Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.mft
File: PpeXKwFXszTha_kfKifuDi3BOag.mft (raw, json)
Hash identifier: h3H2dPFvD8gFv5qgtAr7lcB4ubK1D3xuMduGFaFrKhQ=
Subject key identifier: DB:73:E5:AD:BE:B4:16:78:3E:E4:1D:DE:3E:4E:84:D5:10:08:CC:E7
Authority key identifier: 3E:97:97:2B:01:57:B3:34:E1:6B:F9:1F:2A:27:EE:0E:2D:C1:39:A8
Certificate issuer: /CN=3e97972b0157b334e16bf91f2a27ee0e2dc139a8
Certificate serial: 019CD50BE2FE2431793445C5064B3E48AFF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PpeXKwFXszTha_kfKifuDi3BOag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.mft
Manifest number: 04C9
Signing time: Tue 10 Mar 2026 00:00:51 +0000
Manifest this update: Tue 10 Mar 2026 00:00:51 +0000
Manifest next update: Wed 11 Mar 2026 00:00:51 +0000
Files and hashes: 1: PpeXKwFXszTha_kfKifuDi3BOag.crl (hash: ewu3ycRogFIpDiqgWCy/VY/OuooDbD0PThM/yGKCjaE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d5:0b:e2:fe:24:31:79:34:45:c5:06:4b:3e:48:af:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e97972b0157b334e16bf91f2a27ee0e2dc139a8
Validity
Not Before: Mar 10 00:00:51 2026 GMT
Not After : Mar 11 00:00:51 2026 GMT
Subject: CN=db73e5adbeb416783ee41dde3e4e84d51008cce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:47:12:37:68:1f:38:b2:24:92:35:ea:7d:cd:
d1:0f:45:f0:29:5e:3c:31:7b:88:09:ad:ee:df:16:
e9:ad:fe:2d:e0:47:1f:05:44:41:59:70:67:fb:9a:
f3:58:90:e3:e6:43:0d:82:5e:c2:2a:c4:c4:d6:d3:
a8:91:38:9b:b8:8f:c5:f4:99:c8:11:87:74:1e:e5:
29:28:f9:19:39:a8:ec:6b:7c:ea:63:ea:19:db:e8:
6d:18:c4:2b:6f:ab:6a:4f:30:cc:d0:99:60:45:4a:
3b:3d:86:71:61:14:a2:37:92:a0:5a:ff:e6:24:d5:
04:10:e5:46:e1:ec:32:d1:77:05:d3:dd:3a:1c:35:
80:95:83:95:04:77:da:5f:3d:7b:83:28:20:bf:01:
a5:e8:12:91:11:68:f3:9b:b2:81:70:e4:fb:d6:0f:
4d:1d:b8:2e:c8:8e:e3:94:14:62:2b:e8:8b:d8:2a:
33:d5:30:81:98:8c:cb:bb:10:fe:f8:31:9b:bd:d7:
2f:9c:56:77:1b:49:c0:46:a7:3a:0a:76:ae:40:0d:
fb:a3:b5:45:83:30:52:d1:4a:1d:86:d1:7a:44:ef:
ce:e2:84:ec:ac:5b:b0:d1:4e:3f:ff:87:1b:73:21:
f2:48:5a:6d:c9:2d:c2:e4:76:b8:68:d2:87:21:0b:
04:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:73:E5:AD:BE:B4:16:78:3E:E4:1D:DE:3E:4E:84:D5:10:08:CC:E7
X509v3 Authority Key Identifier:
keyid:3E:97:97:2B:01:57:B3:34:E1:6B:F9:1F:2A:27:EE:0E:2D:C1:39:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpeXKwFXszTha_kfKifuDi3BOag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:09:f2:de:af:9c:81:e6:60:cf:62:69:bb:a8:fa:ca:1b:61:
