Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
File: 4tNxxKeqqFX4zDsa6oAilCCoDyA.mft (raw, json)
Hash identifier: MPje5vai4sg/1WB3yaopjdN0h5puSbuU2af7EUTT0vU=
Subject key identifier: 10:50:54:BB:B8:BF:FE:07:69:78:A9:0F:99:30:C7:09:18:C0:E1:20
Authority key identifier: E2:D3:71:C4:A7:AA:A8:55:F8:CC:3B:1A:EA:80:22:94:20:A8:0F:20
Certificate issuer: /CN=e2d371c4a7aaa855f8cc3b1aea80229420a80f20
Certificate serial: 019EF6EDD70CED06BB8ABDB356E94A3D70AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
Manifest number: 1978
Signing time: Wed 24 Jun 2026 00:00:42 +0000
Manifest this update: Wed 24 Jun 2026 00:00:42 +0000
Manifest next update: Thu 25 Jun 2026 00:00:42 +0000
Files and hashes: 1: 4tNxxKeqqFX4zDsa6oAilCCoDyA.crl (hash: BwE1ql58kVmZMF52JQ9VBwRWCaGMnYHIcLC0gdwwDP0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f6:ed:d7:0c:ed:06:bb:8a:bd:b3:56:e9:4a:3d:70:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d371c4a7aaa855f8cc3b1aea80229420a80f20
Validity
Not Before: Jun 24 00:00:42 2026 GMT
Not After : Jun 25 00:00:42 2026 GMT
Subject: CN=105054bbb8bffe076978a90f9930c70918c0e120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:16:31:02:9a:9b:93:13:f9:9a:c7:83:72:9a:
2a:a7:87:bd:0b:20:14:6a:6b:4e:51:d7:8f:3a:05:
32:7b:0e:d2:53:87:7c:36:23:0e:9f:68:39:11:48:
e7:e8:ef:12:85:7a:b6:bf:1f:0f:8b:7a:97:d1:2f:
fb:4b:c6:29:bd:7e:9f:45:d7:66:3f:1e:37:60:59:
53:78:8d:d6:4c:a3:01:eb:ad:ab:33:d5:c4:d2:86:
13:64:2e:6c:2a:f7:72:bc:d8:d7:93:77:15:6f:07:
f8:4c:f6:68:9e:b8:fd:5f:36:2b:38:44:51:2c:ff:
46:71:23:63:ca:6b:1c:89:5d:29:2b:92:a7:b1:81:
ba:86:a2:ca:ba:9d:a1:33:8b:31:e3:1e:59:9b:29:
92:a1:e1:f7:02:96:fa:3b:e3:cf:55:96:a6:08:02:
43:eb:9d:5b:a3:27:24:23:fb:98:fd:47:87:f9:30:
fd:bc:3d:eb:9c:da:4b:e4:d4:69:64:02:51:f2:0c:
b8:f3:4f:20:03:a2:31:31:30:d9:39:cf:61:60:fb:
07:c4:ce:4f:09:8e:ff:1a:f3:30:20:89:f0:0e:11:
61:f8:22:0e:d7:34:7b:b3:ba:54:c0:73:30:bd:d4:
fc:66:34:06:6e:b1:4e:dc:7d:e6:31:b4:4c:12:f5:
33:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:50:54:BB:B8:BF:FE:07:69:78:A9:0F:99:30:C7:09:18:C0:E1:20
X509v3 Authority Key Identifier:
keyid:E2:D3:71:C4:A7:AA:A8:55:F8:CC:3B:1A:EA:80:22:94:20:A8:0F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:dd:47:12:68:0a:fd:92:a6:95:1b:8b:c0:4b:f3:83:02:b0:
1c:5b:31:99:83:48:e8:42:b8:e4:a0:fa:73:91:d6:c6:eb:e6:
87:12:eb:21:1c:4e:a9:cf:4e:8d:c7:af:cb:c6:36:de:af:c8:
59:4d:a2:0a:1c:0c:8a:7e:68:71:91:6d:57:5e:0b:e5:ab:3d:
aa:6c:75:f6:38:15:df:06:e7:44:8e:60:52:7b:c9:a7:08:78:
ad:cf:78:18:e8:b8:d8:fb:43:45:62:90:c1:06:1b:5e:0d:89:
f1:eb:30:93:31:f9:00:d2:c9:00:15:81:0c:95:e8:05:4b:79:
64:ce:e8:d3:e2:16:94:aa:12:16:96:6f:9c:f6:32:60:6d:ea:
59:4e:c8:0e:3c:7d:86:d5:4a:e4:83:8a:82:3c:73:1e:0a:09:
4e:c1:28:db:aa:77:a5:2a:8a:0b:a3:18:5c:a9:18:a1:8d:77:
42:05:6b:c8:ca:86:85:cd:fe:66:71:91:9a:29:cb:46:c3:af:
1f:45:56:c8:78:2d:65:bf:24:d5:58:ab:ea:79:3c:1d:9f:89:
28:9f:73:50:ad:4d:1e:f7:c1:bd:4c:d8:24:58:37:a3:17:66:
69:38:83:04:49:25:96:9d:05:13:48:b9:d3:ee:3c:b3:b9:c5:
78:1a:f1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:01 2026 by rpki-client