Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
File: 2n1fyh5GmSnUqLb1evPLzcY5o14.mft (raw, json)
Hash identifier: haIDG3ooAPjJQ4D6umT/dqlLRF8XiM9rwB3Fz2bXUgI=
Subject key identifier: 48:E2:2B:D1:A4:58:23:A4:5F:2C:A5:92:58:D8:77:0F:07:C2:06:3D
Authority key identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
Certificate issuer: /CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Certificate serial: 019CC0A9626994779DC67BFCF41AEA648299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
Manifest number: 04C4
Signing time: Fri 06 Mar 2026 01:00:52 +0000
Manifest this update: Fri 06 Mar 2026 01:00:52 +0000
Manifest next update: Sat 07 Mar 2026 01:00:52 +0000
Files and hashes: 1: 2n1fyh5GmSnUqLb1evPLzcY5o14.crl (hash: zr9aRdc0D0SHzPyZGN1ws/X8D58urYDJ72RWZSD2fnE=)
2: QIVGwWpDhmP0Lt1vWLEMeupfAyk.roa (hash: OEQd4UwgEr9+CWSpGLqPnKGVZ8XYzfyB9h22FefazmM=)
3: r6WgsUq6jiFumRINyEG5GV6II-U.roa (hash: NWG/33AP1v+nUP2w6gJBO4n+5g2mG5UrFdSFRba11Mo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c0:a9:62:69:94:77:9d:c6:7b:fc:f4:1a:ea:64:82:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Validity
Not Before: Mar 6 01:00:52 2026 GMT
Not After : Mar 7 01:00:52 2026 GMT
Subject: CN=48e22bd1a45823a45f2ca59258d8770f07c2063d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:01:ef:9f:fe:07:d4:ab:98:25:6e:34:c4:08:
dc:05:1e:c4:f9:48:c5:48:ef:8e:f4:f5:26:d9:e3:
5d:8f:5d:a2:9e:ba:1d:b7:c8:61:ca:7c:1b:37:18:
1a:73:b6:78:2d:a4:f2:34:a2:66:27:e3:48:f6:61:
9d:ee:ae:e2:a9:44:7c:66:dc:a9:d5:68:35:79:bf:
04:7b:a0:92:e0:57:ed:d9:4c:fb:d7:7e:3d:1f:8e:
7d:cf:b6:1d:a1:71:07:39:05:5b:33:e2:d4:a2:00:
96:0f:04:fb:8d:24:39:4f:b5:b9:70:3c:04:01:aa:
2f:9d:7c:69:ee:59:23:c3:aa:b7:22:ff:28:b3:76:
85:10:66:20:6b:91:7c:d9:b2:7e:2f:47:c4:dc:ed:
60:a6:6c:65:d1:5b:26:23:9c:a7:45:a7:65:c6:e5:
dd:eb:03:db:dd:e0:ad:c7:bc:a8:11:65:08:2d:e3:
e0:15:5a:06:eb:51:ac:b3:a8:87:e3:65:bd:82:ac:
dd:20:23:c2:24:86:0a:f4:fd:3c:59:01:0e:a4:19:
55:7b:26:dd:aa:da:90:c6:90:75:80:eb:24:aa:db:
0a:be:c2:9d:6f:bb:fe:d9:f1:fc:3c:24:87:4d:e3:
1e:91:1f:50:86:27:5e:a5:53:d2:aa:22:1f:86:43:
f7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E2:2B:D1:A4:58:23:A4:5F:2C:A5:92:58:D8:77:0F:07:C2:06:3D
X509v3 Authority Key Identifier:
keyid:DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:da:9a:41:c8:47:f6:69:dd:2f:be:6c:b8:a8:60:37:a2:e7:
96:9a:3d:cc:54:e9:3d:e3:21:9d:21:2b:2b:27:68:87:50:3c:
9a:6b:3b:0c:bf:e4:e2:25:12:9c:77:1f:89:93:4a:87:4e:ab:
a9:a7:d4:32:8b:15:5d:e6:e5:81:65:c9:7b:87:f2:0d:a8:3f:
e9:14:26:f0:30:24:9e:c0:91:97:00:05:58:63:66:9f:56:de:
29:b8:8b:05:cc:ab:22:6c:b3:a4:b5:f3:d6:f6:c1:c8:b9:16:
cc:f2:0a:34:af:6c:16:3b:01:aa:c3:57:ab:29:c8:b6:e9:1a:
fb:9e:4f:01:b4:51:c5:7d:8d:d2:d9:d4:0e:c7:0b:50:14:9c:
36:c2:6e:d6:eb:12:80:e0:3e:e2:f6:77:43:89:98:89:02:4e:
4e:50:17:4b:d5:32:64:d4:b8:0d:b1:1b:2b:0f:4a:a7:d9:b4:
95:28:5d:79:c9:bc:53:aa:08:ee:cc:11:2c:be:1f:4e:f1:b8:
f4:09:a9:26:d3:f8:6e:de:7b:bd:21:8e:28:24:05:1d:06:75:
8d:c4:62:c8:cf:42:63:e3:ca:f3:88:cf:6a:0e:b1:db:6c:6e:
8c:3a:d5:5f:20:15:8d:26:d6:2e:74:85:8f:f2:f9:b0:d1:47:
1c:ac:ef:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:18 2026 by rpki-client