Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
File: 7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft (raw, json)
Hash identifier: wMEC/8GRwdFSTyDmKF+R8xryvje04T1yqJJ4oEU9FxY=
Subject key identifier: 0D:58:AB:F9:25:76:25:94:C5:B3:20:12:68:8B:80:4D:41:12:A1:08
Authority key identifier: EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
Certificate issuer: /CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Certificate serial: 019B262D2A426ECC8903914D65C414A91EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
Manifest number: 08E8
Signing time: Tue 16 Dec 2025 08:00:52 +0000
Manifest this update: Tue 16 Dec 2025 08:00:52 +0000
Manifest next update: Wed 17 Dec 2025 08:00:52 +0000
Files and hashes: 1: 7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl (hash: sD8+/GpXHp8qLKVEAgNX7KgXsRNLThDAKTyXhN14yfA=)
2: xAkaLP7SkRQoBd-TYEf0fakBydQ.roa (hash: lfN1/uTbDMdDmb+tGMgvNHV7ezOmGfmodPA/bpTlm38=)
3: zeqX-4ngsCGD2Y4pwGbqJh4HQYw.roa (hash: KAYfqgoq5ZBvonKqM43MFg2S2Gi1Jp8WijPkzVbT/lo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:26:2d:2a:42:6e:cc:89:03:91:4d:65:c4:14:a9:1e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Validity
Not Before: Dec 16 08:00:52 2025 GMT
Not After : Dec 17 08:00:52 2025 GMT
Subject: CN=0d58abf925762594c5b32012688b804d4112a108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:fa:a5:7d:d6:b8:93:05:e8:88:58:36:43:
b0:1e:fd:11:f3:df:49:52:28:24:7f:95:03:00:77:
4b:d0:40:04:dd:fa:e6:b3:d3:30:5c:91:b0:a9:68:
e8:ff:45:8d:fe:cb:2b:e7:cf:07:f5:ca:63:5a:bc:
1e:9b:9b:f7:b9:c7:9f:72:14:1b:a9:18:8b:cd:b7:
28:a1:f1:d9:74:87:b7:f0:56:0f:e1:f9:2c:6f:6a:
00:87:f1:07:dd:6a:af:76:8e:cb:21:ff:ad:31:15:
b7:d2:ce:83:95:06:08:7e:20:35:da:b1:1a:14:b3:
94:62:20:f1:37:7f:f7:a9:53:1e:7a:85:1b:cc:25:
e3:04:82:21:1d:18:bc:b0:3c:b7:23:d4:eb:3a:c9:
b4:8b:86:b5:25:67:f9:28:5a:af:cb:64:a0:91:34:
1d:1a:94:55:4a:40:60:d8:15:38:9e:61:4c:3a:7b:
21:8e:02:0e:c3:b3:75:17:0a:a8:aa:85:07:76:02:
b5:04:b6:2e:3e:6c:f4:2a:77:55:4b:3c:32:f4:0b:
58:a5:f1:a8:55:be:73:96:65:99:ff:e5:18:5a:63:
5c:fe:6d:c6:89:56:e3:6c:0b:81:11:ae:ef:7a:3e:
82:8d:b5:6c:e9:4f:70:59:16:a5:35:46:73:9d:0b:
e6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:58:AB:F9:25:76:25:94:C5:B3:20:12:68:8B:80:4D:41:12:A1:08
X509v3 Authority Key Identifier:
keyid:EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e6:dc:06:91:b8:d8:5d:6a:d0:f1:f4:b7:54:06:7c:76:14:
