Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
File: LHwKdxsw0nQoUIDdxC42eYOW8iw.mft (raw, json)
Hash identifier: dROWBb93ET29k6LzT9EvVRoKprk6cqXWjD32K6Frc7U=
Subject key identifier: 91:5E:B9:AC:35:25:6A:1C:EC:95:56:46:94:C9:55:6A:9A:4D:9D:DF
Authority key identifier: 2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
Certificate issuer: /CN=2c7c0a771b30d274285080ddc42e36798396f22c
Certificate serial: 019AFDD63B8380971BBAB8EC43221530580C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
Manifest number: 148A
Signing time: Mon 08 Dec 2025 12:01:06 +0000
Manifest this update: Mon 08 Dec 2025 12:01:06 +0000
Manifest next update: Tue 09 Dec 2025 12:01:06 +0000
Files and hashes: 1: LHwKdxsw0nQoUIDdxC42eYOW8iw.crl (hash: kKHdsm2UcQaWS2UMvqWrs4gq8paR7VYwZEeMLArSD08=)
2: _wYBYYAWsBdIPcz67gJjf_cpxBc.roa (hash: WT5EAFrH+ID6hV4wr/zaJ0InnDxoXdrcj+f2kf7QcuM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:fd:d6:3b:83:80:97:1b:ba:b8:ec:43:22:15:30:58:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c7c0a771b30d274285080ddc42e36798396f22c
Validity
Not Before: Dec 8 12:01:06 2025 GMT
Not After : Dec 9 12:01:06 2025 GMT
Subject: CN=915eb9ac35256a1cec95564694c9556a9a4d9ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cc:82:8d:e9:24:48:62:1f:4e:97:1f:e4:5e:
5f:8b:58:b5:da:86:29:a2:e8:30:20:34:27:1a:f7:
f2:1f:2c:42:7f:f4:51:a1:a6:20:2e:b8:1d:43:55:
47:bf:a0:52:3c:e3:20:b5:da:c4:b6:1e:a4:1d:84:
13:2b:bf:c0:ea:05:c0:cd:6b:1c:1c:91:f8:87:aa:
27:40:05:ef:76:66:1f:24:36:b2:75:62:1a:8d:04:
84:97:cd:76:dc:9e:29:2b:c0:ae:2f:4f:38:53:0c:
ee:a9:20:0d:8e:1c:63:aa:49:7d:bf:66:61:ba:00:
f8:d0:79:97:a7:e5:83:ca:cd:85:03:e0:d3:c8:d0:
db:48:a4:57:8a:31:01:b3:0e:84:ae:fd:e0:0f:12:
85:5e:c7:7d:38:50:5c:fa:d6:0f:96:7c:57:43:ea:
2a:b0:ab:06:7a:4a:aa:c2:34:7e:2e:3c:60:49:1c:
33:7d:7b:4a:d6:b3:54:a1:55:93:d0:2c:2b:d9:f2:
96:ae:cc:f9:4f:83:41:a4:0b:fa:02:e6:ea:59:78:
29:50:1d:4f:eb:dc:39:48:e9:ea:07:19:6a:80:cb:
ce:f2:33:5a:49:8b:b1:39:7a:16:d1:45:78:7f:f1:
5e:93:5b:18:07:22:1b:83:3b:d0:ff:a5:a9:2f:0c:
04:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5E:B9:AC:35:25:6A:1C:EC:95:56:46:94:C9:55:6A:9A:4D:9D:DF
X509v3 Authority Key Identifier:
keyid:2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a7:e3:99:b8:b4:59:b1:66:86:c7:70:9a:82:86:f5:df:93:
34:bc:c5:95:d5:7d:00:0a:9a:36:24:80:74:a3:f1:c1:8b:ef:
74:b9:45:d9:80:e1:50:c9:25:64:98:4e:ab:d5:92:05:58:c1:
28:8a:5d:a6:e2:5c:c9:91:52:db:5f:00:67:1d:f0:fd:6b:d4:
bb:65:87:8a:27:3e:60:15:67:b1:66:4a:7b:7f:29:6b:16:64:
2d:fd:c5:4f:86:f0:9f:c5:30:ee:0c:23:e6:e3:45:3c:6a:ba:
17:52:3b:42:a1:cb:54:6e:ec:a5:64:53:9b:00:5f:30:6f:1c:
04:f6:dc:8b:5d:b6:b8:48:a7:49:60:cd:93:92:e3:22:a5:73:
e1:bf:df:c5:7e:13:62:89:83:ec:f4:df:65:49:77:3e:c5:ef:
2a:be:ff:3e:99:62:e4:65:46:48:d9:ed:9a:e7:c3:d4:c9:a8:
13:49:45:fd:fb:8b:af:4d:f7:39:ed:04:82:3d:4d:88:b3:ca:
18:a2:60:2c:8d:98:bd:56:ba:5c:c1:f2:ae:6a:2f:5c:64:e9:
b0:84:61:bc:5a:65:3b:d6:85:e3:c7:d2:c6:b1:e1:e8:df:5f:
bb:24:16:6e:a6:2f:a3:49:15:52:bc:4f:e5:73:ce:ff:3a:34:
9d:30:82:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:23:23 2026 by rpki-client