Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.mft
File: hprNGeI6gWZEutDooSuG4SiK0zw.mft (raw, json)
Hash identifier: H0az9vJbtCp038lhgpdkmulT43Ti4jlRB/2eGwbMbDk=
Subject key identifier: 6B:87:B9:F6:FE:72:1F:09:BC:8F:82:5B:D3:D8:B2:44:39:AD:F5:D2
Authority key identifier: 86:9A:CD:19:E2:3A:81:66:44:BA:D0:E8:A1:2B:86:E1:28:8A:D3:3C
Certificate issuer: /CN=869acd19e23a816644bad0e8a12b86e1288ad33c
Certificate serial: 019B9177C076804CB1614B60D3FCE97B72E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hprNGeI6gWZEutDooSuG4SiK0zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.mft
Manifest number: 119D
Signing time: Tue 06 Jan 2026 04:01:42 +0000
Manifest this update: Tue 06 Jan 2026 04:01:42 +0000
Manifest next update: Wed 07 Jan 2026 04:01:42 +0000
Files and hashes: 1: hprNGeI6gWZEutDooSuG4SiK0zw.crl (hash: IVTUfhGlulavv8HTwgTb3hd+OMBA626THyKaWeYHnN4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:91:77:c0:76:80:4c:b1:61:4b:60:d3:fc:e9:7b:72:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869acd19e23a816644bad0e8a12b86e1288ad33c
Validity
Not Before: Jan 6 04:01:42 2026 GMT
Not After : Jan 7 04:01:42 2026 GMT
Subject: CN=6b87b9f6fe721f09bc8f825bd3d8b24439adf5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:12:40:fc:25:4f:1d:63:4e:5a:aa:15:af:78:
ed:b9:93:9e:27:8c:12:01:eb:c7:c6:fe:5d:3b:fc:
53:8c:a0:57:3f:56:96:b7:c2:f2:58:68:dd:07:6f:
20:69:15:29:36:af:0e:32:68:1a:1d:4b:a4:17:31:
2d:12:d6:c4:cf:3c:7a:78:5b:bc:04:d1:93:7e:9f:
dd:59:87:ca:7c:66:be:f4:39:3d:34:15:a8:61:10:
a6:fe:9e:7f:77:97:61:00:fd:ac:ea:83:ad:f2:a1:
f6:9d:12:7d:21:19:7d:d6:ec:b5:3d:9e:1d:e3:0c:
b1:d1:71:85:a6:2d:4a:3d:35:15:b1:8c:90:92:3d:
45:03:0d:6e:ce:cb:76:7e:57:8f:e9:b6:09:f8:f6:
d6:86:29:76:f4:41:88:92:d5:99:22:26:51:3d:b8:
fd:c2:cd:33:fb:57:83:0e:2a:ff:93:6a:38:9e:56:
57:46:97:06:c2:57:e2:94:49:4a:48:d3:0e:fc:c8:
f9:94:57:95:d2:59:2f:2f:63:db:a8:b8:21:40:51:
8a:28:3c:60:f3:cb:c2:b6:16:27:ab:f8:fe:df:10:
b3:f3:fb:f5:fc:e5:e8:80:01:41:60:9c:c6:9d:5e:
a1:33:aa:ac:a2:c9:32:a9:b4:1a:72:d0:b3:71:fe:
7c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:87:B9:F6:FE:72:1F:09:BC:8F:82:5B:D3:D8:B2:44:39:AD:F5:D2
X509v3 Authority Key Identifier:
keyid:86:9A:CD:19:E2:3A:81:66:44:BA:D0:E8:A1:2B:86:E1:28:8A:D3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hprNGeI6gWZEutDooSuG4SiK0zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d6:44:a9:3d:f7:4a:5a:06:e8:fb:56:0b:73:8e:58:7a:83:
