Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
File: hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft (raw, json)
Hash identifier: KfEbJIG2xFnw2rYd8PpE5jkdNkVLEBp7nU9hr/AMiMQ=
Subject key identifier: 6D:D8:6D:59:54:54:6A:7E:BC:4E:D1:CB:2B:17:A5:EA:78:0A:61:14
Authority key identifier: 84:AC:85:1A:2B:FA:AE:15:E8:5E:16:2B:AA:07:88:C8:59:12:A9:32
Certificate issuer: /CN=84ac851a2bfaae15e85e162baa0788c85912a932
Certificate serial: 019ABEF6C736B559E4FF99D7EC24C48C2CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
Manifest number: 1379
Signing time: Wed 26 Nov 2025 07:00:35 +0000
Manifest this update: Wed 26 Nov 2025 07:00:35 +0000
Manifest next update: Thu 27 Nov 2025 07:00:35 +0000
Files and hashes: 1: hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl (hash: 64G7ouwfvZ2seFbaQO88FLvsJAwibayI70bRmROzGNY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:be:f6:c7:36:b5:59:e4:ff:99:d7:ec:24:c4:8c:2c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ac851a2bfaae15e85e162baa0788c85912a932
Validity
Not Before: Nov 26 07:00:35 2025 GMT
Not After : Nov 27 07:00:35 2025 GMT
Subject: CN=6dd86d5954546a7ebc4ed1cb2b17a5ea780a6114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e5:96:47:ee:bc:e6:50:98:a1:32:c2:40:b8:
3a:22:b4:f1:a1:89:bc:bf:41:f1:d2:53:31:a5:9e:
63:aa:5a:83:5e:16:64:0d:75:66:ff:50:2a:98:2d:
d2:a3:66:08:45:4a:43:ec:7a:bb:25:4e:3c:6b:b5:
fe:0d:93:9d:e7:1d:49:91:43:b6:91:56:43:35:81:
95:ac:7f:06:3a:bd:87:72:d9:24:33:0e:cd:4d:72:
a3:cc:cf:dd:4a:52:89:2e:49:96:e5:b2:4b:f7:09:
de:38:95:1d:0e:ed:30:db:1d:bf:60:d5:45:74:66:
fd:b2:3f:53:fc:26:04:1e:11:39:f1:91:66:4b:e8:
ab:d4:fa:3f:87:b1:ad:1c:1f:5e:2c:40:92:b2:2c:
cf:51:1a:3f:80:7b:f0:7d:71:2a:1e:9e:af:e5:f1:
42:0d:81:8d:f0:bc:de:ac:b5:c9:06:1d:fd:2a:0e:
d8:7b:48:2e:1d:40:a2:73:26:55:0c:61:12:10:41:
2c:a3:2f:5a:af:49:dc:e1:19:bf:bf:b0:ee:f2:ad:
24:b5:c9:0f:01:d4:d3:5e:52:ef:dc:c1:84:7d:7e:
ab:59:a8:c9:50:b8:c3:fe:d0:7a:21:a6:5a:81:1e:
b2:02:ee:40:a1:bb:63:7b:29:3d:1e:4b:d4:1d:76:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D8:6D:59:54:54:6A:7E:BC:4E:D1:CB:2B:17:A5:EA:78:0A:61:14
X509v3 Authority Key Identifier:
keyid:84:AC:85:1A:2B:FA:AE:15:E8:5E:16:2B:AA:07:88:C8:59:12:A9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8f:ea:a5:6a:c1:71:18:fc:47:07:fc:8d:fc:6c:3a:bd:49:
b3:b0:60:db:de:9b:f1:fe:fa:bd:82:7b:ec:b4:7e:2c:00:46:
fb:48:24:18:80:65:b1:e8:eb:c2:b8:54:ce:e2:f7:fb:0c:54:
75:e2:52:a5:1c:a9:ad:9a:78:17:6b:a2:d5:76:2d:c7:fe:2f:
d4:98:59:97:0a:55:fd:02:f7:aa:67:6d:7c:4d:3f:0a:fd:66:
a2:21:d0:1e:50:e6:a7:6f:a4:0a:6a:3a:8d:94:67:fd:2a:70:
c3:d8:fa:ac:8f:69:d5:39:83:a2:fb:3e:a3:34:92:54:af:a6:
90:95:64:6d:76:63:10:56:ed:8a:5c:b6:fe:4f:7c:15:bd:fa:
a0:18:7d:7e:d7:6d:2a:e4:ec:93:8b:09:a5:14:49:49:03:b1:
77:0d:7f:f6:1a:e2:1e:30:68:30:a3:fe:95:ad:65:d0:c3:c4:
0e:26:f3:3a:b4:e4:28:6b:c4:f5:6e:01:bf:5b:78:58:5a:2c:
0a:e5:4f:cb:ae:0e:ca:d5:c8:46:7d:cf:eb:3b:9f:2a:56:c6:
cd:56:8a:f9:b3:c1:ae:eb:cc:fa:f2:7c:f6:92:68:58:55:13:
e3:ed:c5:f9:3d:63:8b:34:00:15:50:1e:ba:06:5b:7c:e2:14:
ca:19:a6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:38:04 2026 by rpki-client