Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft
File: KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft (raw, json)
Hash identifier: NPQp3/KeRduQKeVti3iNAxkTP/7gvU7UFa1bLgcywI4=
Subject key identifier: 48:3A:7E:AB:7B:EB:06:32:AC:EA:6A:8E:AA:27:33:A5:71:7A:71:FA
Authority key identifier: 2A:14:91:5E:27:F8:BF:40:5C:CF:CA:94:B6:C5:30:BD:4D:3E:54:C0
Certificate issuer: /CN=2a14915e27f8bf405ccfca94b6c530bd4d3e54c0
Certificate serial: 019B9177DC9A4B6C023E257E0F3D30F53E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhSRXif4v0Bcz8qUtsUwvU0-VMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft
Manifest number: 09E9
Signing time: Tue 06 Jan 2026 04:01:50 +0000
Manifest this update: Tue 06 Jan 2026 04:01:50 +0000
Manifest next update: Wed 07 Jan 2026 04:01:50 +0000
Files and hashes: 1: KhSRXif4v0Bcz8qUtsUwvU0-VMA.crl (hash: Lo3KCW9RFTaJwA6wyzUGiG/grQtv6ZvVHOyfG5yxRRY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:91:77:dc:9a:4b:6c:02:3e:25:7e:0f:3d:30:f5:3e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a14915e27f8bf405ccfca94b6c530bd4d3e54c0
Validity
Not Before: Jan 6 04:01:50 2026 GMT
Not After : Jan 7 04:01:50 2026 GMT
Subject: CN=483a7eab7beb0632acea6a8eaa2733a5717a71fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0e:bf:f9:53:92:ac:3a:a6:b6:0b:e1:00:45:
49:84:dc:83:92:24:87:47:7f:cf:93:75:4e:9c:ae:
0a:e6:78:1f:56:be:72:23:f8:14:71:bd:de:d6:ab:
41:d4:a9:49:a0:98:b2:e9:c8:93:c2:94:69:20:ec:
15:4a:18:20:cd:97:b9:0b:90:cd:21:f9:2d:de:37:
a8:90:15:af:7a:c4:5a:39:17:50:45:5f:c7:12:8b:
92:75:bd:dd:93:d7:fb:42:9a:ae:1a:6d:40:6b:8d:
88:2b:bb:8d:2b:e7:52:a0:a6:b8:ad:8c:5c:df:cf:
3d:7b:47:b0:a0:33:b9:22:7a:11:91:bb:92:11:3b:
d6:ea:fa:2d:90:5d:dd:e2:79:72:7a:04:65:4a:a7:
1b:63:e8:e2:e8:29:c2:c3:2f:3f:18:6d:f7:bf:fb:
7a:f3:d8:ae:f4:a4:4e:58:29:fb:8d:43:b9:bc:49:
bd:c3:54:22:b6:ab:6b:bc:82:b1:2f:ce:9c:ed:c5:
0c:bc:72:27:60:e1:19:cb:08:c5:48:e0:2a:49:7c:
91:e0:03:41:4e:d3:d1:f2:35:a8:d6:92:18:e8:42:
86:24:e3:1c:3e:32:ed:af:15:47:8b:57:64:91:c2:
35:73:73:ce:18:71:83:13:cf:ee:85:0f:e9:84:86:
66:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3A:7E:AB:7B:EB:06:32:AC:EA:6A:8E:AA:27:33:A5:71:7A:71:FA
X509v3 Authority Key Identifier:
keyid:2A:14:91:5E:27:F8:BF:40:5C:CF:CA:94:B6:C5:30:BD:4D:3E:54:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhSRXif4v0Bcz8qUtsUwvU0-VMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:60:cd:f0:fd:2a:9a:12:a3:8d:be:13:b1:9e:cf:33:38:b4:
