Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
File: 4GiTQCg3lEieQayGqvpEFPik1r4.mft (raw, json)
Hash identifier: 8iue9FBm53lF0m3TYPPoeAD0+aaE3yhfr4lCo/nT1+M=
Subject key identifier: 4D:26:1C:45:C2:CA:2B:AA:DA:EC:DB:17:4B:C5:08:EE:1B:14:FC:D4
Authority key identifier: E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
Certificate issuer: /CN=e0689340283794489e41ac86aafa4414f8a4d6be
Certificate serial: 019F22104E0511D252CEAB265D1513683B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
Manifest number: 1991
Signing time: Thu 02 Jul 2026 09:02:01 +0000
Manifest this update: Thu 02 Jul 2026 09:02:01 +0000
Manifest next update: Fri 03 Jul 2026 09:02:01 +0000
Files and hashes: 1: 4GiTQCg3lEieQayGqvpEFPik1r4.crl (hash: xJ9jc4NLljKuaoEIqPNyP3XF7Kt+DdDRDHshprvv53I=)
2: vC2Im6wO7AYNQfHqhdffdSsKQVk.roa (hash: 7HPvAiJ29pt2x/rNPwngG1GyeF1UIK/JkGxi50lh27k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:10:4e:05:11:d2:52:ce:ab:26:5d:15:13:68:3b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0689340283794489e41ac86aafa4414f8a4d6be
Validity
Not Before: Jul 2 09:02:01 2026 GMT
Not After : Jul 3 09:02:01 2026 GMT
Subject: CN=4d261c45c2ca2baadaecdb174bc508ee1b14fcd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:db:0e:2e:ab:61:bc:20:0e:f2:40:0c:70:
56:dd:83:37:4b:ab:9f:b0:08:23:99:5a:14:63:0d:
2f:d3:f1:14:a9:87:5b:9f:a9:e9:2a:38:c5:71:62:
6c:86:ee:08:52:59:bf:e9:af:22:e9:ee:82:aa:09:
84:0f:9c:3a:e9:27:6a:0c:00:50:3f:69:c9:21:77:
ff:f1:bc:55:0f:3d:68:56:84:6a:08:7b:be:df:77:
16:2b:54:63:18:51:8d:50:91:68:86:9f:55:39:b6:
18:c6:2a:36:18:89:1c:42:20:56:42:e5:a4:de:51:
05:1f:3e:6c:45:4f:7c:1d:b2:ba:5f:a6:ec:39:f0:
28:cf:a2:f2:aa:38:38:64:a2:d9:3e:8b:91:52:01:
e4:c2:e4:ed:72:5e:5a:fe:eb:fa:af:56:30:51:94:
c5:f1:1b:ee:16:21:be:78:4b:67:76:eb:b7:c0:a8:
5d:c3:37:54:13:dd:f8:c1:7f:52:a2:ef:cb:b2:b6:
70:b7:36:22:80:82:8a:83:9c:ab:2c:95:ae:d4:86:
79:a1:59:2b:3f:5e:fb:4a:6f:dc:a2:16:e3:ec:9c:
4d:7b:4b:b9:1e:68:76:fe:25:d4:2a:dd:0b:ba:d0:
87:8a:dd:4a:88:50:c1:ad:1a:f6:af:7c:18:35:0b:
3d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:26:1C:45:C2:CA:2B:AA:DA:EC:DB:17:4B:C5:08:EE:1B:14:FC:D4
X509v3 Authority Key Identifier:
keyid:E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fd:f4:15:2d:2a:94:20:23:e5:5f:93:42:b7:ab:15:93:fe:
bc:be:58:f0:7b:7f:ca:bd:71:87:72:eb:45:e7:56:0d:47:59:
