Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
File: 41b1wjzOxkZAaF5E1ZvEttRNqrk.mft (raw, json)
Hash identifier: 4xBCT24etrK2+3wnst52HSXMCDyqNJnmjXrERnoDiwY=
Subject key identifier: 84:44:7A:2B:D6:10:33:78:52:8A:4B:F2:2E:EF:02:EA:61:FF:93:27
Authority key identifier: E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
Certificate issuer: /CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Certificate serial: 019F224689123F72F44EB20DCF2E652F2F17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
Manifest number: 0D9C
Signing time: Thu 02 Jul 2026 10:01:15 +0000
Manifest this update: Thu 02 Jul 2026 10:01:15 +0000
Manifest next update: Fri 03 Jul 2026 10:01:15 +0000
Files and hashes: 1: 41b1wjzOxkZAaF5E1ZvEttRNqrk.crl (hash: zZw05DFXQ/aBfUCkMMk88u/EuWj68lTH9fbGS5ds+H8=)
2: VrD_z9WUzqoxuEFUeLh8zCfscNM.roa (hash: RBMbhE4e93nDrWwDckaO3Ac6YKsGDngzavc4attXd7g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:46:89:12:3f:72:f4:4e:b2:0d:cf:2e:65:2f:2f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Validity
Not Before: Jul 2 10:01:15 2026 GMT
Not After : Jul 3 10:01:15 2026 GMT
Subject: CN=84447a2bd6103378528a4bf22eef02ea61ff9327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:fe:30:95:d9:95:f1:ac:13:ee:db:34:77:
24:1c:20:64:ce:f9:f1:60:cb:59:de:51:8a:c7:a5:
61:1a:5e:c0:06:d4:79:f5:88:c8:25:d8:54:44:b2:
7b:17:a8:99:87:f9:8d:6e:76:a3:05:0b:2b:d0:11:
79:c2:63:10:88:e4:0c:e2:3d:ec:15:7f:ce:71:8b:
53:91:02:60:e6:78:e6:60:3b:8a:31:08:51:c7:1d:
75:50:99:91:6d:99:eb:5b:5c:b7:ea:38:22:3b:59:
7a:04:fb:a0:e5:0f:29:b7:6a:8f:f6:4e:a0:b6:dd:
f6:f8:07:36:3f:b1:5f:89:29:e8:11:61:11:59:01:
f8:6e:93:51:cc:7d:e6:41:c2:d4:16:1e:94:18:c0:
99:1e:52:d0:da:1e:7c:ff:71:44:0b:4e:63:c5:87:
24:be:2f:e0:21:57:d9:0a:d9:14:e0:ca:ff:dd:cc:
35:99:20:b3:0e:29:72:23:b3:32:3b:3e:8b:22:38:
8a:9a:ca:37:7d:5d:b4:88:48:b1:4a:12:18:04:6c:
c2:3a:4d:b2:2d:50:dd:b4:07:f6:e0:a7:5c:f1:38:
df:94:f0:d3:09:9e:2e:58:3b:c0:30:88:b0:f1:68:
c7:f3:88:ce:57:39:bf:c8:b7:b7:00:6f:92:44:2f:
56:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:44:7A:2B:D6:10:33:78:52:8A:4B:F2:2E:EF:02:EA:61:FF:93:27
X509v3 Authority Key Identifier:
keyid:E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0d:26:57:9c:2d:52:df:d4:26:fc:c0:7f:0d:82:a1:0b:3d:
5f:11:09:24:38:cf:94:2f:8b:28:6d:f4:14:1d:cd:ac:89:9c:
60:33:88:60:3a:e8:f6:21:18:72:6e:17:3e:ea:dd:8c:f3:af:
23:2d:12:61:c8:a6:ce:65:0a:d7:f1:1c:82:11:9a:ec:f2:2b:
57:ff:82:76:fe:e9:c4:9a:74:87:56:2e:bb:6b:dc:08:46:83:
aa:35:87:03:b7:6d:01:bd:eb:d0:e3:f5:54:48:01:27:ec:38:
6d:77:77:fd:0d:fa:b7:97:7c:14:de:49:bd:1c:bc:8f:d9:d8:
45:9c:29:7c:8c:3e:97:cb:cd:af:8d:ae:cb:f2:b4:7d:5a:78:
eb:13:52:bb:03:59:2d:ed:7f:76:50:f2:54:39:f5:67:18:22:
cd:b1:48:b3:bf:bd:6d:f3:34:9a:7a:8d:1d:fc:30:a7:70:05:
4f:2e:d1:6f:2e:a5:64:de:71:71:69:47:0f:79:ae:a9:6b:f0:
7d:86:40:84:c1:8d:5f:90:a1:1f:f7:81:e7:42:b5:ad:93:75:
a1:40:90:5a:84:9e:60:61:26:fb:76:c9:bc:0d:4f:85:0a:31:
ca:02:f2:3b:8b:bc:2f:71:36:53:fe:db:aa:04:96:89:f3:af:
0d:34:25:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:01 2026 by rpki-client