Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
File: _VOKrk7E0KLzwKZfifSHRrUV5Xs.mft (raw, json)
Hash identifier: bZdLOUsYFduz/hcqKFrJI9RwX1Cc2kjLk7ZQzw9MJEw=
Subject key identifier: C0:9D:1A:34:42:B5:D9:F0:EB:6B:8F:85:3A:F4:12:7F:CA:BA:C8:FF
Authority key identifier: FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
Certificate issuer: /CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Certificate serial: 019B01454AF4D9EA8BC8D1864DAA15A544E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
Manifest number: 0E02
Signing time: Tue 09 Dec 2025 04:01:16 +0000
Manifest this update: Tue 09 Dec 2025 04:01:16 +0000
Manifest next update: Wed 10 Dec 2025 04:01:16 +0000
Files and hashes: 1: YD_zTsYXZHwOdGihQ9GGGJD2yQ4.roa (hash: MiVKISLoY4yTYfozn6ttBVBGLS9pCG7wKWYNtkMouG8=)
2: _VOKrk7E0KLzwKZfifSHRrUV5Xs.crl (hash: kD4e9EFmlpl0AmAsK7zAwkNbu6gf2eT11s/NzR0ki9I=)
3: wcV-PUcCwSD1_bZOyNtF92C9c9E.roa (hash: YHNUenZzn6rHgL2dA2+pXb/I7NXwkpjXztGNWnA0xb0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:01:45:4a:f4:d9:ea:8b:c8:d1:86:4d:aa:15:a5:44:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Validity
Not Before: Dec 9 04:01:16 2025 GMT
Not After : Dec 10 04:01:16 2025 GMT
Subject: CN=c09d1a3442b5d9f0eb6b8f853af4127fcabac8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:25:56:64:52:65:ea:97:6d:7e:a8:15:7d:
a0:0e:a6:94:0e:38:81:e5:29:af:69:ef:86:68:2a:
79:f6:4f:e7:7b:34:d0:73:9a:6b:cf:48:db:65:74:
a3:29:b4:ac:91:90:80:22:a6:bd:64:59:fa:56:67:
b5:7d:9e:3e:d3:c3:9d:84:d6:3e:b4:db:56:6a:1f:
5f:9c:57:e7:a3:2e:8a:8d:50:75:7a:aa:d1:d7:11:
34:09:ee:53:b1:ed:97:2e:74:66:93:95:93:0b:79:
ae:ea:36:ba:e3:d5:72:74:64:32:ae:5b:5e:74:a1:
63:d4:79:41:30:32:78:c6:fa:14:7e:80:75:d6:82:
a2:9c:0b:3a:bb:14:dd:28:0b:bc:87:a3:ed:d0:74:
34:ba:de:89:0d:10:0d:a1:2c:59:a4:e0:02:c3:de:
67:58:c7:c3:e5:82:91:68:e5:84:cc:cc:7a:28:92:
a7:22:a6:6c:24:57:bd:aa:6c:cc:40:9d:03:3d:90:
31:74:68:fd:a7:f1:84:f9:ea:7f:4f:5e:6d:af:29:
a7:00:66:5c:73:22:c2:38:2e:90:a5:c3:f7:41:21:
ab:31:74:c1:79:37:87:d7:2f:85:1f:0d:a0:91:a2:
c2:6b:59:56:6f:9d:dd:3c:90:9e:67:79:92:72:1a:
e3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9D:1A:34:42:B5:D9:F0:EB:6B:8F:85:3A:F4:12:7F:CA:BA:C8:FF
X509v3 Authority Key Identifier:
keyid:FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:cb:d9:b4:1b:0e:46:f3:86:aa:92:df:24:c7:85:a5:ea:2d:
fd:7a:e6:ad:9b:4e:f6:ed:3c:0b:90:f9:7b:33:ed:a3:dc:c1:
88:4e:9f:99:a1:7b:ae:1d:06:c9:42:95:7f:de:9b:05:e1:08:
25:ea:84:f9:60:15:cc:ed:32:e3:26:30:ed:30:05:f6:5d:47:
1f:c5:cc:81:8d:4e:8b:25:99:fa:c0:f4:2e:a9:23:cb:cc:c3:
71:f7:87:ff:2a:f7:6a:72:16:63:ff:aa:4d:5e:26:23:0c:b3:
f3:5b:3d:cb:7a:1d:ad:ae:92:01:2e:13:5e:0d:d9:b2:87:a7:
38:95:09:38:81:17:58:a1:e0:7c:c0:3b:0a:04:e2:6e:65:4c:
91:fb:0e:82:5f:a7:25:e5:c8:3c:f0:32:c1:bf:aa:10:4c:1b:
8e:9c:94:5b:7b:13:36:16:b1:f7:5a:72:0e:58:c2:fb:89:5e:
52:e8:3f:ab:12:9c:81:2e:ae:12:64:8a:72:47:a0:b2:90:22:
29:d3:48:7f:54:3a:84:9a:67:db:a0:79:75:0e:97:55:50:c2:
af:5d:d2:6f:31:d7:9b:a6:c2:51:fd:5d:3e:13:d3:39:9d:ab:
18:e1:e0:92:f1:0a:9f:ae:69:a5:50:1e:e6:57:00:c8:1f:91:
fd:f1:fe:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:29:13 2026 by rpki-client