Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
File: xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft (raw, json)
Hash identifier: YIeX7UqYExHoH4PyNibHTAtqYa7AWHg0PRZY+iGU1cs=
Subject key identifier: 60:61:2E:CB:C1:79:F3:8E:2E:6F:14:F3:8C:19:F6:83:B6:30:AE:18
Authority key identifier: C6:C6:65:3E:87:BB:2E:F9:AD:BB:06:19:60:E2:05:00:A5:54:F0:35
Certificate issuer: /CN=c6c6653e87bb2ef9adbb061960e20500a554f035
Certificate serial: 019B736C71ED83E29D39F9A2DA127F8FBEDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
Manifest number: 076F
Signing time: Wed 31 Dec 2025 08:00:45 +0000
Manifest this update: Wed 31 Dec 2025 08:00:45 +0000
Manifest next update: Thu 01 Jan 2026 08:00:45 +0000
Files and hashes: 1: CL-hnZLAW32dB0McMUvKXumHbjc.roa (hash: /6abOSVtqiSm907QP0eqatEoUJFnqFDpeoJMvvSk4WA=)
2: xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl (hash: pYh23YlO5U2tn1/H39IPo8jv9XIfncWrJz0mBp+FIfw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:73:6c:71:ed:83:e2:9d:39:f9:a2:da:12:7f:8f:be:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c6653e87bb2ef9adbb061960e20500a554f035
Validity
Not Before: Dec 31 08:00:45 2025 GMT
Not After : Jan 1 08:00:45 2026 GMT
Subject: CN=60612ecbc179f38e2e6f14f38c19f683b630ae18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a8:a9:83:fc:11:43:c6:77:b0:8c:82:b1:b6:
d8:fc:68:9e:cd:86:14:14:f1:d4:22:94:50:f3:c8:
6d:1e:95:04:43:bd:d7:8b:88:b9:15:ed:50:2f:44:
46:33:3c:07:13:ea:f7:72:71:21:9e:dc:8c:80:65:
e2:52:ac:58:b8:10:94:9d:99:6d:57:ef:ea:dd:40:
f9:15:e9:09:71:64:a3:8e:17:95:cc:ad:9a:37:5d:
5e:8b:c2:28:28:9d:ab:3c:60:72:89:9e:b6:ad:88:
76:6c:dd:8d:f7:6b:22:01:2c:1b:41:11:98:a4:44:
68:46:e6:0e:d6:bc:7c:b3:3f:8a:8e:fb:03:11:9b:
6d:e6:3b:12:5a:8f:4a:c4:6d:91:8e:06:2c:a3:1a:
31:67:1f:f8:b6:e2:66:8f:16:dc:ef:66:ac:d7:39:
a2:0c:d8:d8:24:a2:29:bf:10:60:08:21:a4:da:e6:
67:94:ab:3b:00:f5:e9:c8:bd:21:2b:2e:60:38:31:
6f:86:e2:82:02:44:c1:0e:ca:60:90:ca:f2:f2:4e:
4d:2f:73:0b:63:76:81:6e:ed:0d:97:17:5f:62:72:
a8:aa:f8:10:3e:ab:9f:51:54:ec:27:64:41:47:6c:
a8:91:68:bb:46:a9:4d:fe:19:0e:27:81:ac:95:7e:
ed:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:61:2E:CB:C1:79:F3:8E:2E:6F:14:F3:8C:19:F6:83:B6:30:AE:18
X509v3 Authority Key Identifier:
keyid:C6:C6:65:3E:87:BB:2E:F9:AD:BB:06:19:60:E2:05:00:A5:54:F0:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:34:3f:2e:de:5c:f7:ee:67:a7:d8:03:1d:3f:4d:df:5b:95:
