Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
File: SA4-gK7rhMMmEvT60RbiaQpUbHo.mft (raw, json)
Hash identifier: 2cEM1b1L8+8+nsK0mQz17vQJ4lID0y5xlIqO+I3brV8=
Subject key identifier: CA:E9:0F:75:A1:C1:65:6C:41:4C:73:01:B7:53:4A:76:BA:A3:68:66
Authority key identifier: 48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A
Certificate issuer: /CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
Certificate serial: 019AC9B25148AE28F3345A6D4E296A0A8C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
Manifest number: 0705
Signing time: Fri 28 Nov 2025 09:01:37 +0000
Manifest this update: Fri 28 Nov 2025 09:01:37 +0000
Manifest next update: Sat 29 Nov 2025 09:01:37 +0000
Files and hashes: 1: SA4-gK7rhMMmEvT60RbiaQpUbHo.crl (hash: nDRs48m0iJlIf2N7/867nBba2rUL9kBZmYjsm2PwLOk=)
2: UgsM9IySNlxMAMu3nxLBQeRmBwM.roa (hash: iWc/Vehzon/VP/j65KvlMpaDrurTE8lXeWv7jdRc8u4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:c9:b2:51:48:ae:28:f3:34:5a:6d:4e:29:6a:0a:8c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
Validity
Not Before: Nov 28 09:01:37 2025 GMT
Not After : Nov 29 09:01:37 2025 GMT
Subject: CN=cae90f75a1c1656c414c7301b7534a76baa36866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4e:2c:c8:e1:ee:0d:f0:7e:4c:6b:db:82:11:
82:73:16:0e:ee:c1:06:0e:a6:c6:26:c7:0e:42:1d:
eb:69:19:b4:3a:96:a8:14:da:86:56:81:c4:0a:38:
76:ad:67:95:f3:3d:80:41:0b:cd:c0:ae:93:f7:94:
9e:08:e3:f3:b6:2f:55:c7:a6:61:b2:e2:cd:fc:40:
a2:53:13:a5:54:11:c5:01:a5:d6:ad:14:4a:3b:7d:
a3:16:44:c6:59:07:a5:99:3f:c3:cb:a3:49:5e:99:
87:d8:eb:0a:c7:8a:9d:9e:e5:cc:f9:2e:3a:9b:c3:
5f:23:d5:8f:5e:a7:76:8c:de:33:fe:21:d8:e5:5e:
38:8b:94:77:7d:14:15:49:82:b6:f3:dd:02:07:d4:
5c:5d:e5:79:14:cd:ee:c3:23:88:d3:cc:61:3e:d5:
d9:d9:15:2b:6f:17:b7:e4:ad:a1:ab:5c:73:59:fb:
87:73:43:c4:91:58:91:a8:ed:ee:03:c3:95:28:21:
3c:2f:57:94:3e:68:1e:72:e5:3f:54:3f:ed:83:d2:
0a:37:04:ff:e5:04:ea:11:8b:ef:18:f2:ed:2c:fe:
ed:5e:ed:4a:ad:3b:18:b7:b0:bb:0f:a9:c3:3a:67:
0a:66:84:b7:ff:c8:18:11:00:9e:c7:c8:8b:0a:4b:
a5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E9:0F:75:A1:C1:65:6C:41:4C:73:01:B7:53:4A:76:BA:A3:68:66
X509v3 Authority Key Identifier:
keyid:48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:2d:1d:7a:52:b9:85:78:c7:92:7d:cb:7d:a9:96:9b:25:63:
e3:7f:f3:58:29:49:01:6f:bf:b6:b3:3c:70:0d:ea:3e:07:1d:
3c:ca:83:d1:54:8b:14:7b:52:aa:7e:8c:74:c5:c1:62:0a:1e:
2f:91:45:9c:19:d5:c9:37:2b:e8:e3:90:00:77:8d:83:5e:f2:
69:31:17:6e:f9:31:6c:ef:e1:be:15:1e:57:91:81:b9:d6:e2:
44:9a:ec:a7:0b:79:ea:bb:05:26:36:5e:f7:b1:43:f0:a0:27:
de:1b:9e:41:9a:4e:bc:3b:01:44:ca:67:c3:d7:27:4f:dc:3d:
f0:c6:97:33:c0:50:36:11:52:37:a6:05:15:81:ad:5b:bc:f7:
88:57:e7:4b:a5:56:b0:65:28:80:aa:b7:5b:af:c8:45:d5:d9:
50:75:8e:17:dc:b8:7a:ac:e6:91:63:06:78:88:f2:ae:f5:40:
ff:e7:96:25:ed:c5:52:ba:fa:c6:b6:3d:78:6c:4b:39:ec:ed:
bc:50:96:46:ee:50:a1:12:77:89:40:0a:d3:c2:52:c5:e8:de:
bc:a2:84:76:d4:d6:04:1c:84:79:45:9a:13:36:11:11:89:07:
4c:ec:b0:d5:e9:4a:a4:3a:8c:ef:d8:57:90:57:03:b5:44:e6:
9c:e8:9d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:59 2026 by rpki-client