Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
File: PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft (raw, json)
Hash identifier: MUgv15ch7jTfGcN+0Qov8XtvZFdE1gVy51aprBd/TBw=
Subject key identifier: 0F:24:29:15:23:4B:E2:A3:A7:0F:67:D1:5C:95:59:23:2F:23:5E:27
Authority key identifier: 3E:A9:9F:00:00:0B:EE:B9:F1:B2:85:4B:A5:0E:C7:B8:81:26:DB:A9
Certificate issuer: /CN=3ea99f00000beeb9f1b2854ba50ec7b88126dba9
Certificate serial: 019B066CD46EE6E008A12075BFC382D37162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
Manifest number: 08FF
Signing time: Wed 10 Dec 2025 04:02:34 +0000
Manifest this update: Wed 10 Dec 2025 04:02:34 +0000
Manifest next update: Thu 11 Dec 2025 04:02:34 +0000
Files and hashes: 1: FNcoFmyMsrmKFW3pVuTLoiKb9Y0.roa (hash: L2M1ZIYqNE7da9VzHmMG0LiaV1K9e8NQgXmk4Xn6knE=)
2: PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl (hash: /VlT/0VfaQxLizyTO/fUmTQTfZOGtOW13tRst3uLmLw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:06:6c:d4:6e:e6:e0:08:a1:20:75:bf:c3:82:d3:71:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea99f00000beeb9f1b2854ba50ec7b88126dba9
Validity
Not Before: Dec 10 04:02:34 2025 GMT
Not After : Dec 11 04:02:34 2025 GMT
Subject: CN=0f242915234be2a3a70f67d15c9559232f235e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6e:8a:36:24:6d:93:c1:70:50:f7:20:b5:47:
dc:51:95:0d:17:94:6c:90:6a:e5:73:d5:50:f8:5f:
32:6c:b5:8d:98:10:3b:04:cb:88:9d:0c:61:4c:c7:
a5:5c:9b:28:99:c4:85:58:4d:f5:91:ad:a6:80:0d:
65:b1:65:18:ee:9d:2b:4c:ec:a0:6a:db:d0:be:d9:
33:9c:a5:c3:3b:8d:c8:cc:07:d6:8f:20:81:09:c7:
8e:c4:41:0f:8c:d0:48:12:14:cf:9a:87:b7:9c:22:
16:de:a1:da:c3:5d:b5:bc:47:f7:5c:be:8e:fc:c3:
4c:f8:17:28:70:93:b1:51:ea:3b:43:e9:d9:dd:1c:
9c:a1:cb:0c:78:a5:14:bf:e5:f2:32:f6:82:34:bb:
ba:31:fe:fe:91:c5:8a:31:14:36:ab:d3:14:e6:e6:
90:f7:85:f9:27:57:a7:18:54:cc:87:44:ed:b6:d0:
9e:44:f1:03:c8:d1:0d:3a:93:f3:b1:02:8c:f1:a8:
88:1d:af:9f:9a:de:d2:cf:29:9c:94:f6:e6:81:7e:
17:6e:c1:ff:8e:4d:d0:10:38:79:57:e5:15:a6:5c:
9b:58:1b:28:34:cb:23:24:63:5a:a0:3b:d5:1f:51:
a7:b7:a6:25:80:56:98:6a:e3:1e:94:bc:69:c2:4c:
a2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:24:29:15:23:4B:E2:A3:A7:0F:67:D1:5C:95:59:23:2F:23:5E:27
X509v3 Authority Key Identifier:
keyid:3E:A9:9F:00:00:0B:EE:B9:F1:B2:85:4B:A5:0E:C7:B8:81:26:DB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:28:9a:44:36:c4:d5:14:9b:b3:a6:f8:d3:d3:dc:dc:5f:7b:
7f:48:37:cb:e5:d8:79:a6:79:98:7b:13:69:d6:e8:57:ed:ae:
4f:e4:34:c7:76:9e:0b:7a:af:52:82:40:d1:63:af:fd:7a:3c:
e2:f3:08:97:86:14:f6:35:92:50:b1:00:42:a0:42:6b:b9:1e:
31:a8:86:0d:2b:30:ea:59:3b:65:6b:e2:85:43:c9:8b:22:57:
83:b3:e7:a8:4b:17:10:82:c3:53:ea:88:38:c4:81:5c:be:22:
6d:0d:ee:7b:8f:91:89:d0:b4:e7:31:19:43:0e:fa:ab:fc:b6:
bf:af:ff:9e:73:cb:de:32:e3:60:b5:a9:a7:1b:d7:aa:bb:ac:
ad:31:5d:9e:36:5b:32:99:3a:b9:78:36:fc:60:39:05:9e:e4:
db:f3:82:22:8d:ee:1c:f9:82:4c:56:92:3a:b2:ea:d7:c6:94:
0d:b8:b5:61:8b:d4:95:42:d7:39:16:be:09:75:29:f2:15:2f:
8d:8c:40:58:eb:1c:0a:5c:59:94:28:ba:a7:67:fc:be:df:d6:
9b:b8:2f:37:61:94:68:28:65:f9:14:f8:e9:e3:53:71:30:66:
ff:0f:22:07:08:12:12:0d:5c:de:a2:80:ba:a4:5e:88:4f:30:
85:77:99:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:36 2026 by rpki-client