Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
File: Ahs-o17f3ROMFVBtdKdgIt03aUs.mft (raw, json)
Hash identifier: eTazpb+K91jHyZBoR6t53lSmgqQVeepv4gZIkhwLysM=
Subject key identifier: 71:FF:9C:4D:54:A4:BB:19:59:90:64:BB:43:31:7B:F3:8B:D1:B2:23
Authority key identifier: 02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
Certificate issuer: /CN=021b3ea35edfdd138c15506d74a76022dd37694b
Certificate serial: 019F227D85F7639DC0B93EDFE6E7D3D60FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
Manifest number: 1993
Signing time: Thu 02 Jul 2026 11:01:19 +0000
Manifest this update: Thu 02 Jul 2026 11:01:19 +0000
Manifest next update: Fri 03 Jul 2026 11:01:19 +0000
Files and hashes: 1: Ahs-o17f3ROMFVBtdKdgIt03aUs.crl (hash: 849TPiOfdJcf6WoUHcpnjWiJ+w99r6DQGBdB1Ds2yD0=)
2: Bb6S0v3-9S6UDz2rsb3YDwUAyS4.asa (hash: ECFsSLxS2ROB7ArbTJti+EbGuUGYBqPKnEh5flU6l0s=)
3: LBRMtk276o1fDtnMdAqhTW7DXC4.roa (hash: 0YIiI16RKFGdQ0JcFhz3zqT49nyQkj7P8gkQ5o32XYM=)
4: QmzS2ptv4L0wreFRKwR2b7sYT9o.roa (hash: V15c6ZmrAVOZnZkD5NcAPinTv/zGPeEWxtJ3s9KDwPs=)
5: Rj9rY8c-WTz58dRjWStkxywCLns.roa (hash: 2qqmCIzo+/ipPZRDGptoSNuyqwN9eUc4eLGE8JL6fME=)
6: T64D7DIdeVevp7C-fmZ9i_3HGBI.roa (hash: kO6AaVNTX79L37zwJju08wk0fWE2dJSQ0KHv71bE1XY=)
7: U8u1b5Pq3pRMcKbM8GicLTeR9Tk.roa (hash: R5sho8p6NKUCSWgu2hqUkQHKto75y0jfre83Hes2hwo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:7d:85:f7:63:9d:c0:b9:3e:df:e6:e7:d3:d6:0f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021b3ea35edfdd138c15506d74a76022dd37694b
Validity
Not Before: Jul 2 11:01:19 2026 GMT
Not After : Jul 3 11:01:19 2026 GMT
Subject: CN=71ff9c4d54a4bb19599064bb43317bf38bd1b223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:54:f4:11:f1:1e:58:61:bf:87:84:b0:f2:36:
90:91:55:9e:22:6a:4d:c4:8f:58:19:13:3b:54:f1:
96:fd:91:6e:39:96:01:35:fe:fc:14:4a:ee:af:35:
81:b0:67:75:4c:6e:f3:57:77:ea:df:00:f1:fa:d5:
bb:8b:35:cd:d3:3d:3a:93:a2:4c:f0:c2:a6:ba:47:
a4:5c:1d:d1:13:d9:f6:b8:47:0b:68:b9:0b:61:d5:
a9:07:7f:18:e7:f5:52:ed:37:59:ef:d8:68:03:02:
22:61:a8:a4:95:51:d7:26:58:23:87:bd:59:e7:fb:
fb:0c:37:5b:88:ac:7f:26:70:cb:f5:f1:56:c3:a9:
64:7e:53:aa:08:67:3c:d1:6e:0a:f0:ff:8e:23:43:
95:59:dd:b3:6c:29:7e:1e:8a:86:30:95:c3:ce:e0:
50:cf:0f:89:c4:2c:26:5b:a4:15:3f:ff:4a:8a:a2:
ff:b7:42:d7:c9:49:dc:c4:45:11:7c:c3:f2:64:03:
40:cf:09:2d:a6:f7:3b:a2:c2:f9:a2:2a:21:e7:db:
cc:26:55:87:b3:82:cf:80:ce:af:9a:4e:01:8f:20:
3e:3f:c4:39:1b:3d:90:5e:aa:c7:8f:ac:e4:f6:cb:
c8:26:d6:98:12:d1:aa:a1:bc:9c:3d:a6:a4:e1:44:
18:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FF:9C:4D:54:A4:BB:19:59:90:64:BB:43:31:7B:F3:8B:D1:B2:23
X509v3 Authority Key Identifier:
keyid:02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:0f:2a:69:9d:61:e1:ee:0a:5e:6c:41:9c:1d:9c:2a:3a:d0:
49:59:f7:81:ae:de:8c:ad:f9:a5:6e:1b:17:a2:12:21:4b:ce:
3a:df:57:db:9f:6c:64:fe:07:ac:34:5a:9e:69:40:26:14:90:
31:92:36:67:39:39:6c:52:e5:42:cc:30:2c:ef:74:ad:6e:55:
78:ac:1c:b7:29:b7:71:98:3a:ab:ac:cc:c4:9a:b7:62:75:fc:
48:51:2b:fa:ca:50:5a:18:00:c2:6f:1f:7c:4d:15:e5:cc:83:
c2:cc:49:c9:55:5e:03:bd:c7:4d:3d:00:fe:63:8e:dc:bc:0b:
d9:1a:80:3d:50:23:70:30:f6:02:b4:14:d3:a7:5f:68:d0:96:
9a:22:27:11:bc:f5:9d:63:bf:fc:3f:27:1b:af:06:a0:a3:27:
64:1c:78:0c:bc:cd:4b:ad:bc:8e:ac:a4:1c:c9:cf:38:03:ee:
7b:09:eb:7b:eb:79:25:3c:0f:75:80:ec:a7:5d:7e:de:b2:3c:
63:9f:07:70:5d:ba:3a:94:be:dc:fb:ca:86:57:c6:52:a4:f2:
24:8a:c2:42:d9:fe:2e:de:8b:48:4d:60:58:5e:47:e0:cc:0c:
0c:c8:36:52:91:00:44:a5:24:75:d2:94:f1:ee:3b:e5:2c:92:
e5:d6:91:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:11:35 2026 by rpki-client