Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
File: b4CWRAfF2qRAiKz-leZIi4APreU.mft (raw, json)
Hash identifier: Uy3hINp6uDhuGCL8g00j6Hop++48csNjGW/Mb68Dij0=
Subject key identifier: 4F:5D:BF:E1:53:C2:11:86:A7:D7:DA:40:FE:D2:17:A4:70:84:5C:CC
Authority key identifier: 6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
Certificate issuer: /CN=6f80964407c5daa44088acfe95e6488b800fade5
Certificate serial: 019CD166440CA6475B34FBF2773065BC44A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
Manifest number: 1056
Signing time: Mon 09 Mar 2026 07:01:05 +0000
Manifest this update: Mon 09 Mar 2026 07:01:05 +0000
Manifest next update: Tue 10 Mar 2026 07:01:05 +0000
Files and hashes: 1: 1-32w-LG2_3MN5stMgExAO0f0NSM.roa (hash: +gMPqRhllgTKSW4BKPpHRxWjT/hynauGjaOuYFXhPnY=)
2: b4CWRAfF2qRAiKz-leZIi4APreU.crl (hash: gjKr6EGOrtbhqOUx9xXJUD2IpQPgOh2r3BafrUSP3iA=)
3: rihpWR5lfOU3jWw_hazq8i-NTnc.roa (hash: KFfr9h7mP9mKrCtGOFXC3EbHAHlcqrnQ3k9bqEF6yLI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d1:66:44:0c:a6:47:5b:34:fb:f2:77:30:65:bc:44:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f80964407c5daa44088acfe95e6488b800fade5
Validity
Not Before: Mar 9 07:01:05 2026 GMT
Not After : Mar 10 07:01:05 2026 GMT
Subject: CN=4f5dbfe153c21186a7d7da40fed217a470845ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a8:3d:e1:52:7c:c4:d7:37:b6:a5:8b:ab:5a:
f4:e3:02:ae:33:bd:1f:00:77:c3:09:50:fa:a1:c1:
2a:bf:b4:a8:5d:31:93:d1:11:0a:0a:85:da:a9:a5:
41:ee:a6:8d:49:3e:38:f8:b5:b4:6b:5d:02:14:f8:
e1:c3:60:c7:9a:c1:a1:0e:54:ac:24:4b:6c:2d:f7:
11:50:37:9a:36:c6:06:0a:ec:6e:6b:b7:6a:2a:d7:
9c:1d:26:83:f3:2a:bf:a9:85:59:9a:d8:7b:43:6c:
76:b6:76:7b:86:ac:d1:71:fe:d6:d9:af:05:91:9e:
f5:ff:1d:01:e2:3a:db:ca:7e:ed:cd:14:9a:b5:da:
db:8e:32:9b:c6:7b:55:33:63:0f:d6:86:b4:0a:d1:
bf:d6:ee:7e:ab:46:fe:6c:7d:14:ca:6e:24:b8:12:
00:6c:08:c1:ce:f9:b8:1b:d4:41:2f:26:26:aa:37:
d2:92:98:21:7a:f4:90:73:47:24:fa:d1:b9:60:2e:
eb:82:7c:dd:94:69:ca:db:fd:ae:76:6e:d0:2a:e3:
08:10:95:9e:be:ab:52:f8:69:79:9a:28:1a:ae:4d:
ee:df:4d:05:d5:3e:95:e5:9d:9e:ba:b5:a9:28:5c:
0d:d7:2e:69:bd:b4:c9:2f:d0:87:11:ba:30:4a:90:
7d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5D:BF:E1:53:C2:11:86:A7:D7:DA:40:FE:D2:17:A4:70:84:5C:CC
X509v3 Authority Key Identifier:
keyid:6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:72:90:8c:43:79:e8:a2:80:e6:9a:64:67:0e:06:ab:85:a1:
3d:9d:dd:df:1e:c1:71:58:67:1e:77:9c:78:c9:09:f8:99:92:
42:43:85:ae:5c:45:36:7f:5d:d0:c3:60:fa:59:e7:70:92:05:
4a:60:0f:37:90:ce:1f:e8:bd:9f:c3:f9:9f:53:23:ad:67:2b:
94:67:2f:ef:c3:cd:31:b9:28:cb:29:bc:a4:26:54:d4:8e:f9:
20:23:4e:39:dc:21:0b:b9:5e:09:58:70:69:60:40:81:18:d0:
cf:67:61:ce:6e:cf:7a:db:67:5e:a5:5a:0a:9d:e8:1e:e2:22:
ff:8c:c9:43:4d:62:55:f5:1f:12:44:e5:44:a1:7c:7d:56:53:
f0:a1:e6:7c:f2:60:70:66:3b:00:f2:c0:e1:8b:c2:60:9d:0a:
f2:80:24:bd:72:25:c4:aa:d6:ef:2b:a0:51:8a:f7:65:36:74:
19:3d:65:98:6c:1f:9b:05:48:02:9d:67:80:bb:28:f1:09:04:
98:4d:53:0e:e5:3d:b3:0b:c0:76:f6:c1:cc:0b:ac:d8:59:26:
a9:22:51:53:61:bb:e8:61:dc:87:50:0e:e1:c9:17:80:b1:ee:
a2:74:cd:ee:d6:dd:bc:7c:48:0c:79:72:62:a7:90:dc:6a:3d:
61:dd:90:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:47:31 2026 by rpki-client