Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft
File: kUS2KYi--9kYP26_brLRlMso5uM.mft (raw, json)
Hash identifier: tR9XwtllQnCtbA280T+n1wfNExOJQ1wvj3qxi/bYE60=
Subject key identifier: E2:0B:02:E1:66:1D:24:13:11:AC:E1:C3:11:40:E5:E1:88:29:1E:CC
Authority key identifier: 91:44:B6:29:88:BE:FB:D9:18:3F:6E:BF:6E:B2:D1:94:CB:28:E6:E3
Certificate issuer: /CN=9144b62988befbd9183f6ebf6eb2d194cb28e6e3
Certificate serial: 019B68E8CC6043B309A2D15597686BF17102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUS2KYi--9kYP26_brLRlMso5uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft
Manifest number: 095F
Signing time: Mon 29 Dec 2025 07:00:45 +0000
Manifest this update: Mon 29 Dec 2025 07:00:45 +0000
Manifest next update: Tue 30 Dec 2025 07:00:45 +0000
Files and hashes: 1: kUS2KYi--9kYP26_brLRlMso5uM.crl (hash: mTgrqTixCQNuko5HV8VHrozUSCBgCw/SQpF5S3krqnA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:68:e8:cc:60:43:b3:09:a2:d1:55:97:68:6b:f1:71:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9144b62988befbd9183f6ebf6eb2d194cb28e6e3
Validity
Not Before: Dec 29 07:00:45 2025 GMT
Not After : Dec 30 07:00:45 2025 GMT
Subject: CN=e20b02e1661d241311ace1c31140e5e188291ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b1:17:f1:da:da:44:fd:40:19:bf:6d:bc:1f:
7b:f9:b3:54:09:ae:27:eb:f6:58:d9:6e:c3:3c:c1:
30:9c:9e:2d:ad:fc:f9:b7:c7:48:d2:b2:08:f8:f3:
14:e8:5d:27:bb:7c:b1:83:c6:2f:1d:61:88:15:91:
88:f8:66:12:8e:9e:e8:a9:31:5b:b6:0b:a9:2d:42:
7f:56:e6:4a:77:a5:cd:6e:ec:6b:09:dd:00:43:be:
af:d5:02:00:70:21:47:70:3f:14:c4:a3:56:bf:86:
f7:d0:5b:43:e7:00:39:4c:c9:f7:28:4f:b2:2f:fb:
5c:68:6d:d0:8b:25:90:6d:38:10:e9:7c:41:df:50:
2b:09:58:11:11:08:11:85:da:b3:62:71:14:2b:3e:
f8:f1:77:31:24:69:98:d3:3f:0b:9c:6f:4d:70:d3:
b3:c8:5e:6d:97:69:d5:aa:0a:72:ae:78:22:56:a7:
31:78:5c:cc:9f:11:98:f0:1d:40:4e:9c:90:34:35:
95:80:35:7c:b7:10:ff:8e:b1:b5:1c:2c:dc:c7:b3:
7c:ca:9e:4d:8b:bf:71:51:93:42:71:b0:72:30:c0:
0d:a1:a7:7a:91:36:18:ed:5c:d6:63:b4:fd:21:5f:
73:0d:40:f7:c1:2f:25:73:fe:95:65:97:86:9e:22:
10:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0B:02:E1:66:1D:24:13:11:AC:E1:C3:11:40:E5:E1:88:29:1E:CC
X509v3 Authority Key Identifier:
keyid:91:44:B6:29:88:BE:FB:D9:18:3F:6E:BF:6E:B2:D1:94:CB:28:E6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUS2KYi--9kYP26_brLRlMso5uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ea:db:73:5e:d5:f5:84:dd:5a:cf:45:97:5f:e9:e3:d8:df:
cf:af:e2:1c:a6:84:13:71:fa:fd:e6:21:15:b1:e1:c6:01:11:
5b:21:e2:b1:a2:9d:47:ef:3e:ef:09:1e:ed:54:9c:2f:f6:05:
03:29:1f:67:a1:55:5a:3d:55:5a:2a:09:8e:d8:4b:76:19:ba:
47:d2:de:5f:9e:09:8b:29:25:c5:8c:61:30:e4:c1:11:ae:dc:
15:dd:c6:05:98:99:5c:ed:d6:55:ea:5e:16:a2:7a:ff:25:39:
d0:86:d0:d5:20:a5:d8:bc:9e:bc:dd:8d:7a:37:4b:7a:bf:38:
c3:55:a4:83:5d:02:e3:f2:a2:8b:1d:ff:e1:fa:c0:6d:a0:2f:
bf:de:15:30:f9:d6:90:d1:8b:f5:8f:21:c2:8f:d8:45:cb:2c:
48:8f:2e:d7:b2:2c:25:63:4b:1d:ed:e6:d7:89:83:1b:42:e7:
d8:9d:69:d0:11:03:11:f5:8a:aa:6e:e2:8f:b5:c7:2a:93:92:
c5:fc:16:72:40:e0:f1:e0:58:79:0f:f9:1a:c9:27:33:85:42:
cb:63:df:30:a6:87:00:5c:a6:2f:09:3a:0a:65:e3:cf:a1:ac:
ca:91:8b:f2:29:b2:c1:31:53:31:ff:29:03:a6:0c:7e:ae:58:
18:80:1b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:54:42 2026 by rpki-client