Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
File: 48hcN60lJ0xxLCRHPgeK3Ocywd0.mft (raw, json)
Hash identifier: 796O02Nds5R1KcmIsOwcgy44BM+gQGTDix8rt8jeMrk=
Subject key identifier: 35:D3:53:BF:B1:E6:C1:41:91:26:B8:4B:E5:73:5E:48:68:D1:E2:A4
Authority key identifier: E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
Certificate issuer: /CN=e3c85c37ad25274c712c24473e078adce732c1dd
Certificate serial: 019F227D225EED28867E406C1AA9E2D23A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
Manifest number: 198C
Signing time: Thu 02 Jul 2026 11:00:53 +0000
Manifest this update: Thu 02 Jul 2026 11:00:53 +0000
Manifest next update: Fri 03 Jul 2026 11:00:53 +0000
Files and hashes: 1: 48hcN60lJ0xxLCRHPgeK3Ocywd0.crl (hash: PAH43L2pGhrMV6KvARJjx5wHv28BoyqrOYBFzTLn4dQ=)
2: Bh71MIA76HLsWqh-KULy4KIN5yE.roa (hash: 2dPXwrTJcmE8t9PcfYM/2V6FylW3n+nURaEmxVQppFI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:7d:22:5e:ed:28:86:7e:40:6c:1a:a9:e2:d2:3a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3c85c37ad25274c712c24473e078adce732c1dd
Validity
Not Before: Jul 2 11:00:53 2026 GMT
Not After : Jul 3 11:00:53 2026 GMT
Subject: CN=35d353bfb1e6c1419126b84be5735e4868d1e2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cc:9c:2b:13:cc:66:01:ad:e0:c3:1b:8b:26:
d2:04:cd:5a:67:8f:12:3e:8d:b6:a4:cd:be:86:53:
69:98:08:00:a1:78:15:19:f8:d0:9f:a8:cf:a0:9c:
1f:ae:5a:0d:6f:38:52:a3:e0:5e:8f:57:28:dc:61:
14:98:7f:81:fe:a5:99:ba:d5:a3:23:a4:8b:80:f3:
b6:70:e3:31:95:aa:da:3d:ff:bf:43:b8:76:e1:4d:
d2:6b:49:9c:82:70:0f:46:93:6e:03:28:1e:e6:b7:
e3:9e:8f:54:5c:48:b4:e9:c1:6c:b7:3b:11:46:70:
44:bc:3f:fe:bd:0d:39:aa:41:fb:c6:29:51:32:11:
3d:03:e6:90:02:cd:c3:ed:fb:3b:fb:59:1d:13:9a:
3c:d0:8c:45:e1:58:f2:73:11:af:cc:61:ef:d9:02:
f5:22:fa:a8:c5:73:3b:2f:6e:13:02:8b:40:7b:ec:
bc:a5:09:c0:1b:1c:b7:63:5e:25:29:c1:da:08:99:
ea:4f:c7:ee:35:bf:e8:b5:b5:6b:65:5b:ca:de:94:
fc:ae:f7:51:90:ee:fd:f5:75:27:45:a4:fe:03:43:
05:fa:1e:ec:e4:4d:a9:4d:8f:df:33:30:8d:1a:f1:
31:0f:cb:91:4b:6c:85:49:5b:16:dc:03:c7:ed:6f:
d6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D3:53:BF:B1:E6:C1:41:91:26:B8:4B:E5:73:5E:48:68:D1:E2:A4
X509v3 Authority Key Identifier:
keyid:E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:9c:89:fd:22:ac:d9:8c:c1:3c:66:88:ad:c7:ba:f0:fb:8c:
a9:83:bd:e4:15:49:b2:84:22:8b:56:9e:19:f5:3c:e9:39:1e:
0c:4f:8a:75:a4:f8:1b:45:f0:e1:9c:14:c4:7a:d0:f5:9c:6e:
ac:36:b4:ea:c2:7b:0c:b8:08:9b:fb:54:05:74:94:f4:d8:51:
a9:7e:9f:15:5c:d4:fc:2a:37:0f:63:3b:b7:08:29:52:f2:53:
a8:6d:9b:b4:16:d0:2d:c3:1d:6f:71:7b:99:35:50:ca:8b:42:
ea:6e:10:5f:d0:bf:c8:94:fc:26:e7:2a:53:87:2f:cb:93:47:
5f:57:c0:b5:dd:a7:34:1a:5e:6a:63:24:7c:51:83:c7:8b:22:
df:67:2b:06:51:12:5a:ad:de:9c:d3:86:c2:26:96:c9:b6:d5:
7e:76:7c:a3:19:de:00:a7:b8:42:be:e2:a0:44:ea:e0:93:20:
5c:0c:27:a0:a1:84:8f:44:d4:e5:be:0a:33:ea:1b:38:a3:a3:
14:f5:5a:04:c5:61:54:c3:8d:6c:8b:30:c8:be:39:a6:34:40:
a0:f3:a2:31:2c:0c:17:fe:9a:57:7d:2d:4d:d6:ee:0f:b4:dd:
8f:40:91:e0:c6:5d:7a:6e:cb:fc:58:40:12:16:c6:f0:e8:69:
9b:4b:ee:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:51 2026 by rpki-client