Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
File: 1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft (raw, json)
Hash identifier: tYx3E7OiVCDkd/j2kXVGOJXrjeD161jw1Ek5/Y1tpCA=
Subject key identifier: 98:6E:5C:1B:1A:0E:8C:31:E0:FD:3D:1B:12:8E:9F:22:D8:44:E7:15
Authority key identifier: D4:18:1D:E1:B3:2B:7C:10:50:D0:B0:CA:6D:64:0D:46:3A:53:52:F4
Certificate issuer: /CN=d4181de1b32b7c1050d0b0ca6d640d463a5352f4
Certificate serial: 019B97428252764FEBF6F05750838F78B5D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
Manifest number: 082D
Signing time: Wed 07 Jan 2026 07:01:16 +0000
Manifest this update: Wed 07 Jan 2026 07:01:16 +0000
Manifest next update: Thu 08 Jan 2026 07:01:16 +0000
Files and hashes: 1: 1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl (hash: 7wjyJSwH90dpUVGpqm66R9GI8ccc7C5frJYAi8Tsqxs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:97:42:82:52:76:4f:eb:f6:f0:57:50:83:8f:78:b5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4181de1b32b7c1050d0b0ca6d640d463a5352f4
Validity
Not Before: Jan 7 07:01:16 2026 GMT
Not After : Jan 8 07:01:16 2026 GMT
Subject: CN=986e5c1b1a0e8c31e0fd3d1b128e9f22d844e715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:da:15:83:22:df:7f:52:a9:0b:45:0f:c3:84:
9b:a1:c2:fa:92:2c:2a:e6:31:56:49:5b:43:72:c0:
ca:c0:d4:9a:a5:ce:b2:42:1f:cf:ff:32:0c:28:65:
ff:fe:ad:69:f6:f0:86:b4:e1:d6:b6:23:21:b6:6d:
76:1f:12:5b:2f:e1:03:50:1d:a6:5e:e8:9c:ad:8a:
ff:f0:c8:fb:73:aa:6b:76:bf:9d:b6:7d:dc:ac:ea:
c1:36:af:4f:1f:7a:2f:f4:05:53:ff:6b:d5:90:80:
ca:8a:a1:0c:73:b4:2e:8c:2c:ef:33:8c:7b:c3:80:
b4:e8:43:31:7c:5e:5b:d8:d0:8d:f9:65:b1:92:f3:
4b:7c:5b:b3:5f:85:2e:74:da:4d:6f:59:c4:cb:b4:
b2:d4:20:81:a5:31:de:49:e1:6f:ef:cc:74:54:46:
a3:1a:f2:4d:98:19:e1:fb:94:fd:91:cb:5c:41:26:
86:f7:07:16:69:d6:2e:4b:9b:5c:12:06:10:ac:6b:
a7:f9:d0:64:a2:be:77:1f:be:e7:fc:ac:64:be:e5:
5d:08:65:8d:4c:e1:10:b1:a5:49:e5:e3:ed:f3:67:
dd:1b:fc:c8:5f:db:cc:9c:99:5b:a3:95:4c:4b:46:
85:df:16:62:a7:82:4f:fc:f7:9d:fc:76:50:25:a8:
7e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6E:5C:1B:1A:0E:8C:31:E0:FD:3D:1B:12:8E:9F:22:D8:44:E7:15
X509v3 Authority Key Identifier:
keyid:D4:18:1D:E1:B3:2B:7C:10:50:D0:B0:CA:6D:64:0D:46:3A:53:52:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:57:3f:ae:c2:01:a8:c1:f4:5e:fd:a4:93:0b:03:bb:af:5e:
1b:86:48:c5:46:ce:26:db:59:61:40:98:fb:34:95:c3:c1:a7:
a1:f0:90:a4:31:84:b3:c0:86:db:99:b6:1c:b3:06:8d:8b:d2:
e5:a4:49:56:fe:8a:76:44:e2:6a:6c:04:6e:74:7c:a0:9c:0d:
16:4d:7a:08:8f:aa:e7:97:aa:13:4e:64:11:1f:31:dd:dd:dd:
df:3d:ac:78:9d:4d:1f:dd:c8:08:da:76:89:25:9c:3e:76:83:
e0:44:03:76:1b:6f:7b:77:f6:a1:3e:0e:5d:9d:2f:87:e5:b4:
d7:88:d1:dc:85:3f:b2:07:a3:82:e7:2b:b7:e2:19:7e:38:01:
5d:56:99:3b:dd:63:25:ba:f5:4d:00:96:19:07:33:b0:46:5e:
87:4e:ea:7b:a1:a5:22:5d:cd:f2:9d:e4:0c:f8:4c:c4:a3:9b:
51:20:a1:a7:59:2b:84:39:7a:41:89:3e:03:ea:36:e7:82:23:
f1:45:eb:ec:91:63:12:f9:36:da:c9:10:be:d1:48:78:1a:6a:
79:5b:b7:04:d1:a4:a7:85:99:f2:d7:b4:1e:b1:fc:b0:57:61:
1c:32:21:93:6e:73:6e:ac:59:4a:2b:8d:4a:5f:0b:a6:ba:1f:
ef:70:a7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:48 2026 by rpki-client