Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
File: AdGZIUQMLysip3d4ApO8J_pH81o.mft (raw, json)
Hash identifier: yCGhefo+OqEvlM+11zgwPz/DTdmko5LjAQ6QO7Y5QQg=
Subject key identifier: BB:DA:7F:DD:AA:67:A1:03:25:EF:3F:07:C4:6C:73:9F:3C:65:99:12
Authority key identifier: 01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A
Certificate issuer: /CN=01d19921440c2f2b22a777780293bc27fa47f35a
Certificate serial: 019DB81130BEFF2459BBA296FDDD82BFCB11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
Manifest number: 18D0
Signing time: Thu 23 Apr 2026 02:00:27 +0000
Manifest this update: Thu 23 Apr 2026 02:00:27 +0000
Manifest next update: Fri 24 Apr 2026 02:00:27 +0000
Files and hashes: 1: AdGZIUQMLysip3d4ApO8J_pH81o.crl (hash: RzsQgTuymLBMXMW2OHuq+AS+LH5fSiuyH7+LI+mwWus=)
2: vqx4rvgcwKRJYoIkEyxywbhGZIo.roa (hash: c2b87ljEpUBFoq5WYxAZjcHq9LKBdj40xam1g1KVDXM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b8:11:30:be:ff:24:59:bb:a2:96:fd:dd:82:bf:cb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d19921440c2f2b22a777780293bc27fa47f35a
Validity
Not Before: Apr 23 02:00:27 2026 GMT
Not After : Apr 24 02:00:27 2026 GMT
Subject: CN=bbda7fddaa67a10325ef3f07c46c739f3c659912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5e:4d:40:91:4d:be:c2:c9:00:9c:d3:7e:08:
6e:32:9b:19:a7:77:f9:b8:a8:da:07:5b:c2:a1:d0:
82:54:2b:b4:37:11:1c:e4:44:46:ca:d7:7d:90:47:
67:37:a4:f7:cb:ed:d4:8c:1f:c1:72:d7:43:30:df:
4c:b3:05:13:9c:0d:dc:ce:c7:e8:08:c0:a0:dc:d7:
40:8b:6c:25:b3:d2:d1:b2:d8:63:24:c8:e7:02:82:
6b:6b:eb:d5:e1:83:e0:b3:41:9b:2a:41:13:ec:9a:
44:f4:71:13:f7:39:df:07:c3:f9:b7:d4:6f:95:99:
e5:24:3a:88:34:93:74:fd:2f:ce:9e:51:b5:70:4b:
6c:2a:31:fb:33:0f:97:d5:30:b2:36:66:ea:8d:89:
77:43:f1:5c:cf:a7:9d:86:a3:76:79:c1:ea:7d:19:
45:ef:ae:79:f6:88:31:47:44:d1:15:b1:01:7a:b1:
f3:93:ef:7c:fa:3a:d4:43:19:f2:80:45:06:59:61:
19:13:5c:e8:6e:4b:ab:b7:b7:10:76:14:8a:bd:5c:
7f:04:ba:a6:a0:aa:93:fc:04:99:89:09:3f:51:66:
85:71:f7:75:df:05:45:4b:fb:89:24:3a:dc:b3:ac:
ec:d3:e2:b3:ac:21:f0:f2:92:db:ab:c0:2d:7b:86:
8e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DA:7F:DD:AA:67:A1:03:25:EF:3F:07:C4:6C:73:9F:3C:65:99:12
X509v3 Authority Key Identifier:
keyid:01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:bd:e7:bf:be:13:a5:03:91:b7:bb:bf:20:a9:43:e9:92:5b:
e9:8a:a5:45:49:a7:f2:53:cc:34:55:af:67:7b:c0:89:33:ab:
