:8d:21:88:09:
1f:51:a5:c0:0c:a6:77:07:c6:81:11:64:cd:b5:91:
70:5c:72:66:d1:8a:db:e8:93:b4:4a:fe:a9:5f:90:
ab:1c:48:2c:a2:ad:e8:7e:64:3d:bc:e4:75:ab:ce:
e9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:31:FE:E7:96:7E:47:E1:EA:DC:20:2F:54:43:76:71:AA:B7:A2:0B
X509v3 Authority Key Identifier:
keyid:D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f9:c5:e1:01:77:fc:9c:e2:aa:23:3a:7a:9d:51:9d:56:b5:
f4:77:94:ac:76:a9:78:68:99:42:88:88:d1:f2:05:a5:41:53:
03:dc:24:34:68:4b:4b:e5:d6:af:b1:9b:56:44:7d:9e:c3:a7:
c1:0c:28:09:d9:4b:ca:db:54:4b:f2:75:c8:ab:23:5f:6d:60:
30:e4:d1:2a:96:bc:74:64:cc:2f:bc:d5:5f:08:1c:be:00:04:
2a:38:db:0b:32:1f:83:e1:d0:8d:25:5e:2c:5c:be:ab:49:83:
83:de:90:4d:c6:6f:32:27:3c:92:f2:f5:11:b4:cb:a9:e1:7b:
d3:8f:1f:95:06:20:7e:0c:d7:da:f5:69:ad:67:3d:9c:93:ee:
75:a1:0a:70:9d:c8:bc:42:a8:b5:43:6a:bf:81:b7:07:e2:69:
03:40:36:33:44:03:3a:bb:d3:6d:79:08:66:cf:bd:4e:bb:a5:
b4:39:f9:f3:73:70:4a:70:f7:9e:63:1a:17:d8:5b:42:18:85:
6d:9d:2c:dd:d3:fa:71:34:98:70:97:49:8d:fd:d5:94:fe:1e:
43:99:1d:be:c8:67:4b:fa:bb:07:bb:72:aa:c1:cc:50:93:32:
fe:48:a9:22:30:79:4c:4a:22:0d:bb:af:25:d9:4b:23:6e:db:
6f:7a:97:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:58 2026 by rpki-client