Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
File: HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft (raw, json)
Hash identifier: PAjJyhoOBGx4SThntgWaLQB5LYssqG5htE2aJyjEfcs=
Subject key identifier: 4D:EA:3D:32:1C:75:C4:05:0D:22:6A:8C:F9:1C:4E:C2:4E:BF:28:A1
Authority key identifier: 1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
Certificate issuer: /CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Certificate serial: 019F216B8735F8D86F6BDED938080F0F1E45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
Manifest number: 198F
Signing time: Thu 02 Jul 2026 06:02:02 +0000
Manifest this update: Thu 02 Jul 2026 06:02:02 +0000
Manifest next update: Fri 03 Jul 2026 06:02:02 +0000
Files and hashes: 1: HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl (hash: cE5xyqa6mqEe44FKKg6nfQDlPnYZrkVSUvTe+hOVnsM=)
2: qNAwNr9sOtlnmTZXNsD7ZTCA6FQ.roa (hash: dZNLxY2R+OMbFcczhFdBzgHwABmB4UkJwEeAYi+FzG4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:6b:87:35:f8:d8:6f:6b:de:d9:38:08:0f:0f:1e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Validity
Not Before: Jul 2 06:02:02 2026 GMT
Not After : Jul 3 06:02:02 2026 GMT
Subject: CN=4dea3d321c75c4050d226a8cf91c4ec24ebf28a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e3:21:c1:62:07:b3:4c:c1:eb:fa:17:14:73:
a1:62:29:ce:b8:c9:d4:52:1d:ab:cd:15:92:02:7e:
ea:41:4b:83:1d:9d:00:04:61:86:4b:58:f3:d4:d7:
78:0a:f5:c9:90:8f:64:09:2b:d4:87:84:ab:c0:3d:
cb:3b:8e:b8:18:72:b8:76:05:c9:ab:7c:ef:03:18:
0d:82:76:33:ad:8c:32:9c:90:2b:20:1a:a3:dc:e5:
85:7f:ed:d1:62:82:ed:9b:37:dc:95:c2:80:52:bd:
99:e3:f8:32:06:16:93:77:81:d0:df:a0:92:97:a9:
5c:11:25:5c:db:ea:1a:5c:d5:00:b3:c4:f3:8b:be:
95:57:2c:5d:9e:42:48:79:1b:72:25:81:cb:e0:0d:
b1:57:98:31:c5:66:da:b5:58:aa:b7:a3:71:ef:9d:
73:c6:0f:56:69:cc:df:fd:d5:b4:e2:7d:61:26:8a:
ae:68:b3:f2:2a:59:74:38:b6:59:33:fc:f9:e4:ef:
7e:6c:2e:37:48:ad:51:89:ef:2e:89:70:55:87:9a:
9d:27:f1:22:b2:d0:f8:36:41:ac:5b:ec:b7:1f:8c:
83:f4:02:43:c4:fd:e8:1f:9d:49:79:fd:bc:e2:48:
8b:33:8f:e1:fc:1d:f4:25:ad:9b:aa:c1:59:19:fb:
ee:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EA:3D:32:1C:75:C4:05:0D:22:6A:8C:F9:1C:4E:C2:4E:BF:28:A1
X509v3 Authority Key Identifier:
keyid:1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:28:53:df:0f:dc:68:85:5d:6f:1b:33:be:8b:2a:cb:78:31:
f6:df:17:ca:d0:62:f2:ef:85:de:dc:92:cf:2e:12:62:ee:69:
c7:55:69:29:7d:93:de:da:50:3a:2d:23:f5:5c:0b:b5:ef:d9:
ed:0f:8e:50:f5:36:b4:bf:d0:9a:8c:8a:75:d6:58:b0:4e:90:
c7:1e:ca:19:bd:5a:c8:0f:66:e6:d0:73:ca:ae:63:0b:fe:1e:
8e:5c:b2:bc:33:84:48:ec:ea:3c:56:8b:75:06:9b:0a:15:cc:
c3:f0:0d:e1:79:5f:d5:f9:eb:be:5e:69:d2:d3:ca:d9:3a:41:
8c:26:4d:36:d3:00:e9:ff:dc:a0:b4:e8:18:e8:76:e1:a4:2c:
58:21:dd:23:43:7d:f2:ae:c2:19:ca:9f:a4:c7:cb:a7:43:58:
8d:b5:58:53:b9:10:17:89:71:06:95:56:6b:72:7c:39:e5:0c:
26:f9:85:85:b1:1d:f8:55:f4:cc:33:ee:f8:2e:f0:79:ec:b5:
b6:fc:50:69:c4:9d:eb:1c:55:7c:13:22:70:28:5d:3b:a4:d8:
86:0f:55:79:fd:13:71:cb:1f:a2:e2:a5:c0:2b:5f:58:d8:2a:
e2:51:a3:f0:b5:46:ed:d1:8c:8c:56:13:f7:28:bf:9c:17:19:
eb:59:3c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:48:51 2026 by rpki-client