Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
File: 4Vanhb9_5NfEpca3ISFPDpbzrsk.mft (raw, json)
Hash identifier: KSfdx1nTJjFCwAoujRS1DLOkBNseb24+gdwUsu8pdmM=
Subject key identifier: B5:81:03:24:E3:40:A1:7B:95:0C:F6:A8:C5:19:6F:7B:84:A3:E9:28
Authority key identifier: E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
Certificate issuer: /CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Certificate serial: 019F2369BED049BE993BAC3EAB4641E64A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
Manifest number: 14B6
Signing time: Thu 02 Jul 2026 15:19:20 +0000
Manifest this update: Thu 02 Jul 2026 15:19:20 +0000
Manifest next update: Fri 03 Jul 2026 15:19:20 +0000
Files and hashes: 1: 4Vanhb9_5NfEpca3ISFPDpbzrsk.crl (hash: lZmdUf9CY6E038fKlUBHJYoDsshXQEqQJz+z3woMs4Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:be:d0:49:be:99:3b:ac:3e:ab:46:41:e6:4a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Validity
Not Before: Jul 2 15:19:20 2026 GMT
Not After : Jul 3 15:19:20 2026 GMT
Subject: CN=b5810324e340a17b950cf6a8c5196f7b84a3e928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:d9:49:d2:c0:4c:5b:32:75:3b:f2:3c:40:
ba:c7:37:fd:91:a4:c1:17:cd:c5:06:83:64:ce:6a:
33:fc:ac:63:2f:c3:ab:b5:16:bf:e3:79:bb:f9:33:
9a:3d:f9:29:8e:cd:47:2f:0f:64:ff:e5:2c:40:46:
2d:1b:b8:94:aa:96:84:f7:a1:31:e1:5c:d4:b0:8d:
14:29:27:ad:98:cb:fd:8a:2a:80:95:a8:2e:d9:bb:
9d:ef:1c:f7:7b:aa:9f:56:9a:ce:7d:c2:e7:87:7e:
ef:36:c7:36:03:d1:79:30:e0:eb:fa:09:7a:f5:03:
81:09:71:66:12:4c:e0:12:20:15:88:5d:0d:9d:12:
e7:80:e4:bc:76:fd:f3:1f:5c:1e:15:32:e3:4b:29:
7a:64:08:8c:a3:a7:b3:52:6b:e7:5f:70:db:c1:d5:
e7:e6:fd:9d:5e:6f:1b:5b:83:28:e3:e2:72:c8:5e:
31:e0:5c:d4:29:ab:2a:8f:74:f6:41:eb:94:7d:9d:
24:06:ad:e8:34:bf:35:78:de:ca:b8:c4:b4:a7:92:
43:d9:14:c5:e9:0b:75:ac:7d:43:98:19:cd:24:bd:
d2:fa:fa:c4:60:f9:7a:49:d8:8c:52:a3:9b:fe:85:
c4:43:26:59:e1:4c:4e:fa:fc:57:bc:75:28:b2:ca:
d9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:81:03:24:E3:40:A1:7B:95:0C:F6:A8:C5:19:6F:7B:84:A3:E9:28
X509v3 Authority Key Identifier:
keyid:E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f5:d1:78:8d:95:e5:83:81:f0:76:2e:6a:1d:e1:52:c7:15:
02:c8:1f:a7:01:54:92:0e:db:d7:fb:3e:c4:a6:11:9f:39:b4:
90:4f:99:cd:31:8e:9e:e8:a8:89:ec:c8:4a:2f:bf:8c:c2:83:
