Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
File: 4wEfCFnQaghJdfTovStVZxDdjDA.mft (raw, json)
Hash identifier: zwjlXCW1x/2Lvgf+BfHDClYzKZi2ZCdw6kBikuiQ2es=
Subject key identifier: F4:A8:85:9A:0C:6B:4C:69:59:9B:EE:96:94:3D:C0:09:EB:61:F8:29
Authority key identifier: E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
Certificate issuer: /CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Certificate serial: 019CD1D3EAE4906DFCD4255A2639232FA2A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
Manifest number: 12E4
Signing time: Mon 09 Mar 2026 09:00:52 +0000
Manifest this update: Mon 09 Mar 2026 09:00:52 +0000
Manifest next update: Tue 10 Mar 2026 09:00:52 +0000
Files and hashes: 1: 4wEfCFnQaghJdfTovStVZxDdjDA.crl (hash: Jgkv8qY9qxoMXZbLHO18h4uhc4G5biRcZwxL+nPeRMs=)
2: _wcF9jM9pkn5W8HUmqNyP2YzoVE.roa (hash: YR4TzWwhbeU41La1eRUFtaH6lftYq8CO9g5moHbgBbI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d1:d3:ea:e4:90:6d:fc:d4:25:5a:26:39:23:2f:a2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Validity
Not Before: Mar 9 09:00:52 2026 GMT
Not After : Mar 10 09:00:52 2026 GMT
Subject: CN=f4a8859a0c6b4c69599bee96943dc009eb61f829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:78:9e:70:77:64:87:a3:d0:a4:f9:a8:07:35:
57:a4:24:83:e0:23:9f:a1:8b:52:f7:84:81:8f:49:
f4:2a:30:de:26:42:ec:77:a4:b7:64:2f:1f:07:57:
da:a2:1d:1f:57:01:a0:96:44:60:b5:85:b9:d4:e0:
cb:b3:73:38:aa:56:d8:6f:8f:72:fe:58:64:dc:97:
be:81:bc:b1:c5:1d:25:08:3b:37:ae:04:77:80:95:
92:cf:9f:9d:8d:53:d0:4c:04:34:1a:0b:47:3f:8f:
08:8f:cc:ec:6a:5b:8a:79:ab:20:30:87:17:3f:01:
8c:2e:d6:2c:58:63:ce:65:74:d6:ca:ee:26:f5:36:
46:f0:98:93:fb:11:7e:76:74:db:23:10:96:4b:07:
84:a3:64:47:d6:55:ab:c4:b7:23:f0:71:49:80:c2:
88:e8:7c:fb:7b:63:68:2d:7b:81:5f:95:94:74:0b:
98:78:4e:53:7e:b3:1e:3a:e6:2b:0a:67:60:5d:78:
1c:31:f4:21:8e:84:e4:d4:da:a3:88:d7:53:c9:fd:
7e:54:2c:cb:69:04:c6:7d:ce:5c:1b:89:eb:be:ea:
20:54:79:6d:93:a2:63:6a:36:6b:16:5a:40:15:f1:
f6:cf:d4:61:0e:65:c0:a4:67:6c:85:60:47:91:71:
83:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A8:85:9A:0C:6B:4C:69:59:9B:EE:96:94:3D:C0:09:EB:61:F8:29
X509v3 Authority Key Identifier:
keyid:E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:71:b7:4c:26:f7:52:23:29:90:c9:8f:9e:80:85:d3:32:e6:
01:01:6c:d7:1e:d5:03:70:c6:e0:d8:e1:ef:ba:42:8e:ce:23:
95:7a:e5:9d:51:3a:76:39:75:ba:c9:07:b5:0a:c1:82:3b:81:
cf:a2:79:46:d8:f0:a0:96:09:e4:51:e3:17:ee:40:f5:30:d1:
c8:e5:70:4b:8b:ba:76:75:84:a5:b9:26:68:31:50:55:5e:ae:
25:b5:7a:bd:e5:7c:6c:d7:be:b0:c2:13:53:2d:f1:e5:0c:86:
5b:f3:e5:95:7e:19:5c:77:35:f6:d7:34:10:c7:22:ea:0b:ff:
02:44:f5:06:a1:7f:40:53:55:a8:94:77:66:5a:6f:7f:76:0e:
c7:6c:f7:1c:9d:87:54:a3:70:06:4d:72:15:96:d5:be:15:ee:
55:f2:b1:a5:23:21:f1:e5:38:a6:ba:53:91:d2:3a:63:ee:09:
5c:23:1a:d1:09:1c:e2:94:25:16:c2:e4:f3:43:31:a3:7e:a3:
e4:eb:ff:79:23:81:02:8d:9a:56:d9:32:69:46:7f:0d:55:ab:
50:b0:a0:d8:a0:3d:10:9e:3d:02:1c:1c:7b:c7:2b:c2:2d:36:
39:6d:d7:e7:0e:fe:b8:88:61:82:bb:75:b5:6f:2a:59:b1:77:
0f:75:2e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:45:59 2026 by rpki-client