Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
File: YH4TV4xoDumP2q0gI3DxDjwoKvw.mft (raw, json)
Hash identifier: XdpmWf1+rBBEiVYllFIsDFZxTw0HQk+wGf6xzMUP0BE=
Subject key identifier: 09:7E:7F:4B:4E:07:65:E6:16:0D:8D:E7:E3:9D:8D:9C:15:3B:40:B7
Authority key identifier: 60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC
Certificate issuer: /CN=607e13578c680ee98fdaad202370f10e3c282afc
Certificate serial: 019D4C22CD6034AA7A590BB6DE5E58C157A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
Manifest number: 1182
Signing time: Thu 02 Apr 2026 03:00:42 +0000
Manifest this update: Thu 02 Apr 2026 03:00:42 +0000
Manifest next update: Fri 03 Apr 2026 03:00:42 +0000
Files and hashes: 1: YH4TV4xoDumP2q0gI3DxDjwoKvw.crl (hash: cE7SQncsyKzq3QCC+G2sKrh0SzWrSMpug4eVjThwQNQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4c:22:cd:60:34:aa:7a:59:0b:b6:de:5e:58:c1:57:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e13578c680ee98fdaad202370f10e3c282afc
Validity
Not Before: Apr 2 03:00:42 2026 GMT
Not After : Apr 3 03:00:42 2026 GMT
Subject: CN=097e7f4b4e0765e6160d8de7e39d8d9c153b40b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:cb:b0:6d:e4:43:84:50:a4:c6:f7:35:3f:
3b:6d:d5:43:7b:ee:3b:1b:f3:b8:95:da:6f:9d:82:
6e:85:c4:3a:0d:f5:ce:4c:2c:ec:7a:c4:40:f1:2d:
40:46:57:14:bb:86:d0:ed:c4:4b:fc:62:21:0c:f6:
c9:10:ca:65:b5:43:eb:c9:6a:92:8c:01:0b:a9:78:
53:ae:71:11:5e:52:05:12:ce:5e:66:a6:85:d5:f8:
76:5c:2f:e7:0e:13:e6:d3:5c:26:2d:12:18:99:3e:
80:72:fc:92:f0:1c:bf:6b:3b:46:9d:39:7d:28:92:
0e:7e:63:c1:3a:47:6e:d4:43:a0:e2:c5:e7:db:2c:
8b:cf:00:4a:5c:52:64:81:62:52:d3:5b:d2:8f:44:
d0:a8:60:c8:32:fd:56:82:be:26:46:6b:89:7c:35:
9b:82:07:1c:ec:b4:f2:fb:4c:ca:99:43:dd:9c:55:
ad:59:0f:af:b2:01:03:3e:2d:e7:d8:02:c6:49:c5:
61:d1:0b:a6:6f:7a:f3:a6:ee:c9:7c:eb:02:54:33:
dc:53:b8:21:58:66:b9:68:59:f8:cd:69:8e:0a:e9:
3f:09:a6:a4:24:d1:57:30:94:6d:b3:6c:a0:24:4b:
d5:d2:71:d2:92:ae:2b:18:8f:ee:4e:dc:70:c7:cf:
02:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7E:7F:4B:4E:07:65:E6:16:0D:8D:E7:E3:9D:8D:9C:15:3B:40:B7
X509v3 Authority Key Identifier:
keyid:60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:90:ef:34:c9:55:f1:8e:19:f4:8d:5c:dd:dc:75:1d:2a:6d:
4e:cc:ae:6c:70:d6:73:64:7c:62:56:6e:30:b4:5b:7c:ed:c1:
31:cd:f2:cf:58:f4:a5:de:a5:e0:d0:ab:2e:86:19:26:b9:02:
