Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
File: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft (raw, json)
Hash identifier: iT0RG/y86xNunq9IlV6JQDyTl1bAwrXPcIFDAZihflI=
Subject key identifier: 85:ED:4B:23:E6:F6:E0:41:2B:DC:F6:C9:C1:35:0C:88:E5:43:94:76
Authority key identifier: E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
Certificate issuer: /CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Certificate serial: 019F2369FF9F20714D2260FE096626FA3052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
Manifest number: 198E
Signing time: Thu 02 Jul 2026 15:19:36 +0000
Manifest this update: Thu 02 Jul 2026 15:19:36 +0000
Manifest next update: Fri 03 Jul 2026 15:19:36 +0000
Files and hashes: 1: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl (hash: 4EcUk1pJYr5gQcLjlBz3QniEapP60c/uum6n/kWoLWM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:ff:9f:20:71:4d:22:60:fe:09:66:26:fa:30:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Validity
Not Before: Jul 2 15:19:36 2026 GMT
Not After : Jul 3 15:19:36 2026 GMT
Subject: CN=85ed4b23e6f6e0412bdcf6c9c1350c88e5439476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:df:c2:b2:16:39:cd:5a:84:d3:32:ef:01:e5:
2d:44:f6:85:31:70:d5:0d:17:1b:38:de:b1:f0:f3:
58:8d:e2:95:90:d3:33:e7:8b:3f:67:26:27:b6:a8:
38:a1:5d:f2:f9:06:1d:3a:d1:58:aa:ee:34:9a:cc:
e0:7c:04:dd:e7:25:63:90:ec:57:19:1d:6c:eb:5e:
6d:12:ce:a7:c1:76:03:8a:dd:41:88:b7:d1:e1:24:
8b:a5:8a:d2:a0:05:f5:49:3f:aa:ab:d1:9f:7c:a3:
6c:78:d3:a6:89:ff:0b:2b:5f:b8:65:d0:d6:4a:e6:
b0:47:cf:a2:7e:cf:7d:e1:94:f0:e2:0f:6b:30:9d:
cd:e9:77:63:3c:6e:d5:c4:d4:3a:16:28:e1:7c:bc:
f4:f5:de:35:f7:a7:e2:cd:06:5d:f2:f6:d6:7d:ee:
c4:79:33:ba:4a:bd:16:0a:0d:58:09:b8:3e:a4:24:
b9:1b:4d:59:7b:38:94:c6:6f:a7:99:6b:98:cc:40:
36:06:c4:c0:f3:19:1a:ec:79:4b:ff:96:09:1e:95:
ab:4e:d7:8b:cc:1e:40:b7:cc:67:a7:6a:82:e2:1f:
fd:08:23:29:11:5f:e6:e9:05:0d:4e:33:f7:46:57:
d7:ec:bb:7f:cb:18:c7:b8:f1:72:1b:35:db:e1:c7:
80:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:ED:4B:23:E6:F6:E0:41:2B:DC:F6:C9:C1:35:0C:88:E5:43:94:76
X509v3 Authority Key Identifier:
keyid:E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a9:27:2e:8c:bf:7f:b5:6f:bc:5f:14:04:39:88:66:3f:41:
08:87:a8:36:1b:ea:11:75:ac:ad:38:8e:a8:75:d9:0e:da:af:
6a:f0:17:75:d9:38:33:8f:4c:49:3b:53:db:e9:08:26:c0:85:
43:b5:67:e1:39:69:82:35:8e:dc:e9:bc:74:fe:7b:6b:02:ea:
7e:a3:3b:e0:73:bf:a6:67:4d:20:d1:40:88:89:0a:ab:6a:9f:
78:5f:cc:8d:bc:a6:33:4d:b6:c1:90:21:61:e2:04:2a:00:1b:
1f:c9:82:0f:d2:e3:78:53:4a:16:0f:e4:cf:37:f9:b9:71:33:
52:59:24:8b:9d:d4:76:80:b9:28:d7:e2:52:23:63:fc:c9:73:
a1:c7:91:14:bf:04:01:e6:90:32:7a:4b:c5:48:d2:87:69:a7:
14:b2:ea:84:20:f3:18:b2:33:6a:eb:46:00:34:de:40:24:bc:
5a:f9:89:e8:0f:83:7e:36:66:70:0f:12:7d:37:7a:fb:e6:e2:
1c:80:95:31:3e:42:a6:af:ba:30:d2:18:f0:6a:f1:ff:74:b1:
a0:bb:d1:53:e2:56:28:04:2f:b7:0c:a6:f1:1b:a5:ea:e6:20:
b9:8b:cb:7f:62:fc:bc:89:71:df:f2:e3:44:ec:c5:2f:1b:42:
a9:3c:a1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:24 2026 by rpki-client