Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
File: EFkFws-IrzKqrL3Wcc08w6z_ktE.mft (raw, json)
Hash identifier: ewEP7pIxbL8UfbcoWd8wiuPG4NzySbSM/UkgFptL4rw=
Subject key identifier: 22:E1:84:5B:D6:4D:51:73:61:F4:A3:ED:74:BD:D3:3F:17:BE:11:D6
Authority key identifier: 10:59:05:C2:CF:88:AF:32:AA:AC:BD:D6:71:CD:3C:C3:AC:FF:92:D1
Certificate issuer: /CN=105905c2cf88af32aaacbdd671cd3cc3acff92d1
Certificate serial: 019B9FD838394CEA8A5A26C411DE8DD921DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
Manifest number: 0728
Signing time: Thu 08 Jan 2026 23:01:46 +0000
Manifest this update: Thu 08 Jan 2026 23:01:46 +0000
Manifest next update: Fri 09 Jan 2026 23:01:46 +0000
Files and hashes: 1: EFkFws-IrzKqrL3Wcc08w6z_ktE.crl (hash: QgYi2eLQ9N0v5g5OYUkrFiGCSF6jsDtVX55TwGXcN14=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:9f:d8:38:39:4c:ea:8a:5a:26:c4:11:de:8d:d9:21:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=105905c2cf88af32aaacbdd671cd3cc3acff92d1
Validity
Not Before: Jan 8 23:01:46 2026 GMT
Not After : Jan 9 23:01:46 2026 GMT
Subject: CN=22e1845bd64d517361f4a3ed74bdd33f17be11d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:7c:29:6b:53:cb:e3:ea:a0:75:ff:34:2f:
32:42:b7:43:71:16:04:20:5d:33:2c:98:2e:d9:58:
a4:af:24:8f:69:95:4e:53:24:36:24:d3:56:96:44:
dd:a5:c3:82:7b:54:a4:78:ef:f4:c7:a9:54:4a:5b:
b3:a9:32:71:13:19:0c:21:cb:6c:32:19:bc:03:d6:
33:16:4e:2b:7b:d0:76:b3:d7:8d:ba:eb:f0:2a:04:
1e:b3:b1:79:f7:3e:a0:fc:96:5d:97:18:b6:72:f9:
d8:35:72:d6:cd:79:42:bf:c9:12:b8:be:1b:a9:3d:
89:a7:f5:0b:60:fd:f4:ea:97:95:b7:c0:52:01:1e:
17:13:68:1c:a8:5e:ec:fa:fe:51:f8:06:ea:ab:33:
27:e4:82:8b:dc:32:da:29:56:9b:bb:8a:67:76:09:
0d:da:dd:8e:ab:02:16:e6:65:17:4c:93:5a:d1:95:
62:1c:3d:5d:4d:15:2e:9b:7b:8f:f9:3d:19:9b:14:
ba:c4:88:6e:90:f3:0f:99:0a:c4:4b:72:f1:8e:24:
f9:de:95:b6:c2:3d:f6:02:89:c8:60:b6:2d:20:f5:
ea:3b:08:d0:06:00:fb:c2:70:73:b1:ac:9e:3a:b4:
ba:e3:b4:b5:01:12:da:ea:43:1f:a7:ef:df:bc:6e:
68:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E1:84:5B:D6:4D:51:73:61:F4:A3:ED:74:BD:D3:3F:17:BE:11:D6
X509v3 Authority Key Identifier:
keyid:10:59:05:C2:CF:88:AF:32:AA:AC:BD:D6:71:CD:3C:C3:AC:FF:92:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:26:f5:01:a9:93:fb:75:af:2f:0d:16:c3:fd:d1:fc:be:90:
ff:0b:62:64:9c:91:cf:f3:bd:e9:a2:c7:d3:62:44:8b:da:d8:
ed:e4:1e:c5:b9:cc:ef:bd:ae:c2:3c:e4:3d:d9:a0:8a:ab:9f:
6f:54:a6:61:de:ab:65:58:94:9b:2a:e7:34:e4:e9:00:37:8e:
63:6e:0d:fe:5d:0b:8b:1e:47:ff:45:d8:41:59:cf:67:ea:40:
58:56:ce:4c:1d:90:81:87:57:48:dd:f1:13:ba:13:3d:29:78:
b0:7a:d6:98:7c:5e:46:aa:15:6c:ab:2f:7e:cc:30:0a:f4:84:
1a:70:fe:d9:79:eb:19:f4:9d:46:3b:e6:1c:34:c2:de:6c:ee:
dc:58:8b:bb:4a:b5:e7:cc:82:fc:25:b0:a5:69:56:6e:b7:fc:
5f:39:8f:c8:d5:b9:09:a3:cc:c0:0b:82:c7:c6:6e:b9:81:10:
e3:76:2d:5c:dc:a1:7e:94:4f:8f:c6:a5:9c:ac:2c:64:f7:3b:
af:a8:9d:d9:e5:d1:2a:ab:fe:3a:ac:40:62:64:f5:79:b2:da:
a3:8c:f3:a8:c7:79:31:8b:58:98:56:c2:e6:ba:da:73:7a:e8:
94:7c:f3:f6:b4:d6:77:6e:39:3e:e2:25:61:96:02:aa:47:17:
b6:56:f4:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZuf2Dg5TOqKWibEEd6N2SHeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTkwNWMyY2Y4OGFmMzJhYWFjYmRkNjcxY2QzY2MzYWNm
ZjkyZDEwHhcNMjYwMTA4MjMwMTQ2WhcNMjYwMTA5MjMwMTQ2WjAzMTEwLwYDVQQD
EygyMmUxODQ1YmQ2NGQ1MTczNjFmNGEzZWQ3NGJkZDMzZjE3YmUxMWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCx8KWtTy+PqoHX/NC8yQrdDcRYE
IF0zLJgu2VikrySPaZVOUyQ2JNNWlkTdpcOCe1SkeO/0x6lUSluzqTJxExkMIcts
Mhm8A9YzFk4re9B2s9eNuuvwKgQes7F59z6g/JZdlxi2cvnYNXLWzXlCv8kSuL4b
qT2Jp/ULYP306peVt8BSAR4XE2gcqF7s+v5R+AbqqzMn5IKL3DLaKVabu4pndgkN
2t2OqwIW5mUXTJNa0ZViHD1dTRUum3uP+T0ZmxS6xIhukPMPmQrES3LxjiT53pW2
wj32AonIYLYtIPXqOwjQBgD7wnBzsayeOrS647S1ARLa6kMfp+/fvG5omwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLhhFvWTVFzYfSj7XS90z8XvhHWMB8GA1UdIwQY
MBaAFBBZBcLPiK8yqqy91nHNPMOs/5LRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZrRndzLUlyektxckwzV2NjMDh3Nnpfa3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My82NTE4ODctNTE2YS00MDM3LWI4YzAt
NDUzYWQwZGYwZTEwLzEvRUZrRndzLUlyektxckwzV2NjMDh3Nnpfa3RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My82NTE4ODctNTE2YS00MDM3LWI4YzAtNDUzYWQwZGYwZTEw
LzEvRUZrRndzLUlyektxckwzV2NjMDh3Nnpfa3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgSb1AamT
+3WvLw0Ww/3R/L6Q/wtiZJyRz/O96aLH02JEi9rY7eQexbnM772uwjzkPdmgiquf
b1SmYd6rZViUmyrnNOTpADeOY24N/l0Lix5H/0XYQVnPZ+pAWFbOTB2QgYdXSN3x
E7oTPSl4sHrWmHxeRqoVbKsvfswwCvSEGnD+2XnrGfSdRjvmHDTC3mzu3FiLu0q1
58yC/CWwpWlWbrf8XzmPyNW5CaPMwAuCx8ZuuYEQ43YtXNyhfpRPj8alnKwsZPc7
r6id2eXRKqv+OqxAYmT1ebLao4zzqMd5MYtYmFbC5rrac3rolHzz9rTWd245PuIl
YZYCqkcXtlb0xA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:53 2026 by rpki-client