Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
File: he1PzEWWTU6nL8RJLE15VxMyEMM.mft (raw, json)
Hash identifier: WVc5QZG47gCaMqe1tm0hDGL15eoGILODW4Wz6VRlsHI=
Subject key identifier: AA:18:F3:AD:A0:DC:45:D3:A0:B6:37:84:8D:7E:7D:0F:43:BF:C6:8E
Authority key identifier: 85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3
Certificate issuer: /CN=85ed4fcc45964d4ea72fc4492c4d7957133210c3
Certificate serial: 019F216B650820F56B219D2017F6F3D86547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
Manifest number: 198C
Signing time: Thu 02 Jul 2026 06:01:54 +0000
Manifest this update: Thu 02 Jul 2026 06:01:54 +0000
Manifest next update: Fri 03 Jul 2026 06:01:54 +0000
Files and hashes: 1: HmUomsPgXy_ichPpqzKABnF-f1Q.roa (hash: Bx6E3+408hVB6DPUkC1/WmqYHNWX0Umjmfc5LiZnxMs=)
2: he1PzEWWTU6nL8RJLE15VxMyEMM.crl (hash: 7LDgj50HoLkWddbyZqp24G6bkoA+2s9bNaCTR4TuKIE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:6b:65:08:20:f5:6b:21:9d:20:17:f6:f3:d8:65:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85ed4fcc45964d4ea72fc4492c4d7957133210c3
Validity
Not Before: Jul 2 06:01:54 2026 GMT
Not After : Jul 3 06:01:54 2026 GMT
Subject: CN=aa18f3ada0dc45d3a0b637848d7e7d0f43bfc68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:60:79:fd:e4:90:82:22:7e:1a:3b:4a:31:
5b:5a:2c:73:43:e4:7d:69:35:9f:b5:7e:c0:77:ee:
11:b0:5c:cb:c7:d4:32:06:28:f3:65:df:55:78:af:
af:b8:5a:ef:25:d6:e8:7a:e6:f0:0c:a3:fb:8d:b8:
70:57:ab:00:4e:28:0e:37:e6:9e:c0:a9:53:4d:24:
d7:b5:f8:62:d7:a0:81:9a:ef:e8:db:74:d5:2a:b0:
3f:10:cb:17:6b:1b:3e:33:05:6e:1b:18:e2:16:35:
4b:c2:09:53:43:6d:de:53:db:85:fc:d4:d6:b5:39:
58:c1:e6:d9:ee:22:05:f9:58:65:a5:93:ac:63:ce:
93:c3:ca:83:ad:64:1a:60:47:1a:ca:27:55:a9:37:
b0:01:ba:8f:c6:07:09:0d:a9:df:db:15:49:22:07:
f8:b1:fa:88:ad:7d:f4:07:f8:8a:19:b9:6a:1a:3f:
e8:96:39:0a:9b:73:33:71:57:22:2a:57:ce:44:c2:
1c:15:fe:92:18:c3:89:6f:b0:1d:cf:25:9f:f0:ba:
f9:f3:0d:19:7a:9b:30:f0:bc:38:02:73:5b:e5:60:
ef:27:dc:fa:f2:c3:46:c6:31:f0:c3:b1:d3:a7:64:
f3:99:d3:e0:b5:ad:63:86:e9:02:fd:78:61:fd:65:
3d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:18:F3:AD:A0:DC:45:D3:A0:B6:37:84:8D:7E:7D:0F:43:BF:C6:8E
X509v3 Authority Key Identifier:
keyid:85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7b:46:72:ec:8a:de:70:a9:f5:64:da:0f:7c:15:1e:bd:06:
ae:e8:f6:74:12:01:42:dc:59:ca:13:bd:1d:23:4a:fa:3c:fc:
cf:62:17:21:1a:90:af:0d:30:26:a3:5d:68:ea:45:92:f0:f2:
72:04:08:23:42:ed:d1:21:ee:17:c2:6b:e4:bd:9a:a8:04:36:
d0:86:e2:97:10:f6:70:05:b7:65:4a:c5:c9:5b:77:7f:33:19:
b1:70:0d:6f:dd:6d:42:0a:bb:04:fd:a4:0b:d3:2c:36:bf:8c:
fe:a4:c4:f4:da:88:bc:25:fd:4e:76:28:c1:33:77:3d:4a:92:
64:f4:47:63:eb:89:67:bf:e8:e2:4d:d4:96:af:a0:dc:c2:dd:
de:fd:99:3c:98:6f:ca:50:50:96:6e:bf:b1:aa:c3:f8:ff:97:
b2:ae:a5:e9:db:ee:25:a9:b7:e2:75:69:f3:fc:e3:a6:9b:ed:
49:69:c3:98:c1:52:37:e3:6c:ca:80:55:d7:c3:df:50:24:87:
77:85:e3:91:4b:e7:01:fc:4e:b6:c9:c2:10:3c:0d:b5:2d:52:
e8:79:05:7d:29:a9:c6:a8:a6:33:51:45:3c:47:d6:d4:2f:d8:
b8:ec:62:b3:92:bc:fb:3c:a7:fe:bd:0f:24:6a:20:1e:35:bb:
5b:53:65:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 20:09:12 2026 by rpki-client