Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
File: Ss70X7sPJpMK64M895_EHiLKkjU.mft (raw, json)
Hash identifier: QpgI2YRQDHT6f5aUTgq4Zu0xfoJAYXAMZ4it4KB3J/k=
Subject key identifier: 03:0D:43:4A:A7:48:D9:B0:60:0E:29:07:66:01:39:5B:EE:65:93:01
Authority key identifier: 4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35
Certificate issuer: /CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235
Certificate serial: 019B6D6A6B28338F20B520C27571967836D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
Manifest number: 16EB
Signing time: Tue 30 Dec 2025 04:00:49 +0000
Manifest this update: Tue 30 Dec 2025 04:00:49 +0000
Manifest next update: Wed 31 Dec 2025 04:00:49 +0000
Files and hashes: 1: KZ9MaFf9moOlWzhDiV51E6z4ruQ.roa (hash: o42ZvTk2aV903nYiy/wXE7YfcS2jTGFMZ4dlRDRmvzw=)
2: Ss70X7sPJpMK64M895_EHiLKkjU.crl (hash: E+4dMEnFcD6V/yVjpS+L3+INokHN9C5TIu39gj0kDas=)
3: aXfurIc0y425R07LNYbqG3Kj0ls.roa (hash: Fo4G/OQhw0U+aibrSU4yWNkHhdgB1l5Zyp+qa99xuIQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:6d:6a:6b:28:33:8f:20:b5:20:c2:75:71:96:78:36:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235
Validity
Not Before: Dec 30 04:00:49 2025 GMT
Not After : Dec 31 04:00:49 2025 GMT
Subject: CN=030d434aa748d9b0600e29076601395bee659301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b7:8b:3f:fa:32:12:d9:86:62:70:6b:37:e8:
0f:03:27:69:9d:70:41:1a:b9:bf:e4:38:0d:ae:ac:
cf:da:01:19:40:a8:be:d9:fe:22:05:32:f4:5b:02:
f6:f8:b4:f9:d6:1e:30:4e:c8:1f:fb:76:2c:ae:a5:
15:b8:8e:f1:25:b1:f6:e0:0a:c5:d8:87:d0:94:6b:
83:16:a6:0f:df:77:22:f1:8c:d4:a1:b6:f1:08:50:
5f:a6:b1:2c:39:cc:b6:b0:3f:a6:58:e1:e6:ba:3d:
c4:64:15:a8:7b:7d:79:27:84:c2:b5:7e:37:32:6c:
04:68:ac:91:ad:eb:36:2a:3f:74:35:6e:0a:93:3e:
7f:cc:5d:74:58:53:3e:ff:c1:4f:3b:b6:80:77:28:
04:5d:81:fa:12:44:e8:e7:5f:f8:c5:a8:ee:d6:4d:
14:f0:3f:db:b5:f7:9f:e1:60:95:0d:92:55:c1:21:
e7:49:c0:3c:b6:19:1e:21:e6:3f:b9:94:0a:00:0a:
00:ff:b0:05:be:dd:cf:40:57:a7:3b:dc:56:a2:32:
b6:2a:a4:d7:ee:6d:59:52:91:27:13:ec:6c:0c:ca:
eb:ee:e8:fa:0c:e7:35:f3:97:90:08:5a:f4:89:54:
81:07:6b:5b:21:af:29:51:d7:a1:05:80:51:50:2d:
d4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0D:43:4A:A7:48:D9:B0:60:0E:29:07:66:01:39:5B:EE:65:93:01
X509v3 Authority Key Identifier:
keyid:4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9e:5b:63:d6:74:f1:ed:6e:e7:d3:8a:d0:2e:ae:eb:45:7f:
ff:02:69:9c:5c:c0:fc:ca:f5:c4:ea:37:77:e5:7d:65:a6:9a:
99:6d:02:c5:be:2b:1b:0b:ef:74:6a:74:12:49:87:7f:c2:a5:
52:6d:7a:f1:dd:ac:b2:ae:78:c5:1a:2c:d0:31:d1:01:60:b9:
83:cb:29:f1:78:9f:66:46:72:42:90:d7:70:d1:e3:83:01:c7:
4a:83:fc:39:a2:41:f1:1e:ef:14:21:cc:8b:c7:6f:05:98:01:
1e:9b:b6:d4:fc:ac:d9:b4:83:55:96:02:a1:72:3c:81:e8:57:
e5:e7:03:3a:76:71:39:38:0a:c6:3f:35:24:6e:91:cc:4c:15:
5c:c1:df:1b:af:4c:b6:e2:ec:1e:c6:01:85:02:82:cf:e9:98:
ed:98:e9:ce:86:f2:7f:b4:55:9d:ec:ce:7e:fe:ff:4d:a7:0f:
c2:90:01:29:2b:84:8a:02:99:c7:93:32:a8:0a:5a:c5:4a:1e:
f4:a1:d5:a7:14:19:cb:04:65:24:0b:c9:5b:ea:9e:06:f7:bc:
3e:6c:09:e6:17:9f:a9:20:40:ec:f4:6e:80:54:0a:4e:95:50:
0c:6f:b1:94:11:ae:05:d9:64:c6:1d:dc:c4:a5:3b:bf:e8:a7:
54:43:5c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:54 2026 by rpki-client