Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
File: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft (raw, json)
Hash identifier: ABah3r0MO+V5mel6HCKL1Z0yNGQ4xLeiNRcjufWmWBo=
Subject key identifier: BF:F0:0F:C7:01:AB:BD:7E:86:CE:0C:CC:5E:2E:87:8D:BB:F7:7C:6A
Authority key identifier: 87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
Certificate issuer: /CN=87e64170f9d82c51670b9a44f329b20613a8082d
Certificate serial: 019D8DCD5B13C6C9660FD3662C8128742E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
Manifest number: 184F
Signing time: Tue 14 Apr 2026 21:02:18 +0000
Manifest this update: Tue 14 Apr 2026 21:02:18 +0000
Manifest next update: Wed 15 Apr 2026 21:02:18 +0000
Files and hashes: 1: GeANBlc9szsh5X_dzXvwntyH33k.roa (hash: NtbXfKjFVCT4X+tyOUkrVXVVHjr7y8q2zKhpArvxwTk=)
2: XBuxFynVvxh8UiT_tJkPmhYk_oA.roa (hash: +W6/Wvk2I7PSxm+f/mLqDUSHpVa25RlpWluuWkH/7C8=)
3: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl (hash: NkLNfIy8vrkSfF4u8v2rfXl12IXR4opVZ7t2aQ8UvJw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8d:cd:5b:13:c6:c9:66:0f:d3:66:2c:81:28:74:2e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e64170f9d82c51670b9a44f329b20613a8082d
Validity
Not Before: Apr 14 21:02:18 2026 GMT
Not After : Apr 15 21:02:18 2026 GMT
Subject: CN=bff00fc701abbd7e86ce0ccc5e2e878dbbf77c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a9:4e:02:e7:ad:72:69:f6:ea:b5:72:9f:18:
35:8d:d6:9c:38:62:68:49:bf:7d:df:79:7b:a4:6c:
3d:df:35:4e:cf:ac:ec:d1:09:19:9a:63:db:e0:99:
f0:05:9e:08:9c:e6:a7:d7:f5:81:38:64:55:a9:3b:
e7:bf:16:70:56:77:6c:aa:b0:f4:19:50:a3:3d:99:
be:f7:49:7e:75:8d:d7:b3:79:2c:26:dd:e4:6c:f1:
9e:58:fe:81:81:26:ed:72:49:bd:e8:d5:94:16:8a:
02:59:34:d6:f7:72:6f:de:61:d2:6a:5d:8c:d5:fb:
17:c5:d6:28:d9:b5:5d:fd:81:92:8d:26:cd:34:16:
84:18:0e:22:e4:68:e6:82:fb:fc:1a:80:e6:fc:2b:
64:8e:b1:08:da:24:c7:2d:03:a8:e2:74:e8:62:ef:
cf:f4:b5:20:16:e8:b6:f7:91:de:bd:98:3c:ba:42:
d3:a2:7e:3e:b5:3d:99:95:f4:a6:a5:6d:3c:6c:d5:
47:4e:1f:b3:7e:08:52:72:22:07:e4:54:03:a4:45:
b0:59:57:b9:0b:04:cf:b0:3e:de:ad:d9:8a:e3:04:
d0:1b:14:e8:73:d2:c8:59:c5:2f:93:c0:f4:27:b1:
14:47:b2:ac:5c:e2:e4:8d:0f:f1:bd:58:8b:70:4e:
3d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F0:0F:C7:01:AB:BD:7E:86:CE:0C:CC:5E:2E:87:8D:BB:F7:7C:6A
X509v3 Authority Key Identifier:
keyid:87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:9f:44:c0:52:e4:c2:65:ff:6b:f2:3a:81:32:ee:fc:89:8f:
2a:a2:1c:93:8e:81:1a:ba:c2:83:6b:1c:16:93:dd:f0:48:e1:
fb:5d:1e:72:67:d5:bd:39:c3:44:85:0e:6f:7b:d2:66:17:41:
50:49:8a:bd:ca:dc:d3:fb:eb:02:82:89:cc:36:54:f5:16:e6:
3e:99:71:ce:65:dd:d9:e5:43:f3:94:85:71:00:26:33:43:a2:
9b:c0:f4:48:6c:b5:f9:15:4c:2c:2b:35:a8:5b:f8:74:a8:61:
45:65:fc:c0:0b:c1:8d:ee:9b:d0:77:dd:96:37:c1:8a:4b:f5:
23:b8:ba:91:2e:c4:5d:9e:d6:64:bb:9e:6e:de:19:e1:c3:22:
f2:42:b1:51:a5:0b:c1:ab:f5:f5:08:0d:71:ca:55:8f:1b:ec:
42:3d:0c:50:c1:55:84:d7:de:3b:34:b1:c2:5e:0c:6a:09:10:
5d:d4:a5:b3:9a:03:71:92:72:be:17:10:87:b7:eb:76:06:03:
c0:1b:51:20:b9:68:8f:63:be:9b:98:9f:3c:3b:1a:5e:d1:8a:
10:b0:5f:51:ca:6e:be:c5:bf:38:ef:15:bb:e9:9c:56:9f:03:
7b:30:08:83:ca:db:70:bd:28:5f:d4:f3:37:bf:ee:e9:80:4c:
fe:18:53:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:10:56 2026 by rpki-client