Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
File: kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft (raw, json)
Hash identifier: VHQakelIPmm03QHEew3oKfckjuC7Xbr6M/d2HIK7hhY=
Subject key identifier: 11:6A:B0:D6:9B:26:23:8A:5F:F2:1F:E1:7C:7C:A3:17:2F:B7:3F:E1
Authority key identifier: 90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB
Certificate issuer: /CN=9087833e025b2320f9053a103ba61de52eab2afb
Certificate serial: 019B6D33032A1BA8F2C996E08BD3EBA99DD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
Manifest number: 074C
Signing time: Tue 30 Dec 2025 03:00:18 +0000
Manifest this update: Tue 30 Dec 2025 03:00:18 +0000
Manifest next update: Wed 31 Dec 2025 03:00:18 +0000
Files and hashes: 1: Sl6Vo_wPwtgiIFIYMqrbSQblXKc.roa (hash: l8tp4Qke8V/squeIomyLOU/9sV5KVMqfblcX8Rj/Ujc=)
2: kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl (hash: JnmR+G5whJPJD6Hr+fDVdZy6CjCLIcDgjMjHoeibhQw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:6d:33:03:2a:1b:a8:f2:c9:96:e0:8b:d3:eb:a9:9d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9087833e025b2320f9053a103ba61de52eab2afb
Validity
Not Before: Dec 30 03:00:18 2025 GMT
Not After : Dec 31 03:00:18 2025 GMT
Subject: CN=116ab0d69b26238a5ff21fe17c7ca3172fb73fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a7:86:d0:f3:4c:65:8f:5a:42:d1:6e:6f:ce:
65:86:ec:53:2e:35:d0:23:3b:ca:4d:dc:2e:a7:a6:
07:d4:e2:4f:22:23:ab:3f:c9:07:3f:87:38:95:83:
fd:5d:b4:43:ac:f0:b5:61:16:41:78:6d:58:db:b6:
de:e9:4e:84:03:df:27:67:af:ab:92:af:bb:07:8a:
ef:1c:fd:ed:21:b3:43:b2:fd:dd:1f:92:1c:0f:58:
a5:72:54:7f:c5:19:91:bc:69:4c:89:8a:c2:7f:35:
a5:57:af:60:da:59:b2:b9:33:10:09:9f:26:4a:2f:
93:4f:e8:04:47:92:e7:d2:83:fb:36:73:a4:e6:ab:
5b:03:b2:5a:2f:c9:04:3b:17:6a:de:5e:5d:04:75:
da:27:fd:41:d1:51:db:7d:75:da:24:04:c9:5a:a5:
b8:0f:4b:e9:ca:3d:27:bf:c5:90:3e:29:c9:94:5c:
1a:3c:11:83:35:83:53:c2:94:57:a2:f2:44:a2:ee:
7c:06:99:30:d6:8d:73:33:42:e0:16:b5:48:e5:08:
e6:e5:df:ab:29:88:15:87:e8:31:0f:96:5f:ec:1a:
31:f8:5f:56:a3:9c:c6:74:72:34:60:23:d7:af:8e:
5b:04:b3:28:6f:32:5f:03:5a:3f:94:64:09:13:48:
17:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6A:B0:D6:9B:26:23:8A:5F:F2:1F:E1:7C:7C:A3:17:2F:B7:3F:E1
X509v3 Authority Key Identifier:
keyid:90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ae:31:ac:5a:b9:93:10:05:6b:bd:41:40:42:bd:11:b2:4d:
3e:c0:f6:b0:0d:46:21:bb:ff:4f:28:e2:9f:db:ed:a0:b7:2f:
a4:d7:77:85:03:46:ed:c8:26:14:34:44:53:ec:af:df:ee:2d:
45:7c:40:12:b7:dc:d0:a4:2f:14:f1:3b:c6:27:7b:03:a2:72:
29:b3:b5:de:9c:27:5f:87:33:ec:f4:1f:3e:6b:c4:7b:19:2e:
00:a8:12:a6:c5:c0:84:96:6d:e0:aa:b0:05:30:81:ad:ba:9c:
81:85:56:98:e2:3b:0d:fc:19:9f:d3:5d:5c:85:55:81:11:bf:
34:cf:17:f9:a9:cb:03:e4:76:53:24:85:34:c9:1d:58:38:e7:
4b:b5:a6:e8:ff:1b:27:f8:af:4e:51:df:ee:7b:58:1a:ff:b0:
21:1f:99:d6:90:78:16:f6:66:dd:e4:79:c4:13:27:21:53:7d:
06:95:67:22:61:db:25:23:38:95:96:9f:c9:bf:d6:a7:85:ae:
44:e4:e9:d6:28:e4:a3:3a:a6:4f:d3:1a:e2:16:70:fc:0f:d4:
eb:d3:47:4d:9c:44:84:7e:36:b0:84:39:58:39:62:6d:9d:1e:
69:ac:8a:b8:63:18:97:f2:4b:1e:02:80:bf:26:0a:c5:4d:50:
b2:29:a2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:55:56 2026 by rpki-client