Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/16cf7d-a151-49ec-8d8a-3a288c2c852c/1/HzjUsMuomcJPTjQHOE1tP6jVGl8.mft
File: HzjUsMuomcJPTjQHOE1tP6jVGl8.mft (raw, json)
Hash identifier: E2hVgxcAbgtPyJZHMsp9IPPo6m+sge6F33iZ9cjCoJ8=
Subject key identifier: BE:62:23:35:27:4B:EF:60:C8:C1:52:C6:B6:C9:2A:FC:51:43:F4:D9
Authority key identifier: 1F:38:D4:B0:CB:A8:99:C2:4F:4E:34:07:38:4D:6D:3F:A8:D5:1A:5F
Certificate issuer: /CN=1f38d4b0cba899c24f4e3407384d6d3fa8d51a5f
Certificate serial: 019D70D3E724C056226945E631D56593EC08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzjUsMuomcJPTjQHOE1tP6jVGl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/16cf7d-a151-49ec-8d8a-3a288c2c852c/1/HzjUsMuomcJPTjQHOE1tP6jVGl8.mft
Manifest number: 0676
Signing time: Thu 09 Apr 2026 06:00:28 +0000
Manifest this update: Thu 09 Apr 2026 06:00:28 +0000
Manifest next update: Fri 10 Apr 2026 06:00:28 +0000
Files and hashes: 1: HzjUsMuomcJPTjQHOE1tP6jVGl8.crl (hash: yRBJx1JzeCiglAIS1wfKgyWLyeS8hKXAXpPm/NuIPGM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:70:d3:e7:24:c0:56:22:69:45:e6:31:d5:65:93:ec:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f38d4b0cba899c24f4e3407384d6d3fa8d51a5f
Validity
Not Before: Apr 9 06:00:28 2026 GMT
Not After : Apr 10 06:00:28 2026 GMT
Subject: CN=be622335274bef60c8c152c6b6c92afc5143f4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:08:e2:21:2a:56:fb:f9:4d:24:3b:ea:e2:85:
8d:25:9c:22:42:01:31:ff:e9:9d:be:3e:9a:17:f4:
1f:11:c0:f7:15:de:7d:0d:89:84:be:3e:94:0a:de:
7b:7c:12:47:0c:df:2e:02:ad:e5:a6:af:20:fd:e5:
88:80:db:15:af:b5:eb:c4:16:5f:c1:2b:7e:4a:0c:
80:b8:ee:14:79:fb:25:07:f3:1f:0a:76:4f:1b:60:
21:4d:61:93:14:ee:c2:48:42:79:cb:be:68:1f:44:
6e:59:32:b3:1b:b4:66:26:33:a5:e9:97:34:47:09:
e2:ad:98:0d:b9:3a:8f:26:eb:c5:95:87:4d:59:4d:
8b:68:e7:03:4e:56:8f:b8:44:e4:7a:44:8e:d0:74:
ca:41:e8:21:d8:39:be:3b:05:eb:6f:66:17:6b:f2:
6a:79:27:37:fd:46:cb:95:f6:fd:4a:48:e9:1d:7b:
04:84:79:3a:52:8d:ea:b0:48:b0:67:a4:bd:58:e4:
eb:0e:7d:f2:98:9a:4d:76:f9:c0:9d:c5:f1:9d:11:
a9:1d:4e:85:1f:0d:31:c4:1f:57:3e:1d:b4:30:2b:
91:8e:69:71:64:97:29:21:f5:98:27:e4:30:b1:eb:
e8:d5:a1:df:2a:99:51:79:1c:2c:09:c5:91:be:8d:
b9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:62:23:35:27:4B:EF:60:C8:C1:52:C6:B6:C9:2A:FC:51:43:F4:D9
X509v3 Authority Key Identifier:
keyid:1F:38:D4:B0:CB:A8:99:C2:4F:4E:34:07:38:4D:6D:3F:A8:D5:1A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzjUsMuomcJPTjQHOE1tP6jVGl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/16cf7d-a151-49ec-8d8a-3a288c2c852c/1/HzjUsMuomcJPTjQHOE1tP6jVGl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/16cf7d-a151-49ec-8d8a-3a288c2c852c/1/HzjUsMuomcJPTjQHOE1tP6jVGl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:60:8e:be:a1:6d:76:73:e6:b5:d6:2e:ee:2f:b1:0e:be:a9:
be:38:7e:ac:89:d1:e9:29:25:d5:44:ab:2a:1e:ea:34:ea:10:
19:dc:50:48:b8:26:53:b2:dd:f1:db:ef:13:0c:ff:68:85:e0:
0a:40:47:ec:f9:53:39:d5:16:67:39:d2:65:17:89:56:26:15:
c5:89:ad:db:80:af:fd:e0:3a:00:ae:8d:20:b0:31:9c:2f:61:
28:d8:c6:36:df:b8:ae:ec:aa:81:66:d9:b8:3b:ef:13:49:b4:
fe:03:d7:71:e1:03:53:85:1e:39:34:02:f3:63:46:0d:67:a7:
ab:ba:e1:c4:05:8d:2d:16:b4:5e:39:01:1b:f3:07:79:9d:28:
58:a1:1e:d2:ce:66:d8:d4:e3:28:23:72:92:54:5a:fc:b4:d0:
da:4c:b6:ab:67:10:fc:0b:08:4a:be:93:0c:fb:a3:58:83:49:
ba:7e:0d:f5:d7:74:89:3f:81:97:3a:19:3d:09:10:de:44:9b:
8c:82:95:fb:0e:23:bd:91:5e:f2:8c:ee:a1:31:c6:20:7e:70:
63:55:be:f0:de:dc:b7:a9:d4:54:a9:77:ec:b1:a0:d4:e0:68:
37:4a:b8:ff:dd:9a:83:6d:a1:2f:e1:c7:a6:a3:a9:8e:9d:a8:
99:57:41:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:13:40 2026 by rpki-client