Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
File: GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft (raw, json)
Hash identifier: Cu4n3weGnzm1T5RBmowX3BkDkje6Vxg9hkJPDavNdmM=
Subject key identifier: 14:86:EA:56:4F:F1:2A:A7:E7:B7:FB:08:27:E6:B4:02:8B:77:EC:AC
Authority key identifier: 19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56
Certificate issuer: /CN=19e3d11f72ddbed8361285b499b932191203b756
Certificate serial: 019D75FA7152AA358F968FD93C14DA466E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
Manifest number: 07A3
Signing time: Fri 10 Apr 2026 06:00:40 +0000
Manifest this update: Fri 10 Apr 2026 06:00:40 +0000
Manifest next update: Sat 11 Apr 2026 06:00:40 +0000
Files and hashes: 1: DKPrKwEm9w_rRG3TMuhv1McAamk.roa (hash: 4OtFjtxkmUmlHY70yrx1zCjgip8Y0WBSl5BdZAXK0TQ=)
2: GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl (hash: PFFIYsIh3wm0iMCSPlbnkh+9veyM9xWZh4v1M7R1OPE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:75:fa:71:52:aa:35:8f:96:8f:d9:3c:14:da:46:6e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19e3d11f72ddbed8361285b499b932191203b756
Validity
Not Before: Apr 10 06:00:40 2026 GMT
Not After : Apr 11 06:00:40 2026 GMT
Subject: CN=1486ea564ff12aa7e7b7fb0827e6b4028b77ecac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:12:89:1d:75:5f:46:e2:2e:7f:c9:99:ff:0d:
ae:d5:55:6e:be:4d:44:2f:cb:76:bd:f0:95:eb:39:
d7:5e:f8:40:41:81:ed:83:ea:d1:92:c2:e3:db:e7:
1c:d5:03:c3:2c:6d:0d:50:f2:07:de:83:7a:40:b1:
0b:4e:91:ea:33:b0:ea:c5:ea:16:be:10:19:db:8d:
ab:ec:83:9f:4b:c2:0a:ad:f2:55:37:11:a1:df:7c:
4c:d6:97:15:55:06:7f:f8:1a:75:4c:a3:c6:48:40:
b4:68:6b:6a:c4:ae:c8:75:1a:6e:c4:86:62:f3:1c:
08:22:80:4b:9c:2a:cd:ff:8d:b5:71:14:9f:61:e6:
ed:80:5a:4c:a1:a0:72:57:c9:8d:1f:69:02:69:29:
a6:d7:0b:9a:29:36:b9:7c:80:da:36:5c:d1:36:14:
9d:89:e2:c3:60:80:4d:6f:46:0b:94:69:7b:45:2b:
74:5d:b8:ef:cd:45:60:c2:36:1d:e8:4c:f5:cf:6b:
4d:dc:98:5d:b4:83:6a:1c:e3:23:06:a1:20:9d:82:
bc:ee:2b:14:8e:90:99:52:5d:be:d2:07:0f:04:76:
05:e7:1a:e9:35:fe:ea:53:62:be:d0:53:27:80:7a:
68:3d:7b:76:d0:33:95:c3:6d:fc:48:8d:46:f9:30:
92:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:86:EA:56:4F:F1:2A:A7:E7:B7:FB:08:27:E6:B4:02:8B:77:EC:AC
X509v3 Authority Key Identifier:
keyid:19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ce:39:c5:4f:5b:d1:b4:70:be:23:3f:14:26:77:c2:05:a7:
b1:e2:42:60:b6:9a:04:c0:e4:b4:0c:dc:92:54:4e:99:af:0e:
a9:30:0c:cf:41:f9:ca:44:64:a1:dc:8a:b9:50:27:15:a7:5a:
4f:72:22:eb:00:e0:72:40:ee:6e:2d:be:df:88:94:5c:ec:da:
87:7c:ef:68:92:85:bd:1f:6f:ac:a3:48:e0:f7:1d:b4:c8:ab:
6c:e7:3a:48:84:a8:37:0c:41:02:7f:83:04:b2:9e:eb:04:6e:
9b:6d:9c:a8:4d:a2:15:f4:d9:e6:fd:55:66:63:48:b0:cb:68:
e7:28:6d:6f:5f:fc:7b:45:8d:c1:db:78:f0:f1:03:8a:15:01:
d1:62:8c:cb:49:83:34:66:10:03:9e:34:47:9a:ea:2b:48:f8:
f9:e0:11:f4:1a:cf:00:eb:9c:a0:5d:ba:d1:72:3c:e5:8a:8d:
3a:5c:98:b6:7b:75:f2:3a:a6:ba:45:51:82:95:fb:4d:94:17:
8c:50:14:c3:18:d9:03:c8:17:e4:8e:bd:5d:59:c7:d4:fa:40:
86:eb:3b:52:2f:24:d4:a8:d3:7f:73:78:0a:3d:4d:20:b2:a4:
d1:84:e5:ab:88:64:e8:3d:8f:fd:f8:10:81:95:3d:13:1e:f7:
19:81:9f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:32:35 2026 by rpki-client