Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
File: 4SFHcEtsZk3PIjSS7mHV5fkXxek.mft (raw, json)
Hash identifier: xJ/wUl3Zm6gdNtOMfJyfc0+xiZMPwCHut0Dcirh12mc=
Subject key identifier: C4:3A:0B:8C:02:25:43:42:5B:95:C8:06:F6:47:28:87:38:4A:E6:C2
Authority key identifier: E1:21:47:70:4B:6C:66:4D:CF:22:34:92:EE:61:D5:E5:F9:17:C5:E9
Certificate issuer: /CN=e12147704b6c664dcf223492ee61d5e5f917c5e9
Certificate serial: 019D0AB094ECBCF91E87AE31183EF1FF42AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
Manifest number: 05B5
Signing time: Fri 20 Mar 2026 10:00:37 +0000
Manifest this update: Fri 20 Mar 2026 10:00:37 +0000
Manifest next update: Sat 21 Mar 2026 10:00:37 +0000
Files and hashes: 1: 4SFHcEtsZk3PIjSS7mHV5fkXxek.crl (hash: Wj3FJdYX8CwAzfSUre175OI+sdV01xUq2N4Q8j6iKWg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:b0:94:ec:bc:f9:1e:87:ae:31:18:3e:f1:ff:42:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12147704b6c664dcf223492ee61d5e5f917c5e9
Validity
Not Before: Mar 20 10:00:37 2026 GMT
Not After : Mar 21 10:00:37 2026 GMT
Subject: CN=c43a0b8c022543425b95c806f6472887384ae6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:14:99:16:73:f6:00:24:55:71:5c:7f:ce:
e1:8e:76:d9:e0:52:72:0c:42:42:17:68:c1:d8:70:
64:7b:64:fe:c6:76:70:de:11:65:7b:19:ae:6c:93:
ff:7b:f4:61:a6:fa:b1:5f:9e:5f:f0:74:fb:b0:f5:
95:78:56:da:75:db:73:8f:57:89:f3:23:69:1e:18:
bb:8e:01:a4:de:9c:d5:34:30:06:1e:69:f7:3c:91:
59:e8:63:41:ba:52:2c:14:ae:2e:c9:b1:4b:12:78:
95:31:fa:ca:42:aa:b4:d7:85:bb:cb:99:b6:16:1b:
bf:d5:c2:d9:18:57:c5:4b:de:32:d5:68:a1:56:1e:
10:d0:2c:66:f0:4b:74:fe:f4:06:ab:6d:9c:01:a9:
b6:c0:5c:f8:f7:07:7e:ba:d6:8e:0c:27:aa:46:de:
f4:86:1d:4f:8a:ae:bb:bf:76:05:39:15:f8:13:17:
8d:75:48:45:71:07:8e:36:76:5b:fa:77:2b:95:7c:
ab:92:7e:1c:af:ee:a9:da:fc:ed:6b:c6:d7:01:d7:
44:18:90:46:35:34:a0:5c:d0:12:13:87:6c:ea:60:
83:39:19:42:47:25:77:05:80:e7:0c:53:6e:28:c5:
79:72:e4:c9:a3:98:bc:90:a5:d6:ae:fa:c2:67:e5:
ab:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3A:0B:8C:02:25:43:42:5B:95:C8:06:F6:47:28:87:38:4A:E6:C2
X509v3 Authority Key Identifier:
keyid:E1:21:47:70:4B:6C:66:4D:CF:22:34:92:EE:61:D5:E5:F9:17:C5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:60:41:d5:09:88:81:b7:86:be:ef:6c:21:2a:d0:61:7c:a3:
fa:a7:9b:cf:ee:fb:73:94:29:ab:03:9e:9a:0c:58:56:f0:10:
90:e2:8b:84:f1:71:cc:b2:38:c1:76:74:e7:85:38:9e:e0:28:
bc:fe:24:44:90:e4:07:4d:1f:bf:38:4c:9f:e9:f2:9a:b3:61:
d9:f5:d1:83:61:31:b8:fc:64:9a:34:98:9e:6c:44:1d:cd:d4:
f1:30:ee:e3:0e:f9:6f:33:c3:1b:aa:03:57:07:14:ce:a0:78:
f6:06:76:aa:79:46:a1:6c:71:40:4d:9f:1c:79:69:07:a8:90:
94:ba:2c:2b:24:b8:ba:c7:2e:d6:28:99:e4:78:1d:d0:61:6f:
35:19:cf:79:48:a9:98:8a:c1:10:8d:f1:0e:f4:35:91:9e:e5:
da:1e:51:6f:ba:16:4d:8c:6c:3e:17:d7:cf:f4:c8:4c:dd:1d:
50:2d:7b:2d:26:50:30:86:e4:0c:3b:61:7b:2a:22:88:2d:a3:
38:aa:12:e8:fb:b1:2a:62:51:3e:5b:6b:7f:49:a2:42:4e:ad:
55:b8:d6:e8:c1:a7:ae:bf:21:9b:01:33:c2:24:92:ba:09:90:
20:fc:f2:e9:30:60:21:ae:46:f0:88:af:84:a0:4f:6f:4f:94:
fc:02:35:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:27:06 2026 by rpki-client