Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
File: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft (raw, json)
Hash identifier: uWfRa+7u/c6lFopSWH877Teulwf1ZeU54TB81fz+QRE=
Subject key identifier: A7:07:B5:B4:9B:44:73:AA:E5:13:20:EC:0F:E0:74:5E:41:DD:AA:66
Authority key identifier: E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
Certificate issuer: /CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Certificate serial: 019D747B19832FBE0C8887E41E82894A29E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
Manifest number: 086A
Signing time: Thu 09 Apr 2026 23:01:57 +0000
Manifest this update: Thu 09 Apr 2026 23:01:57 +0000
Manifest next update: Fri 10 Apr 2026 23:01:57 +0000
Files and hashes: 1: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl (hash: wMOXnYEyKNOUEZSPmT5DpASX13DfHqXOCFiQA9iSXY0=)
2: 5sTdJeQvv6vdlppaT-0bRjKtxg8.roa (hash: b/QRqgkGgU7MnJZfBiHqIddmWZWJFgjkkxrAF3+M/Ns=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:74:7b:19:83:2f:be:0c:88:87:e4:1e:82:89:4a:29:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Validity
Not Before: Apr 9 23:01:57 2026 GMT
Not After : Apr 10 23:01:57 2026 GMT
Subject: CN=a707b5b49b4473aae51320ec0fe0745e41ddaa66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:50:89:15:31:0b:f6:5d:31:e3:8f:51:2e:2d:
5a:b8:01:47:95:72:cf:0e:41:e2:be:d5:b9:45:b9:
4b:c9:3a:9e:6e:08:6f:87:ec:4d:aa:97:70:1a:e4:
ff:6e:f3:c2:18:a6:c6:9a:e1:9a:20:26:b1:7b:f2:
18:21:71:80:0b:c2:99:e8:7f:af:ab:c1:33:5d:64:
b6:01:47:b6:13:b1:de:76:b1:11:94:81:dd:85:d8:
03:c1:2c:06:cc:8c:15:da:ac:3a:7e:5d:ce:f4:b4:
00:c4:e0:37:b0:16:dd:90:0e:cd:fe:dc:50:4e:6b:
28:5a:1e:93:d2:6c:d3:31:c8:a9:07:99:5e:8c:79:
a9:27:69:68:4e:b4:03:3a:7f:b5:9a:80:1d:44:b0:
3c:fa:1f:7e:69:d0:24:6a:6a:d5:91:7d:4b:53:59:
1a:9b:c2:ff:de:25:ec:c9:6e:00:87:7f:61:6d:86:
6e:d2:a6:bd:a7:c5:d0:3d:cd:bf:7b:da:e5:de:3c:
22:ff:74:e3:6f:2e:e9:6c:32:29:00:70:1f:65:65:
3e:61:9e:2d:20:50:43:f8:8d:5f:c9:fc:11:24:30:
b0:00:4d:77:30:cb:bf:29:8b:d0:4f:cf:e6:73:e2:
b7:14:76:40:a6:ed:47:b7:df:4a:26:a6:2d:cc:85:
9b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:07:B5:B4:9B:44:73:AA:E5:13:20:EC:0F:E0:74:5E:41:DD:AA:66
X509v3 Authority Key Identifier:
keyid:E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:be:cc:4a:15:6e:99:64:e2:e5:43:57:ea:19:23:d4:a4:6d:
53:3a:49:66:60:0f:9a:3f:39:d3:ae:f2:ce:99:d5:62:c8:18:
