Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.mft
File: 4hFKMKZ-PPs8rbY2jtICxIzSm6c.mft (raw, json)
Hash identifier: R9cHOB9sp0+w9QeZvXko6wo4PNKDSNtGIIQZBzpteFI=
Subject key identifier: 93:BE:85:CF:0F:47:82:66:12:BF:B8:92:AA:26:0B:2F:DF:56:6C:A3
Authority key identifier: E2:11:4A:30:A6:7E:3C:FB:3C:AD:B6:36:8E:D2:02:C4:8C:D2:9B:A7
Certificate issuer: /CN=e2114a30a67e3cfb3cadb6368ed202c48cd29ba7
Certificate serial: 019BA23426352A5078A0EE89C524E01E6360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hFKMKZ-PPs8rbY2jtICxIzSm6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.mft
Manifest number: 12EE
Signing time: Fri 09 Jan 2026 10:01:25 +0000
Manifest this update: Fri 09 Jan 2026 10:01:25 +0000
Manifest next update: Sat 10 Jan 2026 10:01:25 +0000
Files and hashes: 1: 4hFKMKZ-PPs8rbY2jtICxIzSm6c.crl (hash: Ujzj/Dp45cQzwHSgFYDhnGzAO8t0LYRfstgM1Lc6cSY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:a2:34:26:35:2a:50:78:a0:ee:89:c5:24:e0:1e:63:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2114a30a67e3cfb3cadb6368ed202c48cd29ba7
Validity
Not Before: Jan 9 10:01:25 2026 GMT
Not After : Jan 10 10:01:25 2026 GMT
Subject: CN=93be85cf0f47826612bfb892aa260b2fdf566ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:2e:32:af:ce:ab:42:93:6f:16:b0:06:a4:
f2:c9:b3:40:cc:48:6b:c4:37:37:10:25:3e:e0:6e:
e5:01:62:9b:08:ea:e5:0e:e2:e4:f7:b6:d9:2b:e0:
d3:70:87:0f:da:87:21:68:c4:da:56:9b:5d:cf:f6:
a5:77:b3:ac:3a:17:cc:ca:a9:d6:86:66:96:cc:6f:
b3:c3:62:86:37:83:88:9f:d3:bf:77:f3:6d:60:fc:
c0:17:c8:c4:29:01:9f:87:5e:83:91:d4:b3:1a:98:
72:b8:73:d1:56:06:27:55:3d:64:e1:87:da:0c:20:
b5:54:85:97:e1:22:a6:bf:f0:3b:fd:06:47:a3:95:
52:0b:ab:e0:23:7c:5f:14:e5:1b:66:a7:e3:9e:25:
dd:c5:54:0a:6b:5e:d4:31:1f:12:a6:d8:75:74:13:
16:87:b4:d3:34:cf:47:8d:f0:9e:f4:8d:41:b1:9f:
8a:ea:8b:2a:28:0b:35:ed:b4:19:3d:35:05:89:5f:
28:9a:4a:94:0d:3b:57:50:dc:b8:d3:26:c0:f6:86:
92:dc:68:7c:56:2e:36:6e:b4:99:17:11:ab:42:af:
85:d2:0d:e8:8b:1d:a5:e1:46:e7:f6:31:ff:3c:86:
f5:f0:5f:06:38:3b:cd:a7:0f:30:c2:22:70:c8:76:
24:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BE:85:CF:0F:47:82:66:12:BF:B8:92:AA:26:0B:2F:DF:56:6C:A3
X509v3 Authority Key Identifier:
keyid:E2:11:4A:30:A6:7E:3C:FB:3C:AD:B6:36:8E:D2:02:C4:8C:D2:9B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hFKMKZ-PPs8rbY2jtICxIzSm6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:cd:ed:5f:6a:ac:03:51:eb:4d:29:85:e9:5b:f9:b6:f8:c7:
c7:b1:ac:a7:db:0d:a1:08:70:32:19:9a:e6:43:2d:bf:86:87:
85:2d:a8:54:3a:49:c2:07:bc:9f:76:56:f5:b8:e7:3b:17:73:
9d:1c:a8:58:43:59:b6:11:a3:c8:39:61:65:ed:1d:eb:d6:78:
dc:1f:37:9c:e8:94:74:39:24:03:26:f2:ee:b4:f1:3e:81:a1:
f2:b0:d5:7c:83:d9:5c:a5:48:94:cf:56:3f:61:aa:04:f5:bc:
77:21:e4:27:fc:7a:a1:0f:ec:c8:27:1c:30:99:cb:7d:ae:1f:
5c:60:d6:31:9a:ab:8e:66:ef:82:c5:91:ef:f2:48:9a:b5:aa:
31:4d:d5:d4:83:c0:cf:37:e1:f7:2a:9d:6f:59:2f:2c:eb:c4:
9d:48:09:f3:a9:74:43:0b:9c:8a:69:30:c4:6f:24:db:a3:d9:
74:cb:92:ec:1a:ef:d0:d2:c4:eb:8e:bd:bd:b9:d3:dc:7c:16:
64:c0:07:06:2d:3c:41:02:c5:ac:ab:54:8f:f4:fb:08:94:e4:
be:1f:93:32:aa:65:f4:d4:74:dd:8d:ae:b2:eb:5e:0f:a8:a1:
e9:f2:f5:d1:cd:18:a7:67:9a:eb:4a:ca:af:2c:15:f6:8e:4d:
95:f7:5a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:28 2026 by rpki-client