Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
File: ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft (raw, json)
Hash identifier: rrXUgLlsc4a3KajUWS2oKiTHPODuap50Zl5KOcp/3LM=
Subject key identifier: 22:43:79:70:AC:71:9E:EE:EF:96:91:6A:5E:33:E7:6A:61:07:23:A8
Authority key identifier: 6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E
Certificate issuer: /CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e
Certificate serial: 019CD767D24633F6484AC28468900912217D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
Manifest number: 045B
Signing time: Tue 10 Mar 2026 11:00:31 +0000
Manifest this update: Tue 10 Mar 2026 11:00:31 +0000
Manifest next update: Wed 11 Mar 2026 11:00:31 +0000
Files and hashes: 1: ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl (hash: 8t+1lJubvZbTQA1JM04pTR+fQJA2iEgJoq0Op5bWtiw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:67:d2:46:33:f6:48:4a:c2:84:68:90:09:12:21:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e
Validity
Not Before: Mar 10 11:00:31 2026 GMT
Not After : Mar 11 11:00:31 2026 GMT
Subject: CN=22437970ac719eeeef96916a5e33e76a610723a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8f:09:4a:a2:2c:c7:11:37:56:d5:2e:1f:24:
5f:62:a4:2e:f0:ef:5d:84:4a:36:f7:7e:82:e7:f5:
70:a6:b9:4e:6c:0b:91:12:3b:5e:8a:47:b4:b7:d9:
7f:48:68:32:fe:c8:9c:11:ac:f1:14:3e:50:26:3b:
45:f9:c8:51:1a:12:06:a5:59:0b:14:da:93:32:25:
70:3b:3e:b7:bf:28:cd:0b:82:72:8f:d6:ee:79:70:
0f:35:64:af:d5:af:1a:bc:32:47:cf:b7:78:b6:5d:
76:db:2d:96:f6:e4:e5:d5:e5:47:86:c5:bf:22:f2:
2a:a4:3d:94:e1:df:29:9f:a7:9b:b2:2b:d0:81:fe:
50:b7:b9:69:ba:45:54:cd:95:83:f1:6c:19:1c:9a:
ba:82:bb:23:54:70:96:03:f2:b3:a3:dd:c7:b1:3e:
da:f7:e4:b5:20:4a:c9:a0:7a:99:57:c8:b9:b7:db:
3f:d3:af:1f:09:37:3f:a1:02:8d:52:c5:41:cb:36:
1f:a7:e7:b1:02:bf:bd:a5:2b:e7:3c:e7:55:42:32:
5d:1d:75:fa:3f:21:6a:22:aa:63:92:fc:24:d3:30:
5c:d6:39:41:0f:8b:c1:c3:d9:d3:57:93:90:83:e9:
ee:b5:4d:a9:53:c1:5e:5c:96:04:70:c9:d5:8e:33:
d0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:43:79:70:AC:71:9E:EE:EF:96:91:6A:5E:33:E7:6A:61:07:23:A8
X509v3 Authority Key Identifier:
keyid:6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:8a:2a:db:3c:18:40:9a:ea:f1:e1:da:18:b8:fb:49:e9:6c:
a7:ac:51:2a:02:bd:dd:34:8d:65:04:92:ab:d0:92:21:eb:f7:
93:e2:57:32:ee:a0:8e:06:ad:65:54:0f:b2:af:b4:eb:8a:6c:
84:59:a4:87:a1:60:6d:45:8a:19:b5:bb:85:69:ec:c4:ce:5a:
40:a0:89:21:e7:ff:b4:94:23:ff:c4:0e:8a:ce:f1:58:d3:2e:
b3:27:27:0c:0d:f1:16:98:0e:53:27:a1:26:41:20:e6:08:10:
f5:9b:2c:1a:1b:56:dd:29:f5:87:fa:84:92:0d:01:09:1c:cb:
19:6f:78:19:83:46:47:77:60:97:1f:9e:f2:b8:18:34:34:5a:
75:dc:d9:b2:49:10:08:59:f7:76:db:b8:fd:12:f3:90:e0:4d:
49:4a:a5:1d:70:2b:e6:bc:c2:f9:de:3d:72:e3:76:cb:27:5c:
9d:76:af:0e:32:6e:5c:67:5c:95:26:81:cd:f7:c8:d1:2c:5e:
bd:10:25:78:d4:7b:55:cf:1c:0c:e0:91:5f:4b:66:20:0a:a2:
2e:a7:a2:32:67:81:d7:73:a8:8a:92:a2:2e:19:e1:d1:40:9d:
df:11:90:0e:09:82:b7:d6:80:32:f9:95:4c:9c:6f:e6:af:05:
df:01:c3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:03:44 2026 by rpki-client