Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
File: Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft (raw, json)
Hash identifier: ldlM6Z/Erz4VEJDcZQSOrH+BpwSiXO58EPoEt4bbD0o=
Subject key identifier: 82:48:EA:12:B1:17:60:B4:17:94:7E:F6:4C:9A:42:62:7D:BB:CB:C7
Authority key identifier: 43:6C:7A:A3:50:28:25:A6:8B:37:45:BB:3D:60:72:73:1F:E5:87:2C
Certificate issuer: /CN=436c7aa3502825a68b3745bb3d6072731fe5872c
Certificate serial: 019B44377EDFD7F6D6FBDC9CE26B8D79037B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
Manifest number: 074A
Signing time: Mon 22 Dec 2025 04:00:46 +0000
Manifest this update: Mon 22 Dec 2025 04:00:46 +0000
Manifest next update: Tue 23 Dec 2025 04:00:46 +0000
Files and hashes: 1: Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl (hash: OpcOIsFVcdGqZrn9XN1dYaoGgX587ARn8a3X5my26ao=)
2: fiGpYaULVSGddPa40kO95drtEI4.roa (hash: hSGW2kYFHKKsMMUOHTMd5Mel06lDgF+QorDCIkRAx3Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:44:37:7e:df:d7:f6:d6:fb:dc:9c:e2:6b:8d:79:03:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=436c7aa3502825a68b3745bb3d6072731fe5872c
Validity
Not Before: Dec 22 04:00:46 2025 GMT
Not After : Dec 23 04:00:46 2025 GMT
Subject: CN=8248ea12b11760b417947ef64c9a42627dbbcbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0b:37:79:54:7e:b3:9d:46:f5:cd:53:c0:d7:
01:92:86:45:0a:e1:69:1d:d0:62:0d:15:a7:c0:a1:
f4:3a:05:42:56:b3:be:4d:58:2c:4d:cf:69:db:73:
b4:32:e2:35:3f:4d:6a:6a:6e:44:91:9c:f8:ad:ba:
f8:e4:ba:50:66:dc:a4:db:13:2a:97:0d:b7:38:35:
67:4a:a8:14:01:54:e2:88:c8:4b:a2:d4:41:c4:78:
67:e9:9c:08:6b:53:2c:56:05:33:19:7d:f9:3f:d5:
bb:21:fb:63:df:83:88:0a:83:70:e1:cf:82:ba:7e:
13:33:c7:c9:d4:f5:81:27:71:77:aa:9d:4c:f8:bb:
96:dd:0f:62:47:c1:36:1c:db:d3:47:0c:c3:90:9a:
d7:93:a7:5d:82:63:5f:f3:41:47:a0:46:f1:bb:6c:
74:9b:40:84:b2:20:2c:eb:78:45:2a:bb:c4:af:a3:
cb:9e:ad:b4:ee:48:37:3d:86:f9:89:76:de:29:cf:
66:6c:18:45:f0:56:c8:dd:8c:a4:db:1d:3e:89:84:
73:b8:f4:7a:9e:b3:d3:6d:22:c2:d9:a2:e7:0d:16:
b7:23:cf:8e:5a:f8:d3:49:49:29:95:55:41:45:d0:
86:ef:1a:27:53:2a:61:a8:db:1c:83:39:d5:4f:0c:
92:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:48:EA:12:B1:17:60:B4:17:94:7E:F6:4C:9A:42:62:7D:BB:CB:C7
X509v3 Authority Key Identifier:
keyid:43:6C:7A:A3:50:28:25:A6:8B:37:45:BB:3D:60:72:73:1F:E5:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8c:04:01:05:93:fe:a7:86:46:b5:d6:21:b7:88:5d:ad:fa:
36:dd:2e:41:62:98:95:02:4d:3f:c6:2a:4c:b7:94:89:fd:3e:
1c:43:e3:16:78:f3:c4:75:59:98:5c:a0:a5:a4:cc:96:0a:5e:
d2:51:dd:ab:a8:5e:64:f5:46:90:52:63:b6:9b:e3:4d:af:97:
72:2c:02:05:e4:e7:7d:8b:9d:60:96:84:3e:02:6c:a0:ca:2c:
1c:d4:9e:01:10:e0:53:45:5e:5e:cb:3c:04:e6:4e:f7:52:97:
79:bf:3d:b0:73:0e:6a:4d:88:6e:35:ed:ac:05:73:00:4a:be:
45:e5:f6:df:a4:e9:e0:19:1c:50:63:10:9b:ad:57:1d:8c:30:
a9:66:59:69:42:f3:cf:f1:a2:b9:91:84:00:4f:a4:ad:05:37:
9e:ca:0a:2b:c7:b1:a2:c9:eb:d9:d4:86:c9:50:4f:8d:f6:39:
96:c5:74:1b:9d:46:59:16:c7:16:cb:ad:38:59:05:a9:d5:c9:
64:94:8b:51:13:97:4b:61:67:a7:cd:ae:60:30:99:c9:ff:1e:
94:49:f6:d9:8c:20:85:dc:7f:f0:93:cd:e8:58:e0:a6:93:ea:
5d:a8:15:ee:3a:86:c3:c3:8a:1e:99:2d:34:7d:ae:0c:4d:0d:
83:b1:30:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:21:00 2026 by rpki-client