Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft
File: P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft (raw, json)
Hash identifier: qbvX441p+KbOV0AY+xUryqjHDUhDMc0rMDwwDnYaSNM=
Subject key identifier: 4E:EB:B5:27:D3:0F:5A:96:D1:8B:C0:6F:B4:BC:9E:B9:34:75:CF:97
Authority key identifier: 3F:C6:AB:EA:E1:B6:22:25:6D:BB:2D:8B:74:51:D2:74:90:D2:74:BB
Certificate issuer: /CN=3fc6abeae1b622256dbb2d8b7451d27490d274bb
Certificate serial: 019AFC55E9D8974CC212FDF542EE9393EFE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P8ar6uG2IiVtuy2LdFHSdJDSdLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft
Manifest number: 0470
Signing time: Mon 08 Dec 2025 05:01:20 +0000
Manifest this update: Mon 08 Dec 2025 05:01:20 +0000
Manifest next update: Tue 09 Dec 2025 05:01:20 +0000
Files and hashes: 1: P8ar6uG2IiVtuy2LdFHSdJDSdLs.crl (hash: hbnBZCLIDkWCtbKnInWxtQaNW4ZqwMFwCaY7Z2RyocE=)
2: mmWIUy6R5upz2L1YINLOdfsMMT0.roa (hash: wBplVEEyq+VUYs/M8XPCNDfyw39oDDlnudAvkLvbSPo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:fc:55:e9:d8:97:4c:c2:12:fd:f5:42:ee:93:93:ef:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fc6abeae1b622256dbb2d8b7451d27490d274bb
Validity
Not Before: Dec 8 05:01:20 2025 GMT
Not After : Dec 9 05:01:20 2025 GMT
Subject: CN=4eebb527d30f5a96d18bc06fb4bc9eb93475cf97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:9f:ab:7c:e6:d4:c7:29:d7:14:7e:ea:7b:
14:87:65:f5:7a:6c:3e:ba:43:8d:fe:4f:ae:4f:63:
be:38:1c:e5:22:61:47:2e:47:c3:e9:45:e9:43:52:
76:46:b7:2c:5d:dc:eb:5d:94:dc:49:1b:e1:f6:6d:
f5:87:8b:99:50:3d:d9:25:a3:c2:16:23:8d:8d:fb:
4f:f8:74:fb:c3:e4:66:a5:bf:cd:32:f2:dd:65:2d:
7c:82:15:49:f9:a8:43:fa:98:20:6f:29:db:f7:bd:
bc:b3:4d:0a:c5:6f:65:85:5f:ab:b5:1d:dc:2d:f3:
cd:5c:63:bd:b6:f7:6b:5c:6b:27:e0:51:0b:84:84:
9a:00:f3:b5:6c:0c:be:f3:96:e3:8f:da:01:22:5b:
bf:cc:a4:74:d9:9f:61:ff:8d:22:0e:b8:85:64:4a:
e0:3b:15:b7:99:95:d7:00:0b:55:19:f8:91:38:87:
36:22:41:02:c3:b6:10:f9:64:a2:c6:42:a6:c6:25:
a1:c8:af:d9:2d:24:c3:96:2e:59:db:c9:39:52:f0:
3d:c0:18:d8:4f:69:63:a9:45:07:69:cc:7c:b2:46:
ba:bf:c9:e0:54:1e:d9:3d:c0:be:fd:1c:a8:c4:9c:
1f:e3:f6:2c:98:48:4e:90:39:18:0b:f0:b8:b5:ad:
98:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EB:B5:27:D3:0F:5A:96:D1:8B:C0:6F:B4:BC:9E:B9:34:75:CF:97
X509v3 Authority Key Identifier:
keyid:3F:C6:AB:EA:E1:B6:22:25:6D:BB:2D:8B:74:51:D2:74:90:D2:74:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P8ar6uG2IiVtuy2LdFHSdJDSdLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:52:57:aa:3e:08:13:8c:70:47:bd:6f:61:ee:25:25:6d:a9:
36:b1:18:cf:09:c2:69:93:2f:6e:7e:5e:75:67:ef:3f:52:ed:
ec:3b:2e:9e:d8:9f:4e:ab:c1:dc:20:d7:c8:3f:43:9e:f9:44:
cb:95:c3:dc:23:8e:9b:e4:2c:d5:b5:4b:0e:21:6e:90:59:bc:
5a:fc:15:24:4b:25:10:16:52:88:c2:e1:eb:1e:da:07:cf:74:
b5:c2:7b:ca:38:86:00:97:d4:d1:bb:74:49:25:ac:cc:2c:2f:
78:dc:55:cc:db:3b:b9:fa:9c:6b:26:c1:68:48:00:0f:0b:cf:
59:ad:1f:8f:00:c3:74:9a:a4:1d:9b:0b:4e:27:c5:dc:79:4f:
45:bb:c6:ec:96:e6:46:9a:bd:9b:65:7b:01:a6:68:93:00:f5:
97:40:f4:fd:99:41:9a:d5:db:1b:fd:aa:3a:d7:92:65:39:76:
e9:20:03:ed:f4:95:76:ca:db:8f:15:cd:46:15:4f:5e:3a:de:
3c:23:e1:03:db:16:5a:ad:26:bc:e4:a7:4b:a6:7b:87:61:8b:
ed:65:a6:03:26:b4:61:cb:3e:8c:fa:c5:14:6b:63:77:3b:0f:
2c:f0:a8:c1:2e:14:3b:e6:c3:24:d0:e9:7f:f7:b8:a1:7e:0d:
3d:a8:d5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:14 2026 by rpki-client