Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
File: SktRP35EbgzW3P5Wgpu8n-SY0-g.mft (raw, json)
Hash identifier: nd46Blz8Ce34DW7FvcKmCWtC6Kv+m01QHwEpwskxxts=
Subject key identifier: C1:61:B1:F1:9D:40:A2:B7:10:3B:0C:BF:1E:1D:B1:85:33:99:1F:00
Authority key identifier: 4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
Certificate issuer: /CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Certificate serial: 019F21D9F7F1B23C613A2DC8CB613664421D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
Manifest number: 190A
Signing time: Thu 02 Jul 2026 08:02:40 +0000
Manifest this update: Thu 02 Jul 2026 08:02:40 +0000
Manifest next update: Fri 03 Jul 2026 08:02:40 +0000
Files and hashes: 1: HRPEVsU7iC6tuMXxN0847HozIdU.roa (hash: OxioVmKvXuMqhvwUYbfZJ6I+5PFAi5Dfk98WAoviJGQ=)
2: SktRP35EbgzW3P5Wgpu8n-SY0-g.crl (hash: 2BtMCIlHCfcL5eZ5H13QvIoPHhpwYi6FXT/MQ5r4F4o=)
3: eOHnEFB37PmUTgqDEmHYmXjP948.roa (hash: IWFT2sQgL4JJIubs5KJK8kV8gaqaOO+CNZ1mwA1H+Ms=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:d9:f7:f1:b2:3c:61:3a:2d:c8:cb:61:36:64:42:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Validity
Not Before: Jul 2 08:02:40 2026 GMT
Not After : Jul 3 08:02:40 2026 GMT
Subject: CN=c161b1f19d40a2b7103b0cbf1e1db18533991f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:df:6d:21:64:ca:75:93:f0:27:b9:a4:6b:2f:
eb:84:d2:e0:85:9f:46:f4:1b:52:ba:b6:d2:6f:4d:
df:69:3f:5f:91:75:c5:06:92:d5:60:c8:94:0c:55:
a6:93:f0:90:2a:7d:18:eb:8f:c7:b5:2c:31:3f:cf:
f8:6c:d7:3d:81:ae:c4:f3:5e:40:da:34:d0:4b:52:
a1:9f:4f:9d:42:2e:9a:6f:89:a5:9e:86:aa:65:a4:
eb:12:9f:c3:71:40:eb:54:82:e3:b1:51:f1:de:b1:
17:e0:df:b6:55:c8:40:a8:c5:87:e9:dc:c0:77:d3:
1e:7e:b6:ff:c9:f5:91:55:ce:bc:48:96:7e:31:e3:
a0:ec:82:c5:ce:08:b4:25:f8:e8:ea:1b:a2:a6:a1:
ca:fe:0b:0d:ce:98:e6:ec:8e:51:ae:c9:0a:b3:43:
45:68:88:08:a1:68:04:64:e6:cb:af:e6:30:83:03:
a8:63:ce:d3:b6:07:de:22:7f:c5:a5:47:84:43:01:
dc:b4:c8:4e:f0:d3:7a:6c:a8:1d:e0:09:ef:45:50:
c1:f4:9f:27:92:9b:82:dc:8b:3e:43:bb:ae:c6:34:
fb:0a:f3:6e:87:3b:5e:07:bd:65:04:02:cb:84:b4:
3c:58:2e:36:25:bd:61:f1:f3:8e:6f:fa:29:b8:62:
ea:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:61:B1:F1:9D:40:A2:B7:10:3B:0C:BF:1E:1D:B1:85:33:99:1F:00
X509v3 Authority Key Identifier:
keyid:4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6c:ac:3f:eb:dd:11:33:f5:3a:36:93:3c:cb:f4:35:a8:b6:
