Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
File: Ahs-o17f3ROMFVBtdKdgIt03aUs.mft (raw, json)
Hash identifier: XKb0c/VDFYkR8RjjfBWMbRt5HiieHJMunXhVMlN0Nvs=
Subject key identifier: 18:55:99:E8:91:DC:C9:E6:65:20:77:7E:9F:43:67:85:E9:24:FF:B9
Authority key identifier: 02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
Certificate issuer: /CN=021b3ea35edfdd138c15506d74a76022dd37694b
Certificate serial: 019F2369B18F84022F10B72E4E4C83CD724B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
Manifest number: 1994
Signing time: Thu 02 Jul 2026 15:19:16 +0000
Manifest this update: Thu 02 Jul 2026 15:19:16 +0000
Manifest next update: Fri 03 Jul 2026 15:19:16 +0000
Files and hashes: 1: Ahs-o17f3ROMFVBtdKdgIt03aUs.crl (hash: D1b7+NXlf8aQX0dDVaDPBURmt5L2CjUpFecZspC+J/4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:b1:8f:84:02:2f:10:b7:2e:4e:4c:83:cd:72:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021b3ea35edfdd138c15506d74a76022dd37694b
Validity
Not Before: Jul 2 15:19:16 2026 GMT
Not After : Jul 3 15:19:16 2026 GMT
Subject: CN=185599e891dcc9e66520777e9f436785e924ffb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f0:dd:ef:1c:09:30:90:57:8f:e3:84:68:4f:
73:fa:c6:5a:8e:15:9c:36:50:a9:9f:20:85:0d:f8:
da:75:54:1a:7f:25:0e:78:8a:aa:fc:11:67:d7:d2:
90:04:39:0c:10:1e:d0:c3:95:83:ee:b6:61:c3:96:
56:c0:1a:09:77:9d:30:8e:8e:ff:56:0b:82:19:d4:
03:ea:60:cf:d9:ce:ab:b8:43:5f:01:57:01:eb:92:
ea:a0:54:88:58:f7:c0:08:41:aa:b7:9d:bc:9d:56:
62:cb:47:3b:5c:4d:47:ef:4b:5e:f6:d5:6f:88:c5:
f4:7e:80:b6:39:7c:1f:20:35:3b:55:74:50:1a:cc:
83:71:e1:5f:85:6c:45:99:80:86:a5:3d:43:fb:e4:
d9:ad:f4:8e:dd:76:b8:0c:2d:8e:5a:b9:e3:60:69:
cc:97:5d:4a:85:44:b1:38:c0:79:d4:4d:c9:bb:7c:
64:37:d4:5a:52:1a:c6:2a:7a:0e:bd:44:f8:86:d6:
9e:59:26:af:ae:eb:ed:4d:4c:58:b5:72:61:6f:05:
d1:4c:bd:a5:6f:c5:bc:ec:b8:49:26:e0:13:3a:60:
f4:6f:bb:2b:af:95:77:81:b7:43:56:55:69:c6:34:
d7:a8:6d:6d:d5:5d:f8:25:31:6a:d9:ce:e5:4b:a7:
9b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:55:99:E8:91:DC:C9:E6:65:20:77:7E:9F:43:67:85:E9:24:FF:B9
X509v3 Authority Key Identifier:
keyid:02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:1b:a2:9e:32:c6:15:d3:15:2b:92:31:9d:0e:e4:e1:24:c8:
4b:c4:4e:36:f8:df:07:da:21:0a:71:2e:86:9e:23:d9:16:15:
4b:f3:ec:a8:9b:dc:b8:cd:ff:b1:d7:d3:33:36:68:42:8d:e3:
43:24:86:1b:1b:f3:29:c5:99:8e:57:b9:e5:38:55:79:41:51:
42:2a:37:25:0b:6a:e8:78:b7:58:5c:42:0c:c6:20:81:96:f2:
99:19:4f:a1:35:17:cd:5e:e1:6a:60:25:fb:2c:d8:e7:a7:c6:
39:5d:d1:68:9a:01:9c:a0:4a:55:55:e2:91:f2:2b:38:22:64:
43:6a:61:23:35:99:a5:b1:3b:75:09:57:ef:4b:f5:76:d6:78:
12:22:89:a9:68:2a:65:26:4b:c5:06:0e:66:17:bc:e1:77:99:
97:bc:8a:5b:21:f9:0d:5a:f4:94:5a:43:a9:65:5f:ef:c4:3a:
3e:2b:32:9d:8b:b4:d9:a7:91:a0:67:dd:30:29:11:0f:80:0a:
9f:c2:92:b4:29:7f:f7:16:97:00:dd:f7:80:ca:24:77:e5:23:
38:bd:69:65:c5:34:4a:47:98:da:a9:13:72:c4:9d:ff:be:02:
b2:6f:93:ed:dd:7e:56:ca:03:7a:9b:74:7f:dc:64:20:ef:ed:
4e:f7:ce:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:10:01 2026 by rpki-client