d2:1a:1e:21:6e:e9:e4:ef:11:23:f1:de:7e:58:b2:48:d2:4d:
c9:7b:54:ca:79:3c:68:25:98:7a:f3:9b:fc:7d:8e:13:82:f4:
a3:26:39:95:ae:84:f4:99:53:5e:46:28:84:96:d3:a6:0b:80:
58:f3:b8:9e:27:88:d0:3e:da:14:69:9b:e8:2c:30:ce:7f:3a:
bf:df:84:b8:84:7d:dc:1f:b4:5f:2a:f2:ba:aa:6a:bc:30:51:
0b:eb:10:70:37:d1:b6:c6:ff:6b:fc:f1:80:e7:7c:d4:1e:94:
eb:7f:6d:2b:86:94:fc:f1:57:fe:45:16:67:ec:6a:a6:ab:78:
94:c3:a6:53:cb:7f:09:52:a6:08:0a:b6:2c:0d:52:41:67:27:
b0:ce:d6:dd:15:bd:0d:72:2e:d0:52:ba:f0:30:13:b5:ba:7f:
ae:99:68:24:03:5b:39:65:a6:6c:1f:f0:d0:7e:ab:1f:cf:4a:
a9:74:13:c5:db:00:77:46:ff:0d:52:13:73:01:21:37:13:74:
6e:42:79:35:e8:0b:07:a8:21:36:f8:aa:40:b0:3a:c2:ab:cc:
04:a2:56:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ24ETC+/yRZu6KW/d2Cv8sRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZDE5OTIxNDQwYzJmMmIyMmE3Nzc3ODAyOTNiYzI3ZmE0
N2YzNWEwHhcNMjYwNDIzMDIwMDI3WhcNMjYwNDI0MDIwMDI3WjAzMTEwLwYDVQQD
EyhiYmRhN2ZkZGFhNjdhMTAzMjVlZjNmMDdjNDZjNzM5ZjNjNjU5OTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA215NQJFNvsLJAJzTfghuMpsZp3f5
uKjaB1vCodCCVCu0NxEc5ERGytd9kEdnN6T3y+3UjB/BctdDMN9MswUTnA3czsfo
CMCg3NdAi2wls9LRsthjJMjnAoJra+vV4YPgs0GbKkET7JpE9HET9znfB8P5t9Rv
lZnlJDqINJN0/S/OnlG1cEtsKjH7Mw+X1TCyNmbqjYl3Q/Fcz6edhqN2ecHqfRlF
76559ogxR0TRFbEBerHzk+98+jrUQxnygEUGWWEZE1zobkurt7cQdhSKvVx/BLqm
oKqT/ASZiQk/UWaFcfd13wVFS/uJJDrcs6zs0+KzrCHw8pLbq8Ate4aOgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvaf92qZ6EDJe8/B8Rsc588ZZkSMB8GA1UdIwQY
MBaAFAHRmSFEDC8rIqd3eAKTvCf6R/NaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWRHWklVUU1MeXNpcDNkNEFwTzhKX3BIODFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9jYWJkNjQtMTg2Yi00MjgyLWIxNGEt
YWE2ZmQ0MzRlMGVmLzEvQWRHWklVUU1MeXNpcDNkNEFwTzhKX3BIODFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9jYWJkNjQtMTg2Yi00MjgyLWIxNGEtYWE2ZmQ0MzRlMGVm
LzEvQWRHWklVUU1MeXNpcDNkNEFwTzhKX3BIODFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQb3nv74T
pQORt7u/IKlD6ZJb6YqlRUmn8lPMNFWvZ3vAiTOr0hoeIW7p5O8RI/HefliySNJN
yXtUynk8aCWYevOb/H2OE4L0oyY5la6E9JlTXkYohJbTpguAWPO4nieI0D7aFGmb
6Cwwzn86v9+EuIR93B+0XyryuqpqvDBRC+sQcDfRtsb/a/zxgOd81B6U639tK4aU
/PFX/kUWZ+xqpqt4lMOmU8t/CVKmCAq2LA1SQWcnsM7W3RW9DXIu0FK68DATtbp/
rploJANbOWWmbB/w0H6rH89KqXQTxdsAd0b/DVITcwEhNxN0bkJ5NegLB6ghNviq
QLA6wqvMBKJWSg==
-----END CERTIFICATE-----
Generated at Sat May 16 17:11:11 2026 by rpki-client