d0:85:28:4d:54:a3:98:e2:3a:af:62:d9:d3:74:8b:98:eb:90:
df:1a:1f:46:1a:46:0e:49:41:b7:e5:e0:f8:b3:24:9c:6f:6e:
47:82:1c:ea:6c:9c:9e:a6:61:28:1e:1a:11:04:6d:2d:6f:07:
05:a0:db:96:c5:01:8c:ee:d4:66:cc:fa:61:74:b5:69:18:7b:
aa:6a:bd:ee:37:3c:cf:71:ef:64:2b:3c:16:61:6b:25:bf:06:
15:63:76:7e:93:17:38:c5:74:96:ae:2a:46:97:47:4c:9b:a2:
cd:c7:e0:c2:57:6e:ab:8b:13:ed:57:71:da:13:ea:0e:bc:31:
e4:95:3a:88:eb:52:da:14:89:fb:d1:4d:de:2f:26:13:af:e9:
4e:89:09:a0:eb:8e:d3:78:f7:c9:81:76:2e:0a:f3:13:98:25:
97:89:fb:ea:f8:7e:ec:76:05:7b:e9:86:7c:00:cc:04:d7:ce:
fa:6b:71:64:6a:1f:8a:1f:8d:ba:29:3f:e3:9c:b3:4d:56:84:
90:c3:13:eb:31:bb:42:ea:f5:7b:de:8f:3e:a3:7c:81:f1:1b:
dd:73:ea:f0:57:f8:b5:d7:4e:5d:f7:77:44:22:56:cc:7b:6d:
4e:9f:a8:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtzbHHtg+KdOfmi2hJ/j77eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YzY2NTNlODdiYjJlZjlhZGJiMDYxOTYwZTIwNTAwYTU1
NGYwMzUwHhcNMjUxMjMxMDgwMDQ1WhcNMjYwMTAxMDgwMDQ1WjAzMTEwLwYDVQQD
Eyg2MDYxMmVjYmMxNzlmMzhlMmU2ZjE0ZjM4YzE5ZjY4M2I2MzBhZTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6ipg/wRQ8Z3sIyCsbbY/GiezYYU
FPHUIpRQ88htHpUEQ73Xi4i5Fe1QL0RGMzwHE+r3cnEhntyMgGXiUqxYuBCUnZlt
V+/q3UD5FekJcWSjjheVzK2aN11ei8IoKJ2rPGByiZ62rYh2bN2N92siASwbQRGY
pERoRuYO1rx8sz+KjvsDEZtt5jsSWo9KxG2RjgYsoxoxZx/4tuJmjxbc72as1zmi
DNjYJKIpvxBgCCGk2uZnlKs7APXpyL0hKy5gODFvhuKCAkTBDspgkMry8k5NL3ML
Y3aBbu0NlxdfYnKoqvgQPqufUVTsJ2RBR2yokWi7RqlN/hkOJ4GslX7t8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBhLsvBefOOLm8U84wZ9oO2MK4YMB8GA1UdIwQY
MBaAFMbGZT6Huy75rbsGGWDiBQClVPA1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNabFBvZTdMdm10dXdZWllPSUZBS1ZVOERVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi85NjFhNzItNzBmZC00NTBmLTlmZTkt
M2JiYTM2MjgzMjRiLzEveHNabFBvZTdMdm10dXdZWllPSUZBS1ZVOERVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi85NjFhNzItNzBmZC00NTBmLTlmZTktM2JiYTM2MjgzMjRi
LzEveHNabFBvZTdMdm10dXdZWllPSUZBS1ZVOERVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDQ/Lt5c
9+5np9gDHT9N31uV0IUoTVSjmOI6r2LZ03SLmOuQ3xofRhpGDklBt+Xg+LMknG9u
R4Ic6mycnqZhKB4aEQRtLW8HBaDblsUBjO7UZsz6YXS1aRh7qmq97jc8z3HvZCs8
FmFrJb8GFWN2fpMXOMV0lq4qRpdHTJuizcfgwlduq4sT7Vdx2hPqDrwx5JU6iOtS
2hSJ+9FN3i8mE6/pTokJoOuO03j3yYF2LgrzE5gll4n76vh+7HYFe+mGfADMBNfO
+mtxZGofih+Nuik/45yzTVaEkMMT6zG7Qur1e96PPqN8gfEb3XPq8Ff4tddOXfd3
RCJWzHttTp+o8Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:47 2026 by rpki-client