Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
File: 40Y1lMN3zViH3pB4tLLozcTTrls.mft (raw, json)
Hash identifier: tkZT4YVWU3F+fOh5mgVVabfOMopAQuU9YfMVMLrrSBc=
Subject key identifier: 17:0C:FC:0C:94:66:67:14:69:36:CD:EA:5C:7C:D9:9B:58:91:C8:B2
Authority key identifier: E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B
Certificate issuer: /CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b
Certificate serial: 019F2247F81DD959B36D90CE9BC155F1E4D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
Manifest number: 07D1
Signing time: Thu 02 Jul 2026 10:02:49 +0000
Manifest this update: Thu 02 Jul 2026 10:02:49 +0000
Manifest next update: Fri 03 Jul 2026 10:02:49 +0000
Files and hashes: 1: 40Y1lMN3zViH3pB4tLLozcTTrls.crl (hash: Vq4PJpM3EheirAVZQLkKHbCkeN7I26+mE67c9dDVp0w=)
2: Yvzp8k7tse_tqbxpodE5jMc5Rds.roa (hash: XO+F/9KhQMsBIWzLbEjgPyX2zSSbeZO2QWXWRdGBXsc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:47:f8:1d:d9:59:b3:6d:90:ce:9b:c1:55:f1:e4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b
Validity
Not Before: Jul 2 10:02:49 2026 GMT
Not After : Jul 3 10:02:49 2026 GMT
Subject: CN=170cfc0c946667146936cdea5c7cd99b5891c8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:9a:8c:af:0e:07:05:e3:08:a8:d5:62:0c:
53:5d:7c:b1:db:31:0c:b0:31:f8:62:56:29:44:c7:
45:11:94:4d:65:a7:8b:5e:2b:61:6f:26:eb:5b:27:
25:00:ab:93:03:2c:0d:12:54:3a:66:88:fb:d1:b0:
64:fa:15:3f:e1:84:b7:36:05:4d:8c:ed:54:4d:0f:
f2:9b:58:df:d5:07:e4:c1:26:df:4f:39:39:72:01:
3c:6b:fe:a8:4d:b0:be:32:09:d7:6d:03:aa:84:f3:
15:78:9e:89:12:14:8b:25:db:ce:8b:42:dd:94:1e:
d9:79:b9:1d:f8:99:6f:e2:99:47:dd:77:fa:20:70:
08:7b:2d:54:9f:4f:23:ba:ac:9b:27:9a:06:9a:d6:
da:48:25:c1:8b:98:3e:3a:a8:6d:3c:86:5c:23:82:
20:e4:0e:6e:7d:ff:77:b2:44:68:68:5b:69:3b:19:
5b:ca:c1:e8:71:fd:9e:cf:be:9a:70:16:e1:28:74:
77:e3:e2:d3:33:e5:83:5a:50:92:bd:15:aa:d0:05:
62:e8:40:c7:37:d7:c6:34:c5:4e:ea:88:58:06:b4:
a7:35:9f:a3:8f:c9:9d:e7:7d:4b:f0:8b:05:11:d6:
4c:9f:d0:c6:18:9d:f0:b6:3b:56:b0:5e:23:f6:55:
ed:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0C:FC:0C:94:66:67:14:69:36:CD:EA:5C:7C:D9:9B:58:91:C8:B2
X509v3 Authority Key Identifier:
keyid:E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:bf:db:e5:c9:73:4b:34:10:92:00:53:5d:1d:01:99:75:f8:
b2:c3:94:b5:82:60:d1:7e:6e:19:8f:59:48:e7:93:29:9d:42:
a5:68:a8:d4:e7:9f:aa:e0:93:fe:6f:da:9a:5e:a4:fb:a5:70:
0f:10:43:02:f7:b9:be:c0:a3:c9:d6:70:81:d9:ea:57:ad:9a:
c2:72:17:f7:60:a5:7f:88:2c:91:b1:99:7c:e9:54:31:89:90:
d1:51:0a:90:f2:9e:cf:01:57:b2:b4:cb:fc:4b:ae:af:d7:2e:
8e:5d:cf:46:8b:01:0d:24:91:89:f4:40:a0:c5:32:1f:0a:9b:
39:0a:1d:4f:5e:1f:66:58:eb:13:8d:69:22:6b:7a:4e:a7:0f:
72:13:5c:ef:e5:00:c3:60:de:6e:dd:94:a0:01:52:8b:98:d0:
93:85:5b:ec:ad:73:f1:bb:9d:b7:10:c4:90:18:36:d8:e4:f2:
27:73:7d:42:77:18:92:0e:2b:69:a0:e1:a8:14:bd:ed:01:9b:
65:44:dc:6b:f5:c6:24:c3:4e:53:1f:1c:08:db:70:b4:e4:6f:
b3:dd:76:9b:f1:0c:f8:5f:06:12:22:f6:7c:1c:0c:02:7f:d9:
d0:5c:08:c9:28:49:25:a2:4a:ef:19:d5:6e:cf:14:0e:87:6d:
ef:57:c2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:17 2026 by rpki-client