Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.mft
File: 9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.mft (raw, json)
Hash identifier: XoHDzDsXzJbDSkfK8G6c3xb4RstTLvhfGPkxmTpywy8=
Subject key identifier: B8:EF:1C:4C:30:77:B5:30:A1:5F:6D:3B:3B:28:0C:39:9B:99:79:C0
Authority key identifier: 9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0
Certificate issuer: /CN=9F7042C3B38A2A4DAB756337122AD2B927DD6DE0
Certificate serial: 368C7355502E4E5E03372DD19BF62083BF476CAC
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.mft
Manifest number: 4C
Signing time: Sun 14 Dec 2025 22:49:38 +0000
Manifest this update: Sun 14 Dec 2025 22:44:38 +0000
Manifest next update: Tue 16 Dec 2025 00:10:38 +0000
Files and hashes: 1: 326130663a316363363a623130343a3a2f34382d3438203d3e20323034323131.roa (hash: UX2qG5xKoX+a3PVFtUEHdY8ovNeR88zkoyQXuzuNDOA=)
2: 326130663a316363363a623130363a3a2f34382d3438203d3e20323034323131.roa (hash: GZmQPtq18eHTDThS7ZaQoOAJhfViKrMrDh6fAgRVe1g=)
3: 326130663a316363363a623130333a3a2f34382d3438203d3e20323034323131.roa (hash: GdlhpsGLGUxMyJu5ikDhHSagfLaj3x0bfvgeu5bspVM=)
4: 9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.crl (hash: BnbehTvp9p53vJy8ThlcUzhPeATnkMoPjoViS9edVUc=)
5: 326130663a316363363a623130373a3a2f34382d3438203d3e20323034323131.roa (hash: LvKrapjbijKOCNkIL4V5c0KqqX5LOF7Gf9xE7tgQHO0=)
6: 326130663a316363363a623130303a3a2f34382d3438203d3e20323034323131.roa (hash: 3nFpfNkk0lx36PODkY812R7afsY2CfVpTh0S3Imi5ew=)
7: 326130663a316363363a623130323a3a2f34382d3438203d3e20323034323131.roa (hash: 1/TM1C1CVtjSmW0AiY43HuRc4ozySLnLjfUC5sW87to=)
8: 326130663a316363363a623130313a3a2f34382d3438203d3e20323034323131.roa (hash: QenikUBE0heQbUFk+xGSmTzhg+u3X0fTj6Dsr3pNHn4=)
9: 326130663a316363363a623130353a3a2f34382d3438203d3e20323034323131.roa (hash: CDfmZqEf7pskaCJCvkSWN8Fy16HKCDqYKDHsDVrfGL4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:8c:73:55:50:2e:4e:5e:03:37:2d:d1:9b:f6:20:83:bf:47:6c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F7042C3B38A2A4DAB756337122AD2B927DD6DE0
Validity
Not Before: Dec 14 22:44:38 2025 GMT
Not After : Dec 16 00:10:38 2025 GMT
Subject: CN=B8EF1C4C3077B530A15F6D3B3B280C399B9979C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:17:cb:28:d8:4d:b3:0a:52:68:4d:65:01:79:
c4:ef:8e:cf:36:d6:97:49:4d:a2:00:26:ce:fe:9a:
45:f9:4a:b9:f0:6e:05:3d:43:08:35:68:68:c1:5a:
bf:19:4f:b1:c4:d9:bc:2c:01:12:0a:dd:85:15:1d:
38:56:a8:67:0d:c2:e3:f4:57:03:5f:45:9a:0e:61:
32:08:d8:0e:b4:77:52:9e:43:14:f9:1d:d8:7e:a6:
e7:ce:99:0a:9e:9d:78:59:ae:89:18:c4:cd:f9:dc:
42:1f:a1:7c:1f:52:b4:c3:58:86:1a:b1:d9:60:52:
3a:72:7c:b4:37:1f:19:e9:78:93:c8:fd:77:27:b4:
00:a8:cc:cf:bc:ed:3e:28:37:60:0a:1a:31:25:79:
af:79:1d:51:c7:38:6e:18:a7:fd:a0:d5:bb:cd:ae:
12:cb:e4:46:da:bc:f3:fe:e9:50:db:0d:54:84:c0:
8a:9a:e2:b5:63:77:1c:66:a1:c8:96:39:20:65:44:
