Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e7b591-0f5e-4141-be96-ddd53d7928a8/1/HeVgH-EiL4m7OqryZPD26nORwTg.mft
File: HeVgH-EiL4m7OqryZPD26nORwTg.mft (raw, json)
Hash identifier: I8+k4k5h7nPIaTOBvhBfcf4NafNS33iNZ8GrCpwLfCM=
Subject key identifier: F5:DE:2C:AA:F5:04:8D:17:49:28:85:F3:0B:DC:D3:8D:24:F2:44:18
Authority key identifier: 1D:E5:60:1F:E1:22:2F:89:BB:3A:AA:F2:64:F0:F6:EA:73:91:C1:38
Certificate issuer: /CN=1de5601fe1222f89bb3aaaf264f0f6ea7391c138
Certificate serial: 019EF75CA017DF169CCC14ECCD16A3FC819F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HeVgH-EiL4m7OqryZPD26nORwTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e7b591-0f5e-4141-be96-ddd53d7928a8/1/HeVgH-EiL4m7OqryZPD26nORwTg.mft
Manifest number: 0C6D
Signing time: Wed 24 Jun 2026 02:01:42 +0000
Manifest this update: Wed 24 Jun 2026 02:01:42 +0000
Manifest next update: Thu 25 Jun 2026 02:01:42 +0000
Files and hashes: 1: HeVgH-EiL4m7OqryZPD26nORwTg.crl (hash: lfiJWQsI0+nAJSvgGXVUdfiZFNKqjLYd3JB3sKgDzak=)
2: nDpg3cf0raF6jX95bMjbAoRFS7U.roa (hash: GVYh5XEIeIuimg63JfOsccl7tRFww+AiTmkbi2YiTYw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f7:5c:a0:17:df:16:9c:cc:14:ec:cd:16:a3:fc:81:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1de5601fe1222f89bb3aaaf264f0f6ea7391c138
Validity
Not Before: Jun 24 02:01:42 2026 GMT
Not After : Jun 25 02:01:42 2026 GMT
Subject: CN=f5de2caaf5048d17492885f30bdcd38d24f24418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:55:ea:ae:3b:e5:23:c8:42:e2:17:50:7a:91:
19:ca:22:8c:8d:dc:88:83:6d:78:d1:e3:30:be:53:
40:35:40:e2:79:68:85:18:9f:fd:3e:69:17:e8:63:
9d:34:b6:c8:f5:77:6c:e8:89:24:09:4f:ba:ae:ea:
a8:97:56:1f:9f:0a:ec:da:ce:1d:4b:b4:d1:c7:d1:
86:da:5d:95:17:96:87:c4:c3:8c:ff:0a:41:49:ad:
f7:a6:f9:15:cf:0b:51:66:5a:a6:dd:ac:b9:06:03:
5d:9b:9f:ca:ca:ad:3b:75:a6:50:e9:01:b2:e7:13:
08:bf:28:75:44:a4:9f:a8:67:a0:d0:32:f8:6d:7d:
c8:f3:ec:96:d3:54:f4:e9:2f:52:28:30:27:fe:02:
e5:a3:77:62:0c:9e:46:3a:3a:b3:f7:51:79:6e:b9:
42:56:be:4e:26:e9:48:bd:d0:df:5b:f8:d5:b8:ce:
5b:a2:5c:77:92:b1:5c:a8:d8:db:e6:a8:42:fb:c4:
57:c8:14:34:fc:00:67:18:90:f4:6a:bc:56:5e:fa:
b2:c7:29:9e:49:4c:3b:61:69:be:6a:8d:69:c4:9e:
83:78:a1:21:35:8e:b9:c6:5d:94:bd:79:96:c5:49:
e4:e4:ac:78:3d:46:05:14:1c:e2:fd:99:2d:50:c5:
f0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DE:2C:AA:F5:04:8D:17:49:28:85:F3:0B:DC:D3:8D:24:F2:44:18
X509v3 Authority Key Identifier:
keyid:1D:E5:60:1F:E1:22:2F:89:BB:3A:AA:F2:64:F0:F6:EA:73:91:C1:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HeVgH-EiL4m7OqryZPD26nORwTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e7b591-0f5e-4141-be96-ddd53d7928a8/1/HeVgH-EiL4m7OqryZPD26nORwTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e7b591-0f5e-4141-be96-ddd53d7928a8/1/HeVgH-EiL4m7OqryZPD26nORwTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:17:87:18:75:23:01:20:01:70:d6:2d:49:96:b3:9a:a9:8b:
12:4f:a9:6f:ef:17:2b:93:51:87:16:e2:5d:08:ba:7d:1e:21:
90:f2:75:e9:be:6e:ba:be:49:6c:51:58:08:d5:f6:2d:76:05:
85:2e:4f:97:b5:f2:c5:d7:87:d9:5d:d0:10:c7:0b:01:1a:c4:
41:5c:cc:e0:2c:fb:66:77:1c:dd:b8:73:ad:56:51:08:9d:db:
95:a7:a1:03:d5:c3:5f:9b:82:1f:c3:1d:e6:a6:e9:78:de:c5:
f5:58:1e:0a:12:29:49:44:6a:01:b1:1a:b4:d2:43:98:55:d7:
9b:ac:73:f7:dd:85:f7:49:3c:01:47:ad:ac:f5:a6:32:2b:e5:
0f:9d:22:65:9b:7a:c5:d0:5e:49:1a:9c:55:5e:80:41:07:d2:
2e:12:ad:83:b7:55:f7:d4:1e:68:6d:0c:69:f9:91:82:61:07:
f6:1f:c1:d2:61:b8:42:34:15:8c:b1:fa:11:6c:16:c7:a3:94:
77:c7:43:12:dc:cb:3f:72:df:d6:6a:69:dc:b3:8c:e6:ce:dd:
0a:f5:e7:20:a5:7f:1b:63:7b:dd:5d:29:fc:fc:34:93:67:f0:
a8:3a:fe:1c:c0:0d:c6:a7:c3:e5:ac:5a:aa:cb:bb:14:02:e3:
64:82:ea:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:48:10 2026 by rpki-client