a4:7f:71:94:0a:15:c3:d7:73:ec:dc:d4:5c:10:bc:94:ec:6e:
58:a5:ca:3b:ff:8f:e5:1c:fe:e0:95:5d:9d:00:27:84:c2:a9:
7d:ec:09:40:59:f1:a7:a0:a5:a4:c8:6d:ee:45:08:e6:ce:75:
fd:6b:01:60:22:c1:82:a7:8c:42:20:57:fd:91:21:a0:c6:06:
2f:15:d9:86:73:bb:ac:01:f8:dc:e1:32:15:c0:1d:a3:ec:cf:
c4:f8:2d:fb:9e:3b:2f:b2:b9:0b:7a:56:ef:3c:6e:0c:ba:c9:
17:b1:39:3a:27:47:3c:30:c5:30:96:d0:d3:c7:5e:62:81:72:
4e:53:97:fb:2c:c3:32:06:89:e5:2f:2e:76:54:d9:6e:a6:c7:
4d:b8:63:c2:dd:d2:98:56:0a:1c:97:e8:24:5d:81:a3:ae:fd:
e0:31:05:34:04:c7:60:c6:fb:84:d1:88:d5:40:7d:8e:0b:47:
4b:49:4e:0c:bc:e7:94:c5:a5:59:b9:1f:57:b2:8d:0f:a3:b8:
49:15:3d:be:f1:d8:5e:be:0f:b3:4b:af:e5:a9:90:cd:63:07:
cf:e6:f5:29:bc:06:a7:6b:32:b9:7e:e0:b0:b5:39:7e:54:09:
ed:71:83:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8h2ffxsjxhOi3Iy2E2ZEIdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNGI1MTNmN2U0NDZlMGNkNmRjZmU1NjgyOWJiYzlmZTQ5
OGQzZTgwHhcNMjYwNzAyMDgwMjQwWhcNMjYwNzAzMDgwMjQwWjAzMTEwLwYDVQQD
EyhjMTYxYjFmMTlkNDBhMmI3MTAzYjBjYmYxZTFkYjE4NTMzOTkxZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd9tIWTKdZPwJ7mkay/rhNLghZ9G
9BtSurbSb03faT9fkXXFBpLVYMiUDFWmk/CQKn0Y64/HtSwxP8/4bNc9ga7E815A
2jTQS1Khn0+dQi6ab4mlnoaqZaTrEp/DcUDrVILjsVHx3rEX4N+2VchAqMWH6dzA
d9Mefrb/yfWRVc68SJZ+MeOg7ILFzgi0Jfjo6huipqHK/gsNzpjm7I5RrskKs0NF
aIgIoWgEZObLr+YwgwOoY87TtgfeIn/FpUeEQwHctMhO8NN6bKgd4AnvRVDB9J8n
kpuC3Is+Q7uuxjT7CvNuhzteB71lBALLhLQ8WC42Jb1h8fOOb/opuGLq7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFhsfGdQKK3EDsMvx4dsYUzmR8AMB8GA1UdIwQY
MBaAFEpLUT9+RG4M1tz+VoKbvJ/kmNPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2t0UlAzNUViZ3pXM1A1V2dwdThuLVNZMC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mYTU1MTktMGUzNS00NGNmLTlkNGYt
MmFlYTc1YzJkZjc4LzEvU2t0UlAzNUViZ3pXM1A1V2dwdThuLVNZMC1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mYTU1MTktMGUzNS00NGNmLTlkNGYtMmFlYTc1YzJkZjc4
LzEvU2t0UlAzNUViZ3pXM1A1V2dwdThuLVNZMC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWysP+vd
ETP1OjaTPMv0Nai2pH9xlAoVw9dz7NzUXBC8lOxuWKXKO/+P5Rz+4JVdnQAnhMKp
fewJQFnxp6ClpMht7kUI5s51/WsBYCLBgqeMQiBX/ZEhoMYGLxXZhnO7rAH43OEy
FcAdo+zPxPgt+547L7K5C3pW7zxuDLrJF7E5OidHPDDFMJbQ08deYoFyTlOX+yzD
MgaJ5S8udlTZbqbHTbhjwt3SmFYKHJfoJF2Bo6794DEFNATHYMb7hNGI1UB9jgtH
S0lODLznlMWlWbkfV7KND6O4SRU9vvHYXr4Ps0uv5amQzWMHz+b1KbwGp2syuX7g
sLU5flQJ7XGDXg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:47:59 2026 by rpki-client