Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
File: 1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft (raw, json)
Hash identifier: VtYlN+aOpnwIJin09RgaB7SsjF7Vxw/asx29UDV0Hvg=
Subject key identifier: E5:E1:CA:E0:A5:16:DF:B6:C7:55:93:11:FE:9B:93:80:05:06:50:5F
Authority key identifier: D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
Certificate issuer: /CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Certificate serial: 019B6E45D98178E41AB502D1259A2F97A6F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
Manifest number: 17A4
Signing time: Tue 30 Dec 2025 08:00:29 +0000
Manifest this update: Tue 30 Dec 2025 08:00:29 +0000
Manifest next update: Wed 31 Dec 2025 08:00:29 +0000
Files and hashes: 1: 1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl (hash: aP4ooDGJOSobhm5vftyzo8ip3vYYsSVvvnLOqnZEGSI=)
2: PmM7gRkW2CCZ-q9ed87lvQrRb_Q.roa (hash: Sitsq4SK118ZuU9nYMZ2z7lYeIq08gqG7O0LpN8OCrg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:6e:45:d9:81:78:e4:1a:b5:02:d1:25:9a:2f:97:a6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Validity
Not Before: Dec 30 08:00:29 2025 GMT
Not After : Dec 31 08:00:29 2025 GMT
Subject: CN=e5e1cae0a516dfb6c7559311fe9b93800506505f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:78:c8:0d:85:d9:71:8a:f1:70:2a:bd:40:c1:
6a:f3:b2:07:6e:2d:7d:93:4f:b5:d3:b5:ae:10:9d:
d6:b4:42:6a:bc:b6:5a:3c:14:4b:7a:fe:a1:bb:78:
8f:14:7d:c5:50:aa:6d:a9:6e:48:71:3e:3d:3f:5c:
99:35:20:f4:a9:a2:17:4a:d6:ef:21:5b:a0:59:14:
57:86:74:55:94:5d:3f:52:1d:6b:f9:4d:c8:73:90:
e3:d5:37:9f:93:8f:7d:2c:c1:2d:ce:81:a9:d6:82:
3c:41:f8:1e:48:5a:4c:93:73:8f:d0:fa:88:4e:15:
d6:4f:51:0a:e1:2c:a0:e1:7b:c3:ff:7a:bc:6a:06:
cc:2b:67:14:60:a4:92:e7:28:16:1c:df:24:a8:e7:
15:41:91:98:04:13:e2:24:19:60:23:4c:49:d0:89:
c2:4a:2e:fc:21:3b:45:ee:05:e8:16:83:97:46:39:
8d:4d:65:23:44:da:43:3a:d5:16:e2:0f:5d:34:db:
83:02:8b:42:88:6f:6f:7d:19:6d:f5:3e:6d:b8:1a:
cc:c4:40:f3:bc:0d:66:c0:c5:d8:ae:85:fa:82:e0:
30:13:ed:08:20:f4:d0:0c:b8:02:9d:c3:58:03:25:
f0:72:e8:b0:c1:13:c7:d9:02:c6:5c:33:c5:18:9c:
81:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E1:CA:E0:A5:16:DF:B6:C7:55:93:11:FE:9B:93:80:05:06:50:5F
X509v3 Authority Key Identifier:
keyid:D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ec:bb:da:01:81:e5:99:c7:35:f8:2a:ab:ab:1a:2d:4c:bb:
3a:5e:c2:e9:f8:9f:33:9b:f7:4a:61:d0:ed:7e:e1:b4:c1:6a:
7b:6f:ed:d5:c2:c3:41:53:ff:a6:0f:ca:8f:4b:dc:12:7e:5c:
4e:e2:22:2c:dc:86:a6:01:f7:2b:bb:66:1d:f2:4a:b1:4d:ed:
12:1d:7c:fa:db:6f:eb:37:56:62:66:ed:cc:13:25:fc:e8:13:
c9:f0:8b:c0:34:5c:bf:b1:94:cb:f0:c7:dc:2d:84:24:46:93:
2f:2e:12:f2:d1:50:ce:02:89:6c:d4:29:89:ee:b9:7f:df:6b:
e0:11:15:ac:7a:ee:c4:6f:cc:c0:5d:9b:21:e4:f8:51:96:26:
79:32:b3:77:cc:59:74:78:70:46:e6:fc:15:63:c7:33:3b:b1:
f9:23:89:20:2a:d6:f0:c0:c5:ad:2f:84:68:c9:ff:87:38:d4:
fb:f2:bc:8a:95:01:96:a1:9a:6a:7e:a6:9c:9c:8f:85:7d:d2:
a3:5b:aa:f2:e5:e1:e4:50:2e:01:d2:c3:83:71:33:d0:52:50:
a4:9b:40:08:30:a9:6d:8f:f7:af:ec:8f:26:19:21:04:f8:03:
a8:da:cf:1c:f9:55:c6:48:43:7a:ff:89:bf:7b:74:8e:c5:fc:
c4:4e:10:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:04 2026 by rpki-client