
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
File: 4tNxxKeqqFX4zDsa6oAilCCoDyA.mft (raw, json)
Hash identifier: pOTZCdtdFqKM19RHgDDb8OObIz9CHJ0EGZKQhMDT3Ps=
Subject key identifier: 62:86:05:61:4D:B1:A9:C9:D3:8D:0F:CA:FD:CA:86:4D:90:EC:93:15
Authority key identifier: E2:D3:71:C4:A7:AA:A8:55:F8:CC:3B:1A:EA:80:22:94:20:A8:0F:20
Certificate issuer: /CN=e2d371c4a7aaa855f8cc3b1aea80229420a80f20
Certificate serial: 019EF8DC3AC6D1D3F33891B6C6DBC5F8CB0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
Manifest number: 1979
Signing time: Wed 24 Jun 2026 09:00:42 +0000
Manifest this update: Wed 24 Jun 2026 09:00:42 +0000
Manifest next update: Thu 25 Jun 2026 09:00:42 +0000
Files and hashes: 1: 4tNxxKeqqFX4zDsa6oAilCCoDyA.crl (hash: MI3r+QFcr99anX2Z6tRPO0t/tssyT+zx23/JcXIgb4Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:dc:3a:c6:d1:d3:f3:38:91:b6:c6:db:c5:f8:cb:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d371c4a7aaa855f8cc3b1aea80229420a80f20
Validity
Not Before: Jun 24 09:00:42 2026 GMT
Not After : Jun 25 09:00:42 2026 GMT
Subject: CN=628605614db1a9c9d38d0fcafdca864d90ec9315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:87:0f:44:ee:9a:9f:c0:a2:02:c8:47:98:14:
49:4d:b4:fa:df:e7:96:1d:a9:f0:3e:f4:a1:0f:45:
18:3d:b2:d0:1c:bb:3d:a0:cc:48:ef:33:4b:49:82:
79:c9:29:56:2d:5d:44:28:85:a4:bb:f5:4d:17:d6:
16:44:43:a0:6a:5c:ea:36:c9:9c:2b:7c:62:bf:3c:
79:32:af:c8:9f:74:9c:82:df:9f:d4:a9:17:62:78:
58:e3:e2:22:1c:73:03:17:dc:80:c5:97:38:c6:fd:
19:79:63:ef:67:c5:04:69:a2:d0:b8:30:ee:e8:c5:
d3:26:4b:c6:0f:73:c8:73:cb:23:db:c1:69:09:2a:
bb:3c:bc:5e:cf:6b:86:61:a5:51:03:14:af:2c:e5:
d0:04:a8:3f:f9:9f:4e:28:02:69:36:e7:65:3e:04:
42:6c:37:bc:8c:31:d3:51:b2:d3:f6:fd:6d:1d:28:
d8:01:4d:28:ff:af:62:e8:6f:aa:32:c7:32:c1:80:
23:fa:3d:11:1f:f7:1a:b7:6a:4e:df:19:b2:f0:f6:
13:82:f2:c9:a9:da:ac:82:de:da:43:10:c4:34:4d:
b5:48:38:a6:28:da:72:9d:06:85:8a:e3:d0:3d:fd:
3f:88:9a:f7:7f:cb:ff:41:30:68:60:13:45:8b:2d:
35:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:86:05:61:4D:B1:A9:C9:D3:8D:0F:CA:FD:CA:86:4D:90:EC:93:15
X509v3 Authority Key Identifier:
keyid:E2:D3:71:C4:A7:AA:A8:55:F8:CC:3B:1A:EA:80:22:94:20:A8:0F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:50:e6:7f:b7:cc:c3:0f:52:c0:36:1b:0d:2c:f1:a2:76:38:
12:a9:26:d2:f2:52:b2:1a:b2:27:2e:aa:85:ed:e4:ba:70:6b:
68:80:cd:7c:d8:33:07:e1:07:55:17:3e:04:fd:e6:98:f7:ba:
32:ec:ac:1c:1a:d0:29:e3:6e:03:b1:4d:fe:33:07:1c:cf:c0:
39:f2:0f:e4:01:ab:ea:27:11:6d:49:30:46:cc:05:c3:37:b5:
26:85:d8:74:be:3c:01:de:5c:a9:2f:17:aa:6f:9e:c0:b0:7e:
0b:2d:79:bc:1a:6e:85:54:5e:be:84:a1:84:7c:f4:98:7e:d6:
fe:f5:04:a0:7a:f4:fc:ff:d2:da:84:8b:ed:93:32:0a:3f:28:
74:6d:ea:1f:95:7a:13:c6:84:64:cd:5d:71:24:2d:b9:7d:e3:
05:ff:e6:fa:91:32:06:9b:f4:19:d7:22:9e:4c:b1:64:00:54:
62:69:7c:9d:1d:d9:f8:ba:e0:5e:2e:1d:0f:f4:69:de:9e:f6:
b0:92:5c:60:46:6a:e0:8c:a2:ac:7b:da:66:d6:50:41:6d:ed:
dc:e9:28:96:41:2f:13:34:96:27:59:df:2b:e5:d3:1d:fe:19:
1b:76:e3:ef:dd:e3:c8:2e:78:8a:b8:ee:1c:46:7a:1b:4b:3c:
48:6c:59:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ743DrG0dPzOJG2xtvF+MsMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDM3MWM0YTdhYWE4NTVmOGNjM2IxYWVhODAyMjk0MjBh
ODBmMjAwHhcNMjYwNjI0MDkwMDQyWhcNMjYwNjI1MDkwMDQyWjAzMTEwLwYDVQQD
Eyg2Mjg2MDU2MTRkYjFhOWM5ZDM4ZDBmY2FmZGNhODY0ZDkwZWM5MzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYcPRO6an8CiAshHmBRJTbT63+eW
HanwPvShD0UYPbLQHLs9oMxI7zNLSYJ5ySlWLV1EKIWku/VNF9YWREOgalzqNsmc
K3xivzx5Mq/In3Scgt+f1KkXYnhY4+IiHHMDF9yAxZc4xv0ZeWPvZ8UEaaLQuDDu
6MXTJkvGD3PIc8sj28FpCSq7PLxez2uGYaVRAxSvLOXQBKg/+Z9OKAJpNudlPgRC
bDe8jDHTUbLT9v1tHSjYAU0o/69i6G+qMscywYAj+j0RH/cat2pO3xmy8PYTgvLJ
qdqsgt7aQxDENE21SDimKNpynQaFiuPQPf0/iJr3f8v/QTBoYBNFiy01vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKGBWFNsanJ040Pyv3Khk2Q7JMVMB8GA1UdIwQY
MBaAFOLTccSnqqhV+Mw7GuqAIpQgqA8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHROeHhLZXFxRlg0ekRzYTZvQWlsQ0NvRHlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mZWFhMzAtMTQyYS00ZmUwLWFhYjkt
OTA3YTU4Yzk5NGMyLzEvNHROeHhLZXFxRlg0ekRzYTZvQWlsQ0NvRHlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9mZWFhMzAtMTQyYS00ZmUwLWFhYjktOTA3YTU4Yzk5NGMy
LzEvNHROeHhLZXFxRlg0ekRzYTZvQWlsQ0NvRHlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClDmf7fM
ww9SwDYbDSzxonY4Eqkm0vJSshqyJy6qhe3kunBraIDNfNgzB+EHVRc+BP3mmPe6
MuysHBrQKeNuA7FN/jMHHM/AOfIP5AGr6icRbUkwRswFwze1JoXYdL48Ad5cqS8X
qm+ewLB+Cy15vBpuhVRevoShhHz0mH7W/vUEoHr0/P/S2oSL7ZMyCj8odG3qH5V6
E8aEZM1dcSQtuX3jBf/m+pEyBpv0GdcinkyxZABUYml8nR3Z+LrgXi4dD/Rp3p72
sJJcYEZq4IyirHvaZtZQQW3t3OkolkEvEzSWJ1nfK+XTHf4ZG3bj793jyC54irju
HEZ6G0s8SGxZRQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:09 2026 by rpki-client