Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft
File: Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft (raw, json)
Hash identifier: bBAO0s8SlHmZXxOm4MpsQjLr/1sEOsBBth7om6fTG5M=
Subject key identifier: 4A:19:AF:A6:86:B3:2E:B7:6D:CE:9E:19:20:9F:95:AC:EF:68:80:E2
Authority key identifier: 5A:1D:57:E0:60:D1:74:5D:BB:92:38:91:47:F0:1F:60:4E:CF:BA:AC
Certificate issuer: /CN=5a1d57e060d1745dbb92389147f01f604ecfbaac
Certificate serial: 019C4133D5AB3D70014035DE36EDCB649606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wh1X4GDRdF27kjiRR_AfYE7Puqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft
Manifest number: 1606
Signing time: Mon 09 Feb 2026 07:00:41 +0000
Manifest this update: Mon 09 Feb 2026 07:00:41 +0000
Manifest next update: Tue 10 Feb 2026 07:00:41 +0000
Files and hashes: 1: Wh1X4GDRdF27kjiRR_AfYE7Puqw.crl (hash: 8TQeqwPWS/m/0N2xUpEGbrmajE2NFRYxm42KWJpi754=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:33:d5:ab:3d:70:01:40:35:de:36:ed:cb:64:96:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1d57e060d1745dbb92389147f01f604ecfbaac
Validity
Not Before: Feb 9 07:00:41 2026 GMT
Not After : Feb 10 07:00:41 2026 GMT
Subject: CN=4a19afa686b32eb76dce9e19209f95acef6880e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:37:82:5a:57:ff:be:90:ba:0d:24:77:8d:54:
a5:45:f3:35:91:79:10:c3:7d:c8:f1:52:5b:c8:f6:
8e:9b:f3:92:bf:8e:69:d4:8e:68:84:d2:73:4d:a7:
c3:e5:c9:bd:f4:5d:79:f6:70:34:36:92:22:87:e6:
fc:19:38:e7:80:26:27:80:18:97:db:d5:b3:84:6c:
ee:17:4d:e1:d9:0c:85:88:51:78:b2:04:28:3b:01:
29:53:9f:9f:54:60:31:dc:a0:09:41:e7:a5:31:3e:
87:24:a9:a9:4f:ed:08:b4:b8:e8:f5:ff:90:6c:76:
f9:43:a2:7e:8b:41:0d:92:55:e8:8f:63:11:ef:79:
a4:27:5b:ff:15:bf:28:4b:cc:a3:35:c4:cc:c7:5a:
a6:2f:cc:0e:e5:9b:e7:c7:8f:00:02:ee:84:d5:77:
f6:94:29:63:0c:7d:d5:98:1f:04:d8:48:7b:45:b8:
f0:4b:fa:4b:28:42:1f:a6:fb:04:b0:f9:d5:e6:3f:
ed:52:17:b7:72:c8:de:93:fc:57:fa:9c:6b:56:6d:
ff:7d:92:ed:96:e4:95:0c:1e:07:21:0c:4e:e7:c7:
0b:0f:98:d6:89:25:68:1f:9d:78:61:37:f2:b1:97:
f5:81:a9:8e:a1:63:43:08:63:6d:ce:d6:85:4b:64:
2b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:19:AF:A6:86:B3:2E:B7:6D:CE:9E:19:20:9F:95:AC:EF:68:80:E2
X509v3 Authority Key Identifier:
keyid:5A:1D:57:E0:60:D1:74:5D:BB:92:38:91:47:F0:1F:60:4E:CF:BA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wh1X4GDRdF27kjiRR_AfYE7Puqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:26:82:50:80:c4:84:0d:47:b5:f9:99:6e:34:37:ef:c9:7b:
05:0a:8f:ae:1b:2d:df:d1:a6:1a:5e:a8:b2:2b:49:9e:c4:51:
49:7e:b6:2f:b1:b1:6a:e9:65:ec:95:4d:4c:04:87:b0:4e:f5:
31:3e:cd:d2:98:86:8b:78:45:53:9c:6b:5e:e2:d0:23:5b:e7:
41:24:21:95:3d:2c:31:64:3e:27:db:6e:e7:69:c7:21:a6:29:
66:ce:3f:c5:c9:cb:53:73:c9:c0:2c:88:33:50:e2:89:0f:d5:
ec:30:42:c4:ca:36:82:51:89:7b:8e:e3:88:15:d8:ea:51:81:
2e:a8:2f:5f:b3:c2:77:6a:ca:51:ca:22:a4:f7:4d:67:29:1f:
d6:4b:47:f0:16:9e:09:e6:8e:cb:fa:b3:a3:68:44:65:0e:73:
31:78:f1:b1:ed:9a:15:a0:20:f7:51:bd:ae:b6:c8:89:0c:8b:
b2:2a:e9:f9:d8:9d:ca:43:c7:db:6b:ac:af:a6:28:3b:bf:c7:
19:d6:da:aa:39:a2:c7:3c:7b:74:ab:1c:af:10:af:95:6d:e4:
de:fc:01:69:4e:8e:b6:74:9c:03:f1:8c:e2:eb:2c:7a:69:5f:
24:d6:46:b1:1a:13:0f:05:d9:5d:b7:58:03:c3:db:8f:85:7c:
d2:15:18:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:52:12 2026 by rpki-client