Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
File: A3hitGCMefRQKV7FyAx8etbf4qI.mft (raw, json)
Hash identifier: He6WMwDcRy2BM4A5CGsdZAQlZYIviKC7t2t/pi+fV0c=
Subject key identifier: 0A:59:EF:14:02:71:11:AD:34:79:3D:BC:FD:4A:C4:53:97:8F:DA:AE
Authority key identifier: 03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
Certificate issuer: /CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Certificate serial: 019F227D06B0ED0B774329922EDA24423E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
Manifest number: 149E
Signing time: Thu 02 Jul 2026 11:00:46 +0000
Manifest this update: Thu 02 Jul 2026 11:00:46 +0000
Manifest next update: Fri 03 Jul 2026 11:00:46 +0000
Files and hashes: 1: A3hitGCMefRQKV7FyAx8etbf4qI.crl (hash: YsGPsB5RcBOOUD/n1HMNENCysUbZ0enHzPQ4qZZWJwU=)
2: WxImH-LXs0d6zerX8rbJADEs0b4.roa (hash: 1hpI1k0NLPuLhvebFCrou0mJyF8538s4/VSeky9KzZw=)
3: bL1SpyyBTi0d8Dsx8Tdvxr7qEag.roa (hash: j5UJJAXCgmYG9UJK159eJdYgk2A4TavF4TUvXoNb9wo=)
4: jEFjyAFrXDcV4VZRl6Fg4c-tBbI.roa (hash: SCNZ1jcp85B9JQOpcfN9KIw7MGVU7KDV6MeoqHXZssQ=)
5: x9MYFIf2PoZ4-7JYUxzgREaOECQ.roa (hash: pgslKdJlC5emb7XS7811wddrmA1E6OgVQZWwLKWbTac=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:7d:06:b0:ed:0b:77:43:29:92:2e:da:24:42:3e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Validity
Not Before: Jul 2 11:00:46 2026 GMT
Not After : Jul 3 11:00:46 2026 GMT
Subject: CN=0a59ef14027111ad34793dbcfd4ac453978fdaae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9d:20:be:f3:c1:d3:d5:9f:c6:26:7a:43:c5:
76:81:ac:7e:b9:7c:14:44:c9:9b:65:97:7b:b9:de:
d8:dd:c8:46:b8:3f:9e:7f:14:66:2b:e5:1b:e6:4b:
2c:10:d5:f5:95:3f:b5:22:da:ac:43:10:05:d9:c6:
a9:0a:e4:75:de:09:0a:c5:81:71:7d:f7:78:09:2a:
6b:a2:2b:f7:fa:d7:fb:1a:45:b2:76:b4:04:47:42:
42:e9:f2:43:45:85:b4:e0:e2:a2:a6:e9:2b:fd:64:
3c:29:85:9f:d8:01:1e:8c:15:83:ce:65:d4:90:5f:
d7:42:13:db:31:98:7f:13:2d:82:ef:1e:85:76:1e:
83:e1:42:6b:c4:8f:36:c1:91:57:eb:3b:23:7f:e5:
ab:0c:ac:ca:c3:9c:1f:a5:d1:18:eb:0c:95:5f:b9:
f6:60:0e:e4:ba:d3:8b:6e:59:9e:13:2d:7a:9d:d4:
55:9b:78:61:e9:3d:f8:29:b5:f2:c3:0a:14:b6:05:
71:d5:c6:88:00:9f:bf:1d:c3:1e:e7:52:35:e0:b4:
fc:9e:2e:b5:48:3d:ff:a5:b6:eb:6f:03:75:33:2a:
67:55:6f:eb:94:b7:a4:29:c7:3e:9d:36:a2:13:e7:
19:2c:3d:fa:78:fa:86:cd:1f:4c:8f:11:be:e5:37:
ea:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:59:EF:14:02:71:11:AD:34:79:3D:BC:FD:4A:C4:53:97:8F:DA:AE
X509v3 Authority Key Identifier:
keyid:03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4d:2a:95:b6:84:43:78:e2:c4:cb:e9:be:a7:68:3b:fc:6a:
2d:0d:07:ae:b6:b0:82:3a:22:0e:a6:26:c3:df:ba:f2:25:d1:
2f:bf:4b:34:c2:d6:54:49:71:2c:68:4d:ed:df:37:bb:2f:d2:
33:00:11:72:78:41:9b:3f:6b:25:91:d4:a3:8d:9a:11:0b:16:
ab:57:b4:cb:91:e4:e2:30:9a:38:bb:db:97:65:1c:1f:5d:1a:
26:3e:93:53:04:6d:16:2f:87:9f:a7:8a:7f:e9:c4:f8:df:37:
9b:99:2f:3f:39:02:4b:32:e3:90:55:a5:e1:c0:60:b5:ee:73:
a6:23:30:91:3d:58:51:a0:e1:9d:04:a7:1f:8c:cd:df:f5:f5:
8f:a2:23:e6:55:87:e7:a3:e0:6e:ac:26:c7:9e:0c:3b:98:97:
a4:7a:5e:9d:0b:f6:13:a5:e6:05:8e:95:4e:ba:30:f4:84:ff:
27:09:e1:d2:bf:07:3f:b8:ac:93:96:03:64:91:86:d1:41:87:
e3:d1:43:65:ae:a9:41:89:bd:ee:cc:fa:d3:2c:63:15:6c:b9:
b3:27:77:d7:9f:47:a3:db:24:57:a7:db:1a:68:f7:d0:fb:f5:
5b:da:d6:3a:d9:f0:36:cc:62:c6:91:2b:37:0a:5f:56:72:6c:
93:70:b5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:14:22 2026 by rpki-client