Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
File: h19BKtsY1C-t0KhYc3GNrakx0cI.mft (raw, json)
Hash identifier: oMy8KIlnvBOb5sAqj2xnzhQtGzsj5LYw17qjeuywXuY=
Subject key identifier: 23:E4:57:14:49:38:CE:48:87:A4:04:38:63:94:11:CC:6F:F8:0A:66
Authority key identifier: 87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
Certificate issuer: /CN=875f412adb18d42fadd0a85873718dada931d1c2
Certificate serial: 019D71E801F3E53680343101940AC4159988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
Manifest number: 084B
Signing time: Thu 09 Apr 2026 11:02:03 +0000
Manifest this update: Thu 09 Apr 2026 11:02:03 +0000
Manifest next update: Fri 10 Apr 2026 11:02:03 +0000
Files and hashes: 1: h19BKtsY1C-t0KhYc3GNrakx0cI.crl (hash: kvChk5OncXvDDZ+varuiSTYGKKk1TdFExEl0Vkii5Ig=)
2: tWUs5_OoSfOVpkRE9FrQnWN345I.roa (hash: Ik3wfYejmGeFJTK3ER8Y42u6+FSgfq4mC824weZ/UdY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:71:e8:01:f3:e5:36:80:34:31:01:94:0a:c4:15:99:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f412adb18d42fadd0a85873718dada931d1c2
Validity
Not Before: Apr 9 11:02:03 2026 GMT
Not After : Apr 10 11:02:03 2026 GMT
Subject: CN=23e457144938ce4887a40438639411cc6ff80a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ac:82:29:92:79:f3:68:1f:b7:cb:23:b3:c3:
c4:86:77:4a:c4:12:93:05:c7:e9:9d:64:f4:60:1c:
ff:cb:a8:ba:0d:f1:90:45:d4:23:8e:c6:ac:4d:50:
21:15:bb:7a:06:1a:e3:fd:12:75:a5:28:84:b0:54:
e3:dc:2b:7e:e9:b9:a6:ac:9d:f3:28:72:7c:24:64:
47:89:15:c4:69:78:e3:fe:55:88:2e:38:80:4c:0d:
dd:55:a9:d6:a2:27:9d:63:f2:84:a9:8f:d2:ff:4a:
bb:66:37:ff:c7:6c:b1:4a:b8:29:c6:27:ce:db:d0:
7f:17:15:87:cb:af:65:fe:66:d0:d3:e2:c0:28:b6:
bb:95:af:21:ef:84:4f:6b:05:47:2d:db:ac:77:f6:
f1:36:10:db:85:58:e3:6d:03:18:71:a2:9e:63:62:
df:23:73:f8:bc:fd:15:57:16:ae:ee:1e:dd:ec:7f:
ae:a9:bd:a5:06:5b:65:ef:cd:d7:ab:03:02:69:10:
56:47:cf:08:69:19:c7:dc:0c:55:48:4d:ec:07:c9:
24:6e:10:37:e2:f1:41:e9:12:ca:c6:5c:cb:8b:17:
e8:b6:a7:54:b0:75:c3:1e:b7:2d:0e:28:2f:26:4a:
6d:7d:48:b7:fb:95:49:39:0b:ea:5a:f5:5e:99:16:
0c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E4:57:14:49:38:CE:48:87:A4:04:38:63:94:11:CC:6F:F8:0A:66
X509v3 Authority Key Identifier:
keyid:87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:fe:04:37:96:32:b8:e7:7b:a8:38:dd:9c:36:00:b6:ee:15:
ec:91:a8:e5:e7:fb:f7:76:86:01:a4:03:8e:c1:0c:35:b6:15:
d4:be:02:72:93:ed:9b:05:33:77:bb:5c:f9:ae:86:4d:7e:c6:
4d:09:18:76:ac:ef:b8:17:56:98:46:e9:9a:3b:9e:e6:51:40:
85:ae:01:e3:0e:36:5a:51:68:4b:12:d5:18:15:f6:3c:41:3b:
9f:96:74:ed:e3:07:20:f5:82:64:bb:f1:d4:b1:ea:d1:f1:be:
92:55:9e:8b:b6:d1:b7:3c:11:7f:53:c0:57:ec:a2:79:53:80:
1d:a5:74:cd:53:4e:37:ef:14:07:33:ec:d5:f3:26:ab:11:31:
28:67:c2:aa:4e:54:6f:99:f5:86:ec:91:f6:8c:e2:6c:2f:87:
95:de:b2:4f:5f:82:a4:b6:17:ac:f0:f1:36:c0:1f:e5:7f:99:
0a:a9:0f:ec:d3:2a:f2:13:24:5b:50:52:ff:ab:8c:21:ae:41:
43:d5:f2:f6:61:7b:54:1b:00:a7:af:33:5e:4f:ec:87:0d:6f:
13:28:fd:bf:9a:a5:1e:45:82:ea:ac:3a:7d:49:94:6c:f9:6f:
04:32:bd:d0:32:72:69:91:f7:6a:2f:e7:3c:6f:bd:3d:24:b0:
94:4c:28:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:14:00 2026 by rpki-client