Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
File: 46xjX9RfVHHGwsP-Re8btDOLwnk.mft (raw, json)
Hash identifier: 3qJAWzra/Sc54fNZhHLmaLeCawFSrkv5DtaPg9IDoyM=
Subject key identifier: BF:93:ED:F7:FC:26:CE:EE:B1:6B:05:0E:CD:43:DF:4E:A0:C6:34:E5
Authority key identifier: E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79
Certificate issuer: /CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
Certificate serial: 019F224693BBE5BEFC0A59C79E813E3DA46C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
Manifest number: 1920
Signing time: Thu 02 Jul 2026 10:01:18 +0000
Manifest this update: Thu 02 Jul 2026 10:01:18 +0000
Manifest next update: Fri 03 Jul 2026 10:01:18 +0000
Files and hashes: 1: 46xjX9RfVHHGwsP-Re8btDOLwnk.crl (hash: r8xC8Fc5TsjN2qmFWK9MTtGMwKfSZQmCpUsT7i80WP4=)
2: _X4eAftjp_R6giU6rV2GZ0FQz9k.roa (hash: VsMljmTZjJFOFhFmrTsEwtE5iJWXUJLVzyxqYH1Mkto=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:46:93:bb:e5:be:fc:0a:59:c7:9e:81:3e:3d:a4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
Validity
Not Before: Jul 2 10:01:18 2026 GMT
Not After : Jul 3 10:01:18 2026 GMT
Subject: CN=bf93edf7fc26ceeeb16b050ecd43df4ea0c634e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1d:17:6a:79:b4:06:e9:0e:aa:5e:a4:ae:93:
54:b2:c7:59:8e:15:c5:90:b5:de:95:87:57:2d:80:
e8:50:2b:68:13:49:3b:3b:ba:33:02:29:47:16:81:
e0:05:8e:16:00:50:98:cd:72:d0:71:ff:4a:0d:8c:
2d:c2:37:cc:d1:45:d9:6c:ea:3a:4c:30:86:3b:29:
a0:53:bb:e4:b8:44:94:38:d5:e6:5b:5c:0e:0c:dd:
54:d2:28:68:83:94:aa:75:7d:b8:22:79:6d:a5:d2:
85:81:da:87:c0:44:b8:d7:28:17:02:83:50:50:4f:
41:06:5b:96:19:8b:de:d1:ae:c6:5c:04:e7:66:ef:
95:cd:bc:81:eb:7d:d0:cc:2d:71:24:7d:85:1b:e4:
38:ad:2b:63:74:85:8c:de:71:1e:54:e6:77:8b:18:
2e:7f:83:4c:22:ca:f2:b7:34:c0:55:74:d1:a0:cd:
22:52:36:3c:1e:19:9c:7e:2e:bb:67:ee:f4:03:e7:
8e:9d:27:37:27:45:56:fa:e5:bb:87:78:be:ca:8e:
08:d9:00:f0:9e:db:53:a6:3f:dd:a9:ed:82:a0:cb:
88:70:f3:22:da:9e:0a:be:e0:b9:2a:0a:c4:c5:1f:
f6:c8:4b:88:af:29:16:92:05:b2:0e:f4:62:c5:90:
24:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:93:ED:F7:FC:26:CE:EE:B1:6B:05:0E:CD:43:DF:4E:A0:C6:34:E5
X509v3 Authority Key Identifier:
keyid:E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:67:99:39:ab:b3:9c:ac:ca:b7:dd:d4:bf:df:e0:3e:af:34:
49:6d:9e:b2:dc:d6:5b:5b:17:3d:d0:17:07:1f:43:cf:2d:cd:
