Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft
File: VkmqAU6M8795JOd1h9CnyMqhxJc.mft (raw, json)
Hash identifier: 7sBWxJ8Nojfn3CuY9/TzgdtjpdWv8OMXHGsLutBLLZc=
Subject key identifier: 0D:05:19:5F:9E:7C:F2:92:99:0B:B7:28:E0:54:60:F3:34:36:12:40
Authority key identifier: 56:49:AA:01:4E:8C:F3:BF:79:24:E7:75:87:D0:A7:C8:CA:A1:C4:97
Certificate issuer: /CN=5649aa014e8cf3bf7924e77587d0a7c8caa1c497
Certificate serial: 019B4693CE6927642EF6B95010471E84F593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkmqAU6M8795JOd1h9CnyMqhxJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft
Manifest number: 0BF7
Signing time: Mon 22 Dec 2025 15:00:50 +0000
Manifest this update: Mon 22 Dec 2025 15:00:50 +0000
Manifest next update: Tue 23 Dec 2025 15:00:50 +0000
Files and hashes: 1: VkmqAU6M8795JOd1h9CnyMqhxJc.crl (hash: kBFkM6nvsL+olOcJo7TAFSt1zc/vPAjhDiky+pgp0Kg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:46:93:ce:69:27:64:2e:f6:b9:50:10:47:1e:84:f5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5649aa014e8cf3bf7924e77587d0a7c8caa1c497
Validity
Not Before: Dec 22 15:00:50 2025 GMT
Not After : Dec 23 15:00:50 2025 GMT
Subject: CN=0d05195f9e7cf292990bb728e05460f334361240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:77:fa:6f:71:7e:a8:8a:f1:ab:e8:6b:44:52:
5a:13:4f:a8:91:30:4b:5c:96:42:15:c9:53:83:fe:
9f:71:19:8b:bd:93:18:fb:de:d1:0a:db:3e:39:c2:
95:f5:42:df:38:01:62:2e:a8:b4:d7:76:36:50:8a:
a7:d0:8c:f4:c0:40:8b:0a:4c:c3:96:97:d6:0b:b6:
83:50:db:3e:5f:1c:48:72:6f:c1:95:ef:67:d6:d9:
e9:fe:aa:a2:58:4d:61:68:49:56:b8:ba:57:7c:7e:
8a:d1:f5:b1:fd:2c:a7:f9:3e:6d:51:74:a6:aa:12:
e1:03:ff:3e:d8:c1:d4:d9:01:dc:b5:bc:4c:4f:db:
67:e0:1b:eb:3b:c3:0f:23:5c:83:86:51:2b:b5:1f:
e8:c1:0e:9b:ef:a5:7c:50:2d:b3:0c:e5:31:27:50:
2d:b4:67:51:99:a7:2c:ee:f1:f3:24:6d:09:0d:13:
58:64:3e:00:cf:16:80:d4:f9:d2:21:1d:3c:49:04:
f8:b8:6b:c8:53:15:89:7c:8e:52:d0:ff:a5:32:ee:
5f:35:84:ef:bf:b5:f2:50:31:f0:d0:35:3a:59:12:
f2:48:a3:3c:9b:27:86:a7:f8:9f:04:d2:64:8f:60:
46:66:f7:93:06:50:58:73:a8:e7:e0:09:af:2c:fd:
18:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:05:19:5F:9E:7C:F2:92:99:0B:B7:28:E0:54:60:F3:34:36:12:40
X509v3 Authority Key Identifier:
keyid:56:49:AA:01:4E:8C:F3:BF:79:24:E7:75:87:D0:A7:C8:CA:A1:C4:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkmqAU6M8795JOd1h9CnyMqhxJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:54:b2:74:83:9e:ef:2c:b6:f6:b9:ec:9c:1e:be:a7:f6:ad:
14:08:40:42:9d:49:55:3e:4a:a5:bc:ec:dd:53:11:b8:de:30:
45:2d:4e:c1:f9:b9:a0:17:97:13:14:aa:d3:e7:bb:17:75:49:
c8:1c:9d:1e:36:d5:b3:ed:be:b1:50:26:04:3c:e0:8b:5f:07:
67:f3:35:a8:26:75:8b:9c:bf:22:9b:51:af:24:81:ba:38:8d:
98:16:51:7f:6d:6d:78:33:c7:94:f1:99:15:c0:d0:20:a6:18:
ba:f8:d4:d3:0d:a4:6f:67:13:43:65:6b:e4:83:4f:eb:08:df:
45:08:68:99:bd:6a:d3:75:bf:ac:5d:91:25:02:29:cd:7e:fe:
e8:d3:85:f9:00:19:08:26:b3:a1:01:31:7c:32:68:80:5e:18:
28:76:70:d2:6e:2e:cf:95:c7:e3:b0:f9:95:74:e2:a4:45:5b:
ec:19:67:fd:07:07:ad:d9:e4:0d:84:72:65:c9:31:c0:99:5c:
29:b9:1f:6d:12:d8:5c:06:c1:60:27:82:aa:db:7f:e7:ba:45:
f4:17:c6:fb:3f:8a:0d:62:e4:a7:23:56:a3:ae:1c:c6:8a:45:
94:29:3a:e5:b8:c2:ce:b9:f3:03:c3:83:12:04:56:48:80:c6:
3e:71:96:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtGk85pJ2Qu9rlQEEcehPWTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NDlhYTAxNGU4Y2YzYmY3OTI0ZTc3NTg3ZDBhN2M4Y2Fh
MWM0OTcwHhcNMjUxMjIyMTUwMDUwWhcNMjUxMjIzMTUwMDUwWjAzMTEwLwYDVQQD
EygwZDA1MTk1ZjllN2NmMjkyOTkwYmI3MjhlMDU0NjBmMzM0MzYxMjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+3f6b3F+qIrxq+hrRFJaE0+okTBL
XJZCFclTg/6fcRmLvZMY+97RCts+OcKV9ULfOAFiLqi013Y2UIqn0Iz0wECLCkzD
lpfWC7aDUNs+XxxIcm/Ble9n1tnp/qqiWE1haElWuLpXfH6K0fWx/Syn+T5tUXSm
qhLhA/8+2MHU2QHctbxMT9tn4BvrO8MPI1yDhlErtR/owQ6b76V8UC2zDOUxJ1At
tGdRmacs7vHzJG0JDRNYZD4AzxaA1PnSIR08SQT4uGvIUxWJfI5S0P+lMu5fNYTv
v7XyUDHw0DU6WRLySKM8myeGp/ifBNJkj2BGZveTBlBYc6jn4AmvLP0YJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0FGV+efPKSmQu3KOBUYPM0NhJAMB8GA1UdIwQY
MBaAFFZJqgFOjPO/eSTndYfQp8jKocSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmttcUFVNk04Nzk1Sk9kMWg5Q255TXFoeEpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85ZDI5MDctMGE5Yy00ZTIzLWE4Zjgt
ZTg4NjBkYTEwMDM4LzEvVmttcUFVNk04Nzk1Sk9kMWg5Q255TXFoeEpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85ZDI5MDctMGE5Yy00ZTIzLWE4ZjgtZTg4NjBkYTEwMDM4
LzEvVmttcUFVNk04Nzk1Sk9kMWg5Q255TXFoeEpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVSydIOe
7yy29rnsnB6+p/atFAhAQp1JVT5Kpbzs3VMRuN4wRS1Owfm5oBeXExSq0+e7F3VJ
yBydHjbVs+2+sVAmBDzgi18HZ/M1qCZ1i5y/IptRrySBujiNmBZRf21teDPHlPGZ
FcDQIKYYuvjU0w2kb2cTQ2Vr5INP6wjfRQhomb1q03W/rF2RJQIpzX7+6NOF+QAZ
CCazoQExfDJogF4YKHZw0m4uz5XH47D5lXTipEVb7Bln/QcHrdnkDYRyZckxwJlc
KbkfbRLYXAbBYCeCqtt/57pF9BfG+z+KDWLkpyNWo64cxopFlCk65bjCzrnzA8OD
EgRWSIDGPnGWGQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:24:57 2026 by rpki-client