Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
File: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft (raw, json)
Hash identifier: MjVbv00CglMyW4g5b7QnpbLWnIxA6dzQHjNeyIOgQ/8=
Subject key identifier: 5D:58:64:2C:B8:91:70:89:74:D3:56:96:C9:EE:83:23:A7:3A:6B:E1
Authority key identifier: E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
Certificate issuer: /CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Certificate serial: 019D75C4ECDDE89D04569D043AA200615F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
Manifest number: 0891
Signing time: Fri 10 Apr 2026 05:02:13 +0000
Manifest this update: Fri 10 Apr 2026 05:02:13 +0000
Manifest next update: Sat 11 Apr 2026 05:02:13 +0000
Files and hashes: 1: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl (hash: pw0USHL8pQBCTrN8PSaTtLGsG3sKovNa997w/pmbMGQ=)
2: gVfdWm0UhTm-_kYhCxfI_PPh9pQ.roa (hash: KPBhQabvMXA3ivJ7vLYo7qGQjlOgp6mXdXBE/OSlu9M=)
3: wZ9RkRMpZ0zSJRETkyLZujvEe_A.roa (hash: 8sVpKy5s2khImy6cMRVFY6mSlDYqhzQpPN1YY16omwI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:75:c4:ec:dd:e8:9d:04:56:9d:04:3a:a2:00:61:5f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Validity
Not Before: Apr 10 05:02:13 2026 GMT
Not After : Apr 11 05:02:13 2026 GMT
Subject: CN=5d58642cb891708974d35696c9ee8323a73a6be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:92:c4:91:0e:19:34:f6:f4:78:e1:87:6d:
97:ba:82:e5:9e:46:0b:d2:22:34:d4:42:8d:5a:c0:
53:f7:f1:d2:ce:11:67:fc:79:80:0f:d7:04:3c:d5:
2e:ad:11:60:e9:fd:1a:32:e3:a2:f0:84:1e:78:17:
99:4e:1f:b1:54:02:39:09:04:14:60:e8:7f:ad:64:
b0:79:28:25:6f:43:3f:28:e8:87:ab:95:74:12:f4:
ac:d8:7a:b2:46:4f:b6:b1:38:d4:07:41:24:6d:90:
2b:c2:f4:dc:e6:0d:5a:14:39:c4:23:4e:4f:38:c2:
dc:ba:78:15:2e:15:62:03:74:4f:9e:b1:34:fb:5d:
41:71:80:df:ba:62:ec:a9:4f:b1:39:bc:91:3a:01:
dc:49:5e:03:21:ac:7a:1f:38:0c:0a:95:cf:5c:02:
d2:64:7e:4e:d6:78:69:46:f9:f6:61:f7:f0:d3:15:
f8:9c:e1:9c:fd:27:0c:b7:e9:85:c5:c1:c8:87:43:
d8:bb:f0:a9:da:16:cf:c7:b8:cc:e0:c2:29:07:c7:
23:76:f6:9a:6f:a9:96:29:2c:d1:05:61:24:d8:b8:
bc:e1:11:2c:82:bd:ea:d0:5e:2c:dd:1e:11:be:24:
f9:33:05:2b:0b:17:db:be:9b:97:a1:5d:92:d7:3c:
eb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:58:64:2C:B8:91:70:89:74:D3:56:96:C9:EE:83:23:A7:3A:6B:E1
X509v3 Authority Key Identifier:
keyid:E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:20:8b:94:0b:88:7e:fc:05:b2:b2:3e:8f:56:a1:f0:ce:06:
c8:71:31:af:c3:22:31:43:53:cf:1c:10:4f:10:26:bb:53:de:
f9:58:58:6a:35:5e:98:6b:19:eb:02:d3:e2:26:72:5e:d3:22:
06:a5:76:dd:a2:5f:7e:03:d2:6c:b0:42:fd:24:7a:60:4d:8e:
70:39:d4:a2:d8:43:13:3e:9b:c9:31:c4:55:81:9a:7a:6a:66:
f9:35:c6:78:38:e7:81:9c:9d:55:50:04:2a:34:67:18:ee:7d:
cc:40:22:10:4c:67:0a:ce:b7:cc:6b:48:2d:fd:27:a8:da:76:
2d:f8:e8:b2:37:37:47:ef:ca:92:33:84:a9:bf:ac:3e:c5:33:
80:04:62:0c:63:d5:a7:b5:74:16:cb:16:8a:53:96:42:0f:91:
54:ad:89:2c:cf:3d:94:a2:df:c2:97:48:bb:c8:a5:2e:c9:ca:
e0:0c:d7:54:88:9a:72:d9:e6:ee:68:a1:ed:af:d4:c7:42:2a:
10:37:bd:80:77:0a:4a:df:4a:64:73:51:20:e6:74:f9:d9:e1:
b7:3f:3f:44:05:19:5d:a1:75:a0:d9:76:bc:3b:16:5b:08:02:
34:12:a8:03:31:02:5b:fe:35:3e:9f:9b:a0:a3:9a:b7:3a:2d:
4b:c2:d4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:52:57 2026 by rpki-client