f2:2f:0e:ff:1e:60:62:dc:55:87:93:9d:a8:a6:68:2b:a9:d3:
95:b8:18:8a:32:e3:de:ad:d7:0e:17:80:a3:04:4c:5f:58:84:
e8:c5:ad:63:ed:9d:58:52:8c:4f:2e:50:78:d1:35:80:8f:7d:
84:6f:57:1a:83:17:cd:55:b9:58:58:c6:7b:ee:ea:60:ca:15:
7e:83:e9:e0:e7:70:61:3e:52:0b:b1:6f:90:1d:1e:b3:a2:f3:
19:e3:ca:bd:3c:fd:d2:c7:42:31:83:63:88:43:89:43:c4:e0:
46:5c:e7:4c:d8:2d:c6:1c:47:b2:3e:96:85:e6:80:62:76:9d:
28:8d:91:b1:d6:07:5c:0e:7d:18:bc:5b:6c:d1:ef:8d:a2:04:
8e:f5:b7:39:a2:de:8e:9d:82:fa:08:ed:31:56:4a:79:bc:72:
32:95:a8:87:50:aa:7d:ff:84:b8:1e:7e:12:e0:c9:13:49:33:
73:18:fc:0c:9c:7e:cc:d2:e9:c1:53:4a:99:4b:70:1c:03:59:
20:b3:cc:66:d5:70:67:ab:8a:02:35:39:21:60:f0:28:71:65:
5e:13:f0:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ10exmDL74MiIfkHoKJSinjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNDc3MDcyYjkxYWY1YzNmM2JmZTY5NzQzMjQzZTdjZGEz
YWU4NzkwHhcNMjYwNDA5MjMwMTU3WhcNMjYwNDEwMjMwMTU3WjAzMTEwLwYDVQQD
EyhhNzA3YjViNDliNDQ3M2FhZTUxMzIwZWMwZmUwNzQ1ZTQxZGRhYTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1CJFTEL9l0x449RLi1auAFHlXLP
DkHivtW5RblLyTqebghvh+xNqpdwGuT/bvPCGKbGmuGaICaxe/IYIXGAC8KZ6H+v
q8EzXWS2AUe2E7HedrERlIHdhdgDwSwGzIwV2qw6fl3O9LQAxOA3sBbdkA7N/txQ
TmsoWh6T0mzTMcipB5lejHmpJ2loTrQDOn+1moAdRLA8+h9+adAkamrVkX1LU1ka
m8L/3iXsyW4Ah39hbYZu0qa9p8XQPc2/e9rl3jwi/3Tjby7pbDIpAHAfZWU+YZ4t
IFBD+I1fyfwRJDCwAE13MMu/KYvQT8/mc+K3FHZApu1Ht99KJqYtzIWbwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcHtbSbRHOq5RMg7A/gdF5B3apmMB8GA1UdIwQY
MBaAFOFHcHK5GvXD87/ml0MkPnzaOuh5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFVkd2Nya2E5Y1B6di1hWFF5US1mTm82NkhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy83NDk0YmYtOGFjZC00ZTQzLTg2Y2Ut
ZTdjOGNmM2FmNWRlLzEvNFVkd2Nya2E5Y1B6di1hWFF5US1mTm82NkhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy83NDk0YmYtOGFjZC00ZTQzLTg2Y2UtZTdjOGNmM2FmNWRl
LzEvNFVkd2Nya2E5Y1B6di1hWFF5US1mTm82NkhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi77MShVu
mWTi5UNX6hkj1KRtUzpJZmAPmj85067yzpnVYsgY8i8O/x5gYtxVh5OdqKZoK6nT
lbgYijLj3q3XDheAowRMX1iE6MWtY+2dWFKMTy5QeNE1gI99hG9XGoMXzVW5WFjG
e+7qYMoVfoPp4OdwYT5SC7FvkB0es6LzGePKvTz90sdCMYNjiEOJQ8TgRlznTNgt
xhxHsj6WheaAYnadKI2RsdYHXA59GLxbbNHvjaIEjvW3OaLejp2C+gjtMVZKebxy
MpWoh1Cqff+EuB5+EuDJE0kzcxj8DJx+zNLpwVNKmUtwHANZILPMZtVwZ6uKAjU5
IWDwKHFlXhPwCQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:02 2026 by rpki-client