8a:e2:bd:f3:a0:a2:3e:59:e8:01:af:4c:52:b5:0e:87:5e:93:
a2:b3:45:27:c5:ce:67:9c:f0:71:bb:9b:db:53:34:9e:80:62:
a3:b0:48:3b:f2:e7:10:a0:88:8a:af:31:7f:7f:c4:22:7c:77:
0d:d0:54:c0:c9:9e:89:c8:c0:eb:fc:7b:62:ec:9d:32:26:77:
b8:7b:94:dc:cb:2b:1c:71:96:65:c6:0f:3d:d5:73:af:f8:df:
f6:42:8c:c7:af:3d:85:4d:fa:93:15:08:a9:f0:41:14:87:06:
27:d6:56:a5:00:d4:f5:f5:31:96:c5:54:ef:11:89:8d:3d:f4:
45:02:b4:e1:ab:3f:e1:54:8b:66:dd:37:3b:1c:4e:e9:90:d9:
2c:b5:a6:c5:a4:cc:80:dc:57:90:87:8e:24:e5:db:96:f3:7c:
ba:ec:87:a0:2f:0e:9f:50:37:62:8f:2c:be:ce:0d:3e:e2:a7:
b9:e1:68:9c:3a:83:37:25:17:fd:b1:0f:a1:dd:c0:0b:fe:df:
9d:97:45:25:68:77:d8:7c:10:2b:d8:c9:aa:47:f4:80:2e:b0:
a2:43:e4:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8iEE4FEdJSzqsmXRUTaDs6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjg5MzQwMjgzNzk0NDg5ZTQxYWM4NmFhZmE0NDE0Zjhh
NGQ2YmUwHhcNMjYwNzAyMDkwMjAxWhcNMjYwNzAzMDkwMjAxWjAzMTEwLwYDVQQD
Eyg0ZDI2MWM0NWMyY2EyYmFhZGFlY2RiMTc0YmM1MDhlZTFiMTRmY2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/LbDi6rYbwgDvJADHBW3YM3S6uf
sAgjmVoUYw0v0/EUqYdbn6npKjjFcWJshu4IUlm/6a8i6e6CqgmED5w66SdqDABQ
P2nJIXf/8bxVDz1oVoRqCHu+33cWK1RjGFGNUJFohp9VObYYxio2GIkcQiBWQuWk
3lEFHz5sRU98HbK6X6bsOfAoz6Lyqjg4ZKLZPouRUgHkwuTtcl5a/uv6r1YwUZTF
8RvuFiG+eEtnduu3wKhdwzdUE934wX9Sou/LsrZwtzYigIKKg5yrLJWu1IZ5oVkr
P177Sm/cohbj7JxNe0u5Hmh2/iXUKt0LutCHit1KiFDBrRr2r3wYNQs9JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0mHEXCyiuq2uzbF0vFCO4bFPzUMB8GA1UdIwQY
MBaAFOBok0AoN5RInkGshqr6RBT4pNa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdpVFFDZzNsRWllUWF5R3F2cEVGUGlrMXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8wNWFiNjAtZGVhNi00M2EzLTg3ZWYt
N2JmYWViMTk1NDQ1LzEvNEdpVFFDZzNsRWllUWF5R3F2cEVGUGlrMXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8wNWFiNjAtZGVhNi00M2EzLTg3ZWYtN2JmYWViMTk1NDQ1
LzEvNEdpVFFDZzNsRWllUWF5R3F2cEVGUGlrMXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARP30FS0q
lCAj5V+TQrerFZP+vL5Y8Ht/yr1xh3LrRedWDUdZiuK986CiPlnoAa9MUrUOh16T
orNFJ8XOZ5zwcbub21M0noBio7BIO/LnEKCIiq8xf3/EInx3DdBUwMmeicjA6/x7
YuydMiZ3uHuU3MsrHHGWZcYPPdVzr/jf9kKMx689hU36kxUIqfBBFIcGJ9ZWpQDU
9fUxlsVU7xGJjT30RQK04as/4VSLZt03OxxO6ZDZLLWmxaTMgNxXkIeOJOXblvN8
uuyHoC8On1A3Yo8svs4NPuKnueFonDqDNyUX/bEPod3AC/7fnZdFJWh32HwQK9jJ
qkf0gC6wokPkmQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 01:11:56 2026 by rpki-client