Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
File: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft (raw, json)
Hash identifier: bjiKlGNHiEA8/4L7n9aoOOmPB7r1p6ai2ijJpyIOsxU=
Subject key identifier: C9:23:B7:F7:71:C5:75:40:80:7E:AA:D8:92:F5:93:5B:96:78:7F:5F
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 019B725984A9583D27990A3D044E9478C9C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
Manifest number: 13C3
Signing time: Wed 31 Dec 2025 03:00:27 +0000
Manifest this update: Wed 31 Dec 2025 03:00:27 +0000
Manifest next update: Thu 01 Jan 2026 03:00:27 +0000
Files and hashes: 1: 7dKRnkH_61BL1vNIXpiNlOS77-4.roa (hash: ZND1wl0u3GvOFJlJYyjSu+QQ5WpYrODyfJd7rSZepHM=)
2: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl (hash: P+qqrXRtYC6Zn2jZl7P9pkn4ELIzAol+MV+/dSZLQp0=)
3: kHYyFPjohiyIQJY5w_HOlt1K3Fg.roa (hash: jgmI7LdVC9rYIzkr/aHKrpmNE8aaRzqVTYnNDaZBV5I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:72:59:84:a9:58:3d:27:99:0a:3d:04:4e:94:78:c9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Dec 31 03:00:27 2025 GMT
Not After : Jan 1 03:00:27 2026 GMT
Subject: CN=c923b7f771c57540807eaad892f5935b96787f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d9:c4:c7:fa:f3:98:8c:e6:0b:fc:ba:1e:db:
9e:14:cb:84:0b:62:ad:3c:83:cf:12:b4:0c:39:42:
f3:c8:75:b8:b1:d5:6b:b9:17:db:19:8c:3a:e1:e9:
c4:c3:90:f7:19:fc:f8:d1:86:70:68:80:89:70:76:
dc:d0:da:a6:ba:2c:dd:d1:4e:9d:25:ef:f2:21:42:
97:cd:4b:79:30:fd:55:0f:12:11:86:f2:28:08:cf:
78:6a:12:d0:61:d5:7a:7d:d2:3b:91:46:d1:42:11:
36:62:a5:91:09:d8:9c:24:8d:04:16:11:d8:68:9b:
27:40:f9:a0:40:47:d6:35:a9:37:7f:30:a9:01:73:
8e:3e:1e:e4:7a:1f:ec:83:f0:ba:99:88:e1:eb:3a:
5c:a3:fb:ab:b0:d6:41:c0:ab:a1:10:f6:40:07:99:
7c:39:2a:86:29:ca:29:cf:d4:cd:ab:6d:56:26:81:
30:a4:ff:97:da:11:31:57:c2:78:a2:cc:65:ea:c0:
f4:9c:71:76:a2:52:46:ba:ea:b4:37:e2:b3:f0:5f:
24:fa:2c:2c:73:a4:5b:36:87:99:7f:99:dd:d2:0c:
9d:eb:7f:79:3a:c4:6f:e2:f8:23:09:3b:79:6a:1f:
32:06:8d:15:78:9e:66:e6:e5:5f:0d:2b:77:ff:de:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:23:B7:F7:71:C5:75:40:80:7E:AA:D8:92:F5:93:5B:96:78:7F:5F
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:43:fa:c8:ed:a0:b8:64:24:89:9e:e6:16:bd:63:32:12:0e:
d6:ce:fb:c5:8e:5c:0b:6b:33:9a:10:df:07:0d:9e:de:71:ec:
be:02:8d:1a:a8:66:ad:5a:b7:75:bd:f8:d2:78:bf:13:82:81:
e1:85:d5:2f:aa:06:a2:6b:0d:34:4d:1b:ce:01:37:c6:6f:c5:
43:4b:74:a2:7d:71:50:09:2e:28:70:8b:1f:0a:7e:98:10:b5:
82:43:69:90:6f:09:df:77:5e:b2:51:70:ea:44:6a:60:b3:e8:
e7:70:a6:17:65:cd:68:54:a2:a7:99:a3:1f:f3:0e:ad:26:b2:
3f:2e:f8:15:e2:71:c6:0b:f7:62:dc:47:31:15:3f:d6:0c:38:
8e:41:ce:36:1a:75:9b:e2:f7:d8:b5:a5:ee:3f:3c:bf:d0:d5:
55:6f:a0:de:34:9d:b8:cd:d2:28:a8:2d:4b:3d:ad:fe:67:ca:
8a:1c:b6:b2:b4:5f:82:a3:96:72:2d:dc:69:86:29:1e:46:35:
fb:8c:f1:25:1d:c8:89:47:7e:fc:ba:a9:2e:9b:4a:60:74:95:
31:90:4b:ef:77:c8:91:dd:d3:02:c2:56:d8:46:76:16:e0:5c:
22:28:54:4c:c2:ff:42:d3:e2:72:74:dc:d6:9e:5f:62:c5:df:
f4:a2:66:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:10:52 2026 by rpki-client