
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
File: 4oPErS_YckqMfV6vQxgUyz0VEn4.mft (raw, json)
Hash identifier: mIlKbVRPVw8pZ8CoLM0VTA4BOx05x54jWs+aAtCRimU=
Subject key identifier: F9:73:2E:E3:36:40:AD:77:EA:B0:FA:6B:AF:10:9C:1D:B9:09:0A:F5
Authority key identifier: E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E
Certificate issuer: /CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
Certificate serial: 019F23698FF2864D22EDC15EF0D7A1D00AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
Manifest number: 07D3
Signing time: Thu 02 Jul 2026 15:19:08 +0000
Manifest this update: Thu 02 Jul 2026 15:19:08 +0000
Manifest next update: Fri 03 Jul 2026 15:19:08 +0000
Files and hashes: 1: 4oPErS_YckqMfV6vQxgUyz0VEn4.crl (hash: 6yNc79FiTkYB0nV0EEcEZ21qNBvcUqFbhLRlYOVCWY8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:8f:f2:86:4d:22:ed:c1:5e:f0:d7:a1:d0:0a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
Validity
Not Before: Jul 2 15:19:08 2026 GMT
Not After : Jul 3 15:19:08 2026 GMT
Subject: CN=f9732ee33640ad77eab0fa6baf109c1db9090af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e1:08:33:76:a5:9c:76:31:49:5e:8d:1c:2f:
bf:66:07:ff:54:2b:ef:96:82:34:de:2c:2a:28:b8:
49:e8:db:39:3e:fe:ac:69:0e:24:99:40:ba:e5:07:
cb:86:48:45:47:28:e4:9a:0d:c1:87:5e:fb:ab:33:
23:3e:d6:37:00:02:df:50:13:4f:93:c7:44:5f:7c:
5d:4f:b9:5f:e4:b0:4c:1d:79:0a:d2:5e:8e:51:ae:
bd:67:c8:18:c8:b4:4b:76:53:17:88:fa:4e:78:6d:
2f:70:c5:ba:e1:6c:74:7a:91:d3:4f:90:3b:b7:e7:
ea:8f:f7:30:25:ff:6b:6f:1d:88:de:80:6b:a7:00:
0a:f4:b0:bc:69:77:93:d3:9f:8e:ca:9a:e7:71:3c:
f4:be:12:39:dc:3d:5c:46:ed:79:9a:e9:09:f3:f6:
b8:5c:8c:36:47:fd:88:fc:08:f6:ad:5c:dd:db:69:
68:61:c0:a3:16:2a:57:6c:6b:10:8a:a1:81:22:ca:
21:1b:a1:72:e6:cd:7e:09:6a:07:13:d0:66:88:23:
15:b0:6c:f9:44:a7:97:9f:f8:be:29:2f:c8:67:19:
61:79:07:fa:59:42:1d:88:7d:04:61:1e:a1:15:96:
20:18:2e:9e:3e:b5:1d:6d:47:1f:83:52:40:6a:4c:
c9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:73:2E:E3:36:40:AD:77:EA:B0:FA:6B:AF:10:9C:1D:B9:09:0A:F5
X509v3 Authority Key Identifier:
keyid:E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f7:e4:46:65:76:a7:f4:b2:ec:75:75:91:6c:b7:39:72:70:
36:66:e5:e3:53:24:ca:27:01:ea:ea:7b:5e:eb:24:d7:35:01:
73:aa:c3:01:4c:ac:1e:77:e7:d2:77:a3:d4:1a:e7:cc:66:10:
68:b7:79:42:f9:3f:d2:7d:f5:5a:26:36:10:e6:78:fd:e4:c3:
9f:7f:ad:26:b1:f7:03:1f:55:30:2a:7e:4e:b4:8d:a2:b5:a1:
38:16:71:6f:a4:cd:3e:77:e3:6f:15:98:d4:55:54:a9:63:4e:
44:36:99:7b:10:20:54:80:81:ad:b3:fd:0b:5c:ed:9e:b4:bd:
b4:c6:17:3b:6d:67:3e:8d:39:1c:12:ea:f7:14:b1:1c:c8:c1:
43:34:0d:3a:87:e4:dd:bf:93:64:bc:ac:e6:d5:47:7e:9b:82:
c3:f7:bd:2a:27:44:bc:8b:83:6c:7a:ac:13:6a:e3:51:1e:21:
c2:b8:d5:bb:15:a2:5b:c1:a4:09:8a:aa:4e:fb:d8:13:50:c6:
4f:2c:70:60:bd:03:cc:6f:5e:be:93:51:13:89:33:40:a6:36:
06:94:1a:29:82:67:a2:9f:d3:2d:ac:11:70:24:59:79:c4:51:
84:5f:d1:ca:3a:82:a8:3c:90:ca:c0:ac:c8:1c:75:7c:2e:ae:
92:80:c7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:40:00 2026 by rpki-client