Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
File: 2ckTFygydpN9Q29LIW3No---Kog.mft (raw, json)
Hash identifier: pulpTh1s3NqgF9l5ML6M6wD8eja+OMomabU41SsJIP8=
Subject key identifier: C5:1B:66:5A:84:9F:ED:1E:D4:68:3F:03:B5:AA:17:E1:2F:BC:24:68
Authority key identifier: D9:C9:13:17:28:32:76:93:7D:43:6F:4B:21:6D:CD:A3:EF:BE:2A:88
Certificate issuer: /CN=d9c91317283276937d436f4b216dcda3efbe2a88
Certificate serial: 019B292E5A64C5419F58793C449847891A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
Manifest number: 0BE6
Signing time: Tue 16 Dec 2025 22:01:02 +0000
Manifest this update: Tue 16 Dec 2025 22:01:02 +0000
Manifest next update: Wed 17 Dec 2025 22:01:02 +0000
Files and hashes: 1: 2ckTFygydpN9Q29LIW3No---Kog.crl (hash: le8Hr9908dcrUB44ZVx7+USgpxThjRav2tZpUzBTlec=)
2: Pz6k83CSFf4CwoCzfq-E_4QuJkM.roa (hash: Yi7bnBLtpl6BWUzAuBFtj4QFE/dVNDobJF3M3VD/k5c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:29:2e:5a:64:c5:41:9f:58:79:3c:44:98:47:89:1a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9c91317283276937d436f4b216dcda3efbe2a88
Validity
Not Before: Dec 16 22:01:02 2025 GMT
Not After : Dec 17 22:01:02 2025 GMT
Subject: CN=c51b665a849fed1ed4683f03b5aa17e12fbc2468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:3c:60:c9:27:9b:2a:f8:39:f0:6e:f5:d3:
5e:9e:df:82:69:2f:7f:df:cd:5e:3c:af:81:f6:68:
70:f9:b2:1a:3f:e4:31:63:0f:11:ff:62:2b:e6:2e:
64:8d:b3:6a:3e:51:8f:50:d9:a1:cd:92:52:00:d5:
eb:25:58:14:ed:d3:11:c2:fc:ba:7e:b1:19:13:05:
13:2b:df:5c:c9:7e:50:6a:97:e1:27:71:85:41:85:
3d:2c:52:1e:37:09:ad:fd:12:54:11:70:fb:98:7e:
3d:e1:be:a0:45:0b:12:37:79:53:73:26:7d:34:36:
f9:6b:74:57:c7:d2:34:87:ef:5f:d7:72:0b:e3:9b:
4c:66:de:6d:ee:d8:41:04:97:ac:40:9a:20:e1:6b:
2a:17:33:69:f0:a2:c9:9f:1c:d3:a8:b3:af:ff:80:
40:19:2f:4d:86:f9:59:a8:b5:55:8b:47:31:c1:cc:
ea:fd:0b:22:e1:27:61:34:46:d7:bb:ac:36:f2:6e:
45:81:e6:52:41:c7:37:84:c9:2e:c1:2b:f7:b7:e3:
39:d0:72:03:e6:c7:17:ca:b5:1c:bb:06:f4:b4:a7:
b3:77:15:4a:04:b4:aa:99:c5:83:43:c3:c7:48:fa:
66:f3:63:d0:fe:7d:2c:fe:c8:f4:9e:6e:3b:a7:79:
44:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1B:66:5A:84:9F:ED:1E:D4:68:3F:03:B5:AA:17:E1:2F:BC:24:68
X509v3 Authority Key Identifier:
keyid:D9:C9:13:17:28:32:76:93:7D:43:6F:4B:21:6D:CD:A3:EF:BE:2A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:02:bd:f9:e0:44:b9:89:a0:90:2b:04:4a:53:e6:07:e5:e8:
7e:fc:0f:40:cd:47:0b:b0:8e:10:5a:ea:2a:68:a3:95:16:b5:
3f:81:0a:f4:9d:9a:e8:95:6b:8e:a0:a6:9f:7d:59:fe:7f:ee:
52:09:cc:41:03:4d:2b:1c:2d:5d:55:85:85:a9:4c:a0:59:54:
81:5d:f6:95:12:fe:c8:30:24:ec:3e:0c:99:ca:26:4c:43:62:
e1:85:38:59:4e:ea:d0:de:b0:73:2f:22:ab:f3:ce:4b:35:41:
08:27:82:f7:26:a5:4e:78:db:d9:d1:e9:1f:78:3d:04:f7:e2:
c0:18:80:62:0c:72:84:d9:23:94:49:59:d6:85:f8:2b:7e:f9:
84:64:59:0b:bb:1e:d4:62:b0:dc:6c:6f:f8:f1:5d:68:6e:6d:
36:36:a6:55:09:1c:69:9a:c5:76:7d:89:19:ed:fb:bd:95:53:
5c:5a:45:fe:55:f7:dd:18:95:e3:e5:53:12:13:29:e2:a8:d1:
29:b4:7e:0b:a4:67:b6:6a:34:0c:fd:51:79:31:86:aa:be:da:
bb:11:42:f7:33:05:2e:f6:85:9c:ca:5e:ff:84:0f:8b:ae:51:
2d:53:af:47:38:1c:df:1b:e1:33:ec:4a:5a:5e:32:31:fb:90:
c0:82:a6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:40 2026 by rpki-client