87:ff:6d:6d:0c:cc:3b:fc:d3:5d:67:b1:b2:17:74:0f:3d:4b:
19:76:3c:35:60:b4:9c:67:84:b6:e3:34:98:f5:fc:de:54:a3:
6a:bb:d5:85:07:b0:71:3f:7f:73:f8:7f:d3:a4:36:93:fa:9c:
2f:aa:7c:cc:42:a8:03:a2:b5:08:a8:1d:5a:af:bd:83:81:14:
f9:70:1d:72:e4:41:92:ab:c2:10:f7:cf:57:37:55:08:b0:79:
4d:62:2a:3e:84:34:7a:5a:2d:c0:a9:44:c1:d5:e4:dd:85:3f:
c1:ed:58:82:a6:78:a1:7e:8a:05:27:6c:51:e6:31:b0:9e:f5:
20:57:ef:4c:06:3e:06:08:be:85:d2:28:38:dc:d4:a4:69:c6:
ae:12:6b:ba:6d:ac:b2:33:25:a1:5d:1c:b8:d0:f1:66:e4:c3:
03:65:3f:7e:83:7d:12:49:a8:12:99:56:89:d5:6b:b1:55:5c:
13:fa:3b:c9:24:ed:25:4d:ec:0b:d8:3f:e1:ae:35:b1:57:c6:
a8:32:38:61:30:81:c4:0d:f8:6f:7e:57:1b:61:4b:44:61:6a:
c4:3f:f1:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8iRpO75b78ClnHnoE+PaRsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYWM2MzVmZDQ1ZjU0NzFjNmMyYzNmZTQ1ZWYxYmI0MzM4
YmMyNzkwHhcNMjYwNzAyMTAwMTE4WhcNMjYwNzAzMTAwMTE4WjAzMTEwLwYDVQQD
EyhiZjkzZWRmN2ZjMjZjZWVlYjE2YjA1MGVjZDQzZGY0ZWEwYzYzNGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR0Xanm0BukOql6krpNUssdZjhXF
kLXelYdXLYDoUCtoE0k7O7ozAilHFoHgBY4WAFCYzXLQcf9KDYwtwjfM0UXZbOo6
TDCGOymgU7vkuESUONXmW1wODN1U0ihog5SqdX24InltpdKFgdqHwES41ygXAoNQ
UE9BBluWGYve0a7GXATnZu+VzbyB633QzC1xJH2FG+Q4rStjdIWM3nEeVOZ3ixgu
f4NMIsrytzTAVXTRoM0iUjY8Hhmcfi67Z+70A+eOnSc3J0VW+uW7h3i+yo4I2QDw
nttTpj/dqe2CoMuIcPMi2p4KvuC5KgrExR/2yEuIrykWkgWyDvRixZAkdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+T7ff8Js7usWsFDs1D306gxjTlMB8GA1UdIwQY
MBaAFOOsY1/UX1RxxsLD/kXvG7Qzi8J5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDZ4alg5UmZWSEhHd3NQLVJlOGJ0RE9Md25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZjg3MGUtMmJhNS00Yjg4LTkxYTAt
MWQyMzQ4ZGJkMDM2LzEvNDZ4alg5UmZWSEhHd3NQLVJlOGJ0RE9Md25rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8yZjg3MGUtMmJhNS00Yjg4LTkxYTAtMWQyMzQ4ZGJkMDM2
LzEvNDZ4alg5UmZWSEhHd3NQLVJlOGJ0RE9Md25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFGeZOauz
nKzKt93Uv9/gPq80SW2estzWW1sXPdAXBx9Dzy3Nh/9tbQzMO/zTXWexshd0Dz1L
GXY8NWC0nGeEtuM0mPX83lSjarvVhQewcT9/c/h/06Q2k/qcL6p8zEKoA6K1CKgd
Wq+9g4EU+XAdcuRBkqvCEPfPVzdVCLB5TWIqPoQ0elotwKlEwdXk3YU/we1YgqZ4
oX6KBSdsUeYxsJ71IFfvTAY+Bgi+hdIoONzUpGnGrhJrum2ssjMloV0cuNDxZuTD
A2U/foN9EkmoEplWidVrsVVcE/o7ySTtJU3sC9g/4a41sVfGqDI4YTCBxA34b35X
G2FLRGFqxD/xPQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:37 2026 by rpki-client