Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft
File: d2pYTSefAHBmo4tesPGOe-22FOs.mft (raw, json)
Hash identifier: LTcJndDyMfUbN7lWu6VdHCklCwScuppE9zRQKsHbERM=
Subject key identifier: F3:28:31:4D:5F:CB:87:58:68:89:68:DA:0D:B3:1F:DF:93:58:87:62
Authority key identifier: 77:6A:58:4D:27:9F:00:70:66:A3:8B:5E:B0:F1:8E:7B:ED:B6:14:EB
Certificate issuer: /CN=776a584d279f007066a38b5eb0f18e7bedb614eb
Certificate serial: 019B44DD3290B0FE2B9777FF846AD71CC9AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft
Manifest number: 178E
Signing time: Mon 22 Dec 2025 07:01:45 +0000
Manifest this update: Mon 22 Dec 2025 07:01:45 +0000
Manifest next update: Tue 23 Dec 2025 07:01:45 +0000
Files and hashes: 1: WUTyK7BrRNi0uHZK_0QCE_Vt8SE.roa (hash: 4x8uT/6JZLvMnikfzpcnGLUs5znzoRWzxY13Odgg+MI=)
2: d2pYTSefAHBmo4tesPGOe-22FOs.crl (hash: ZYVomEnud2hDCXEqYmQqGjG3Mf5NMEiDzSymtePtYys=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:44:dd:32:90:b0:fe:2b:97:77:ff:84:6a:d7:1c:c9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776a584d279f007066a38b5eb0f18e7bedb614eb
Validity
Not Before: Dec 22 07:01:45 2025 GMT
Not After : Dec 23 07:01:45 2025 GMT
Subject: CN=f328314d5fcb8758688968da0db31fdf93588762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4d:af:07:db:20:f1:3a:0e:5e:50:21:7e:fa:
be:21:fb:1e:bc:fb:a0:2e:b4:48:64:4d:71:4f:d4:
cb:b9:5c:19:b8:6d:e3:e5:80:44:85:b0:e1:50:86:
9c:8a:8e:55:02:f5:19:52:bf:4e:71:8d:bd:39:45:
0c:a2:ad:d2:33:64:9d:61:f8:a1:76:22:93:87:a4:
d5:d5:26:55:28:45:62:4f:46:46:89:76:3e:a1:76:
51:58:28:a2:da:f1:d1:12:c4:6a:10:50:ea:41:f2:
1b:5f:82:c0:c0:5f:35:e2:97:d9:cc:6e:e9:b9:92:
a8:3a:e4:5b:28:8b:a8:25:6d:3b:e4:dd:38:3e:bc:
ef:37:82:03:48:70:cf:4b:c1:e8:80:7e:00:c8:14:
6b:01:13:47:a5:75:23:8a:b1:d3:6d:05:2d:57:00:
4c:ed:22:2c:53:53:4e:74:b9:57:bd:02:6d:91:c7:
44:0a:7c:3a:ab:b6:17:ac:11:fc:d2:66:b8:99:25:
93:9a:27:f1:d2:f8:6d:78:33:be:f2:12:20:b1:01:
ae:ff:e7:65:60:84:1c:2f:50:24:6e:d0:7f:b9:b1:
5b:a2:11:04:1b:92:3e:04:6e:16:2e:3b:80:91:8d:
74:9b:cb:42:21:80:36:ca:76:58:fe:23:c9:1e:b3:
90:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:28:31:4D:5F:CB:87:58:68:89:68:DA:0D:B3:1F:DF:93:58:87:62
X509v3 Authority Key Identifier:
keyid:77:6A:58:4D:27:9F:00:70:66:A3:8B:5E:B0:F1:8E:7B:ED:B6:14:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d1:c9:ef:83:2a:bd:cc:e8:92:4c:b2:10:bc:32:ad:c8:50:
c8:ce:6d:dc:aa:83:42:7e:24:86:c8:2e:dd:83:32:0a:5c:23:
cb:78:75:be:cc:5d:34:41:d4:54:9b:14:9a:3e:47:bf:64:de:
c9:cb:85:a3:ce:eb:4c:0b:76:7b:99:e0:f8:f5:d7:b5:78:eb:
4a:3c:09:ca:57:b1:cb:92:84:fe:67:25:29:96:ab:32:32:17:
4e:c7:a2:9f:56:6f:87:92:fe:93:87:82:08:23:64:34:04:23:
30:38:5e:5c:f3:de:40:0f:f4:a6:d8:af:75:c2:83:1f:a9:f2:
5a:b1:da:a2:9f:60:20:63:d3:15:a5:f6:43:01:7a:27:15:66:
34:e9:dc:a6:2f:ea:55:b5:25:44:36:fa:58:db:42:42:3a:af:
14:aa:8b:c8:78:5a:54:93:c5:66:be:15:38:96:27:81:fc:9c:
89:e5:7f:ee:19:56:60:e2:3c:d6:60:17:c6:a9:ca:dd:00:eb:
4b:a1:33:91:0e:e5:96:16:eb:d1:b8:a6:4e:59:39:4e:db:c5:
4b:aa:4a:da:09:c5:1b:9b:d2:4e:1c:3e:30:39:93:4e:1e:a3:
9c:2b:fd:40:f4:71:e4:93:6f:0f:b7:cb:91:db:da:5d:6b:bd:
87:0b:6a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:48:52 2026 by rpki-client