Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
File: x0heKfEYwBvobBnmaPrPpIXecYw.mft (raw, json)
Hash identifier: iGgtukcGkrY8q8XCxs9+ZPP9qGD9CUm5OzRxsZTW+OY=
Subject key identifier: CB:33:7E:7E:ED:7C:97:8C:D4:92:60:90:E9:26:15:68:44:A6:2B:CA
Authority key identifier: C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C
Certificate issuer: /CN=c7485e29f118c01be86c19e668facfa485de718c
Certificate serial: 019B680D7E2F5B07DF87AD31ABFE89AF0035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
Manifest number: 0EC4
Signing time: Mon 29 Dec 2025 03:01:13 +0000
Manifest this update: Mon 29 Dec 2025 03:01:13 +0000
Manifest next update: Tue 30 Dec 2025 03:01:13 +0000
Files and hashes: 1: t18UoHeAEcZ6Yu4NKG2nAheiZEs.roa (hash: RypsXYxji2dJaH2ZVLBlo3yRoSbmcerkP3rshZoohgo=)
2: x0heKfEYwBvobBnmaPrPpIXecYw.crl (hash: 1rswXXzhF+nLgm7AWC59LmP2bSJptWKYTy6A11jcI4M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:68:0d:7e:2f:5b:07:df:87:ad:31:ab:fe:89:af:00:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7485e29f118c01be86c19e668facfa485de718c
Validity
Not Before: Dec 29 03:01:13 2025 GMT
Not After : Dec 30 03:01:13 2025 GMT
Subject: CN=cb337e7eed7c978cd4926090e926156844a62bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:1d:29:db:da:8d:8e:0a:92:36:14:d8:71:
de:61:a0:2b:4a:80:bc:7b:59:67:fb:dc:70:ed:9c:
69:7f:0a:37:33:fa:ca:99:74:48:78:31:92:61:51:
ba:4a:8f:19:9f:e9:a8:53:2f:e8:16:ff:8b:2a:09:
14:1a:e0:ab:09:19:b0:7b:0e:ca:d7:0f:e1:f4:04:
1a:b1:0e:ac:22:1e:f8:84:7f:0a:b9:f8:b7:79:ae:
b6:87:42:11:ca:ab:d3:b0:58:14:00:9e:a7:de:f2:
27:8b:d2:32:bb:23:8c:63:53:8c:dd:fe:75:5d:64:
36:cc:7b:47:7b:cc:b8:83:32:19:38:5a:c3:c9:e8:
2a:4f:8a:a9:2e:25:7e:87:fb:d7:c2:37:38:7c:41:
f0:c5:c3:86:ce:a7:d3:1c:6b:0d:0d:b8:0f:40:00:
2a:11:aa:21:cc:97:34:b6:c3:8f:04:04:d4:f3:b3:
88:fd:83:01:bc:2d:fd:36:f5:0b:b6:a1:18:33:59:
69:7d:9d:63:0b:c7:42:66:83:c7:0d:4a:3d:01:f8:
e6:14:c0:69:33:da:d3:ef:38:c6:90:07:bb:e6:59:
59:c4:27:bd:a3:81:be:3a:48:44:24:15:f0:2d:5e:
34:09:b6:c9:f9:9d:79:05:7a:e0:e1:a0:ca:31:e0:
b4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:33:7E:7E:ED:7C:97:8C:D4:92:60:90:E9:26:15:68:44:A6:2B:CA
X509v3 Authority Key Identifier:
keyid:C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:8b:e8:a8:fb:46:0b:7e:cd:3b:95:3d:dc:a7:db:4a:ba:c0:
f7:da:6c:ea:59:0e:52:39:6d:5d:c2:ce:39:7a:b6:30:a6:22:
cc:ad:5e:f2:57:03:a5:e1:fd:8a:31:cc:07:17:ab:ae:b9:68:
b6:c6:a7:64:43:a0:e8:f1:65:3d:0c:c7:f5:d6:6a:1f:9c:64:
17:3a:16:16:d5:86:32:5a:22:51:c2:4a:dc:e2:6b:45:90:05:
1e:50:79:d4:fb:19:3b:97:32:f5:b7:52:32:5a:6e:be:5a:77:
33:50:02:1b:7c:b3:ca:21:01:5e:32:d9:99:ab:de:ed:8d:42:
01:12:38:30:23:6c:02:b3:71:2d:eb:51:46:79:45:1a:1a:bc:
40:7d:d5:57:b3:ca:07:26:2b:67:85:0e:e9:fd:e5:d7:22:3c:
d6:34:d0:e8:23:ae:ee:70:95:dd:2b:1d:55:20:0d:a8:a5:24:
43:e9:28:15:68:76:9e:e6:f8:0e:36:29:e3:66:fa:f2:60:5e:
28:85:33:4c:fc:76:b8:3c:6d:04:06:76:fe:38:76:d5:db:03:
2e:80:f3:5a:fa:cd:22:af:94:68:0c:1e:71:17:91:5b:ad:ce:
04:4f:7f:37:9c:25:37:7e:a7:c0:08:01:0d:a7:c7:ea:83:59:
46:c1:b2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:51:52 2026 by rpki-client