Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
File: P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft (raw, json)
Hash identifier: am8VlGEYHDlr2HN1/1WKnqIi3Z/8oNxeEcGIlvjHbLo=
Subject key identifier: DA:C2:62:0B:84:A7:2C:62:D8:56:6F:24:A7:50:6E:6C:D5:EB:24:4F
Authority key identifier: 3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
Certificate issuer: /CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
Certificate serial: 019B6E46170999E8C4E6666BE0356B8E3618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
Manifest number: 17A4
Signing time: Tue 30 Dec 2025 08:00:45 +0000
Manifest this update: Tue 30 Dec 2025 08:00:45 +0000
Manifest next update: Wed 31 Dec 2025 08:00:45 +0000
Files and hashes: 1: P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl (hash: RaG6U9vtic5KKDzzcLBtxWUnTxvJmB+K4fLN6STqG7E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:6e:46:17:09:99:e8:c4:e6:66:6b:e0:35:6b:8e:36:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
Validity
Not Before: Dec 30 08:00:45 2025 GMT
Not After : Dec 31 08:00:45 2025 GMT
Subject: CN=dac2620b84a72c62d8566f24a7506e6cd5eb244f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:99:79:87:70:34:73:97:21:f7:38:89:43:
9b:b3:d7:bc:29:46:df:da:12:db:f6:d5:a5:d9:5f:
18:cd:3f:31:ba:52:ec:35:a9:43:94:f4:ce:4d:2c:
c9:3b:7b:63:0c:81:da:38:ef:d5:3c:a1:d8:68:50:
d8:32:19:85:2e:61:70:6c:38:eb:2e:1b:7f:db:1c:
b2:b7:37:03:f2:c8:52:2a:da:28:b0:ce:a6:eb:83:
6b:cd:00:d9:d7:46:f3:8e:81:72:41:12:62:41:70:
b2:37:58:70:5e:a4:9c:89:eb:1e:86:3f:0c:0e:5a:
0c:94:fb:ce:b0:06:ba:ed:1a:af:0a:a7:65:e5:cc:
dd:64:71:4f:49:9d:f6:38:4e:85:b5:3a:56:5a:eb:
a0:97:b3:f3:0e:59:b3:8e:d9:3b:53:d6:c0:96:dd:
ed:51:a9:e3:e5:f7:3a:f1:9c:89:31:43:cd:7f:43:
77:df:41:cc:e4:08:66:ec:63:38:d5:87:73:86:74:
11:d6:c6:29:4e:da:93:03:70:1d:aa:71:92:66:c9:
22:61:7c:35:8a:27:3f:1e:25:50:6b:7d:20:f0:3b:
2a:81:76:bc:65:3f:71:f1:6c:17:13:ec:33:7c:5c:
af:d8:ba:c0:51:03:6b:2f:02:4a:54:c3:d6:5f:1d:
52:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C2:62:0B:84:A7:2C:62:D8:56:6F:24:A7:50:6E:6C:D5:EB:24:4F
X509v3 Authority Key Identifier:
keyid:3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:24:f5:a1:e1:49:ed:ab:be:d4:c8:e0:f2:f6:09:8d:c6:a2:
87:9e:fc:e0:7c:4b:b7:aa:cb:cc:ff:95:19:14:98:e1:30:3a:
4d:97:ee:93:18:be:7b:8a:2b:bb:02:6c:d2:b2:73:fd:da:68:
4c:4e:50:26:d2:0f:30:47:02:cb:c5:c4:36:89:36:38:f8:31:
16:6a:f1:f9:c5:74:08:9b:f3:f1:2a:f3:44:53:f1:ee:bb:41:
fe:3d:70:08:7f:9e:b7:1a:06:db:57:ed:ca:05:13:5b:b0:f6:
db:ec:c6:c8:94:47:2c:41:4b:be:63:f6:5c:d3:6c:d4:2f:b7:
4a:75:e5:1f:85:9c:13:a1:39:87:ed:35:8d:a2:0c:88:0d:2b:
54:f8:ce:03:fc:71:3c:13:5d:45:f4:63:5e:d9:ea:6a:ef:d2:
ca:8e:c2:79:94:e7:d1:35:1f:a1:4b:e9:4a:e5:a3:f7:49:5d:
1b:42:e0:df:be:c2:59:36:84:0d:de:11:94:d9:57:36:e7:56:
8b:59:4a:ad:02:e5:2a:1b:67:f6:21:6d:95:c1:cb:b2:82:2a:
db:e5:17:d7:e8:31:82:a9:7f:d6:38:97:ef:5a:48:b5:17:f5:
f0:5f:da:42:1a:ee:7c:08:e9:47:fa:e5:fd:c6:7a:10:d9:6c:
8a:d5:9b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:15:55 2026 by rpki-client