Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
File: C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft (raw, json)
Hash identifier: mD90p4McBiUikop8Mau37zGQVCp5spK83jrNSW63aEM=
Subject key identifier: 59:C8:FC:8C:39:79:14:BA:D9:8A:9A:FB:45:7D:07:64:2A:7E:8E:27
Authority key identifier: 0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
Certificate issuer: /CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Certificate serial: 019F22EC11FE07CDC5ADA3AFC0D517FE3BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
Manifest number: 198A
Signing time: Thu 02 Jul 2026 13:02:04 +0000
Manifest this update: Thu 02 Jul 2026 13:02:04 +0000
Manifest next update: Fri 03 Jul 2026 13:02:04 +0000
Files and hashes: 1: C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl (hash: UOUXT6cbhDUNd1kjDX8GuKi9q7GV4yDZuOAZ7LFphlI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:ec:11:fe:07:cd:c5:ad:a3:af:c0:d5:17:fe:3b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Validity
Not Before: Jul 2 13:02:04 2026 GMT
Not After : Jul 3 13:02:04 2026 GMT
Subject: CN=59c8fc8c397914bad98a9afb457d07642a7e8e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:c3:69:ec:9c:9b:ba:c1:07:ff:e3:ce:c5:
26:be:0b:6a:64:48:e5:4d:fa:b5:fe:84:b6:bc:43:
42:a8:6a:be:eb:d2:d1:51:3c:b3:52:af:13:c5:85:
0c:a2:5c:35:7b:b1:d4:6f:7b:86:2a:ee:9d:84:5f:
9b:4a:80:93:37:9f:57:10:4e:d9:9b:e6:be:4f:68:
5e:44:03:3d:48:d5:3a:d8:a5:58:c2:a0:44:0a:89:
db:79:c0:50:a8:24:d5:ce:34:52:87:f3:f1:ee:9a:
61:93:a8:9b:74:f6:a2:d3:ab:d4:f7:fa:5a:0c:fa:
66:21:0c:65:76:e6:36:de:aa:b2:34:88:43:41:cf:
58:da:ef:69:18:4e:04:6f:d9:c1:e9:5a:50:9a:19:
96:23:59:04:df:30:84:6b:77:da:d2:a7:b2:51:be:
c6:48:50:af:7b:71:0b:22:3a:60:e8:26:18:3b:bf:
40:c7:07:9c:82:94:35:ad:cc:00:90:01:40:77:f5:
3e:8e:fc:ed:4f:c9:f7:1c:89:0e:83:0b:4f:16:d0:
55:5b:e5:3d:33:92:e0:fc:2d:7f:a5:0e:da:eb:ea:
a6:c2:1f:20:fa:00:19:17:e9:45:9a:dc:34:a3:de:
16:e9:65:ee:49:fd:55:57:7e:e7:3a:6c:d1:77:f2:
63:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C8:FC:8C:39:79:14:BA:D9:8A:9A:FB:45:7D:07:64:2A:7E:8E:27
X509v3 Authority Key Identifier:
keyid:0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:9f:ad:a6:26:93:b2:4c:1c:dc:dc:bd:6e:8e:16:94:60:21:
71:6d:0d:77:bd:85:ea:48:c0:b8:4e:ff:07:6e:14:73:7b:9b:
a8:86:96:60:98:03:04:7b:d5:ba:0e:4b:f0:5d:49:a0:ba:41:
f8:ee:38:61:76:bc:40:bc:18:d7:28:22:ee:66:8b:71:14:26:
b8:81:1b:b9:51:8f:30:6c:42:a9:6c:51:75:ee:a2:7c:e1:89:
eb:8a:61:e5:05:84:f8:2d:eb:76:40:df:6f:7a:7d:26:35:4e:
65:e5:db:bd:64:87:7e:5f:a7:20:2a:7e:4b:24:30:02:d9:9e:
c6:58:a5:5b:cf:f2:2b:0a:bd:36:14:cc:3d:68:ef:d0:d5:89:
c4:c5:57:31:f3:e0:9d:ae:95:85:28:71:a2:a4:9b:da:58:54:
e8:e4:4b:2c:a3:9f:ec:7d:25:f9:5b:18:42:09:bb:c6:fa:74:
72:47:0d:7c:be:8b:53:2e:69:88:a9:ca:a5:d5:39:da:91:b9:
26:98:e1:9c:8f:31:20:13:b1:e8:8b:cd:cc:1f:29:6a:72:a2:
64:d9:24:c4:03:25:08:b2:1d:ba:cc:4c:5b:9b:ff:fd:93:5c:
8e:a2:ee:7f:79:a1:ea:04:90:9f:4c:76:32:b7:24:e4:43:37:
4d:36:b6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:27:03 2026 by rpki-client