Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
File: k6Ip4mayVYiZ81R-5j2E7WWUdos.mft (raw, json)
Hash identifier: YZBPhjokXokffHxaj0ZNSyKZMrn8aSlsxDV/fmHVpFU=
Subject key identifier: 5E:5E:3E:E8:69:F7:41:F8:8B:AE:96:78:8F:98:05:8A:CF:0C:7D:02
Authority key identifier: 93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
Certificate issuer: /CN=93a229e266b2558899f3547ee63d84ed6594768b
Certificate serial: 019D46C629253C88F134F6D2B662FA7EE9E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
Manifest number: 18A8
Signing time: Wed 01 Apr 2026 02:01:24 +0000
Manifest this update: Wed 01 Apr 2026 02:01:24 +0000
Manifest next update: Thu 02 Apr 2026 02:01:24 +0000
Files and hashes: 1: k6Ip4mayVYiZ81R-5j2E7WWUdos.crl (hash: DgeRIGsKWtrD7uBWBF7JIDQXVW4ySEsXDqmTGEDbahU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:46:c6:29:25:3c:88:f1:34:f6:d2:b6:62:fa:7e:e9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a229e266b2558899f3547ee63d84ed6594768b
Validity
Not Before: Apr 1 02:01:24 2026 GMT
Not After : Apr 2 02:01:24 2026 GMT
Subject: CN=5e5e3ee869f741f88bae96788f98058acf0c7d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:91:c0:17:a4:75:e3:fa:7d:06:c3:66:32:b0:
8b:e4:54:c7:c1:d8:55:d3:19:28:12:6e:85:31:a0:
af:78:c0:fc:18:f7:6c:4c:88:20:0a:0d:e5:01:1c:
2c:7a:14:cc:81:fd:24:c6:4d:27:b5:13:1f:84:06:
4f:66:92:c4:6c:db:22:16:56:10:70:5b:d8:6d:19:
ab:68:30:6d:e7:cf:1d:41:9c:c6:14:ef:75:6d:fb:
9e:85:31:64:16:2d:16:2f:62:2e:0b:da:0d:86:5b:
7f:6d:5c:38:30:75:a9:8f:7c:e4:63:2f:50:db:88:
f0:88:30:ac:56:aa:15:8a:5a:2c:3c:43:b5:a1:99:
fa:94:cc:93:d2:f5:23:f5:c1:0a:c4:87:d0:89:85:
1f:d2:0e:f3:97:8a:ad:c8:d9:9c:1d:38:18:d4:e5:
ab:d8:1a:9f:01:34:3e:8f:9f:76:5c:dd:22:1b:0c:
df:37:96:39:0a:73:d0:06:de:1c:14:4f:ab:60:50:
32:7e:77:30:b5:03:78:2a:bc:ad:38:de:0c:ed:3b:
0e:eb:e9:34:92:f1:01:e8:ef:cd:9f:90:8f:f3:7d:
c9:3b:cf:41:99:45:9f:a8:41:7c:75:ee:4b:c8:c9:
30:47:0c:1c:5f:d5:ba:e4:96:ef:3d:ab:da:a0:f5:
c7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5E:3E:E8:69:F7:41:F8:8B:AE:96:78:8F:98:05:8A:CF:0C:7D:02
X509v3 Authority Key Identifier:
keyid:93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ea:92:a5:8f:bc:c1:1c:94:8d:a1:68:05:a9:1d:a5:08:92:
77:02:e2:2d:ba:fd:6d:d2:08:54:61:3b:5f:50:0a:7b:5d:b2:
4b:13:e7:86:68:1f:3d:0c:69:00:92:ae:87:4e:33:b5:3b:33:
14:07:30:b6:35:f9:c3:39:0c:b5:50:81:fb:8b:67:91:94:e5:
f5:62:42:be:c1:b7:20:6a:6e:9e:2d:67:2d:0b:09:b0:9c:9a:
9c:54:e5:48:00:15:8d:50:08:21:73:68:ce:ea:4f:f8:aa:bc:
0b:37:e0:62:31:82:0b:5b:ae:4e:f6:9e:8c:8f:55:09:cf:e9:
59:bd:01:33:e2:73:69:9a:78:a1:c0:e5:b3:f5:63:e1:75:5d:
84:4d:7f:ce:f2:50:0d:94:d3:30:d1:04:03:c2:62:33:37:7b:
b1:bb:8d:e5:63:4b:dc:cf:ea:e2:ac:d0:56:ed:80:5d:37:bd:
dd:c3:b5:dd:88:2e:74:87:2f:c3:5b:5f:19:dd:cb:db:1c:ef:
cf:71:d8:e6:f4:70:a7:b5:9b:7d:6a:d5:5e:da:f5:19:e8:ef:
79:6f:96:f8:b2:82:d0:77:5f:a3:07:b6:77:0f:ad:c6:73:d5:
5f:27:e7:5d:d0:cc:c6:61:fe:c8:ec:ff:25:7e:f9:e2:12:47:
2d:92:79:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:20 2026 by rpki-client