Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
File: UlkVtMckB6-3lB5b4pSscTOxB7M.mft (raw, json)
Hash identifier: 5AGDr8qujIBlmxieV7+3o6I8ymGQCZFLCwD22TLkmkM=
Subject key identifier: 44:41:40:ED:39:92:26:3D:A8:60:68:96:C6:8C:C7:83:DD:29:96:4A
Authority key identifier: 52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
Certificate issuer: /CN=525915b4c72407afb7941e5be294ac7133b107b3
Certificate serial: 019B6CFCBF55929CFF6206BA21002C26A43E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
Manifest number: 1492
Signing time: Tue 30 Dec 2025 02:01:01 +0000
Manifest this update: Tue 30 Dec 2025 02:01:01 +0000
Manifest next update: Wed 31 Dec 2025 02:01:01 +0000
Files and hashes: 1: UlkVtMckB6-3lB5b4pSscTOxB7M.crl (hash: 80UFTc9gg78YkXr1rNzMFVwgNhvBJFSYqlJ9IztxFyg=)
2: ci7D-gavzkR5lRu-Y8rw6gTVt8k.roa (hash: e5+WwJtdUyHAODWheWNyNbbf9/GmybmxPgwjpdHpaL8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:6c:fc:bf:55:92:9c:ff:62:06:ba:21:00:2c:26:a4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525915b4c72407afb7941e5be294ac7133b107b3
Validity
Not Before: Dec 30 02:01:01 2025 GMT
Not After : Dec 31 02:01:01 2025 GMT
Subject: CN=444140ed3992263da8606896c68cc783dd29964a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:82:40:31:81:39:e8:99:bd:cf:71:ee:47:cf:
2d:0d:ba:63:c1:f8:01:82:a3:10:84:09:1d:47:a1:
0c:de:29:c6:8e:32:87:a4:41:6d:b8:39:4f:52:61:
14:97:6f:17:5e:a6:36:21:52:b5:34:50:a6:3f:e9:
98:d3:7e:03:3e:36:71:ae:d3:b7:c4:40:93:09:19:
84:e2:97:35:a4:24:7f:62:90:b8:f4:05:4e:ef:ba:
ce:35:eb:7b:dd:df:a7:e4:af:a0:e9:0e:bd:8f:54:
2e:4a:0a:b1:c6:39:d3:b2:9f:7e:31:79:60:b1:d5:
e9:ee:6a:1f:33:5a:a8:86:9c:36:ce:89:06:58:cb:
7f:47:b5:24:7f:09:c1:6b:3b:e1:96:e9:4b:5b:33:
30:f7:92:c9:91:67:fe:e9:5b:84:6b:cf:bf:d3:74:
f5:9e:aa:7f:eb:49:e3:23:fa:7b:3c:eb:5b:79:b3:
91:ab:80:3a:89:c6:9d:4e:fb:d7:ad:6d:7e:08:9b:
00:79:25:48:c7:94:98:a9:fb:1a:25:a9:54:c5:5f:
5d:3c:8c:47:49:12:33:0b:5e:71:52:bb:1c:a7:6e:
c8:d4:79:08:40:f1:aa:25:95:7b:95:d3:80:42:15:
97:1f:51:61:31:96:2c:26:80:b1:a0:04:da:11:93:
d7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:41:40:ED:39:92:26:3D:A8:60:68:96:C6:8C:C7:83:DD:29:96:4A
X509v3 Authority Key Identifier:
keyid:52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4b:27:e3:9d:ec:3c:7c:02:8c:a7:29:bf:33:26:aa:50:1c:
a7:09:fb:f4:a3:bd:43:2d:64:5f:11:7e:41:93:6a:a5:04:b7:
a8:46:ef:e0:58:51:dd:7f:dc:7f:4d:d3:25:cd:cc:49:a3:e0:
9e:1b:b8:45:2d:a1:46:ef:b4:8b:00:e7:d8:3e:b7:fe:54:82:
b8:15:b6:b9:7d:6b:49:40:e4:49:fa:bc:0c:7d:d9:c5:d4:73:
30:99:5f:8f:7b:68:68:33:17:c5:79:b8:66:77:f5:1c:10:08:
09:06:0f:d9:d9:7d:6e:cd:95:8d:5b:cb:75:03:4a:b0:7f:94:
cf:56:da:c9:43:d1:76:bf:e5:28:0a:5f:33:fb:fb:40:b5:3c:
6a:63:ba:19:17:e4:21:45:78:eb:40:51:41:1f:6c:91:dd:d6:
1b:0d:db:1e:d0:9f:19:15:ef:cf:fe:f9:b1:42:bc:dc:c0:44:
43:b8:bd:2b:42:d7:a3:18:1f:47:84:47:35:78:32:7a:37:46:
7e:41:6f:26:be:38:80:39:37:60:20:e2:0e:aa:9b:a4:39:07:
15:61:f1:49:3e:24:9a:35:86:72:8c:b8:8f:58:86:79:ae:a7:
10:65:77:ce:17:68:41:0f:0e:b7:39:78:3f:7b:02:f0:aa:f0:
e3:89:52:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:31 2026 by rpki-client