3e:c2:d7:60:21:94:c7:d3:5f:b6:1f:37:48:f8:ec:
17:45:04:3f:63:a3:a5:a4:13:35:2f:c1:71:da:01:
25:a4:81:c7:8d:47:55:75:d3:da:53:d7:fc:4f:bf:
1c:2e:d2:de:50:db:2c:a0:9d:38:cc:1f:2e:ef:9d:
ef:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EF:1C:4C:30:77:B5:30:A1:5F:6D:3B:3B:28:0C:39:9B:99:79:C0
X509v3 Authority Key Identifier:
keyid:9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:13:f5:93:3d:af:b3:30:72:a9:3e:0b:73:a9:1f:5b:98:d3:
97:ec:3d:b3:33:ce:2c:ce:9c:c2:8e:de:67:85:49:e7:35:83:
6a:46:fa:6f:7a:1e:fc:ed:d8:99:29:c1:03:70:dd:15:df:aa:
56:2a:5e:02:48:cf:16:9d:a3:49:00:d4:1d:c3:19:8d:d3:49:
67:61:6a:7a:43:bb:8b:12:17:25:81:9c:a7:38:91:cb:73:ea:
2d:e6:bf:32:f9:52:7b:b1:03:0c:8e:be:51:45:88:e2:4f:70:
3c:0f:de:fe:e0:49:72:fd:40:31:40:94:9b:fe:ae:be:09:13:
91:e8:09:28:77:ec:03:bc:12:fa:46:fe:b7:17:ff:35:2f:0a:
d6:90:b4:0b:9c:9f:30:a7:68:76:04:42:66:b8:44:d3:05:dd:
51:4b:c5:d4:1a:b0:77:bb:c5:2d:56:e1:ff:cb:19:9e:0b:b1:
01:e9:2d:4c:12:50:82:50:6f:d3:28:93:79:31:06:87:bb:96:
c1:50:ef:5a:26:43:70:dd:27:fb:0c:8b:05:ff:17:d0:77:16:
52:5d:56:9c:ce:79:e4:3b:5f:9e:e7:1f:15:17:ad:bd:ad:5a:
68:4f:8e:2f:74:e7:d2:f2:df:10:41:4e:6e:42:52:44:23:94:
51:d3:95:b9
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUNoxzVVAuTl4DNy3Rm/Ygg79HbKwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY3MDQyQzNCMzhBMkE0REFCNzU2MzM3MTIyQUQyQjky
N0RENkRFMDAeFw0yNTEyMTQyMjQ0MzhaFw0yNTEyMTYwMDEwMzhaMDMxMTAvBgNV
BAMTKEI4RUYxQzRDMzA3N0I1MzBBMTVGNkQzQjNCMjgwQzM5OUI5OTc5QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlF8so2E2zClJoTWUBecTvjs82
1pdJTaIAJs7+mkX5SrnwbgU9Qwg1aGjBWr8ZT7HE2bwsARIK3YUVHThWqGcNwuP0
VwNfRZoOYTII2A60d1KeQxT5Hdh+pufOmQqenXhZrokYxM353EIfoXwfUrTDWIYa
sdlgUjpyfLQ3HxnpeJPI/XcntACozM+87T4oN2AKGjElea95HVHHOG4Yp/2g1bvN
rhLL5EbavPP+6VDbDVSEwIqa4rVjdxxmociWOSBlRD7C12AhlMfTX7YfN0j47BdF
BD9jo6WkEzUvwXHaASWkgceNR1V109pT1/xPvxwu0t5Q2yygnTjMHy7vne9nAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUuO8cTDB3tTChX207OygMOZuZecAwHwYDVR0j
BBgwFoAUn3BCw7OKKk2rdWM3EirSuSfdbeAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj
ZTM5LzAvOUY3MDQyQzNCMzhBMkE0REFCNzU2MzM3MTIyQUQyQjkyN0RENkRFMC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84N2Q4ZGI3MS1hNWJlLTQ2
NGMtYThiOS04YjdiMzc0YWUzZmEvMi85RjcwNDJDM0IzOEEyQTREQUI3NTYzMzcx
MjJBRDJCOTI3REQ2REUwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8wLzlGNzA0MkMz
QjM4QTJBNERBQjc1NjMzNzEyMkFEMkI5MjdERDZERTAubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBOE/WT
Pa+zMHKpPgtzqR9bmNOX7D2zM84szpzCjt5nhUnnNYNqRvpveh787diZKcEDcN0V
36pWKl4CSM8WnaNJANQdwxmN00lnYWp6Q7uLEhclgZynOJHLc+ot5r8y+VJ7sQMM
jr5RRYjiT3A8D97+4Ely/UAxQJSb/q6+CROR6Akod+wDvBL6Rv63F/81LwrWkLQL
nJ8wp2h2BEJmuETTBd1RS8XUGrB3u8UtVuH/yxmeC7EB6S1MElCCUG/TKJN5MQaH
u5bBUO9aJkNw3Sf7DIsF/xfQdxZSXVacznnkO1+e5x8VF629rVpoT44vdOfS8t8Q
QU5uQlJEI5RR05W5
-----END CERTIFICATE-----
Generated at Tue Mar 3 21:32:58 2026 by rpki-client