Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
File: 4NXVYedu8lnEoC3zDzUGTe3t8tc.mft (raw, json)
Hash identifier: xbk9i9REnyvvIA8QuAEmpDm8QcK+fj8tXGjdPt087To=
Subject key identifier: 4F:F4:D3:3E:85:C9:20:25:CC:F3:34:0A:44:C2:90:28:67:EB:0D:23
Authority key identifier: E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
Certificate issuer: /CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Certificate serial: 019F2369B24C62B26DBE570F802B44AB8113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
Manifest number: 085A
Signing time: Thu 02 Jul 2026 15:19:16 +0000
Manifest this update: Thu 02 Jul 2026 15:19:16 +0000
Manifest next update: Fri 03 Jul 2026 15:19:16 +0000
Files and hashes: 1: 4NXVYedu8lnEoC3zDzUGTe3t8tc.crl (hash: o2SXkK0JuPYVmePw1MgES/IiD672UjsRJu1/Ph13z7A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:b2:4c:62:b2:6d:be:57:0f:80:2b:44:ab:81:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Validity
Not Before: Jul 2 15:19:16 2026 GMT
Not After : Jul 3 15:19:16 2026 GMT
Subject: CN=4ff4d33e85c92025ccf3340a44c2902867eb0d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ad:91:8d:56:bb:7d:82:16:ad:0b:34:2a:6c:
15:af:4d:c5:80:12:4c:a7:7e:09:b3:c7:a6:ce:ce:
d9:77:dd:5d:0f:95:75:75:d0:65:2a:78:8a:19:0e:
a0:1b:07:72:a7:e6:f9:68:44:4f:22:0b:21:78:cb:
91:8a:2f:12:34:12:9b:53:76:24:40:ce:5f:d2:07:
d5:39:5f:63:b6:b4:dc:1e:f1:10:44:b3:1e:e1:a7:
e5:66:26:ef:66:b6:c7:08:fd:dd:17:1f:a7:79:44:
ef:8e:3c:34:40:f2:f0:cc:6a:d3:f2:4a:45:d6:d6:
65:4f:31:5a:ac:89:85:f5:d0:2d:f7:d0:1a:dc:b9:
a9:ae:87:16:58:00:4b:f0:00:4c:da:f0:a9:c2:6d:
18:ea:d6:15:14:bf:5a:a5:fc:f9:3c:15:d4:5e:11:
54:cf:86:7f:80:7a:67:a9:e2:4e:fa:ee:a6:d4:ba:
b9:5f:51:28:95:9b:cc:ba:6d:ba:fe:b9:c3:00:5e:
14:5f:d8:26:ae:85:02:39:a1:22:61:5c:ec:4a:c5:
3f:fb:f5:a8:c8:d6:d0:8e:81:c5:cd:f8:49:0d:66:
ea:c0:9d:e6:5c:35:c9:0d:dc:c2:97:04:41:ed:f1:
4d:df:93:61:df:0f:59:f3:81:b6:d3:99:5d:d7:7d:
07:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F4:D3:3E:85:C9:20:25:CC:F3:34:0A:44:C2:90:28:67:EB:0D:23
X509v3 Authority Key Identifier:
keyid:E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:db:39:bb:4b:82:77:51:43:8e:7f:11:96:00:61:ae:5c:ab:
fa:7e:27:d6:d0:6e:11:5b:f3:19:cf:36:69:03:4e:86:c5:58:
c6:71:2f:e0:7e:84:11:2c:67:1e:9b:8c:7d:9d:99:2a:04:a2:
e1:2d:ac:66:45:79:20:fd:48:f5:3c:de:e9:49:ab:58:54:7d:
cb:54:66:f6:45:b4:27:db:50:e0:32:d7:ce:80:63:c0:d2:21:
d3:34:a7:b9:9c:9c:17:cb:f8:e3:11:55:3a:40:3c:b4:72:ba:
1a:98:ee:0b:15:5f:1d:df:b2:a0:f0:08:79:45:76:e7:4c:b6:
f7:9b:e8:77:bf:16:ee:cb:fb:9d:32:32:34:21:04:18:e5:49:
c7:c1:1a:b8:5c:e4:0b:56:d5:ff:ea:b7:d9:93:1d:e5:15:c4:
dc:ef:43:35:fa:cf:5d:fd:4c:ac:fe:64:7a:41:74:6d:98:33:
36:f7:7e:7b:31:6b:54:d6:e0:f5:53:5d:52:67:f6:8e:96:b2:
1f:37:a4:a0:0e:7d:1b:df:42:ec:7f:aa:ce:e5:43:77:1b:56:
19:d3:da:9a:43:04:88:d6:0a:db:f1:22:e3:e0:13:a7:19:a8:
bf:2e:be:46:18:a6:1c:15:b0:d2:3e:97:46:12:b0:e7:b4:4e:
02:7f:bc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:45:50 2026 by rpki-client