d2:95:c2:20:67:65:02:76:54:39:1f:ec:3b:f0:1b:63:8e:e7:
c4:08:53:15:a9:34:90:72:49:92:2e:72:cd:59:f3:e2:fd:4f:
d4:fd:7c:b7:31:1c:cd:3c:bf:58:7e:18:59:90:c2:ed:cb:3f:
3c:67:62:6d:0e:32:0c:56:44:16:7c:50:93:0e:95:1a:ee:06:
e0:55:9b:66:59:1e:af:65:02:91:c7:02:3e:5c:c9:c5:10:75:
52:b7:a6:e6:2b:38:24:4c:46:94:a8:86:ba:c0:5b:0d:95:b4:
5d:64:16:bb:d6:e2:1f:f9:ca:d7:b7:b0:d0:f9:9d:6f:4e:cd:
ee:cf:86:34:32:d1:35:c7:b2:4c:26:d4:da:86:9f:7a:ac:84:
31:6b:cf:c8:d1:c4:7c:51:8f:1f:8a:ea:0b:66:df:88:c8:6c:
e8:fd:6e:4d:ec:44:f5:a6:7f:27:b2:f1:91:61:9d:82:8c:4b:
6b:38:5e:b5:9e:13:2a:0e:18:d6:f1:67:44:f7:cf:1e:c1:0d:
84:86:e3:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ1MIs1gNKp6WQu23l5YwVejMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwN2UxMzU3OGM2ODBlZTk4ZmRhYWQyMDIzNzBmMTBlM2My
ODJhZmMwHhcNMjYwNDAyMDMwMDQyWhcNMjYwNDAzMDMwMDQyWjAzMTEwLwYDVQQD
EygwOTdlN2Y0YjRlMDc2NWU2MTYwZDhkZTdlMzlkOGQ5YzE1M2I0MGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqTLsG3kQ4RQpMb3NT87bdVDe+47
G/O4ldpvnYJuhcQ6DfXOTCzsesRA8S1ARlcUu4bQ7cRL/GIhDPbJEMpltUPryWqS
jAELqXhTrnERXlIFEs5eZqaF1fh2XC/nDhPm01wmLRIYmT6AcvyS8By/aztGnTl9
KJIOfmPBOkdu1EOg4sXn2yyLzwBKXFJkgWJS01vSj0TQqGDIMv1Wgr4mRmuJfDWb
ggcc7LTy+0zKmUPdnFWtWQ+vsgEDPi3n2ALGScVh0Qumb3rzpu7JfOsCVDPcU7gh
WGa5aFn4zWmOCuk/CaakJNFXMJRts2ygJEvV0nHSkq4rGI/uTtxwx88CaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAl+f0tOB2XmFg2N5+OdjZwVO0C3MB8GA1UdIwQY
MBaAFGB+E1eMaA7pj9qtICNw8Q48KCr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUg0VFY0eG9EdW1QMnEwZ0kzRHhEandvS3Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9hMjFiYmUtYmE0ZC00ZTAzLWJlZjgt
YmFmZmUzYjY3N2RmLzEvWUg0VFY0eG9EdW1QMnEwZ0kzRHhEandvS3Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9hMjFiYmUtYmE0ZC00ZTAzLWJlZjgtYmFmZmUzYjY3N2Rm
LzEvWUg0VFY0eG9EdW1QMnEwZ0kzRHhEandvS3Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqZDvNMlV
8Y4Z9I1c3dx1HSptTsyubHDWc2R8YlZuMLRbfO3BMc3yz1j0pd6l4NCrLoYZJrkC
0pXCIGdlAnZUOR/sO/AbY47nxAhTFak0kHJJki5yzVnz4v1P1P18tzEczTy/WH4Y
WZDC7cs/PGdibQ4yDFZEFnxQkw6VGu4G4FWbZlker2UCkccCPlzJxRB1Urem5is4
JExGlKiGusBbDZW0XWQWu9biH/nK17ew0Pmdb07N7s+GNDLRNceyTCbU2oafeqyE
MWvPyNHEfFGPH4rqC2bfiMhs6P1uTexE9aZ/J7LxkWGdgoxLazhetZ4TKg4Y1vFn
RPfPHsENhIbj4Q==
-----END CERTIFICATE-----
Generated at Mon Jul 27 05:30:11 2026 by rpki-client