Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.mft
File: AHLAj3TSqEKnHyOrYUmbUmlPx6U.mft (raw, json)
Hash identifier: uM+sAAF96mQXm9eS5iF5pGQV4Wy9K5DB+IBSex5a9WA=
Subject key identifier: 87:40:DB:96:FE:92:5B:C2:2B:EF:13:DB:35:F3:7A:E6:1A:46:78:A7
Authority key identifier: 00:72:C0:8F:74:D2:A8:42:A7:1F:23:AB:61:49:9B:52:69:4F:C7:A5
Certificate issuer: /CN=0072c08f74d2a842a71f23ab61499b52694fc7a5
Certificate serial: 019F21A1DFA2AD1CA83DD6AAD96FFFDF028F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.mft
Manifest number: 198F
Signing time: Thu 02 Jul 2026 07:01:24 +0000
Manifest this update: Thu 02 Jul 2026 07:01:24 +0000
Manifest next update: Fri 03 Jul 2026 07:01:24 +0000
Files and hashes: 1: AHLAj3TSqEKnHyOrYUmbUmlPx6U.crl (hash: Lbnz3ra/UIPMXUEGCyvnOtDuxx3ZRLYILR36GVIGOKY=)
2: GSCpplFtfkTN5C3emWdSBHM2s_U.roa (hash: uafjHLArE68enYzHEZipyUcJy+2TVAQsxPWk3VzbutI=)
3: T4PSpNaqkAOQJjuBdAFdx3zKgyY.roa (hash: sU9bxlF1T+hrGzv9LaagfpQyLm85yMt1O7DFm4yEcJY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:a1:df:a2:ad:1c:a8:3d:d6:aa:d9:6f:ff:df:02:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0072c08f74d2a842a71f23ab61499b52694fc7a5
Validity
Not Before: Jul 2 07:01:24 2026 GMT
Not After : Jul 3 07:01:24 2026 GMT
Subject: CN=8740db96fe925bc22bef13db35f37ae61a4678a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ca:e1:29:d6:04:27:3f:10:cd:c5:3b:e5:bc:
71:77:24:ec:2b:db:af:68:91:b3:de:74:6b:cc:c3:
77:2c:b8:d1:b5:2b:1e:e5:0c:c2:9c:21:ad:0e:61:
b5:89:b2:65:4a:d8:77:7c:ba:1e:b4:b3:f5:31:90:
15:16:bf:ce:86:38:b7:f7:2f:88:e7:2b:33:fa:4b:
aa:8d:06:32:57:e9:45:4c:af:49:db:03:eb:1c:e8:
a7:2c:8e:cd:39:34:c1:dc:5f:72:5c:5a:6d:9f:48:
e1:d5:e2:e6:1b:14:bf:6a:df:e2:5f:06:6d:65:0e:
8b:ce:d5:fd:99:07:63:84:bb:09:c0:93:f6:5a:c3:
bc:49:c8:67:03:18:58:6a:09:46:d4:bd:12:d5:a0:
dc:59:8f:17:a7:22:4a:df:ed:37:1c:93:71:0f:34:
2d:c7:b1:db:4a:aa:28:16:93:dd:d1:82:21:fc:c4:
35:1a:8e:eb:aa:1a:00:f4:f3:2a:6b:43:6b:84:c2:
eb:03:b9:e8:ed:3d:ef:e0:9d:17:0f:f0:bd:e7:7d:
e2:28:8d:9f:d8:43:eb:40:a7:2a:3c:94:90:f2:2c:
b4:7f:0f:f3:e9:4a:e0:54:85:d9:a8:4f:8e:63:f7:
ca:fd:8c:29:16:44:13:de:d7:ea:80:4b:52:83:6b:
7a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:40:DB:96:FE:92:5B:C2:2B:EF:13:DB:35:F3:7A:E6:1A:46:78:A7
X509v3 Authority Key Identifier:
keyid:00:72:C0:8F:74:D2:A8:42:A7:1F:23:AB:61:49:9B:52:69:4F:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:71:1d:ef:26:8f:c3:2b:14:e5:83:04:35:0b:27:a8:60:14:
aa:6d:b1:ed:db:cb:90:6d:4a:e2:90:64:d5:70:48:0b:87:f7:
d6:0e:1c:5b:b5:6d:41:94:60:3e:4f:6d:45:c7:1d:5d:25:3a:
15:59:1a:ab:e7:99:f7:51:de:3d:75:04:42:e0:56:f1:86:4b:
94:31:0a:65:76:58:10:4d:8c:c6:41:01:aa:a3:ba:c4:ac:aa:
20:96:62:9d:58:15:d9:e6:36:2e:86:26:d6:06:6a:b4:c8:bb:
f5:b8:e9:a1:e9:c3:b0:c2:c6:4e:4e:4a:84:3d:d9:3a:98:61:
2c:d9:9d:37:d1:cf:7b:5a:fa:3c:41:bf:19:71:da:31:4e:29:
6b:32:58:53:dc:f7:c3:7f:44:99:0f:50:91:8e:ba:c0:ba:56:
11:16:75:5a:b1:98:92:7b:d2:e7:da:58:66:fd:ac:33:2d:60:
a6:52:b8:5d:d9:e9:a0:a1:3f:fc:17:91:cb:89:a0:6d:f7:06:
3a:a4:72:51:f4:b0:14:01:06:fe:dd:07:f7:72:0f:4c:c1:41:
df:76:1a:eb:62:16:5d:d8:36:9f:66:09:fb:44:f5:48:ec:44:
40:b3:c3:bd:f6:74:ea:f3:a5:8d:df:5a:fa:ea:35:8d:9c:7a:
5b:a7:9b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:50 2026 by rpki-client