16:19:d0:8b:4c:e5:2e:a1:ce:ed:ca:1a:c6:e4:4e:dc:5e:f9:
0d:50:1b:e9:7b:c4:76:8b:8d:0d:3d:93:19:5d:cf:e0:c4:56:
4a:b7:1a:a2:54:83:90:6f:d1:39:b0:5a:d8:96:cc:bf:3b:dc:
c7:6b:c1:1d:9a:4b:57:4e:64:12:ad:be:61:9c:7c:53:b6:e8:
92:f1:77:ee:af:9b:04:0b:1d:7a:10:d0:c4:b8:5a:ff:32:e0:
2b:87:17:85:8d:2d:46:4f:4d:c7:a1:2f:e7:1c:af:58:c8:f9:
14:e8:f1:59:e2:44:3b:30:11:5c:f9:28:47:9f:d4:db:f2:12:
b8:2f:86:6f:d8:9d:0c:ea:eb:fc:25:31:62:7c:c1:0c:82:b9:
b6:fe:c3:8a:05:5b:82:73:fd:b3:09:6a:32:51:73:aa:a8:33:
ee:55:62:a6:2e:d7:da:ef:dd:cf:5f:69:53:15:c5:58:28:2e:
62:b1:96:28:c0:00:82:3c:ee:10:58:5c:06:a7:7e:f8:4f:ac:
01:04:6f:58:0f:69:9f:dd:0e:ce:17:0b:40:af:39:40:f0:c4:
96:02:8d:fc:e0:65:68:90:cf:40:8a:8c:a2:39:9b:66:53:04:
b5:13:e3:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzVC+L+JDF5NEXFBks+SK/3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlOTc5NzJiMDE1N2IzMzRlMTZiZjkxZjJhMjdlZTBlMmRj
MTM5YTgwHhcNMjYwMzEwMDAwMDUxWhcNMjYwMzExMDAwMDUxWjAzMTEwLwYDVQQD
EyhkYjczZTVhZGJlYjQxNjc4M2VlNDFkZGUzZTRlODRkNTEwMDhjY2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkcSN2gfOLIkkjXqfc3RD0XwKV48
MXuICa3u3xbprf4t4EcfBURBWXBn+5rzWJDj5kMNgl7CKsTE1tOokTibuI/F9JnI
EYd0HuUpKPkZOajsa3zqY+oZ2+htGMQrb6tqTzDM0JlgRUo7PYZxYRSiN5KgWv/m
JNUEEOVG4ewy0XcF0906HDWAlYOVBHfaXz17gyggvwGl6BKREWjzm7KBcOT71g9N
HbguyI7jlBRiK+iL2Coz1TCBmIzLuxD++DGbvdcvnFZ3G0nARqc6CnauQA37o7VF
gzBS0UodhtF6RO/O4oTsrFuw0U4//4cbcyHySFptyS3C5Ha4aNKHIQsEiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtz5a2+tBZ4PuQd3j5OhNUQCMznMB8GA1UdIwQY
MBaAFD6XlysBV7M04Wv5Hyon7g4twTmoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHBlWEt3RlhzelRoYV9rZktpZnVEaTNCT2FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yN2ViYTEtM2VhMS00MTkxLTk2OTkt
OWYwMDQxMDFjZTRjLzEvUHBlWEt3RlhzelRoYV9rZktpZnVEaTNCT2FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8yN2ViYTEtM2VhMS00MTkxLTk2OTktOWYwMDQxMDFjZTRj
LzEvUHBlWEt3RlhzelRoYV9rZktpZnVEaTNCT2FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQny3q+c
geZgz2Jpu6j6yhthFhnQi0zlLqHO7coaxuRO3F75DVAb6XvEdouNDT2TGV3P4MRW
SrcaolSDkG/RObBa2JbMvzvcx2vBHZpLV05kEq2+YZx8U7bokvF37q+bBAsdehDQ
xLha/zLgK4cXhY0tRk9Nx6Ev5xyvWMj5FOjxWeJEOzARXPkoR5/U2/ISuC+Gb9id
DOrr/CUxYnzBDIK5tv7DigVbgnP9swlqMlFzqqgz7lVipi7X2u/dz19pUxXFWCgu
YrGWKMAAgjzuEFhcBqd++E+sAQRvWA9pn90OzhcLQK85QPDElgKN/OBlaJDPQIqM
ojmbZlMEtRPjNA==
-----END CERTIFICATE-----
Generated at Thu Aug 13 01:40:16 2026 by rpki-client