Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
File: 4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft (raw, json)
Hash identifier: uv8xUnnA2PIU2lFmmS+zVnawFZ6ipN9QVMaVWIbKvoI=
Subject key identifier: 89:D5:4A:3E:55:C7:31:7A:33:87:5C:A0:AF:22:63:9F:26:14:7B:B5
Authority key identifier: E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6
Certificate issuer: /CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6
Certificate serial: 019C51B99603022F8C390A49A7473C6DECC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
Manifest number: 0496
Signing time: Thu 12 Feb 2026 12:00:42 +0000
Manifest this update: Thu 12 Feb 2026 12:00:42 +0000
Manifest next update: Fri 13 Feb 2026 12:00:42 +0000
Files and hashes: 1: 4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl (hash: jEmRZ/ErvzJp/wu6sCOSY3Gy4ZF4cVsknFbPPGo3+rU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:51:b9:96:03:02:2f:8c:39:0a:49:a7:47:3c:6d:ec:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6
Validity
Not Before: Feb 12 12:00:42 2026 GMT
Not After : Feb 13 12:00:42 2026 GMT
Subject: CN=89d54a3e55c7317a33875ca0af22639f26147bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:56:a4:0c:38:21:96:46:2b:45:50:75:e9:15:
15:7d:51:82:cd:64:cf:42:f4:79:26:e7:8e:44:fe:
04:d2:21:6d:97:cc:39:a6:af:4d:28:05:d0:e9:cc:
29:cc:b6:53:c1:5c:8f:0d:b0:66:c2:ac:96:50:4a:
91:b8:1c:80:d8:b3:c5:e1:f5:32:f8:97:55:3f:b9:
45:e8:55:bc:c3:a6:a5:96:99:cd:91:f7:51:22:7f:
6a:c0:f8:ad:a7:b7:d9:98:48:68:1d:b6:7d:a2:49:
95:63:ce:82:65:63:62:e0:27:12:4b:7f:0e:63:9d:
02:6b:78:1f:fb:50:f5:86:e1:65:e3:f3:bb:57:88:
6d:37:98:11:20:de:e5:12:e2:1a:b6:8c:cb:28:21:
40:cb:11:fa:19:9d:33:fe:58:1d:0b:e7:f1:fc:87:
e8:1e:72:76:ca:e5:af:0b:1e:22:56:92:37:33:f8:
ec:2e:61:b3:66:e0:56:8b:4a:96:46:c7:38:74:b3:
9a:a7:a1:d6:bd:eb:2a:9c:de:6a:8f:bf:10:34:87:
08:f1:a5:8d:1e:97:86:d8:e7:e2:14:6b:1e:6f:75:
03:55:63:f0:7e:f9:3f:a8:16:4d:d6:22:d4:9b:c0:
63:b1:99:8e:13:29:13:f6:dd:76:22:b8:aa:80:de:
25:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D5:4A:3E:55:C7:31:7A:33:87:5C:A0:AF:22:63:9F:26:14:7B:B5
X509v3 Authority Key Identifier:
keyid:E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2c:36:90:1a:05:28:50:3d:51:60:68:e1:99:28:5e:b6:45:
e0:45:db:2e:39:be:31:e5:cc:03:21:13:aa:a9:0f:4b:39:ef:
34:3e:f2:a4:98:43:fb:44:2e:7d:d7:79:75:d5:d9:65:15:91:
a7:a2:b8:e6:0a:bc:b4:40:fe:8a:2a:d8:44:c7:21:17:b6:65:
c9:78:ad:fb:08:76:16:14:ce:77:3a:43:f7:3f:47:16:39:dc:
6a:d5:89:a9:6d:03:22:fe:03:9c:83:fe:e0:5a:e4:50:4b:34:
72:18:3c:60:b5:87:b9:a2:6c:74:d3:8d:bb:72:8b:8d:ee:de:
52:c0:bb:3a:45:88:23:70:49:15:6e:f9:49:a7:07:f5:5b:7d:
b6:db:65:17:de:69:19:8c:ee:01:08:f7:f0:c5:15:62:2d:4c:
49:fd:8c:03:bc:01:af:2e:42:97:9f:17:55:b4:23:e0:f0:49:
93:88:e7:78:d0:c0:b3:11:ef:c4:17:75:7e:f6:35:9f:20:ba:
ab:f4:48:67:9a:fe:5d:ca:53:97:03:cd:a4:8e:3d:8f:46:66:
73:b2:3f:bc:68:90:8a:c5:28:78:7c:19:53:62:98:95:f9:bd:
47:94:2c:25:25:21:fa:35:b9:20:e5:9b:ba:1d:3a:3a:e4:7d:
9d:1c:ff:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:36 2026 by rpki-client