Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/ApHU3hMNpqrOIu2ZZQvhgkl-C88.mft
File: ApHU3hMNpqrOIu2ZZQvhgkl-C88.mft (raw, json)
Hash identifier: pjmlS6fuPjX6R7eS8KbfxF/8B6qaNRnIqwgf7nSl2fA=
Subject key identifier: F1:A3:1E:65:EF:E0:84:6B:E9:AC:29:18:E2:B3:BE:52:CA:F9:57:F3
Authority key identifier: 02:91:D4:DE:13:0D:A6:AA:CE:22:ED:99:65:0B:E1:82:49:7E:0B:CF
Certificate issuer: /CN=0291d4de130da6aace22ed99650be182497e0bcf
Certificate serial: 019F22473DB6E4DDBAC328FA6226FC743B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ApHU3hMNpqrOIu2ZZQvhgkl-C88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/ApHU3hMNpqrOIu2ZZQvhgkl-C88.mft
Manifest number: 198C
Signing time: Thu 02 Jul 2026 10:02:01 +0000
Manifest this update: Thu 02 Jul 2026 10:02:01 +0000
Manifest next update: Fri 03 Jul 2026 10:02:01 +0000
Files and hashes: 1: ApHU3hMNpqrOIu2ZZQvhgkl-C88.crl (hash: JdU0WRLalVxzAaDd+dBkOtFOdeHd914xnwCCgMTga2k=)
2: JjDhj2srmVAP3AT2q_uafFZ9Ihw.roa (hash: u5PsqVAMH7Yc5b8Mh+/CsUxDWS3RTBQzxJkkDCsiaVs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:47:3d:b6:e4:dd:ba:c3:28:fa:62:26:fc:74:3b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0291d4de130da6aace22ed99650be182497e0bcf
Validity
Not Before: Jul 2 10:02:01 2026 GMT
Not After : Jul 3 10:02:01 2026 GMT
Subject: CN=f1a31e65efe0846be9ac2918e2b3be52caf957f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b2:d1:c2:66:1a:18:a0:18:8d:74:b4:12:9c:
d5:f9:5a:7e:a3:59:98:88:c1:51:ce:b7:c0:2e:46:
46:91:09:95:b4:80:81:64:ef:ec:34:69:4c:39:89:
a6:47:a0:52:59:ff:61:b0:4e:6b:ec:f9:be:21:63:
26:54:ce:a5:04:9c:ee:95:f7:54:72:2e:ff:0c:9c:
56:55:af:ee:06:b0:7e:2f:f7:77:88:46:03:0c:7a:
63:4a:a1:1e:3d:86:ae:fa:e5:2a:e8:8f:62:48:ff:
78:f4:c4:18:28:12:9f:84:53:7d:69:fd:56:e2:a3:
d0:c9:87:c5:e6:87:4c:b3:67:c5:f5:f1:68:1e:62:
fe:75:41:65:90:d5:34:29:57:86:38:51:a1:bb:ac:
de:45:79:28:c4:f0:3a:c4:e7:e7:b6:4e:30:95:f2:
ba:80:d4:57:04:51:01:89:8d:fa:5e:1a:49:36:37:
c4:07:c4:c8:86:a2:ff:0d:57:38:d0:ca:c4:32:03:
47:30:00:59:17:00:05:0d:fc:26:e1:c1:99:56:78:
bd:8f:4e:fe:b5:fd:b4:bf:3b:67:31:0d:55:8d:c2:
11:5f:02:f1:fb:39:d2:99:7a:67:96:80:f3:28:6b:
2e:b2:f5:14:0e:43:d6:84:f4:ff:95:25:99:83:b8:
68:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A3:1E:65:EF:E0:84:6B:E9:AC:29:18:E2:B3:BE:52:CA:F9:57:F3
X509v3 Authority Key Identifier:
keyid:02:91:D4:DE:13:0D:A6:AA:CE:22:ED:99:65:0B:E1:82:49:7E:0B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApHU3hMNpqrOIu2ZZQvhgkl-C88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/ApHU3hMNpqrOIu2ZZQvhgkl-C88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/ApHU3hMNpqrOIu2ZZQvhgkl-C88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:7c:04:7b:a1:2c:8e:b9:6d:fd:45:9a:e3:98:80:4f:6a:b1:
65:14:88:49:95:a5:f6:11:a6:96:f8:b1:eb:9b:84:ed:27:14:
41:e4:b4:b9:4f:62:e2:48:5e:9b:89:75:27:39:53:9a:0f:78:
da:64:3a:9a:b3:04:7b:1f:9f:69:af:b4:9f:21:58:69:5c:52:
bb:6e:1b:0e:1b:0a:6f:9f:9e:f2:8f:e4:58:da:1b:f1:3b:cd:
a2:3c:a1:94:c8:d0:00:2d:cc:57:79:16:35:bd:cd:4f:85:aa:
ac:d8:18:67:d0:c6:a2:74:bc:1f:3e:17:3c:12:b8:00:6d:3f:
fc:1f:ef:40:78:6f:d6:fe:b8:3d:5d:d3:5b:d7:7a:08:25:db:
63:a5:05:de:99:c1:ca:f6:85:07:24:79:e0:01:90:84:78:4a:
4b:c4:75:61:1b:fe:af:e6:d9:03:7d:2b:24:0f:cd:e6:8c:0d:
ef:67:42:c9:76:a4:18:0b:1e:a4:73:b3:23:e0:3c:4c:7d:6e:
58:ba:0e:34:10:bf:9b:98:e7:9d:ea:dd:bb:3d:c9:f0:f7:39:
3d:a8:13:50:be:1c:50:43:03:c7:4c:b8:3b:50:62:55:62:e1:
79:22:24:56:4a:a4:6e:02:26:8a:ac:df:eb:29:06:44:1a:cc:
3e:2e:f8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:44:43 2026 by rpki-client