Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
File: h9wam_-izxWn2AmcijwxfOB9teo.mft (raw, json)
Hash identifier: xkWf88kF0a+1zgnDX868SN0cVpGgIcl714uon+zaWzc=
Subject key identifier: 8E:6C:8F:46:4E:78:12:41:3C:16:19:39:C3:55:2E:2C:44:92:54:9E
Authority key identifier: 87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
Certificate issuer: /CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Certificate serial: 019BE4135CFFDBAC0FC51EEDF66FC5047C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
Manifest number: 0A3F
Signing time: Thu 22 Jan 2026 05:00:32 +0000
Manifest this update: Thu 22 Jan 2026 05:00:32 +0000
Manifest next update: Fri 23 Jan 2026 05:00:32 +0000
Files and hashes: 1: EmCFsRB7nHcOjmkLyyE_coUmYTQ.roa (hash: e0zxqy0vwJME17A6+oI5gRAMtW4kGM5NlBGOnBwJ+9k=)
2: h9wam_-izxWn2AmcijwxfOB9teo.crl (hash: X/47hyIy2k9UzXuiN0lxSJsOzRIoUDIqMW5MBM/cix8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:e4:13:5c:ff:db:ac:0f:c5:1e:ed:f6:6f:c5:04:7c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Validity
Not Before: Jan 22 05:00:32 2026 GMT
Not After : Jan 23 05:00:32 2026 GMT
Subject: CN=8e6c8f464e7812413c161939c3552e2c4492549e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b3:60:3c:96:e8:a7:5e:3e:d9:31:2d:c8:bf:
79:15:cd:d5:71:cf:da:bc:0d:4b:e0:f4:e0:8b:b6:
40:19:c4:f9:a6:3a:43:75:7e:e1:1f:91:2b:02:f9:
d8:37:12:01:c3:9c:34:6f:f0:0b:d5:62:dc:5e:1e:
a6:54:e4:ed:0a:e5:c6:51:6f:e9:57:80:aa:4c:9c:
fe:79:4c:1a:79:b6:30:bf:76:03:8a:24:a1:73:7b:
74:89:b0:0b:cc:32:82:41:a5:a1:92:af:3d:90:14:
88:bc:8a:98:58:60:8a:11:f3:0a:f2:e0:3b:cc:0e:
18:a4:59:98:67:eb:8a:e1:68:5e:cd:56:4d:e2:c3:
95:f0:56:20:dc:f9:c9:5b:7e:50:97:22:52:4b:68:
f5:19:e2:69:e9:f0:9c:5b:23:04:4c:9b:da:70:65:
99:2d:ab:f5:8e:2c:e0:39:3b:a4:62:ff:49:d1:99:
77:06:3c:a2:a0:1a:3e:93:26:17:84:3f:b3:bc:1d:
ee:49:a3:bd:e0:db:07:24:b6:33:f5:fa:1b:5e:73:
67:9e:4f:56:c4:99:ce:14:78:13:97:2c:fe:44:d3:
5e:dc:84:3a:ed:c2:f6:d8:80:32:03:40:d7:8e:c5:
dc:d8:60:aa:ea:ed:ea:f2:e0:99:0a:0b:51:fd:6f:
90:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6C:8F:46:4E:78:12:41:3C:16:19:39:C3:55:2E:2C:44:92:54:9E
X509v3 Authority Key Identifier:
keyid:87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:d3:98:fa:82:db:13:d2:77:3b:c2:ce:33:38:71:c3:71:74:
02:8e:6f:c5:65:07:1a:88:5c:40:11:82:e6:09:30:84:98:be:
c7:ec:bb:08:e9:19:ba:21:6e:7d:13:df:db:8d:ab:fb:9b:95:
0a:8d:5e:d0:c3:e1:cc:6a:57:5d:10:46:2a:37:b2:24:8f:46:
4c:bd:ac:8c:43:d4:b1:07:85:52:4d:6a:b6:d9:88:7e:54:e3:
c5:dc:66:3b:dd:55:44:d8:5e:92:1c:0e:25:d0:74:c7:00:0b:
c7:40:49:58:32:6c:13:65:d0:7f:b5:bc:54:0a:dd:0b:5a:57:
e5:10:e1:d4:d9:0a:bc:44:8d:b6:5a:59:75:64:d5:f6:eb:7d:
f1:f5:07:21:3a:63:28:df:31:f4:43:f9:37:97:37:96:f5:46:
f0:94:5f:c9:5d:60:cf:03:dc:be:78:a2:9c:99:08:ed:fc:e5:
35:b8:9d:fd:91:87:bd:9d:76:5c:9e:dd:bc:41:31:60:a4:fc:
c3:83:d9:05:b2:1d:ac:94:61:0c:77:13:1a:4c:34:89:24:7c:
b3:88:e6:82:d5:a2:7b:8e:97:00:23:40:5f:0c:d1:8f:55:fc:
3c:30:bf:41:e0:b7:d8:91:50:8e:4a:28:2b:d2:a4:e3:7d:f3:
f9:fc:1d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:58:00 2026 by rpki-client