Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
File: ge84bpUp6_89_qsXonx5OCPNPVU.mft (raw, json)
Hash identifier: w1UhSQeqIEMFcHd97LTBlu4R5p9EvOmdJZS+7MjWxVg=
Subject key identifier: 1B:DF:5F:39:B8:08:B0:54:2E:85:CF:7F:8E:20:D5:2D:99:A4:41:4C
Authority key identifier: 81:EF:38:6E:95:29:EB:FF:3D:FE:AB:17:A2:7C:79:38:23:CD:3D:55
Certificate issuer: /CN=81ef386e9529ebff3dfeab17a27c793823cd3d55
Certificate serial: 019BFF8B69483C959E399299BF119B5698C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
Manifest number: 04B7
Signing time: Tue 27 Jan 2026 13:01:24 +0000
Manifest this update: Tue 27 Jan 2026 13:01:24 +0000
Manifest next update: Wed 28 Jan 2026 13:01:24 +0000
Files and hashes: 1: ge84bpUp6_89_qsXonx5OCPNPVU.crl (hash: 1SdLAx+XMWqaZuerAf3lGSxk55I9XxC0Z4sLapKUWf8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ff:8b:69:48:3c:95:9e:39:92:99:bf:11:9b:56:98:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81ef386e9529ebff3dfeab17a27c793823cd3d55
Validity
Not Before: Jan 27 13:01:24 2026 GMT
Not After : Jan 28 13:01:24 2026 GMT
Subject: CN=1bdf5f39b808b0542e85cf7f8e20d52d99a4414c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c5:92:06:b6:a9:cc:0b:e0:a2:dd:c4:f9:0c:
f0:b3:e7:5a:ad:53:fe:22:5b:fb:6c:59:92:c6:48:
35:d1:f4:c5:5f:b7:bd:de:e4:d3:4e:64:4c:32:07:
a0:25:a4:49:d2:c0:f8:ee:07:40:9d:8d:8e:51:5e:
69:ac:30:b0:d1:76:95:3e:65:f3:65:50:79:37:af:
a4:48:32:41:c0:bd:a8:70:a1:aa:0f:84:fc:9a:2a:
0b:03:4e:d8:42:aa:48:e5:85:bd:62:79:d9:80:c0:
44:8d:11:d7:94:50:f1:9e:f1:21:b2:8a:f5:4f:c8:
5e:f1:38:82:ac:8b:dd:ba:ba:98:ea:e7:21:1a:2a:
0f:0a:49:1f:d9:5f:0b:6c:63:fd:22:ff:71:0f:52:
50:e9:16:ad:a1:ed:f0:95:57:f6:c6:da:dd:6c:4f:
09:0e:22:c1:16:ce:c3:ac:76:a7:b7:03:56:ba:89:
06:b0:79:94:cf:7e:c9:78:42:6f:aa:2b:1c:e6:c9:
f7:e5:bc:2a:43:c6:6f:87:e5:82:55:61:9d:84:75:
31:99:21:03:de:b1:0b:10:b2:84:09:75:af:fd:a3:
b2:9c:a2:a3:1d:b9:04:db:87:02:e8:54:0b:cf:e8:
3f:a0:fd:b9:a4:9a:bf:ff:d9:61:ce:86:88:eb:13:
85:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DF:5F:39:B8:08:B0:54:2E:85:CF:7F:8E:20:D5:2D:99:A4:41:4C
X509v3 Authority Key Identifier:
keyid:81:EF:38:6E:95:29:EB:FF:3D:FE:AB:17:A2:7C:79:38:23:CD:3D:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:7f:ff:90:fd:b2:a3:b1:53:bc:10:91:c7:d8:db:fb:62:42:
2a:8d:dd:ec:ba:cf:c4:af:41:86:63:07:f1:a0:dc:12:76:e5:
35:a5:99:d2:46:d9:40:d7:c5:a5:ca:d9:92:f0:95:e7:e4:17:
3a:1e:49:4c:f2:b8:a0:89:c0:d2:57:7b:fb:c9:89:ce:39:c9:
22:45:de:6d:8a:04:04:52:18:ca:41:54:c2:fd:50:23:79:11:
dc:5f:28:11:8c:8a:7b:93:97:6b:df:2c:10:9d:71:85:24:a5:
3d:00:37:40:46:b7:2a:6c:ad:3a:a7:dd:c0:71:e4:46:8b:8c:
42:91:7c:de:2b:2f:ea:b7:95:56:05:67:43:86:22:65:70:bc:
09:d7:98:ab:6d:5c:c7:ad:3f:9e:81:d2:f1:7c:b8:9a:e5:28:
7c:af:f1:14:b0:33:2c:95:d5:a9:98:3b:ef:99:31:42:5e:ed:
c9:c9:28:99:a4:9d:c9:5a:37:46:96:67:d8:aa:7f:2e:11:b1:
97:5c:ba:3e:4e:4f:28:70:9b:5a:dc:5d:36:0e:97:27:a5:d9:
c2:9d:e7:31:6c:87:b8:ce:0f:67:a9:09:73:86:c1:27:67:b7:
e6:0b:c4:46:37:ff:17:80:02:35:5f:14:9b:88:90:ad:4b:33:
90:5b:61:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:43 2026 by rpki-client