Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
File: 2MIJbMDFVXy6tsENYdB30Hj-cX8.mft (raw, json)
Hash identifier: 4whB52t8lWGzDdNIWrIebTfsBd42c71FLrVXOozNTkE=
Subject key identifier: 5E:2F:C2:CF:6D:86:01:67:C3:36:58:82:24:14:C5:D9:C2:C9:60:AF
Authority key identifier: D8:C2:09:6C:C0:C5:55:7C:BA:B6:C1:0D:61:D0:77:D0:78:FE:71:7F
Certificate issuer: /CN=d8c2096cc0c5557cbab6c10d61d077d078fe717f
Certificate serial: 019B6E0EBBDF49BFDB9223C3954AEF860757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
Manifest number: 0937
Signing time: Tue 30 Dec 2025 07:00:17 +0000
Manifest this update: Tue 30 Dec 2025 07:00:17 +0000
Manifest next update: Wed 31 Dec 2025 07:00:17 +0000
Files and hashes: 1: 2MIJbMDFVXy6tsENYdB30Hj-cX8.crl (hash: bcAbbJiXkFXoNwejECcJZRzetOhAh3Kvv2W5yS0Q+ZI=)
2: v--QteSWi6tQPkHDzqMh-ib3Ea0.roa (hash: 4DKBaLEIdscFHQJRoeUgffvp/rQ3x54nPWPAJ4H+N0s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:6e:0e:bb:df:49:bf:db:92:23:c3:95:4a:ef:86:07:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c2096cc0c5557cbab6c10d61d077d078fe717f
Validity
Not Before: Dec 30 07:00:17 2025 GMT
Not After : Dec 31 07:00:17 2025 GMT
Subject: CN=5e2fc2cf6d860167c33658822414c5d9c2c960af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:71:ab:60:7a:43:a7:b6:82:0c:49:a5:4e:1d:
55:fa:c3:67:d1:02:dd:c5:16:e3:b6:fa:8c:73:1f:
53:2e:3c:29:19:49:46:90:b5:6c:3d:bd:ea:58:9e:
73:da:18:4a:f9:55:35:39:c6:fb:ae:0f:55:27:c4:
30:3b:2f:f0:c8:84:66:18:00:9a:42:f7:dd:31:8d:
e0:b5:2b:fc:29:96:d3:7a:7d:6c:fd:89:fa:62:14:
f0:df:d6:b6:09:59:91:a4:84:cc:0e:58:83:e8:0d:
52:15:57:df:d6:a7:0a:48:d3:8b:65:5f:14:6a:b3:
4f:38:d6:a3:8e:aa:f6:b4:44:0a:b6:16:f8:e8:0d:
7b:52:8b:49:45:b6:41:01:2a:95:2a:e6:fd:d7:79:
73:26:5b:af:1f:2d:de:91:57:b6:63:c0:55:cc:45:
bf:be:12:05:1d:d3:d6:5e:32:9b:78:b9:ba:9f:c9:
01:b5:d1:39:0d:54:79:29:cb:bd:8d:b3:f9:78:f5:
d0:8e:07:8d:be:07:af:55:62:c5:0a:d4:cc:e7:2e:
69:46:48:aa:98:ad:d4:f2:f8:f2:ff:fe:1a:64:2a:
08:32:15:98:99:e6:4b:27:56:54:95:30:d3:18:a4:
58:9b:cb:9f:46:7a:d6:c5:c7:0a:93:a9:77:87:28:
54:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2F:C2:CF:6D:86:01:67:C3:36:58:82:24:14:C5:D9:C2:C9:60:AF
X509v3 Authority Key Identifier:
keyid:D8:C2:09:6C:C0:C5:55:7C:BA:B6:C1:0D:61:D0:77:D0:78:FE:71:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:09:7e:cb:bb:a6:42:b5:b8:62:81:15:bf:0a:7d:62:b0:2e:
af:f5:dd:ec:30:30:96:1b:71:81:d1:c7:df:d0:af:b7:90:88:
74:a9:ee:3f:33:c1:1b:a6:5f:2e:a1:dd:f2:f9:3e:42:2a:1d:
2c:c8:b6:98:b2:e4:93:f7:cb:b2:ad:a9:f9:99:11:61:4b:ca:
e3:3a:37:cf:fc:4a:5d:7c:07:f7:77:28:e0:56:a0:8c:9a:80:
d5:0a:c6:36:65:ed:aa:97:0b:fa:91:51:14:fa:a4:80:f1:53:
ff:e9:81:7f:51:ad:50:80:21:13:fb:15:d3:1b:66:4c:05:7d:
d6:33:83:70:86:d1:50:24:5b:73:77:14:8e:a1:8e:96:1e:ab:
ad:6f:d9:a7:dc:d3:f8:9d:7b:7e:78:c4:42:27:3d:14:d4:59:
5c:ca:20:d3:79:cb:0c:68:5d:e0:a2:1c:b4:b9:69:c5:5a:0e:
ed:4d:f2:cb:2c:dd:27:77:d6:46:66:fd:ed:d2:92:c7:0f:22:
03:d0:80:6d:8b:53:77:3d:02:a9:6f:b1:e5:03:c7:c1:75:f1:
2a:a1:3f:38:9b:00:f7:ea:39:e5:72:76:94:f6:36:f7:d7:d2:
fe:c7:b9:6a:8a:67:85:15:26:22:0a:e5:23:69:ff:26:5f:c0:
82:96:03:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:33 2026 by rpki-client