Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
File: S-G7vlQAedK38nC5LOrzsqgW6Po.mft (raw, json)
Hash identifier: MEr8p1jmlemGOvAfeM0QUJmtzD9ZLUdDXXgybtAh3qg=
Subject key identifier: B4:83:A3:55:F4:22:55:6E:FA:F6:CB:F5:49:27:28:FB:CB:04:03:03
Authority key identifier: 4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA
Certificate issuer: /CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
Certificate serial: 019B48B94428738D93DF78E257DA10FD91EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
Manifest number: 0DAA
Signing time: Tue 23 Dec 2025 01:00:59 +0000
Manifest this update: Tue 23 Dec 2025 01:00:59 +0000
Manifest next update: Wed 24 Dec 2025 01:00:59 +0000
Files and hashes: 1: 9hr0RxcMrr0PdZUeFGL7xFCCX6M.roa (hash: c+l8O2VvW8FmRNHxjGZmeZsqcY4y9njJ0XhuiOI82Ig=)
2: S-G7vlQAedK38nC5LOrzsqgW6Po.crl (hash: t+dhls7BolksH7XtONwJYyb0S7N3DzaNqN7mOa+NNDU=)
3: Wo69R9wkZdSu2YDZamu1cwfnvYY.roa (hash: M7Dkgn12kNJ0G/XHeqGYMOBhXYTKj/x9/fg1DkcC9rY=)
4: Yz-y591eNOrcrLSkt7bX4CY92Hg.roa (hash: oW3oUBZKt4uL8vuRz0uNo1Cj56FiYIaWKe1rVvQOsZY=)
5: sxzxRsYpVJ4N1lToM8Cy5xPqMsU.roa (hash: g5PD0lSPsiV5TiY4CJ8jfV/ckG/Bc1/ChU4XFCIeK1A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:48:b9:44:28:73:8d:93:df:78:e2:57:da:10:fd:91:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
Validity
Not Before: Dec 23 01:00:59 2025 GMT
Not After : Dec 24 01:00:59 2025 GMT
Subject: CN=b483a355f422556efaf6cbf5492728fbcb040303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:df:13:1d:12:99:fa:9c:09:f0:b4:28:4e:96:
be:7a:ad:e4:9c:13:e6:4e:79:9c:8e:a6:a8:31:03:
80:16:05:5e:13:51:5c:1a:75:e2:4d:83:44:d6:e6:
c5:2d:8a:4b:c8:9f:2e:a3:23:57:e7:0c:d6:bc:2a:
44:9b:59:7a:c9:50:02:f7:51:fb:ce:cd:c2:04:61:
ac:e1:54:cc:ef:53:23:7b:e2:0e:d7:27:1b:e7:e9:
39:7c:16:21:d4:66:20:28:93:ec:fe:35:b5:fc:63:
d8:a9:83:c4:36:9f:70:86:2d:a6:57:db:cd:53:e6:
39:51:76:57:86:09:b9:aa:9c:c1:95:67:79:37:09:
24:2a:2d:6d:42:8d:b2:e7:2b:31:09:54:8f:c7:79:
56:8f:8c:f4:78:f5:2d:a0:58:f8:bf:36:d5:4e:92:
8e:ff:f3:cf:71:61:d1:f6:bd:9e:42:39:e2:2b:dc:
9f:a1:87:5a:10:58:ab:9b:1b:a4:32:e0:00:73:91:
20:3a:8e:6e:6f:2a:c7:3d:05:b4:d4:ca:2b:b6:36:
a6:7f:53:12:08:4c:14:6d:56:9a:84:c1:fa:5b:60:
fc:42:11:11:e8:45:d6:e8:51:28:d3:3f:33:27:3d:
99:de:c9:35:45:53:bf:16:c3:83:0a:df:b6:9e:54:
9b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:83:A3:55:F4:22:55:6E:FA:F6:CB:F5:49:27:28:FB:CB:04:03:03
X509v3 Authority Key Identifier:
