Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
File: xn4qRuNPSRQzyLYvMZuQK9396DE.mft (raw, json)
Hash identifier: I0R4EmGKx11IgUxYOFMOWYri6IKzVxDMebtwp9YAWoo=
Subject key identifier: F3:C0:2E:53:FC:9E:FF:A2:F5:1F:A0:0F:2F:24:9D:31:76:68:81:05
Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831
Certificate serial: 019B68E8D637CCA54376DE0E892F27F7A4B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
Manifest number: 14D9
Signing time: Mon 29 Dec 2025 07:00:48 +0000
Manifest this update: Mon 29 Dec 2025 07:00:48 +0000
Manifest next update: Tue 30 Dec 2025 07:00:48 +0000
Files and hashes: 1: BKGB0xu8toNLRNE3TtbV03PJFx0.roa (hash: FdiXQgpM3MPZ1o0fk4HNEhE38JmZapk1+2ih8Lu8DEA=)
2: _v0ZmDwGVXQnxYXB1nXQzsRBcbY.roa (hash: iHppVj2BjRk7dRpgDIJuQgoqhMV/BmqJSp1BycbHcEU=)
3: xn4qRuNPSRQzyLYvMZuQK9396DE.crl (hash: mL3wsqpIV6CewgM+5rEM+6TbOqUyv2a0wBwziPzl/GQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:68:e8:d6:37:cc:a5:43:76:de:0e:89:2f:27:f7:a4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831
Validity
Not Before: Dec 29 07:00:48 2025 GMT
Not After : Dec 30 07:00:48 2025 GMT
Subject: CN=f3c02e53fc9effa2f51fa00f2f249d3176688105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:16:dd:bd:e0:3e:fd:7c:19:e7:64:84:b2:ed:
67:3a:c8:86:60:73:de:ec:73:73:47:c4:1d:43:e0:
40:d1:b5:a8:f6:b6:e1:b3:38:1c:4d:39:8d:72:43:
6c:fd:7d:a7:26:40:5e:b8:a3:e3:72:28:66:83:fd:
92:ef:b9:27:bc:66:80:08:93:10:83:1c:c9:00:9e:
c6:ff:10:de:21:49:40:2f:a4:da:f8:80:b9:8a:54:
fb:35:09:5a:14:78:40:db:79:44:be:66:a9:28:32:
67:2a:42:b1:27:68:15:03:0b:26:50:f1:38:09:bf:
dc:92:7e:b6:71:c6:e6:27:21:b5:ff:dd:36:62:a3:
42:80:42:11:79:87:ad:7c:f0:51:1f:4f:a1:d4:62:
ca:d4:c3:a4:bb:64:86:99:e9:2f:8a:a0:33:24:ff:
88:d2:33:71:1c:b1:af:b0:86:10:20:12:b7:b0:dc:
1b:65:f8:23:ff:57:cc:e5:46:49:cd:81:5f:92:cf:
41:c2:93:a2:d3:06:27:66:1d:46:3d:ce:89:4f:d2:
4d:6b:db:b9:19:d9:f4:bd:99:e5:66:9b:2f:ff:90:
60:d8:52:7f:d3:c4:90:60:95:3a:27:e8:8a:3b:ec:
4b:ac:c2:2f:85:3e:7c:9b:9c:c3:a8:12:55:60:b5:
9f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C0:2E:53:FC:9E:FF:A2:F5:1F:A0:0F:2F:24:9D:31:76:68:81:05
X509v3 Authority Key Identifier:
keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:6a:ed:da:58:9a:78:a8:c8:29:2d:c5:ab:8a:6d:81:cf:4f:
dc:d6:8d:80:f9:b9:ac:70:fd:d7:de:55:71:7c:bc:66:f0:0b:
eb:90:a5:cf:8a:09:4d:7f:46:0e:62:a1:50:68:90:48:fb:f0:
5d:a7:ca:d5:05:24:0a:bf:1e:63:cd:7e:67:81:6e:7a:2e:23:
29:d5:93:26:f9:82:32:92:82:9e:62:d9:b2:bd:1c:97:fe:01:
e8:69:31:ec:32:4b:1f:76:18:0e:b1:62:29:7b:51:61:cb:ac:
33:cc:e9:64:c9:3b:d7:ca:fc:57:8e:d4:2f:36:89:03:68:76:
63:d6:a8:c5:cd:35:e1:c8:df:a2:10:34:95:7d:21:03:f8:5c:
5f:02:50:28:64:d4:d8:cb:8c:43:3c:37:3b:20:46:22:60:bc:
1a:b5:ac:b8:23:95:5c:2e:7b:57:d4:01:41:48:c5:3b:7c:5e:
cb:d7:74:5c:6b:cd:a8:b8:52:88:bc:16:e7:f6:b7:d9:90:25:
df:20:66:a0:25:a0:05:8b:6c:38:99:8f:c2:53:95:5e:eb:6a:
98:a0:b6:a2:1e:47:75:d6:f7:a1:d5:f8:35:3f:c9:75:59:2b:
83:f9:b3:48:7d:25:50:37:ad:61:0a:8d:c7:23:52:e0:52:bf:
d7:d9:ac:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:40 2026 by rpki-client