bc:d9:d7:fc:e0:08:67:e4:1f:15:c8:d4:75:2d:fd:3b:59:60:
30:99:91:93:1e:f3:02:8a:55:ad:20:7e:60:cd:72:0f:21:7c:
a6:6d:5e:91:61:4f:f9:ec:be:72:1e:26:e7:92:15:6f:14:47:
c5:33:a7:31:ae:39:20:e2:f4:f7:83:86:9c:c7:4b:52:b9:8c:
74:b4:c3:6f:53:4c:4c:8e:4c:c3:09:77:1f:bc:28:e7:d0:cc:
89:a7:75:a7:d4:76:99:6f:99:4a:f5:e9:cc:26:71:d8:3f:c3:
5f:ae:b3:88:42:0b:a3:c1:8e:ea:80:c0:a8:9d:7b:d8:62:52:
a1:a8:d7:48:87:5f:4a:af:c9:13:47:bd:62:53:17:9e:ab:5d:
7b:c0:b0:8a:41:e9:eb:e3:95:4f:89:42:48:77:8a:6b:64:25:
ef:bb:4f:e2:25:bc:79:87:93:9a:23:89:04:82:b7:8e:e8:a0:
46:fc:83:11:3e:a8:90:ba:eb:3b:19:f0:e3:c9:37:92:24:55:
cd:63:a5:b5:f6:77:b8:00:49:da:1d:a6:67:49:a5:65:86:ce:
e0:ba:8b:42:cf:00:4d:a0:91:af:57:85:aa:67:ed:be:f4:4b:
4e:fd:04:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsmLSpCbsyJA5FNZcQUqR6/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmM2VlMzFkMmYwZWYxMDMyOTZkZGVjM2M2NmIwN2EzZjQ0
MmFjOTgwHhcNMjUxMjE2MDgwMDUyWhcNMjUxMjE3MDgwMDUyWjAzMTEwLwYDVQQD
EygwZDU4YWJmOTI1NzYyNTk0YzViMzIwMTI2ODhiODA0ZDQxMTJhMTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw/6pX3WuJMF6IhYNkOwHv0R899J
Uigkf5UDAHdL0EAE3frms9MwXJGwqWjo/0WN/ssr588H9cpjWrwem5v3ucefchQb
qRiLzbcoofHZdIe38FYP4fksb2oAh/EH3Wqvdo7LIf+tMRW30s6DlQYIfiA12rEa
FLOUYiDxN3/3qVMeeoUbzCXjBIIhHRi8sDy3I9TrOsm0i4a1JWf5KFqvy2SgkTQd
GpRVSkBg2BU4nmFMOnshjgIOw7N1FwqoqoUHdgK1BLYuPmz0KndVSzwy9AtYpfGo
Vb5zlmWZ/+UYWmNc/m3GiVbjbAuBEa7vej6CjbVs6U9wWRalNUZznQvmwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1Yq/kldiWUxbMgEmiLgE1BEqEIMB8GA1UdIwQY
MBaAFO8+4x0vDvEDKW3ew8ZrB6P0QqyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3o3akhTOE84UU1wYmQ3RHhtc0hvX1JDckpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85OTBjYTktNmQ0Yy00OTQ2LWI3ZjMt
NzQ4ZDYxNzNiNmExLzEvN3o3akhTOE84UU1wYmQ3RHhtc0hvX1JDckpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS85OTBjYTktNmQ0Yy00OTQ2LWI3ZjMtNzQ4ZDYxNzNiNmEx
LzEvN3o3akhTOE84UU1wYmQ3RHhtc0hvX1JDckpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmObcBpG4
2F1q0PH0t1QGfHYUvNnX/OAIZ+QfFcjUdS39O1lgMJmRkx7zAopVrSB+YM1yDyF8
pm1ekWFP+ey+ch4m55IVbxRHxTOnMa45IOL094OGnMdLUrmMdLTDb1NMTI5Mwwl3
H7wo59DMiad1p9R2mW+ZSvXpzCZx2D/DX66ziEILo8GO6oDAqJ172GJSoajXSIdf
Sq/JE0e9YlMXnqtde8CwikHp6+OVT4lCSHeKa2Ql77tP4iW8eYeTmiOJBIK3juig
RvyDET6okLrrOxnw48k3kiRVzWOltfZ3uABJ2h2mZ0mlZYbO4LqLQs8ATaCRr1eF
qmftvvRLTv0EjA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:35:43 2026 by rpki-client