6a:2a:27:88:0b:d9:85:29:10:b7:0f:86:0e:b2:67:9f:ca:7a:
d7:f3:0d:8e:38:a2:cc:78:3c:b0:08:03:88:0a:12:9a:ae:e1:
5c:51:81:6c:d8:99:f6:b7:5b:bb:14:a6:b1:01:78:01:fa:30:
12:f1:23:b9:1f:01:d6:0f:33:a0:71:88:59:4d:9c:91:6c:3b:
54:e5:6a:5c:a5:eb:a8:19:c6:d5:c2:97:ed:52:f1:06:6a:f2:
5c:26:b3:19:65:e7:82:18:03:41:46:3f:cc:73:bf:d9:d2:f6:
75:94:ac:9c:a4:27:65:61:5c:3f:91:b0:21:0c:f1:50:7c:55:
61:1a:9e:fe:a6:c4:0f:7b:ef:60:0d:50:5a:40:e8:61:c3:5b:
51:f7:e2:8a:77:10:f2:b0:47:df:77:57:2c:99:4a:9c:1d:ea:
ae:c6:3f:76:e3:c2:e7:6c:74:a2:92:5c:b5:f5:8b:bd:31:8f:
ea:d8:53:9c:12:48:56:64:fe:74:65:58:32:d3:b9:4b:46:6d:
a8:6d:b0:8c:f3:55:95:c9:91:71:5c:3a:db:2b:ba:6c:ba:b0:
b8:2b:16:14:8e:ab:e0:ae:a3:95:be:ab:5b:c5:18:1d:0a:27:
cc:39:35:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZuRd8B2gEyxYUtg0/zpe3LjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OWFjZDE5ZTIzYTgxNjY0NGJhZDBlOGExMmI4NmUxMjg4
YWQzM2MwHhcNMjYwMTA2MDQwMTQyWhcNMjYwMTA3MDQwMTQyWjAzMTEwLwYDVQQD
Eyg2Yjg3YjlmNmZlNzIxZjA5YmM4ZjgyNWJkM2Q4YjI0NDM5YWRmNWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxJA/CVPHWNOWqoVr3jtuZOeJ4wS
AevHxv5dO/xTjKBXP1aWt8LyWGjdB28gaRUpNq8OMmgaHUukFzEtEtbEzzx6eFu8
BNGTfp/dWYfKfGa+9Dk9NBWoYRCm/p5/d5dhAP2s6oOt8qH2nRJ9IRl91uy1PZ4d
4wyx0XGFpi1KPTUVsYyQkj1FAw1uzst2fleP6bYJ+PbWhil29EGIktWZIiZRPbj9
ws0z+1eDDir/k2o4nlZXRpcGwlfilElKSNMO/Mj5lFeV0lkvL2PbqLghQFGKKDxg
88vCthYnq/j+3xCz8/v1/OXogAFBYJzGnV6hM6qsoskyqbQactCzcf58BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuHufb+ch8JvI+CW9PYskQ5rfXSMB8GA1UdIwQY
MBaAFIaazRniOoFmRLrQ6KErhuEoitM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHByTkdlSTZnV1pFdXREb29TdUc0U2lLMHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi81OTExZjctMjAzMS00MGJiLWI0NDEt
N2ZjZjAxNWRhMGEwLzEvaHByTkdlSTZnV1pFdXREb29TdUc0U2lLMHp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi81OTExZjctMjAzMS00MGJiLWI0NDEtN2ZjZjAxNWRhMGEw
LzEvaHByTkdlSTZnV1pFdXREb29TdUc0U2lLMHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdZEqT33
SloG6PtWC3OOWHqDaioniAvZhSkQtw+GDrJnn8p61/MNjjiizHg8sAgDiAoSmq7h
XFGBbNiZ9rdbuxSmsQF4AfowEvEjuR8B1g8zoHGIWU2ckWw7VOVqXKXrqBnG1cKX
7VLxBmryXCazGWXnghgDQUY/zHO/2dL2dZSsnKQnZWFcP5GwIQzxUHxVYRqe/qbE
D3vvYA1QWkDoYcNbUffiincQ8rBH33dXLJlKnB3qrsY/duPC52x0opJctfWLvTGP
6thTnBJIVmT+dGVYMtO5S0ZtqG2wjPNVlcmRcVw62yu6bLqwuCsWFI6r4K6jlb6r
W8UYHQonzDk1mg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:31 2026 by rpki-client