bd:48:77:52:0f:c7:ea:33:c6:58:79:91:53:40:01:b4:0a:9a:
e9:2d:22:99:a8:ca:04:71:ef:52:cb:cf:17:ab:32:89:68:d6:
db:58:d1:d0:0f:86:19:ec:84:01:2f:a4:33:15:9d:1f:e4:65:
b4:c8:34:52:c0:f1:29:dc:76:b6:e4:29:b5:b0:d6:f8:e4:03:
63:64:a6:65:2e:3f:24:97:8c:15:ac:18:a4:40:c3:0c:33:85:
6c:bb:4f:0e:a9:ae:2a:9d:01:70:d2:b7:d4:d9:ea:d1:cf:55:
19:cd:9f:ac:a7:4d:5f:25:a9:95:19:42:2c:3e:c0:be:6c:8c:
67:3d:3a:73:4a:ed:86:e7:5b:e3:83:d9:e4:c3:d5:fd:73:c4:
75:a7:0f:40:ec:4a:b7:be:42:6b:7c:82:81:09:ce:14:dc:b7:
5b:6a:1c:38:6e:16:fd:ee:08:dc:dc:00:1a:b5:62:f8:06:f1:
fe:8f:62:0e:8b:bd:c4:ea:5b:d9:d7:5f:2e:fe:20:92:bf:f9:
32:56:be:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8jab7QSb6ZO6w+q0ZB5ko0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTZhNzg1YmY3ZmU0ZDdjNGE1YzZiNzIxMjE0ZjBlOTZm
M2FlYzkwHhcNMjYwNzAyMTUxOTIwWhcNMjYwNzAzMTUxOTIwWjAzMTEwLwYDVQQD
EyhiNTgxMDMyNGUzNDBhMTdiOTUwY2Y2YThjNTE5NmY3Yjg0YTNlOTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6nZSdLATFsydTvyPEC6xzf9kaTB
F83FBoNkzmoz/KxjL8OrtRa/43m7+TOaPfkpjs1HLw9k/+UsQEYtG7iUqpaE96Ex
4VzUsI0UKSetmMv9iiqAlagu2bud7xz3e6qfVprOfcLnh37vNsc2A9F5MODr+gl6
9QOBCXFmEkzgEiAViF0NnRLngOS8dv3zH1weFTLjSyl6ZAiMo6ezUmvnX3DbwdXn
5v2dXm8bW4Mo4+JyyF4x4FzUKasqj3T2QeuUfZ0kBq3oNL81eN7KuMS0p5JD2RTF
6Qt1rH1DmBnNJL3S+vrEYPl6SdiMUqOb/oXEQyZZ4UxO+vxXvHUossrZCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWBAyTjQKF7lQz2qMUZb3uEo+koMB8GA1UdIwQY
MBaAFOFWp4W/f+TXxKXGtyEhTw6W867JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZhbmhiOV81TmZFcGNhM0lTRlBEcGJ6cnNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMThmMzItNDczYy00ZDllLWFiODUt
N2JkMGNmYTIzOWY2LzEvNFZhbmhiOV81TmZFcGNhM0lTRlBEcGJ6cnNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iMThmMzItNDczYy00ZDllLWFiODUtN2JkMGNmYTIzOWY2
LzEvNFZhbmhiOV81TmZFcGNhM0lTRlBEcGJ6cnNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAfXReI2V
5YOB8HYuah3hUscVAsgfpwFUkg7b1/s+xKYRnzm0kE+ZzTGOnuioiezISi+/jMKD
vUh3Ug/H6jPGWHmRU0ABtAqa6S0imajKBHHvUsvPF6syiWjW21jR0A+GGeyEAS+k
MxWdH+RltMg0UsDxKdx2tuQptbDW+OQDY2SmZS4/JJeMFawYpEDDDDOFbLtPDqmu
Kp0BcNK31Nnq0c9VGc2frKdNXyWplRlCLD7AvmyMZz06c0rthudb44PZ5MPV/XPE
dacPQOxKt75Ca3yCgQnOFNy3W2ocOG4W/e4I3NwAGrVi+Abx/o9iDou9xOpb2ddf
Lv4gkr/5Mla+sw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:37:12 2026 by rpki-client