
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
File: 25v841gk9uybXJ85qBFQzhYYEic.mft (raw, json)
Hash identifier: Epx4jttfQguyzmxYe06JvPZ2Mju1F41EvY/aYraI0as=
Subject key identifier: 74:60:18:EC:27:20:26:66:24:F5:3F:D8:2C:EB:2D:B0:EF:E9:8B:D0
Authority key identifier: DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
Certificate issuer: /CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Certificate serial: 019F236A4F29ED4F5DD4B1706713114EFB2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
Manifest number: 0612
Signing time: Thu 02 Jul 2026 15:19:57 +0000
Manifest this update: Thu 02 Jul 2026 15:19:57 +0000
Manifest next update: Fri 03 Jul 2026 15:19:57 +0000
Files and hashes: 1: 25v841gk9uybXJ85qBFQzhYYEic.crl (hash: yfgfRBflHTvFRSP79DXKtibQe/2bZLoFlQDEVuxKKuA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:4f:29:ed:4f:5d:d4:b1:70:67:13:11:4e:fb:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Validity
Not Before: Jul 2 15:19:57 2026 GMT
Not After : Jul 3 15:19:57 2026 GMT
Subject: CN=746018ec2720266624f53fd82ceb2db0efe98bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:40:5c:d8:85:eb:b7:2f:33:e2:d9:d9:c5:1b:
b7:80:e7:6f:c2:39:c1:41:fc:c6:8b:aa:fe:b1:2f:
e2:cd:f6:de:9b:93:7a:fa:e1:dd:88:b7:bb:a9:88:
30:ea:35:72:31:74:a2:72:13:ee:05:ed:15:fa:25:
13:cb:b4:87:63:65:bf:9b:84:96:17:9c:6c:4a:53:
43:7c:c9:43:e2:71:ba:ad:07:fd:f5:35:d0:90:87:
a5:64:01:3f:77:eb:f4:82:42:0d:6a:20:95:8d:aa:
99:59:34:ba:38:a9:0f:2b:bc:c8:c5:ce:3e:ff:3e:
b1:a1:31:69:39:e1:1f:8b:a3:96:45:ac:25:e3:34:
25:e1:31:6c:10:80:b7:36:5d:97:6f:61:99:cc:fd:
3d:fd:e8:9a:62:39:5d:75:e8:6e:02:c1:a5:5f:da:
6e:1e:e0:b9:e0:e4:61:a7:0f:1f:f9:74:e0:ae:ed:
70:ba:a2:ef:33:f2:2b:ce:35:0f:6c:d6:61:b1:f7:
39:27:e4:4e:3d:60:47:59:dd:b8:2a:0d:f3:60:b0:
44:27:5a:ec:1c:42:82:f9:a5:9d:d2:11:21:ca:05:
e8:a9:0c:98:79:61:99:99:15:16:d2:f8:f2:0c:08:
8b:ed:38:95:b2:56:b1:8c:66:2b:10:b8:03:f0:e9:
2b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:60:18:EC:27:20:26:66:24:F5:3F:D8:2C:EB:2D:B0:EF:E9:8B:D0
X509v3 Authority Key Identifier:
keyid:DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:6a:17:d7:93:69:65:9d:04:3a:20:81:43:d8:ac:47:d7:c6:
12:6e:01:fd:1e:33:62:eb:cd:a1:67:b0:a1:c7:1a:44:d8:ae:
85:9d:4a:ad:3c:0e:8d:47:1b:6a:b3:eb:f9:99:46:c2:f0:17:
b4:ea:69:ca:67:85:d6:35:42:c2:fe:11:94:d3:52:28:54:5f:
45:07:c8:dc:29:be:9e:b6:02:bd:49:54:d5:63:73:80:c7:1b:
c4:40:55:4e:bb:13:e6:c8:96:ab:67:43:f8:3c:82:f1:10:da:
c5:7f:90:3c:6e:5d:6a:89:ca:73:31:a2:28:29:92:91:22:9d:
ef:3c:5a:a3:1a:30:7a:95:4f:26:0e:1b:b9:0b:8a:35:b1:31:
50:ef:3f:b8:ca:b5:05:1e:14:a0:9d:b0:da:4c:cc:52:b3:f3:
c1:0d:b1:35:1d:e5:8e:c8:64:44:c0:84:cb:61:6d:b3:3d:48:
47:8d:c7:24:6c:f6:63:51:cc:dc:ab:1d:3b:e7:53:1e:5e:3f:
de:33:98:5a:6d:8b:6c:59:02:8d:01:8e:1c:5d:03:aa:83:47:
77:15:dc:40:3e:d1:fa:fa:bf:0a:5e:1b:42:9b:1f:7f:29:37:
de:6c:dd:11:6a:82:20:f5:01:e9:ea:f0:38:10:42:9d:53:73:
53:9e:8a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:21 2026 by rpki-client