17:73:21:4b:4a:02:ba:f0:d9:ee:74:e2:f3:d9:b7:ea:85:64:
42:dd:4f:14:a1:f5:49:cd:16:79:dc:00:ce:3d:54:7e:25:be:
8f:62:18:1a:f9:65:b1:39:69:c4:3c:ba:b1:91:02:23:11:57:
0b:c7:de:36:3a:34:f0:a7:f1:b6:b6:ea:5b:53:66:48:59:62:
32:79:96:d1:99:e0:28:2d:e8:5c:8c:9c:db:1f:db:2b:7b:ef:
33:d8:8f:a4:23:22:e1:b3:d7:19:e1:59:54:33:d8:48:8d:b5:
45:ea:db:8a:a3:95:17:15:ef:5f:45:7e:8f:7a:bb:3b:5b:a4:
8f:08:ae:ab:ba:87:9e:c2:0a:74:5c:5d:d6:41:3f:a5:39:94:
fb:d0:54:9f:81:a0:44:38:34:dd:c5:7d:32:b5:f9:bf:8e:b1:
2c:e8:67:1c:6f:6f:fe:d4:7d:51:94:49:31:97:0d:25:dd:06:
68:12:4f:6d:a2:e5:12:18:84:e9:8a:d8:03:a4:b9:f5:bd:99:
34:58:22:5f:74:19:5d:e8:31:c0:31:86:3a:cd:d4:31:42:6d:
00:b3:74:fa:b4:3b:76:8e:70:a1:62:f0:6f:8c:a4:25:19:b3:
6f:40:21:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZuRd9yaS2wCPiV+Dz0w9T4fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMTQ5MTVlMjdmOGJmNDA1Y2NmY2E5NGI2YzUzMGJkNGQz
ZTU0YzAwHhcNMjYwMTA2MDQwMTUwWhcNMjYwMTA3MDQwMTUwWjAzMTEwLwYDVQQD
Eyg0ODNhN2VhYjdiZWIwNjMyYWNlYTZhOGVhYTI3MzNhNTcxN2E3MWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2A6/+VOSrDqmtgvhAEVJhNyDkiSH
R3/Pk3VOnK4K5ngfVr5yI/gUcb3e1qtB1KlJoJiy6ciTwpRpIOwVShggzZe5C5DN
Ifkt3jeokBWvesRaORdQRV/HEouSdb3dk9f7QpquGm1Aa42IK7uNK+dSoKa4rYxc
3889e0ewoDO5InoRkbuSETvW6votkF3d4nlyegRlSqcbY+ji6CnCwy8/GG33v/t6
89iu9KROWCn7jUO5vEm9w1QitqtrvIKxL86c7cUMvHInYOEZywjFSOAqSXyR4ANB
TtPR8jWo1pIY6EKGJOMcPjLtrxVHi1dkkcI1c3POGHGDE8/uhQ/phIZmAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEg6fqt76wYyrOpqjqonM6VxenH6MB8GA1UdIwQY
MBaAFCoUkV4n+L9AXM/KlLbFML1NPlTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2hTUlhpZjR2MEJjejhxVXRzVXd2VTAtVk1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80NzIxYWMtYzRmZC00NmFmLTlhOTEt
NDBhZTkyNDdjYzY0LzEvS2hTUlhpZjR2MEJjejhxVXRzVXd2VTAtVk1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80NzIxYWMtYzRmZC00NmFmLTlhOTEtNDBhZTkyNDdjYzY0
LzEvS2hTUlhpZjR2MEJjejhxVXRzVXd2VTAtVk1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmDN8P0q
mhKjjb4TsZ7PMzi0F3MhS0oCuvDZ7nTi89m36oVkQt1PFKH1Sc0WedwAzj1UfiW+
j2IYGvllsTlpxDy6sZECIxFXC8feNjo08KfxtrbqW1NmSFliMnmW0ZngKC3oXIyc
2x/bK3vvM9iPpCMi4bPXGeFZVDPYSI21RerbiqOVFxXvX0V+j3q7O1ukjwiuq7qH
nsIKdFxd1kE/pTmU+9BUn4GgRDg03cV9MrX5v46xLOhnHG9v/tR9UZRJMZcNJd0G
aBJPbaLlEhiE6YrYA6S59b2ZNFgiX3QZXegxwDGGOs3UMUJtALN0+rQ7do5woWLw
b4ykJRmzb0Ahpw==
-----END CERTIFICATE-----
Generated at Thu Mar 19 23:20:16 2026 by rpki-client