Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
File: 4CzXYQ92Hg7SUq57ufMPHisXtec.mft (raw, json)
Hash identifier: VakMaM45qWBtOaY5M46a2uYKy86dFQyrHm1Y6iVc57M=
Subject key identifier: 27:89:54:F3:FB:B8:27:F6:8F:C8:16:51:26:2D:18:1C:25:0E:DC:B6
Authority key identifier: E0:2C:D7:61:0F:76:1E:0E:D2:52:AE:7B:B9:F3:0F:1E:2B:17:B5:E7
Certificate issuer: /CN=e02cd7610f761e0ed252ae7bb9f30f1e2b17b5e7
Certificate serial: 019F216B757DE909365ABF5A9274C33B5004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
Manifest number: 161D
Signing time: Thu 02 Jul 2026 06:01:58 +0000
Manifest this update: Thu 02 Jul 2026 06:01:58 +0000
Manifest next update: Fri 03 Jul 2026 06:01:58 +0000
Files and hashes: 1: 4CzXYQ92Hg7SUq57ufMPHisXtec.crl (hash: Fu4JNnr2vFDC3dO5sqrRkC/BPxJNtCtCT0kAkKqRVEE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:6b:75:7d:e9:09:36:5a:bf:5a:92:74:c3:3b:50:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02cd7610f761e0ed252ae7bb9f30f1e2b17b5e7
Validity
Not Before: Jul 2 06:01:58 2026 GMT
Not After : Jul 3 06:01:58 2026 GMT
Subject: CN=278954f3fbb827f68fc81651262d181c250edcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:b6:34:b9:3e:42:77:2f:26:06:41:7c:ec:
09:26:9b:c0:9e:1a:fa:14:1a:6e:f6:48:6b:2e:1f:
35:fa:f9:5d:55:27:02:8f:28:11:db:5a:48:a6:d3:
60:e2:0a:ce:57:6c:85:f0:32:dc:a1:6a:01:ee:78:
23:df:68:03:c5:66:21:14:9e:07:3e:be:16:d9:29:
5b:0c:22:07:93:f4:57:75:40:ac:97:24:60:a7:31:
e6:11:ff:29:d9:d9:5c:63:84:4d:5a:3c:65:18:ce:
c8:a1:f2:42:7b:8d:81:e7:61:c1:ea:1f:c6:a1:2f:
6f:85:4c:27:f3:b1:1e:44:39:e5:06:31:04:1f:07:
31:3d:89:94:ac:2b:b8:aa:20:29:43:ee:06:5a:14:
e9:1c:7c:c7:b9:7d:fb:ac:22:61:4a:8a:4f:be:79:
24:34:f7:fe:fa:d8:13:46:ef:8c:d3:fb:a6:ed:da:
df:63:75:4f:c2:1d:23:7d:a4:11:6f:da:26:2a:e7:
c4:be:48:b0:fd:46:1e:74:40:c1:a6:0e:53:e1:7d:
05:d3:76:9b:65:24:1f:d7:8d:90:e9:26:13:3f:fb:
18:bd:cb:7e:f0:a0:62:ed:42:83:94:ce:10:db:26:
9a:af:ea:73:63:db:e6:40:1d:cc:bc:e7:bb:ed:ef:
68:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:89:54:F3:FB:B8:27:F6:8F:C8:16:51:26:2D:18:1C:25:0E:DC:B6
X509v3 Authority Key Identifier:
keyid:E0:2C:D7:61:0F:76:1E:0E:D2:52:AE:7B:B9:F3:0F:1E:2B:17:B5:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:41:da:03:2f:d5:2b:6f:a0:57:8b:90:1b:7e:07:3a:e5:29:
1d:98:b1:5f:eb:05:67:b8:06:57:87:f9:78:ad:c2:0c:2f:4d:
0d:86:0f:5b:3f:6a:9f:2c:a3:f4:38:2d:bc:04:3d:6d:20:5b:
63:67:4a:ab:f6:ff:a9:4e:8c:21:91:4a:03:d9:22:20:16:9c:
a8:0b:f4:74:9e:06:e1:c9:94:7c:91:22:86:6b:aa:92:ca:56:
80:2c:c7:ec:0e:51:f9:e8:ae:a9:e7:06:2f:19:ef:25:c7:bf:
6a:9d:ac:8d:f4:2d:cd:6b:4c:0f:64:e3:7d:d4:3a:21:b4:d5:
c8:c6:2e:c0:86:b3:fc:d9:94:30:40:52:7d:38:59:cb:b2:5d:
c3:7b:6b:7d:21:1d:fe:47:7d:94:71:e1:06:1d:13:c6:f1:65:
2a:eb:49:45:5f:71:4a:ee:27:51:c6:f9:63:6f:82:cc:fa:a2:
08:e6:9c:c5:af:d0:56:c6:de:77:7f:e1:a4:13:ad:12:8f:49:
e4:7a:d3:f8:1a:bf:9e:c1:2f:80:1b:4d:7d:03:40:54:cf:b2:
a6:62:fa:18:63:d8:3e:29:4a:bb:c2:9a:8a:26:da:64:a4:03:
b3:fc:83:ff:61:8f:2f:a6:df:49:22:1e:38:ee:75:2a:a2:b3:
7e:2d:9b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:21 2026 by rpki-client