Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/618f78-be3c-4f2e-b689-5a0d372a2ddc/1/JbHQs8RULKUws1l0XDGPc3uch8k.mft
File: JbHQs8RULKUws1l0XDGPc3uch8k.mft (raw, json)
Hash identifier: 9it5CT/UUF7ijTUaSIec72Vovo9Hf+8V4J5L8g2jmPM=
Subject key identifier: 06:FF:08:EF:D9:35:D8:0B:2A:17:D1:77:40:88:89:70:D1:61:57:FC
Authority key identifier: 25:B1:D0:B3:C4:54:2C:A5:30:B3:59:74:5C:31:8F:73:7B:9C:87:C9
Certificate issuer: /CN=25b1d0b3c4542ca530b359745c318f737b9c87c9
Certificate serial: 019D2DE13F26740070237449671E0D38F4E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbHQs8RULKUws1l0XDGPc3uch8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/618f78-be3c-4f2e-b689-5a0d372a2ddc/1/JbHQs8RULKUws1l0XDGPc3uch8k.mft
Manifest number: 0C
Signing time: Fri 27 Mar 2026 06:00:29 +0000
Manifest this update: Fri 27 Mar 2026 06:00:29 +0000
Manifest next update: Sat 28 Mar 2026 06:00:29 +0000
Files and hashes: 1: JbHQs8RULKUws1l0XDGPc3uch8k.crl (hash: AwV0Rj18sv5Tew4zcEcLPv/O9KjXAlEPUXrKk9zLZW8=)
2: WvSaWW1nYUabMfuGeN0e_k8i0XI.roa (hash: gVPTWyJQEYW+qk8fibIPyj9fr+5JVn1cDi0Xmb7ovnU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:e1:3f:26:74:00:70:23:74:49:67:1e:0d:38:f4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b1d0b3c4542ca530b359745c318f737b9c87c9
Validity
Not Before: Mar 27 06:00:29 2026 GMT
Not After : Mar 28 06:00:29 2026 GMT
Subject: CN=06ff08efd935d80b2a17d17740888970d16157fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:e6:38:9f:43:a2:32:b8:2d:c4:f1:03:27:
f1:e5:4a:76:9c:e6:31:b4:c2:ae:49:6e:d7:dc:f8:
6f:ed:66:23:a5:3b:bc:cd:98:1b:e6:ce:e7:df:46:
54:f8:9e:b0:85:e5:55:a0:82:80:b0:e3:bb:38:de:
a1:4c:5a:87:2a:7d:eb:b7:80:07:d5:f0:6c:1a:84:
f3:02:57:82:97:61:26:00:f8:bf:c6:7a:52:16:fb:
72:e4:21:77:95:65:29:dc:91:42:80:64:7b:d6:d5:
23:3d:3c:5c:07:d4:f8:75:06:b8:dc:a6:a6:fc:65:
40:a1:4a:fd:c0:00:59:53:1d:22:cb:5f:99:52:a8:
97:f1:2e:9c:29:97:b2:87:04:da:0e:01:6c:a3:9a:
85:fa:85:80:79:5b:eb:02:cf:2e:cc:9f:7e:f5:47:
eb:25:ec:23:ac:d0:e4:78:e4:0e:a1:74:c6:9c:39:
c8:4c:92:3c:f9:1b:da:62:42:ac:52:84:88:c4:f0:
f1:bd:d6:ee:70:58:8d:5a:9f:64:ce:72:92:d3:d7:
19:c2:a7:61:c3:cd:00:e5:43:37:7d:f3:9a:d1:94:
0c:89:32:fb:5c:5b:1c:e0:b7:14:cb:91:50:22:0b:
f8:92:44:70:11:71:73:79:6c:66:69:8b:56:e0:59:
1b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FF:08:EF:D9:35:D8:0B:2A:17:D1:77:40:88:89:70:D1:61:57:FC
X509v3 Authority Key Identifier:
keyid:25:B1:D0:B3:C4:54:2C:A5:30:B3:59:74:5C:31:8F:73:7B:9C:87:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbHQs8RULKUws1l0XDGPc3uch8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/618f78-be3c-4f2e-b689-5a0d372a2ddc/1/JbHQs8RULKUws1l0XDGPc3uch8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/618f78-be3c-4f2e-b689-5a0d372a2ddc/1/JbHQs8RULKUws1l0XDGPc3uch8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:3f:65:bb:e2:de:d0:ca:1e:db:4f:7c:f2:52:8e:b1:42:23:
8e:98:29:75:fc:26:b4:39:b7:c9:4d:67:0c:75:4b:8d:8c:d7:
9c:e3:92:89:91:00:8f:ae:41:b8:90:18:47:75:c4:7c:d8:35:
20:04:50:67:e4:0c:50:8f:db:6b:a2:34:6a:14:e0:b0:23:87:
92:51:7b:11:fd:03:14:ed:54:bb:f2:63:34:2c:0e:bd:cd:47:
03:d4:aa:53:c8:92:ab:af:01:28:11:28:c6:d3:4a:b6:5f:4d:
e7:d2:5f:e4:19:c8:de:2c:af:48:63:04:51:0f:67:57:0b:d9:
7d:86:8f:e6:07:2d:64:37:e9:2a:a9:1f:6a:fa:ce:f4:97:59:
90:fe:c4:11:42:77:24:3d:84:06:37:91:29:4b:52:5a:02:28:
d9:55:14:82:fc:b6:b4:f7:31:d7:fe:8d:e4:62:95:04:91:52:
d1:5b:58:58:5b:76:69:3b:dd:9e:be:da:b4:48:a7:ef:dd:f7:
37:c1:92:75:1f:d9:8f:8e:f2:70:85:e7:0d:8f:4c:9a:47:c9:
59:ac:26:28:08:32:7d:a8:e3:bc:62:17:28:6d:fc:fa:19:f0:
bf:a0:0d:72:41:93:bb:d5:34:9e:5b:b4:fa:fb:a8:4c:fb:37:
96:f2:19:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:22:38 2026 by rpki-client