Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
File: tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft (raw, json)
Hash identifier: bFvHetQMGdWntKOYtVsaa5u5GPZE8MJMBlGSX7CTJTE=
Subject key identifier: 6C:BD:CB:50:DD:22:08:40:A0:8A:AF:E9:86:13:68:C8:A5:18:19:CC
Authority key identifier: B4:0D:84:9C:C4:3B:73:2D:AB:66:41:FC:6F:D5:A4:DB:3A:2D:B9:47
Certificate issuer: /CN=b40d849cc43b732dab6641fc6fd5a4db3a2db947
Certificate serial: 019B028F6670249DED769CCA5BC59AC4BCB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
Manifest number: 0B02
Signing time: Tue 09 Dec 2025 10:01:50 +0000
Manifest this update: Tue 09 Dec 2025 10:01:50 +0000
Manifest next update: Wed 10 Dec 2025 10:01:50 +0000
Files and hashes: 1: tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl (hash: SseQ2uYjFmrZKRP04Mkrgkh7FDP9QzvkMg1MHppOimM=)
2: x7aEXzfMRzlzp6VorB64R028Jvk.roa (hash: 3aOt7CTs1p/zJJSbWQR2//U36Y0+Zh2Kxl00BzPCEXA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:02:8f:66:70:24:9d:ed:76:9c:ca:5b:c5:9a:c4:bc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d849cc43b732dab6641fc6fd5a4db3a2db947
Validity
Not Before: Dec 9 10:01:50 2025 GMT
Not After : Dec 10 10:01:50 2025 GMT
Subject: CN=6cbdcb50dd220840a08aafe9861368c8a51819cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e9:b1:25:a6:9f:99:93:d4:40:78:0d:4a:f7:
0d:22:10:78:cb:0d:54:4b:3d:68:e0:a4:66:e0:42:
ad:d9:84:40:55:ec:1d:db:5b:74:e1:d4:9f:0d:5f:
91:1a:ac:59:3a:ec:d0:eb:30:40:3d:5c:a0:f1:41:
38:57:e4:2d:1d:aa:db:ec:e2:08:44:ec:12:2d:e7:
e6:43:3e:8e:c2:95:fb:88:d8:10:41:4c:de:ea:f6:
10:6f:d4:5c:f7:d7:47:d5:27:77:98:c7:e9:f9:d6:
b6:3f:f8:f5:de:b9:28:5a:2b:31:22:3b:c8:a6:99:
59:c3:17:6b:9e:12:97:cf:4a:fb:5c:f9:69:57:c1:
4c:f9:7e:6e:f8:0c:e7:64:98:8a:e5:70:bd:68:02:
46:df:fa:33:d7:1c:99:26:41:76:98:bc:fc:4a:35:
a1:96:5c:45:a4:d7:8f:fc:e2:f4:05:18:1e:df:33:
e4:0c:c4:76:df:0a:85:52:ea:d4:8e:78:26:16:0f:
76:9b:dd:fa:39:69:49:c3:ff:32:fa:24:0e:ef:38:
6a:a2:c3:a3:74:9a:f1:e4:18:8b:91:8c:34:33:36:
89:55:61:1b:2e:ad:2c:a9:e0:4e:18:aa:3d:70:10:
24:78:77:79:d3:60:07:87:aa:e7:a0:4d:35:65:1e:
49:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BD:CB:50:DD:22:08:40:A0:8A:AF:E9:86:13:68:C8:A5:18:19:CC
X509v3 Authority Key Identifier:
keyid:B4:0D:84:9C:C4:3B:73:2D:AB:66:41:FC:6F:D5:A4:DB:3A:2D:B9:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8a:13:00:a9:b1:a1:f5:e1:9d:71:ee:bf:6e:78:ad:ec:2c:
0f:cd:70:fd:13:1d:c1:83:45:46:69:85:0a:61:79:ff:63:ba:
99:43:a3:3f:0c:80:f4:87:0c:8b:a2:a9:24:99:cc:50:f4:71:
7b:b8:90:d9:21:c5:4b:08:86:7d:d5:47:43:6a:1f:83:99:11:
07:85:a0:89:5d:f3:24:65:73:1d:fb:12:a7:20:41:bf:b4:34:
be:af:47:dd:29:49:fa:d0:14:93:62:81:a2:4a:e8:a3:3e:d9:
28:44:44:89:4c:60:f8:56:6d:30:31:50:53:a8:6d:bb:66:a3:
43:37:ce:14:52:ce:b8:5c:21:80:09:4d:17:ba:02:f1:10:a8:
55:d1:64:0d:90:30:40:fa:23:66:3d:34:d8:71:ff:70:1c:57:
49:63:39:aa:29:ee:94:0c:d7:d8:b6:4e:89:56:83:d7:2c:2f:
23:cd:fb:ea:25:ec:29:94:77:71:b4:e5:6e:a3:ad:43:c2:44:
c1:d5:d3:4b:cf:c8:6a:ec:fd:d5:19:a3:b8:55:c3:7d:3b:c7:
43:32:f1:07:88:88:92:72:c9:26:59:20:86:95:fa:a6:3c:55:
8c:b3:dc:b5:80:75:9a:2a:09:0c:a7:0d:a3:1f:cb:37:ee:61:
77:cd:4d:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsCj2ZwJJ3tdpzKW8WaxLyyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MGQ4NDljYzQzYjczMmRhYjY2NDFmYzZmZDVhNGRiM2Ey
ZGI5NDcwHhcNMjUxMjA5MTAwMTUwWhcNMjUxMjEwMTAwMTUwWjAzMTEwLwYDVQQD
Eyg2Y2JkY2I1MGRkMjIwODQwYTA4YWFmZTk4NjEzNjhjOGE1MTgxOWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+mxJaafmZPUQHgNSvcNIhB4yw1U
Sz1o4KRm4EKt2YRAVewd21t04dSfDV+RGqxZOuzQ6zBAPVyg8UE4V+QtHarb7OII
ROwSLefmQz6OwpX7iNgQQUze6vYQb9Rc99dH1Sd3mMfp+da2P/j13rkoWisxIjvI
pplZwxdrnhKXz0r7XPlpV8FM+X5u+AznZJiK5XC9aAJG3/oz1xyZJkF2mLz8SjWh
llxFpNeP/OL0BRge3zPkDMR23wqFUurUjngmFg92m936OWlJw/8y+iQO7zhqosOj
dJrx5BiLkYw0MzaJVWEbLq0sqeBOGKo9cBAkeHd502AHh6rnoE01ZR5JnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGy9y1DdIghAoIqv6YYTaMilGBnMMB8GA1UdIwQY
MBaAFLQNhJzEO3Mtq2ZB/G/VpNs6LblHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEEyRW5NUTdjeTJyWmtIOGI5V2syem90dVVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xMzRjY2ItYjBhYi00NDZiLTgxNzIt
NjJlMjdjZDFlOTc1LzEvdEEyRW5NUTdjeTJyWmtIOGI5V2syem90dVVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8xMzRjY2ItYjBhYi00NDZiLTgxNzItNjJlMjdjZDFlOTc1
LzEvdEEyRW5NUTdjeTJyWmtIOGI5V2syem90dVVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIoTAKmx
ofXhnXHuv254rewsD81w/RMdwYNFRmmFCmF5/2O6mUOjPwyA9IcMi6KpJJnMUPRx
e7iQ2SHFSwiGfdVHQ2ofg5kRB4WgiV3zJGVzHfsSpyBBv7Q0vq9H3SlJ+tAUk2KB
okrooz7ZKEREiUxg+FZtMDFQU6htu2ajQzfOFFLOuFwhgAlNF7oC8RCoVdFkDZAw
QPojZj002HH/cBxXSWM5qinulAzX2LZOiVaD1ywvI8376iXsKZR3cbTlbqOtQ8JE
wdXTS8/Iauz91RmjuFXDfTvHQzLxB4iIknLJJlkghpX6pjxVjLPctYB1mioJDKcN
ox/LN+5hd81NIQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 22:10:04 2026 by rpki-client