Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
File: 4VhJEBJK93bjDlrPBV1rrhdhpTY.mft (raw, json)
Hash identifier: 0bwMRkPNRFl3A6hEoqS3cwrD+ja5QDXJl2ePENwFFxA=
Subject key identifier: 87:09:37:29:F0:E1:D2:91:9A:DF:E6:D5:11:30:58:A4:4F:EB:53:45
Authority key identifier: E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
Certificate issuer: /CN=e1584910124af776e30e5acf055d6bae1761a536
Certificate serial: 019C20961194F7E2990E9C0DF46375D6F0B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
Manifest number: 0CF0
Signing time: Mon 02 Feb 2026 23:00:31 +0000
Manifest this update: Mon 02 Feb 2026 23:00:31 +0000
Manifest next update: Tue 03 Feb 2026 23:00:31 +0000
Files and hashes: 1: 4VhJEBJK93bjDlrPBV1rrhdhpTY.crl (hash: x6Jr2V8u2xdaH1EHkho9X8tHUqTkzEOp+ksnC9QYizY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:20:96:11:94:f7:e2:99:0e:9c:0d:f4:63:75:d6:f0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1584910124af776e30e5acf055d6bae1761a536
Validity
Not Before: Feb 2 23:00:31 2026 GMT
Not After : Feb 3 23:00:31 2026 GMT
Subject: CN=87093729f0e1d2919adfe6d5113058a44feb5345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:72:4d:53:40:63:e0:5f:21:36:5c:ef:fa:38:
a0:45:fd:37:42:d4:bf:9e:2a:11:57:47:aa:a3:2f:
2c:d1:2e:1f:4f:81:a7:50:d0:41:38:c7:63:93:cb:
09:9c:7b:fe:1b:a6:c5:38:09:aa:85:5f:f1:bd:7c:
d4:ca:9a:49:91:2b:f5:af:c7:ca:35:9b:a7:09:10:
83:08:b2:d9:b5:b2:0b:70:f2:a9:b5:7d:52:79:37:
10:91:00:87:4e:48:3a:ae:93:c0:5d:fa:39:45:54:
52:01:dc:53:4f:fe:47:de:2c:8a:f2:fc:37:f0:4e:
bd:1d:79:c1:fa:52:2d:8d:57:76:75:c1:d9:bb:9f:
60:61:59:93:7a:c6:7e:66:2e:55:d2:06:ba:94:3c:
c8:bf:56:d6:5c:50:30:fe:7c:d2:e1:46:a7:ef:c8:
d1:b2:62:1c:5c:a6:fa:87:05:5d:9a:62:b8:98:8d:
af:7e:15:51:3e:d1:d1:26:cf:f1:8f:84:93:37:85:
c9:8f:28:c2:a5:3c:d9:71:50:56:f0:8c:51:a5:7c:
25:78:a0:62:4f:94:83:45:76:99:52:be:87:9e:82:
3e:0e:cd:93:dc:44:3b:de:d6:77:6b:dd:d5:03:cf:
61:27:dd:24:c0:6d:7b:f8:c5:bb:29:08:c8:d7:d5:
f4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:09:37:29:F0:E1:D2:91:9A:DF:E6:D5:11:30:58:A4:4F:EB:53:45
X509v3 Authority Key Identifier:
keyid:E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b2:27:52:ff:96:8d:fc:d9:3a:17:6d:27:2e:db:43:7d:41:
fc:7c:b7:db:27:ee:de:5b:2d:a5:35:11:72:4a:7e:b6:a4:67:
a7:f2:98:7b:42:fc:6c:36:8f:4f:43:3b:9c:af:86:a2:b7:01:
96:b7:f6:42:e4:e8:43:81:e8:72:cf:25:75:90:57:b1:e3:71:
6a:3a:a4:b5:46:94:4d:b8:a5:5e:45:e9:b2:f4:82:dc:6b:b9:
8b:0b:4f:72:71:12:0f:95:c6:53:49:a0:51:ec:06:0c:48:54:
06:e2:66:7e:f6:25:20:dd:de:ab:97:31:4f:3f:dd:01:30:4e:
e3:fc:94:3f:a3:e6:32:ec:3d:22:9f:c4:35:64:75:10:b7:53:
b6:e3:0d:a3:04:f4:87:63:2d:f2:49:41:e6:32:7c:16:35:58:
3b:c7:6f:71:29:a4:7b:52:61:3d:d2:8c:c5:fd:f8:6f:b1:8c:
99:77:f6:d9:7c:7f:54:00:95:76:58:41:8f:f2:79:5e:32:67:
34:9e:51:95:a3:f3:68:e9:09:c0:f4:81:f9:b3:74:83:16:e2:
71:68:d4:c5:c9:0c:e2:52:63:05:cd:dc:3f:87:58:f8:cf:95:
a1:57:29:5c:18:4e:96:14:d7:a0:21:e2:be:e3:3f:15:99:51:
e2:5b:f2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:59:59 2026 by rpki-client