Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
File: 4KACksKhBiuzKYCjxEP_84OkEAI.mft (raw, json)
Hash identifier: f8R4GTZGbjhzZwQ6HGK6CcH1hZilDiFBJ28Pw+XFfvM=
Subject key identifier: 97:C7:E9:03:A6:61:EB:6C:A7:B6:B5:6C:D7:FF:E3:F1:E2:F9:12:C4
Authority key identifier: E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
Certificate issuer: /CN=e0a00292c2a1062bb32980a3c443fff383a41002
Certificate serial: 019BD4A089BA3F7ADD2ADC9E44E1FF1EBBE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
Manifest number: 0B97
Signing time: Mon 19 Jan 2026 05:00:49 +0000
Manifest this update: Mon 19 Jan 2026 05:00:49 +0000
Manifest next update: Tue 20 Jan 2026 05:00:49 +0000
Files and hashes: 1: 0NqeGlWZDzCjZCDWy4QOQl-n2DY.roa (hash: 8iXrSdtjq3/hG24zElfh5zhWwb7toZX38vGMt5k8Nqw=)
2: 4KACksKhBiuzKYCjxEP_84OkEAI.crl (hash: z2C4eqXihTm/q9kX1hgVkgiyqXh/IzcBmm7zpRFSMk0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:d4:a0:89:ba:3f:7a:dd:2a:dc:9e:44:e1:ff:1e:bb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a00292c2a1062bb32980a3c443fff383a41002
Validity
Not Before: Jan 19 05:00:49 2026 GMT
Not After : Jan 20 05:00:49 2026 GMT
Subject: CN=97c7e903a661eb6ca7b6b56cd7ffe3f1e2f912c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:90:b8:8a:ab:dd:15:e8:7d:c3:bf:b4:2a:93:
4c:0e:ab:97:bc:29:16:08:06:d7:f9:89:bb:fb:71:
38:f1:52:d6:64:a5:e5:8f:18:66:62:25:64:25:4a:
ac:2a:e0:92:b7:0e:57:95:2d:bd:43:bd:c2:df:7c:
f3:4d:0f:0d:f3:10:29:8e:1c:f3:f7:4b:8b:e8:b1:
b9:9c:3e:27:b7:d2:6f:8e:7d:a1:55:14:14:63:a1:
f7:13:2a:ef:72:25:29:4e:6c:a3:42:9f:90:56:2a:
80:05:68:1b:7e:a8:84:bf:fb:28:85:33:a2:18:4c:
90:1a:47:6f:24:6d:1a:b3:55:f6:99:d9:60:d9:69:
29:42:b3:0c:37:ec:a0:9f:9f:68:cf:32:66:66:b1:
e0:d7:60:ce:91:fa:c7:0f:01:d4:1f:da:ac:f4:9f:
ea:d0:06:a9:b7:c3:6c:a7:24:92:17:fc:1b:58:3e:
a1:76:6a:1b:2b:74:b1:3b:f8:4b:4d:0f:4b:1f:0e:
f2:58:8f:62:e6:38:9c:6f:28:0f:12:49:d7:47:34:
ec:34:5c:7f:e7:fe:a0:6a:21:52:59:82:b9:1b:29:
24:42:71:76:bd:f6:1e:4c:b6:fb:fe:09:0e:90:f3:
2a:e4:25:fb:ce:c3:82:3b:ef:5f:ec:79:52:d5:70:
54:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C7:E9:03:A6:61:EB:6C:A7:B6:B5:6C:D7:FF:E3:F1:E2:F9:12:C4
X509v3 Authority Key Identifier:
keyid:E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9f:0f:a7:73:73:c4:01:3e:d4:8f:b9:71:1c:b7:d3:8b:ff:
fb:cd:7f:05:57:7d:c9:b7:ac:c2:c3:d8:2a:43:00:c0:cf:24:
c7:7e:be:53:d5:5d:cf:1c:b2:c5:0c:c6:f5:84:ca:e2:d7:53:
fc:3e:35:c9:87:d2:47:0c:13:af:0f:4a:85:8b:8b:a1:ad:a3:
b2:b0:6b:21:37:d3:fa:4e:ee:0d:c3:c6:80:2b:9f:bc:5b:b9:
23:32:30:7d:5a:68:ea:90:c5:a1:23:8e:90:34:94:ef:b3:ae:
49:cd:5d:e0:dc:e6:ec:76:42:73:c0:f0:0e:a2:a1:bf:dd:ed:
fd:c2:6e:87:0f:0f:14:ec:9d:57:44:a1:5b:47:f1:06:3d:6f:
02:84:6d:da:bd:bd:e7:0a:77:7d:04:c8:aa:a3:ce:d8:9d:b2:
7a:dc:e8:1f:73:62:fa:81:3a:2c:0e:1d:a3:7f:a9:72:24:13:
3c:f8:c9:39:0f:f0:d5:52:81:96:37:15:9e:16:ac:85:1a:a6:
0c:bb:f6:af:ef:c6:d1:8e:23:57:37:b0:89:89:66:c9:71:bc:
37:95:d4:d8:1e:8a:9f:5b:b9:df:a3:d0:6c:a8:b3:bf:cd:f2:
36:91:56:43:19:ce:2f:12:a2:8c:e4:51:31:e1:f6:ee:96:36:
f0:47:a8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:39:46 2026 by rpki-client