Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
File: AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft (raw, json)
Hash identifier: dOQ/J9qM3cBL/AULUIq2QaN4ZJiR88JpfxUQnhx5ZCk=
Subject key identifier: 0C:EB:91:64:10:57:BD:17:70:61:FF:DC:C9:DA:A7:3B:DE:78:4E:3F
Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
Certificate issuer: /CN=0241154462e5adcca9d2bcbd1443fcc637879537
Certificate serial: 019E38D13BA2AB857203BAC519E56ACD61E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
Manifest number: 0A7D
Signing time: Mon 18 May 2026 02:01:36 +0000
Manifest this update: Mon 18 May 2026 02:01:36 +0000
Manifest next update: Tue 19 May 2026 02:01:36 +0000
Files and hashes: 1: AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl (hash: aHw/i28PndxNaay6BPLH9FYziVrk9hsXDaWPlvrF/RE=)
2: gtjhVT6UjxqBZh31cIm3-yIEhGA.roa (hash: LW6xPCZk2LsU0hVDamZgYy/ZUnE4iD/YES7gwyZet8Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:38:d1:3b:a2:ab:85:72:03:ba:c5:19:e5:6a:cd:61:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537
Validity
Not Before: May 18 02:01:36 2026 GMT
Not After : May 19 02:01:36 2026 GMT
Subject: CN=0ceb91641057bd177061ffdcc9daa73bde784e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4c:aa:f9:75:f7:8d:8a:68:bd:f7:e4:98:72:
ba:b2:93:33:03:af:fd:ab:fe:a2:29:98:ea:63:9a:
f5:65:f8:d1:be:72:96:17:44:40:a4:56:df:81:22:
cf:6d:d6:98:6c:df:a8:80:a4:91:d8:1e:9b:dd:59:
a0:57:0c:0c:22:9e:b4:19:d8:49:c3:84:43:86:54:
cb:3c:f5:32:8a:96:1d:bc:75:0a:6b:ad:73:02:e7:
6c:8b:44:f8:92:1d:db:32:a6:dd:62:68:40:58:48:
d3:89:f7:90:6b:ec:0c:62:85:df:63:8e:5f:b3:c8:
58:0c:7b:4d:f0:06:d3:65:7f:59:1d:da:3b:c0:d7:
8a:84:27:e6:e5:d0:6e:86:25:a9:36:dc:a4:73:22:
d7:be:77:1d:79:f4:49:8e:f0:03:1a:e2:4b:23:eb:
db:fa:77:9b:b7:3c:b8:7c:d3:1b:06:0d:a5:c3:a3:
72:90:37:6c:14:ee:b4:cc:fd:a3:55:8a:1d:3c:13:
61:3d:e7:72:84:87:87:d4:10:4f:ff:7d:06:d6:d0:
04:b0:d4:37:b2:1a:be:e8:22:f4:3c:58:7e:d6:f2:
a6:fb:06:0d:cf:8d:a7:7f:49:2b:8b:88:d4:98:1a:
0a:91:64:a3:d7:b0:d1:f6:cf:05:0e:82:df:12:37:
61:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EB:91:64:10:57:BD:17:70:61:FF:DC:C9:DA:A7:3B:DE:78:4E:3F
X509v3 Authority Key Identifier:
keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:40:63:19:8d:19:ce:b5:9d:aa:86:7d:ba:34:f7:1e:18:67:
bb:69:48:89:c0:cc:d1:b1:ef:bf:d5:cc:c4:4c:a8:ef:72:e3:
18:1d:cb:82:57:7b:3b:23:96:84:1b:c6:36:ae:25:66:aa:c1:
5c:a6:09:a7:65:b9:77:29:d2:49:03:8b:22:7f:7e:b1:55:9d:
7e:19:cf:d7:d5:bc:b8:a3:4c:c6:d8:2e:7a:ba:29:7c:fd:db:
5e:09:a2:2b:e0:ec:69:b7:5c:55:0d:87:0a:63:54:25:15:05:
7b:58:56:5b:3a:96:3a:18:6d:19:a0:0d:e0:65:5a:69:99:ef:
95:5a:30:fc:3d:0d:eb:c7:8f:6a:08:62:9d:e3:10:a1:27:f8:
87:96:dc:40:fd:8c:e4:c8:da:93:11:1b:85:15:63:ba:e3:31:
97:b8:5a:3b:ba:fe:46:d3:11:0e:1b:d6:3f:15:86:65:93:fb:
7b:c9:ac:b2:3b:1d:70:b6:28:93:6f:50:0c:cc:fb:b0:24:51:
c8:db:14:5d:41:d1:2f:a2:98:d6:b6:b7:fc:86:b8:9f:76:e2:
64:a2:b0:b4:32:91:06:28:fc:a8:45:49:5e:18:71:a5:99:f5:
b2:3e:2b:a2:2b:58:db:03:80:32:5f:0b:2e:57:b2:72:96:a8:
4b:3e:02:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:32:18 2026 by rpki-client