keyid:4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:59:db:a6:92:6a:17:1d:6f:21:97:5d:9a:77:24:1b:f3:97:
97:a9:85:26:80:94:38:64:5a:ee:af:ac:bc:41:f3:34:56:88:
b7:4d:85:30:b7:46:d8:28:71:d4:56:bd:d0:4b:14:cc:96:c6:
2e:f7:97:e8:51:70:ae:7e:76:b7:a3:4f:8c:e2:a0:6d:3f:f2:
c5:68:08:0a:9a:2e:71:e5:f9:14:aa:d6:d1:0c:f3:9a:9f:0c:
98:d6:c6:3d:7c:97:28:1f:a2:bd:8a:e8:2e:15:19:06:ec:b8:
3d:ef:6c:7d:30:2a:50:59:85:9f:27:5b:10:e0:36:c2:8c:a4:
12:a3:a6:7e:22:fd:1e:1c:cc:97:5e:0d:55:3f:5d:f0:3c:be:
16:69:59:db:a2:60:b8:6e:55:e4:ba:be:f2:40:4e:75:76:8f:
91:2c:dc:90:c8:e3:7a:3b:1e:aa:22:ec:6d:59:75:c5:11:12:
69:c8:43:c5:ca:6d:b2:1b:07:ba:ab:88:44:cd:c8:55:30:c3:
83:28:db:4b:2a:1d:f9:07:70:e4:9c:80:36:9d:ee:2b:8e:0d:
77:5c:32:a5:fd:15:ec:32:77:81:71:c8:26:b9:d6:1d:f7:89:
c9:a7:cf:5f:3d:6a:16:1d:ad:e2:60:0d:76:e8:5e:aa:e9:33:
ad:11:5b:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtIuUQoc42T33jiV9oQ/ZHvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZTFiYmJlNTQwMDc5ZDJiN2YyNzBiOTJjZWFmM2IyYTgx
NmU4ZmEwHhcNMjUxMjIzMDEwMDU5WhcNMjUxMjI0MDEwMDU5WjAzMTEwLwYDVQQD
EyhiNDgzYTM1NWY0MjI1NTZlZmFmNmNiZjU0OTI3MjhmYmNiMDQwMzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt8THRKZ+pwJ8LQoTpa+eq3knBPm
TnmcjqaoMQOAFgVeE1FcGnXiTYNE1ubFLYpLyJ8uoyNX5wzWvCpEm1l6yVAC91H7
zs3CBGGs4VTM71Mje+IO1ycb5+k5fBYh1GYgKJPs/jW1/GPYqYPENp9whi2mV9vN
U+Y5UXZXhgm5qpzBlWd5NwkkKi1tQo2y5ysxCVSPx3lWj4z0ePUtoFj4vzbVTpKO
//PPcWHR9r2eQjniK9yfoYdaEFirmxukMuAAc5EgOo5ubyrHPQW01Mortjamf1MS
CEwUbVaahMH6W2D8QhER6EXW6FEo0z8zJz2Z3sk1RVO/FsODCt+2nlSbjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSDo1X0IlVu+vbL9UknKPvLBAMDMB8GA1UdIwQY
MBaAFEvhu75UAHnSt/JwuSzq87KoFuj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy1HN3ZsUUFlZEszOG5DNUxPcnpzcWdXNlBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My83YzdiZjYtMmJkZi00YzdkLTlhZWMt
MWVmMWNlZTY2MWNhLzEvUy1HN3ZsUUFlZEszOG5DNUxPcnpzcWdXNlBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My83YzdiZjYtMmJkZi00YzdkLTlhZWMtMWVmMWNlZTY2MWNh
LzEvUy1HN3ZsUUFlZEszOG5DNUxPcnpzcWdXNlBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1nbppJq
Fx1vIZddmnckG/OXl6mFJoCUOGRa7q+svEHzNFaIt02FMLdG2Chx1Fa90EsUzJbG
LveX6FFwrn52t6NPjOKgbT/yxWgICpouceX5FKrW0Qzzmp8MmNbGPXyXKB+ivYro
LhUZBuy4Pe9sfTAqUFmFnydbEOA2woykEqOmfiL9HhzMl14NVT9d8Dy+FmlZ26Jg
uG5V5Lq+8kBOdXaPkSzckMjjejseqiLsbVl1xRESachDxcptshsHuquIRM3IVTDD
gyjbSyod+Qdw5JyANp3uK44Nd1wypf0V7DJ3gXHIJrnWHfeJyafPXz1qFh2t4mAN
duhequkzrRFbMg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 14:55:44 2026 by rpki-client