Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
File: 4xnQzWVZPZaejUU4KhlKqnPA_4w.mft (raw, json)
Hash identifier: Pve6DDW7U+jwuXJs+p3h5bIeeVq54PPO3oF2N587GWs=
Subject key identifier: C3:D9:C7:4D:EE:4D:0D:DF:D3:72:90:A4:D0:78:B3:A7:11:0F:C7:5B
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial: 019F23698F2B80A3ADEEC5F54146F231626E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
Manifest number: 1438
Signing time: Thu 02 Jul 2026 15:19:07 +0000
Manifest this update: Thu 02 Jul 2026 15:19:07 +0000
Manifest next update: Fri 03 Jul 2026 15:19:07 +0000
Files and hashes: 1: 4xnQzWVZPZaejUU4KhlKqnPA_4w.crl (hash: CIw3DwAIJmCZ5pZ0Pkj0BomSc51gb1MlkHkDacfLGyk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:8f:2b:80:a3:ad:ee:c5:f5:41:46:f2:31:62:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Validity
Not Before: Jul 2 15:19:07 2026 GMT
Not After : Jul 3 15:19:07 2026 GMT
Subject: CN=c3d9c74dee4d0ddfd37290a4d078b3a7110fc75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:da:e5:87:3f:8b:7d:55:e7:47:b9:85:9d:a1:
e2:51:38:50:61:de:d5:9e:98:ab:c6:e3:18:cc:dd:
06:08:bf:33:32:bb:6d:5a:31:9e:f0:7a:c0:ba:47:
c2:51:5d:1b:83:e2:4a:ad:8f:fe:84:30:d4:90:5c:
44:cf:b7:0d:8f:a8:bc:f3:de:9f:e6:4c:ee:4f:5f:
e5:1e:1e:28:24:00:d0:6e:c7:8e:8b:73:ec:d8:33:
a0:ea:a8:68:b7:9f:71:55:ac:d8:b1:20:7a:47:07:
df:28:f3:c4:e9:3d:e6:a0:5a:81:04:da:cf:c1:0c:
61:61:b5:1b:e8:fd:f0:3f:10:f5:e4:a1:1c:52:cd:
a6:5d:27:e6:98:bc:ab:5c:7f:f1:cd:fb:00:44:59:
50:36:05:5a:a7:1b:c5:29:57:29:bd:2d:b2:58:6c:
f6:03:45:68:44:e8:db:d2:c7:e2:40:38:ca:1e:a0:
ca:21:55:fa:11:c2:5f:d0:06:0d:ad:95:59:c7:81:
ec:5a:1e:b3:f8:fe:1a:a6:b3:c0:c8:2d:81:60:f4:
af:71:14:35:e9:6d:e6:4a:f6:2e:65:5d:db:d5:f9:
67:63:19:1f:9e:53:9c:d7:65:15:bc:6d:d7:c1:6f:
6a:0b:da:96:fb:3d:db:15:ec:e1:70:ea:04:1d:bb:
8f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D9:C7:4D:EE:4D:0D:DF:D3:72:90:A4:D0:78:B3:A7:11:0F:C7:5B
X509v3 Authority Key Identifier:
keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:a2:ff:d8:98:a0:69:e5:f6:b6:ff:58:e3:dc:5d:9a:ca:e7:
53:e5:ca:2d:eb:4a:30:52:48:42:01:a3:66:3c:39:ae:0a:f8:
3d:ff:c0:c3:a5:83:d9:76:03:20:2d:b7:e2:cb:d0:e5:ca:37:
5c:0f:70:83:d7:51:dd:c7:13:76:08:3f:31:b5:38:98:69:cd:
d5:8a:ff:01:db:53:8e:33:ee:18:00:73:2b:d6:91:0c:68:93:
f1:92:4b:55:21:de:13:0d:d5:02:69:82:1d:d1:25:28:74:72:
61:d3:29:c9:15:b8:19:98:b4:a0:67:b5:3b:b8:d4:88:7d:83:
03:5d:8d:cd:4d:14:cf:f0:72:f9:7a:fc:07:3e:15:de:93:e9:
16:08:82:64:13:47:92:ff:ac:a0:d0:4b:7c:6c:b5:c2:1c:0a:
69:b7:08:44:5f:3f:b1:f3:6a:90:4c:d6:b8:ee:c6:f4:51:d3:
2b:f4:e8:cc:06:70:69:fd:bd:f3:f1:2c:fc:62:6c:8c:0d:8e:
cb:8b:a2:ce:7d:e9:58:07:9f:b0:63:57:5a:8d:47:ca:59:df:
ce:59:a7:ad:fd:59:ef:af:1f:03:f3:4e:24:7b:ae:77:9b:f3:
cc:0f:b6:f2:0a:d0:26:dc:db:cd:69:53:78:86:38:d9:3c:20:
2f:83:8f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:26:28 2026 by rpki-client