Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
File: 4e2SJYT2My2woOpx4XX2ql6NN54.mft (raw, json)
Hash identifier: tLNAFnMr9hs7OaFhdTLRIuFRs9m3trZgzwUouYCoCXs=
Subject key identifier: F0:1B:11:0D:91:EE:A2:3B:42:C5:B2:88:F8:13:77:1E:7E:96:EE:65
Authority key identifier: E1:ED:92:25:84:F6:33:2D:B0:A0:EA:71:E1:75:F6:AA:5E:8D:37:9E
Certificate issuer: /CN=e1ed922584f6332db0a0ea71e175f6aa5e8d379e
Certificate serial: 019CAD59B07D7E3D27032DC96DEF5FAD2E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
Manifest number: 097B
Signing time: Mon 02 Mar 2026 07:01:02 +0000
Manifest this update: Mon 02 Mar 2026 07:01:02 +0000
Manifest next update: Tue 03 Mar 2026 07:01:02 +0000
Files and hashes: 1: 4e2SJYT2My2woOpx4XX2ql6NN54.crl (hash: 5JnaWGZ0BgfHDGTS602Z7deL1YiQAcuOf0ghT8w/Pwk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:b0:7d:7e:3d:27:03:2d:c9:6d:ef:5f:ad:2e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ed922584f6332db0a0ea71e175f6aa5e8d379e
Validity
Not Before: Mar 2 07:01:02 2026 GMT
Not After : Mar 3 07:01:02 2026 GMT
Subject: CN=f01b110d91eea23b42c5b288f813771e7e96ee65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:73:c4:6d:0a:9f:7e:fb:66:98:6d:78:f1:
d1:e6:b9:67:01:00:f5:2b:3a:83:4b:f7:ab:ae:48:
5d:e9:6b:b3:5b:3e:44:b7:02:f1:57:e0:91:0b:b5:
86:ad:10:d5:af:b5:7f:5d:e4:4e:92:dc:71:11:20:
a9:a4:93:39:37:18:d5:de:4b:16:25:cb:11:d7:42:
3f:e8:53:96:9f:dc:52:e4:78:b3:1a:47:5c:eb:d9:
4f:fa:d2:b7:09:10:4a:99:6d:64:5c:1e:e7:87:f7:
3e:2a:1e:89:af:5e:2d:30:0f:d1:4c:ae:ad:41:52:
25:9b:5d:9b:30:64:b1:2d:71:76:10:1f:a9:b4:9f:
5a:93:21:a2:d4:75:88:c7:47:10:1b:78:fa:0e:00:
73:6d:ac:48:60:cc:21:43:2b:30:6d:1e:14:5e:c3:
e2:4f:da:6e:81:c3:30:04:aa:57:eb:16:ab:5c:fb:
1d:c2:b8:2a:2a:eb:62:70:8d:de:0d:d4:a5:dd:18:
b0:db:f5:85:0f:22:36:11:23:39:ed:24:98:6a:e8:
7b:c7:6e:d4:df:9d:98:4b:6c:cf:ea:02:e4:92:02:
5e:bc:e5:f4:df:dc:0d:ca:b3:dd:09:3e:6c:f2:68:
fb:19:53:ef:71:24:b6:78:bd:8e:49:64:0a:bd:50:
85:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1B:11:0D:91:EE:A2:3B:42:C5:B2:88:F8:13:77:1E:7E:96:EE:65
X509v3 Authority Key Identifier:
keyid:E1:ED:92:25:84:F6:33:2D:B0:A0:EA:71:E1:75:F6:AA:5E:8D:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6c:6a:62:85:22:b2:9a:ea:d3:a8:82:fa:d5:9b:b7:22:ba:
37:5b:69:eb:4a:fb:41:9a:60:11:a5:bb:a7:d2:d5:16:29:1d:
56:4b:f4:e1:f6:05:cc:e4:1b:be:f3:5f:10:ef:8a:c4:15:d0:
c4:af:6d:5e:95:63:b6:c2:f6:e7:e8:af:f6:0e:97:a3:63:d0:
73:65:35:71:36:c0:75:7f:1b:5f:70:ea:6f:69:b8:29:e5:89:
98:ac:ab:ef:17:16:9e:fa:ea:a7:43:63:4a:6e:7c:fa:e2:bf:
f2:21:c2:dd:83:db:11:38:a6:24:eb:4a:93:a2:ec:b2:5a:27:
8f:fc:57:9d:a4:45:5a:89:3d:85:89:6f:88:b8:1f:34:0c:1c:
ed:bb:23:ba:1a:9c:6e:65:e7:62:86:40:89:a6:02:1f:7d:65:
1b:be:30:6e:f9:3d:11:a2:c3:ef:7e:bd:c8:f4:3c:81:2b:1d:
cb:84:3f:0f:25:dd:87:e8:1e:31:e3:b4:d0:28:4c:e4:b2:d7:
c8:00:40:ce:04:5f:e7:42:af:12:7a:12:a0:ad:ec:4f:32:5b:
d6:25:13:d1:a4:2c:4a:b7:c5:d7:90:64:36:8c:09:c0:1f:29:
ef:1d:f6:b8:d6:be:8a:91:72:30:ae:fe:e6:27:bb:07:82:52:
85:21:40:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:08:28 2026 by rpki-client