
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
File: inFQB06m_dHoTdleCwaDZAfpQRs.mft (raw, json)
Hash identifier: GTKHKWzCj/Pkxc0o/8JIrCbQkDbQwotfT/etDldVOOU=
Subject key identifier: C3:E0:7A:BC:FC:CC:98:41:09:BF:E1:4D:AE:DC:D4:F9:3E:A8:F5:32
Authority key identifier: 8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
Certificate issuer: /CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Certificate serial: 019A7783BD9DB95616A115C95540FF6D3EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
Manifest number: 0859
Signing time: Wed 12 Nov 2025 10:01:53 +0000
Manifest this update: Wed 12 Nov 2025 10:01:53 +0000
Manifest next update: Thu 13 Nov 2025 10:01:53 +0000
Files and hashes: 1: Pi02KG0PU_FlnsHmqgd5zbKLVdA.roa (hash: rz8wrfdxxW9MCDam/a85dhszclSCd3rA7daMzdL/WN0=)
2: inFQB06m_dHoTdleCwaDZAfpQRs.crl (hash: 9v1+LnG+DUSojMRnEZyeUp2Mx6xNCokTjF4w/Wu3ICU=)
3: swlD7NexiqeUhjpippjXSrPfBRU.roa (hash: a8BMuK2ewbTVEG8qjtK3NV+IeXc5gmKfF4oUMOgajuI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:77:83:bd:9d:b9:56:16:a1:15:c9:55:40:ff:6d:3e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Validity
Not Before: Nov 12 10:01:53 2025 GMT
Not After : Nov 13 10:01:53 2025 GMT
Subject: CN=c3e07abcfccc984109bfe14daedcd4f93ea8f532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:84:f0:61:fb:45:19:d2:3f:99:b0:e8:ce:46:
1c:9e:96:64:44:8f:ba:4f:0a:ef:78:11:48:00:5f:
3b:f8:9c:b8:7b:22:d3:c2:d5:39:87:36:9d:44:29:
3d:36:0c:9e:3d:c4:a2:2a:1b:55:40:79:eb:f5:f2:
49:01:04:5d:ff:f2:36:36:02:4a:7e:5d:b9:f9:16:
bf:21:f9:83:5f:fd:d0:7e:f0:41:46:c6:4f:1f:21:
fb:7d:42:97:33:6e:50:1a:35:5d:35:fd:7e:5a:d0:
4b:15:97:e4:c8:33:8a:b7:d0:8c:70:f3:b8:79:89:
a5:05:c6:8e:3e:4c:07:1e:1c:a1:6b:0d:45:fb:1a:
8e:ab:6c:ec:7a:55:c7:b9:f5:f0:d6:62:09:f3:3a:
cc:d8:fb:c7:94:a0:8d:63:bc:45:c7:6f:79:49:5d:
53:f2:08:19:63:a3:5e:3e:79:1f:73:03:99:bf:79:
5c:a9:59:57:e5:c4:3e:d2:ac:43:13:ab:e9:0a:0f:
92:4b:52:21:86:47:7e:a5:69:30:96:2e:8a:f2:97:
77:81:e3:ba:ed:b4:3b:46:d9:43:84:95:7d:8a:d3:
49:1b:69:1b:f0:bf:bc:1f:a6:15:68:cf:d8:cf:88:
32:1d:62:4a:e0:ba:e8:96:35:55:b2:ef:a1:d0:63:
a8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E0:7A:BC:FC:CC:98:41:09:BF:E1:4D:AE:DC:D4:F9:3E:A8:F5:32
X509v3 Authority Key Identifier:
keyid:8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:23:b9:d2:94:1c:c2:5d:06:bc:7c:da:d0:78:a2:df:5f:97:
8c:66:b0:49:f2:5f:08:21:8e:13:43:48:a6:57:22:ca:41:bd:
d6:f9:91:33:e9:8f:7a:b3:31:e6:b8:92:7b:10:9a:6f:5a:b7:
d8:72:a9:17:46:b6:4e:e3:1f:40:6a:16:a0:c7:78:ab:2a:ff:
0d:c7:b6:06:18:55:45:e4:db:2a:b3:30:31:db:a2:5e:bf:23:
28:c1:76:27:ef:1f:8d:01:f9:9c:01:39:f4:c5:6f:3a:78:43:
b4:4a:70:45:b5:95:d7:8d:1d:68:80:94:83:66:b9:05:42:cd:
c8:b8:5c:bc:0b:30:39:eb:47:28:d1:2a:24:91:23:3c:be:9f:
b9:89:6f:bd:e4:01:84:a9:5c:9e:69:c6:21:32:be:13:ec:3a:
74:21:93:2e:54:d2:0c:ac:52:c9:5b:b2:8f:fb:26:8a:f0:78:
12:ca:a5:81:bd:7d:e5:d1:5d:50:88:85:e6:28:58:8c:5d:13:
85:46:56:eb:f7:ba:43:81:d3:82:94:f4:03:6b:04:38:b4:64:
87:61:b1:5e:14:59:33:4c:a3:58:f4:bb:c6:34:f3:38:79:91:
15:84:ca:c2:ee:07:bb:11:9f:59:57:68:4a:57:2f:e9:5d:8d:
cf:0c:31:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:56:42 2026 by rpki-client