Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
File: SFMhasnZIXM78_SEOTo0SVwOKmc.mft (raw, json)
Hash identifier: Tlx07nqO35KZgsO9KsP/s6b/y0D+Ffak4KJJRZlsEIo=
Subject key identifier: 4E:F7:23:07:D4:5B:43:82:13:E2:B8:D6:45:CD:24:6F:67:E4:0C:E4
Authority key identifier: 48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
Certificate issuer: /CN=4853216ac9d921733bf3f484393a34495c0e2a67
Certificate serial: 019D86814B166D175E50D3846F62F72644E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
Manifest number: 0C15
Signing time: Mon 13 Apr 2026 11:01:53 +0000
Manifest this update: Mon 13 Apr 2026 11:01:53 +0000
Manifest next update: Tue 14 Apr 2026 11:01:53 +0000
Files and hashes: 1: 2ZDYJtflCnBB_8qwON088KKU-a4.roa (hash: tEciLezX+dLS/ImbpFLCNZihGdAn391R3qBRLACKNXQ=)
2: SFMhasnZIXM78_SEOTo0SVwOKmc.crl (hash: YuXK5bwAMitLv/SKo7MYu/zAiyprG7XRhJ5vRP0lEtk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:81:4b:16:6d:17:5e:50:d3:84:6f:62:f7:26:44:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853216ac9d921733bf3f484393a34495c0e2a67
Validity
Not Before: Apr 13 11:01:53 2026 GMT
Not After : Apr 14 11:01:53 2026 GMT
Subject: CN=4ef72307d45b438213e2b8d645cd246f67e40ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dc:96:11:64:a0:16:9c:f2:1c:68:48:ce:c3:
98:bc:9f:ed:8c:9f:0f:67:da:eb:ca:48:1f:f3:7c:
df:7d:2a:ea:81:84:7a:56:d3:df:cc:72:46:56:84:
6d:2e:88:8a:c6:e1:bf:7a:e1:6b:6f:75:75:da:76:
05:3a:15:45:aa:77:e4:bd:54:73:0a:3d:51:4e:ae:
9b:e8:e3:c2:10:4a:f6:41:80:0e:7d:be:b1:5a:35:
7f:8b:df:41:6b:8c:13:dd:1b:ec:f0:07:4b:56:0a:
94:ea:d5:b9:53:6c:5d:6b:0d:f9:7d:08:21:93:25:
2b:5e:ad:e2:ca:e0:42:dc:38:b4:5f:a2:0b:28:d5:
4a:fd:7b:0b:11:73:35:7b:9d:20:0b:d0:68:f6:62:
a8:a0:f6:85:96:69:62:f0:cd:dc:f2:e0:0f:cc:9d:
fc:0a:4c:7b:76:68:89:6f:2d:d9:bc:57:fc:e7:6e:
41:7b:33:cb:d8:cc:17:21:2a:9f:10:67:d6:39:e7:
c0:33:ab:05:b2:7a:a3:91:c5:d8:d6:60:d2:f9:18:
ef:66:02:fd:ba:fb:08:9b:db:70:6f:f8:47:6a:a0:
25:8b:77:fa:ec:79:f3:a2:bf:95:4b:ea:57:55:71:
64:4b:22:f1:11:8f:2e:4b:7f:ca:79:1d:a4:2c:9b:
80:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F7:23:07:D4:5B:43:82:13:E2:B8:D6:45:CD:24:6F:67:E4:0C:E4
X509v3 Authority Key Identifier:
keyid:48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:82:9a:cd:b6:2d:75:29:1b:d4:cb:1f:ac:97:a2:20:4d:e4:
9a:18:77:0a:f4:20:66:ca:2f:1e:40:0d:7e:40:a6:1f:87:36:
ce:a8:7b:65:01:8c:3d:76:99:e6:0d:85:a2:f4:d9:db:bb:9d:
a4:9a:a4:37:ae:ad:7a:df:2a:86:8e:07:88:65:f1:dc:e8:ba:
96:1a:74:b0:58:83:8a:5d:d1:c4:ca:07:1f:09:ab:63:5f:3e:
22:c4:0c:2d:f3:2b:aa:f6:f9:35:d8:87:db:e8:51:e4:02:eb:
ac:86:28:f0:d3:44:f2:96:c7:ac:5b:33:7e:24:55:e1:da:1b:
ec:c6:bc:83:91:2f:48:61:20:e4:b9:89:a4:17:e2:68:d5:af:
93:a1:54:20:1b:fb:bf:24:f7:65:82:a0:44:6b:6e:cd:9f:66:
29:4c:2a:bc:1c:68:c0:10:c8:28:fe:f9:17:6b:f1:2e:96:80:
8d:de:e4:86:49:b2:65:03:a7:36:06:1c:e0:06:46:70:d0:74:
e8:cd:2c:48:d1:8e:c1:5f:90:36:d6:42:ea:14:58:b0:2d:9d:
80:6d:7f:57:d8:89:8c:ab:b9:1a:3d:b4:cb:26:d9:77:0c:7d:
35:fa:8e:d5:d4:e3:95:76:fa:a0:d8:ad:84:59:b9:71:7f:53:
06:91:a2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:57:50 2026 by rpki-client