Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft
File: F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft (raw, json)
Hash identifier: GSQARDIS/OjyEcnHk2UsJgms6bwfzu+7M9ZQAbownKA=
Subject key identifier: 21:CC:FF:72:17:B3:E3:E5:BB:A1:D2:31:1A:9E:CF:F4:E7:36:0A:CF
Authority key identifier: 17:EC:31:44:16:91:B8:59:B3:47:FD:17:21:7A:5E:5D:1B:0B:E3:03
Certificate issuer: /CN=17ec31441691b859b347fd17217a5e5d1b0be303
Certificate serial: 019B2FD578EB54C76E10A7839AE65035E816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-wxRBaRuFmzR_0XIXpeXRsL4wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft
Manifest number: 08AE
Signing time: Thu 18 Dec 2025 05:01:17 +0000
Manifest this update: Thu 18 Dec 2025 05:01:17 +0000
Manifest next update: Fri 19 Dec 2025 05:01:17 +0000
Files and hashes: 1: F-wxRBaRuFmzR_0XIXpeXRsL4wM.crl (hash: 9SuruyL1KCv7irE1cO5S1JmGbNXLcUSrR5hSuH69IFI=)
2: ln-QKhvlXAjUZIdfkRE5U6oCsi8.roa (hash: gwe72yNPdMd17mqjkFbILfyleB7233AKjzKUNQmZ/xM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2f:d5:78:eb:54:c7:6e:10:a7:83:9a:e6:50:35:e8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ec31441691b859b347fd17217a5e5d1b0be303
Validity
Not Before: Dec 18 05:01:17 2025 GMT
Not After : Dec 19 05:01:17 2025 GMT
Subject: CN=21ccff7217b3e3e5bba1d2311a9ecff4e7360acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:03:b3:35:05:3f:35:69:46:87:dc:5f:02:64:
4f:f9:49:fd:90:a7:9b:20:ea:bc:14:fd:ce:45:72:
34:c6:b9:2e:3f:3f:cb:83:bb:99:4a:92:27:a1:d7:
4d:8e:04:55:d0:ae:59:c5:9c:e8:2d:cd:ea:c1:e4:
ec:93:68:35:0c:70:f1:d3:3a:f2:6e:0e:0e:9d:f8:
83:e4:0c:cf:18:ba:a7:a6:36:a8:95:30:01:25:e7:
7f:5a:51:b2:fa:de:a5:a1:52:eb:c8:b1:aa:93:ec:
3c:04:6f:72:92:04:3e:41:db:7c:5a:3f:74:3b:76:
88:c4:ff:fb:d8:10:14:f7:d2:1d:51:28:b5:54:37:
3e:eb:c3:3f:78:3d:05:f2:ea:e2:4e:7e:d3:ab:3a:
8f:11:e2:fc:5c:38:03:74:cf:c5:95:88:44:d9:d5:
b6:bc:07:92:10:9a:66:c5:92:d5:b0:9b:06:3e:29:
19:3b:66:c8:ec:bc:46:56:af:2d:d0:6a:12:84:63:
92:a8:2f:f0:cb:a3:f4:b1:bb:94:e4:d4:d2:e2:ac:
a2:34:39:61:31:bc:04:b3:3a:92:38:76:a5:2f:7b:
bd:cd:61:21:5c:fa:21:b0:5a:2a:f7:06:2d:43:28:
6f:b4:6e:79:03:27:d9:4d:c1:f0:de:ec:da:f3:28:
19:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CC:FF:72:17:B3:E3:E5:BB:A1:D2:31:1A:9E:CF:F4:E7:36:0A:CF
X509v3 Authority Key Identifier:
keyid:17:EC:31:44:16:91:B8:59:B3:47:FD:17:21:7A:5E:5D:1B:0B:E3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-wxRBaRuFmzR_0XIXpeXRsL4wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:86:e8:03:cf:8e:b7:53:f4:40:74:0e:3f:a1:ed:9c:24:78:
b2:7a:3e:81:d7:25:e6:d9:51:ce:fd:37:c7:66:d8:b8:ff:fb:
77:d0:4f:23:fc:71:93:bc:73:54:7b:5e:67:7c:f9:1d:8f:ff:
a3:b3:d4:21:97:7f:78:d2:ec:91:c8:aa:f5:e7:68:8c:f4:91:
7d:d8:1e:31:19:17:73:52:ff:66:cb:c5:56:f3:44:37:83:7c:
c3:33:96:e9:ac:3e:91:f1:8e:89:92:9f:16:6f:5f:c3:a7:77:
64:07:1c:88:bf:f6:5b:d4:6f:26:7d:ca:8b:95:f6:5b:4e:6b:
cc:e5:0a:76:c9:0d:b7:02:a2:c8:6f:c0:1f:6a:01:e4:2c:35:
2b:b1:e8:8c:af:ef:fd:4c:e8:09:a4:1b:88:31:d0:c5:16:b4:
fb:f5:4f:6a:69:47:00:20:90:fa:e6:d1:e3:31:4b:e0:84:22:
b7:ef:27:3a:e2:27:c3:c7:78:2b:2b:6a:4b:ed:ca:55:91:ec:
e0:56:25:61:b9:a6:c9:2c:98:f5:c7:f8:9f:22:4e:24:5d:96:
71:29:7a:f4:73:ab:5c:6f:f7:4b:40:8c:f5:2e:3e:6b:72:fb:
21:9b:ec:cb:4e:87:86:ef:c1:5f:ee:29:5b:e8:ce:74:d6:da:
11:46:6d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:12:33 2026 by rpki-client