Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
File: hZtbaj2CvQDtMcbOs66nrVke5Tc.mft (raw, json)
Hash identifier: OJIx9nrwzmdpHSm7Zc40NA2yusCUlEACNfnOAJFohTI=
Subject key identifier: 9B:8C:3F:07:46:34:E1:1F:36:6D:30:2B:5C:92:98:9A:36:2A:5C:65
Authority key identifier: 85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
Certificate issuer: /CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Certificate serial: 019D70D4361E27C8105D22B21825E8F68B00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
Manifest number: 095A
Signing time: Thu 09 Apr 2026 06:00:48 +0000
Manifest this update: Thu 09 Apr 2026 06:00:48 +0000
Manifest next update: Fri 10 Apr 2026 06:00:48 +0000
Files and hashes: 1: TTmsDPG2FnkljDQIj20yFpPrAlc.roa (hash: DusIlZNokXpl0mIysr+wEk2U7Cm/4kltJG+KnV9R0f8=)
2: hZtbaj2CvQDtMcbOs66nrVke5Tc.crl (hash: 6K5hfOlASIxgUf5ps0De0fweAhDcE7fCO3W3DUPffiY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:70:d4:36:1e:27:c8:10:5d:22:b2:18:25:e8:f6:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Validity
Not Before: Apr 9 06:00:48 2026 GMT
Not After : Apr 10 06:00:48 2026 GMT
Subject: CN=9b8c3f074634e11f366d302b5c92989a362a5c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2e:2e:8e:6b:32:c0:a6:40:2d:61:34:ef:03:
07:94:d5:59:89:c7:01:2c:ba:30:a3:4f:6d:0e:7e:
7d:91:56:f5:1d:ab:20:ae:d7:e1:59:54:3b:76:c2:
59:64:c3:ec:4c:15:5c:0b:06:e4:26:e5:da:b7:11:
ff:bb:38:5c:45:f3:d3:28:2f:bf:07:84:d7:8b:fa:
79:85:93:e1:67:ad:69:bc:91:e2:4d:a8:2b:79:3a:
73:e1:49:6c:95:81:c4:7d:8a:13:44:0b:4e:a5:35:
8b:cf:3b:72:c2:94:00:72:8b:77:64:99:d7:b5:bf:
44:01:7d:3d:aa:40:51:ff:3e:ba:60:04:e0:87:30:
84:1b:44:e6:36:01:64:bc:f0:80:bc:70:cf:09:e4:
9d:f0:60:fa:95:a3:24:66:39:39:7a:49:19:91:b1:
14:2f:d5:04:26:f7:93:49:72:11:8f:ec:6e:71:6d:
00:99:5c:87:b6:e0:6f:bf:3d:67:fd:77:9d:ca:ab:
ec:e1:c1:61:79:40:66:9b:90:df:90:ab:91:0e:e0:
7d:65:fc:06:27:71:24:47:05:f3:93:4e:ba:66:1f:
47:11:d1:6b:13:7e:74:8a:17:cf:81:f1:bb:2e:b0:
76:bc:9e:33:5f:c1:95:15:83:74:12:33:b2:b2:c5:
a4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8C:3F:07:46:34:E1:1F:36:6D:30:2B:5C:92:98:9A:36:2A:5C:65
X509v3 Authority Key Identifier:
keyid:85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:0b:20:59:04:3e:4f:66:16:4d:67:84:10:af:57:06:00:5e:
75:f6:14:37:bc:44:9a:37:ba:8b:26:b5:a9:5a:be:92:ac:34:
92:de:e7:17:e6:f6:1a:0e:7e:fa:9d:f1:bd:51:37:fe:fc:34:
d2:81:5a:17:1c:7f:90:4e:0a:cb:de:75:3e:d4:2c:f9:3f:0f:
c3:de:c6:b1:dc:4b:87:7a:93:de:3e:c5:66:b3:79:8a:9f:30:
44:ce:ff:76:ed:6b:e1:49:ec:a2:dd:40:37:29:e0:85:62:ff:
06:9e:9f:ff:87:05:40:96:c8:29:81:a9:5b:3e:df:a1:67:54:
e6:a0:b2:82:c4:97:ab:fc:02:e1:c0:7d:f7:e6:73:ff:e9:fd:
f6:68:75:97:33:07:b2:b0:cc:eb:9f:81:26:f7:38:73:a7:21:
07:2d:78:83:95:7b:3e:19:24:46:f5:50:05:d0:b9:db:1c:f8:
03:0e:ee:23:69:27:0c:06:1d:2a:52:c0:03:9a:27:43:93:78:
1f:2a:52:b0:92:0e:5b:20:ec:53:99:38:77:fe:ed:07:30:ba:
d7:75:e9:9c:e9:7c:41:bf:7b:29:f6:0e:3b:a7:0a:f2:85:9a:
10:c9:f9:64:70:ab:54:52:7a:06:03:ba:74:35:cb:a0:4c:f2:
c7:37:a6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:11 2026 by rpki-client