
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
File: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft (raw, json)
Hash identifier: FUz564g17cwsewXNQG4do4v7JmKyh0SBH6s2F9WgbLY=
Subject key identifier: 04:CF:CE:B0:D4:E7:1D:4A:7C:54:49:36:42:FA:49:A2:59:5D:B1:5F
Authority key identifier: E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
Certificate issuer: /CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Certificate serial: 019F221030DA603DB859CEE782A1DA5EB4F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
Manifest number: 198D
Signing time: Thu 02 Jul 2026 09:01:54 +0000
Manifest this update: Thu 02 Jul 2026 09:01:54 +0000
Manifest next update: Fri 03 Jul 2026 09:01:54 +0000
Files and hashes: 1: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl (hash: Ra1LaDut4o29uG7RqDOK9T5UAiTcWamuFIUI49WPhB4=)
2: 8nPl3AcrOpCxoPHI-yYhk20Z4jo.roa (hash: xYCGhk8KRGNgVElrhL//wuDH3rNsau4dVCz023td3io=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:10:30:da:60:3d:b8:59:ce:e7:82:a1:da:5e:b4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Validity
Not Before: Jul 2 09:01:54 2026 GMT
Not After : Jul 3 09:01:54 2026 GMT
Subject: CN=04cfceb0d4e71d4a7c54493642fa49a2595db15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fc:47:82:84:2e:f2:b3:1b:81:2c:17:11:dc:
4d:2a:8f:31:a3:99:23:82:43:8d:6e:96:fd:56:b8:
3a:36:b3:94:46:e4:7e:68:4b:22:20:fc:af:9b:a7:
e2:0d:2a:95:86:2a:b0:5e:cb:c0:16:96:55:e6:76:
34:dd:70:d1:ae:10:48:d4:4b:30:ca:58:29:18:77:
6f:b3:ac:e5:72:5e:f5:a5:3e:b0:46:01:91:ee:5c:
80:21:66:40:5f:7b:8c:0e:a7:9e:19:23:47:f2:14:
f8:92:a6:f4:e5:2f:1b:64:71:63:8b:47:1c:ab:df:
14:67:b5:7e:3e:6c:fc:6b:ce:1e:05:52:6d:89:11:
d8:ff:22:38:b9:90:c3:80:7a:f1:8f:f4:a9:ce:41:
a1:10:c5:82:4e:90:66:72:45:9f:fe:3f:2f:9f:14:
b8:5b:75:0a:1c:fa:d7:24:0a:d1:87:9b:2b:64:29:
7d:ea:c3:e9:cb:92:36:e7:6c:7c:45:30:2d:a3:13:
f3:fe:b5:c6:75:9d:e7:06:4d:db:64:6f:53:5c:67:
b7:7d:18:0f:c8:86:a4:5d:a3:69:31:f9:f4:f2:84:
ab:90:9a:99:96:1c:24:ef:f8:87:1e:30:58:39:9f:
14:f8:7c:64:8b:f1:26:c0:a6:12:50:80:e6:38:45:
75:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CF:CE:B0:D4:E7:1D:4A:7C:54:49:36:42:FA:49:A2:59:5D:B1:5F
X509v3 Authority Key Identifier:
keyid:E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:53:2c:94:c9:34:ad:c0:2b:e2:f0:51:38:82:bb:ba:81:c0:
61:44:57:47:ff:79:a8:c0:3c:43:19:5f:f8:de:31:02:f4:b2:
1b:05:81:1e:5f:b4:1a:1c:2f:df:2a:44:4c:20:59:48:4e:fd:
f7:9b:22:76:ac:e4:d2:63:8d:5f:79:9e:0a:5e:1e:1e:54:df:
d5:60:e5:61:bf:a4:25:1d:a0:c0:29:ca:95:c2:5d:eb:94:9e:
de:69:e2:9e:5b:14:09:cf:5e:ad:89:14:b1:55:b5:09:cc:5d:
09:4e:2a:0a:92:cd:2b:80:1e:f4:e8:6b:31:96:41:d9:69:4a:
a4:b9:84:1e:48:f1:47:cc:79:4a:6a:0b:96:ea:fb:f4:b2:2b:
64:08:5c:df:46:49:32:94:ee:31:8f:37:08:bd:70:13:0f:4b:
47:bc:15:c5:79:6f:d5:92:aa:39:af:7f:2e:75:fe:0a:b8:09:
27:eb:96:38:11:e3:b1:60:5c:a8:f9:fa:e1:00:b8:31:3a:b0:
7b:78:9c:62:20:ed:15:0b:52:65:04:23:29:28:60:83:51:5b:
92:67:16:05:fd:6d:37:36:27:19:7b:6b:af:d5:96:55:55:28:
c4:6a:c4:76:12:81:08:70:14:32:d9:ac:d3:ae:0c:7f:7e:57:
b6:93:bc:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8iEDDaYD24Wc7ngqHaXrT1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YmE5MWQ2MjY1MDRjY2JjNjRkODk3NDBiNjNjYjJlYjQy
MzRmNzAwHhcNMjYwNzAyMDkwMTU0WhcNMjYwNzAzMDkwMTU0WjAzMTEwLwYDVQQD
EygwNGNmY2ViMGQ0ZTcxZDRhN2M1NDQ5MzY0MmZhNDlhMjU5NWRiMTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPxHgoQu8rMbgSwXEdxNKo8xo5kj
gkONbpb9Vrg6NrOURuR+aEsiIPyvm6fiDSqVhiqwXsvAFpZV5nY03XDRrhBI1Esw
ylgpGHdvs6zlcl71pT6wRgGR7lyAIWZAX3uMDqeeGSNH8hT4kqb05S8bZHFji0cc
q98UZ7V+Pmz8a84eBVJtiRHY/yI4uZDDgHrxj/SpzkGhEMWCTpBmckWf/j8vnxS4
W3UKHPrXJArRh5srZCl96sPpy5I252x8RTAtoxPz/rXGdZ3nBk3bZG9TXGe3fRgP
yIakXaNpMfn08oSrkJqZlhwk7/iHHjBYOZ8U+Hxki/EmwKYSUIDmOEV1lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATPzrDU5x1KfFRJNkL6SaJZXbFfMB8GA1UdIwQY
MBaAFOS6kdYmUEzLxk2JdAtjyy60I09wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy84ODdlOTQtZWI5Ny00MTA5LTlkYTgt
Y2JmMThkMmQ2NmMzLzEvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy84ODdlOTQtZWI5Ny00MTA5LTlkYTgtY2JmMThkMmQ2NmMz
LzEvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1MslMk0
rcAr4vBROIK7uoHAYURXR/95qMA8Qxlf+N4xAvSyGwWBHl+0Ghwv3ypETCBZSE79
95sidqzk0mONX3meCl4eHlTf1WDlYb+kJR2gwCnKlcJd65Se3mninlsUCc9erYkU
sVW1CcxdCU4qCpLNK4Ae9OhrMZZB2WlKpLmEHkjxR8x5SmoLlur79LIrZAhc30ZJ
MpTuMY83CL1wEw9LR7wVxXlv1ZKqOa9/LnX+CrgJJ+uWOBHjsWBcqPn64QC4MTqw
e3icYiDtFQtSZQQjKShgg1FbkmcWBf1tNzYnGXtrr9WWVVUoxGrEdhKBCHAUMtms
064Mf35XtpO8Sw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:16 2026 by rpki-client