Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
File: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft (raw, json)
Hash identifier: R0wsFVMGO/VWjZO6lfYYwfPRjaMMkNqygPxhGJy0Tyo=
Subject key identifier: 6D:16:CC:3B:05:F7:21:B2:69:7A:38:DF:83:E6:EB:D0:4C:86:27:2E
Authority key identifier: DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
Certificate issuer: /CN=dd52ad090b54678e0968e69955c25049434d96c8
Certificate serial: 019F236A28478FF82D1C0CEE8C12334D0B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
Manifest number: 0F8E
Signing time: Thu 02 Jul 2026 15:19:47 +0000
Manifest this update: Thu 02 Jul 2026 15:19:47 +0000
Manifest next update: Fri 03 Jul 2026 15:19:47 +0000
Files and hashes: 1: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl (hash: indvJd6DUfd6TMujTXb5SjJ0imWeWjB7rrq20P90jAc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:28:47:8f:f8:2d:1c:0c:ee:8c:12:33:4d:0b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd52ad090b54678e0968e69955c25049434d96c8
Validity
Not Before: Jul 2 15:19:47 2026 GMT
Not After : Jul 3 15:19:47 2026 GMT
Subject: CN=6d16cc3b05f721b2697a38df83e6ebd04c86272e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:14:b8:46:99:d0:04:ab:8e:61:be:eb:35:6b:
e5:b4:52:04:b1:af:c9:ba:6c:36:00:5d:cc:86:1c:
11:3f:76:dc:fe:b1:27:d3:e7:f9:bf:3c:ae:51:46:
02:f1:4d:73:b1:5d:eb:21:c4:f2:ec:fd:91:46:ca:
77:2d:49:35:dc:d5:75:03:82:3c:8c:05:30:5a:69:
de:a8:55:9d:26:f8:c6:24:e0:ff:39:18:f4:82:3f:
7a:6e:5b:7e:dc:02:be:2c:8f:04:58:d5:1d:62:9b:
f9:22:8b:e8:97:0e:fa:ea:26:d5:b5:7b:a3:7a:92:
b8:4d:63:a1:7f:4e:cb:6d:6c:fa:22:bb:42:ed:c9:
70:c6:4a:43:1d:be:e2:aa:46:99:cf:f5:6b:9a:38:
74:29:ef:ae:ed:6e:28:c3:9c:13:1c:2f:ee:a1:93:
72:ec:2d:9c:ef:45:90:85:69:ad:63:1d:ac:a0:ba:
bb:ba:f0:8b:a5:20:e6:9d:0f:e3:9d:88:9e:49:bf:
e2:f2:12:bd:0c:9f:59:72:33:f0:32:f3:b5:6a:e1:
e8:d5:c4:48:bb:b2:56:48:ce:36:0b:92:2a:25:71:
45:4c:9a:ba:42:f7:5c:9c:f1:50:bd:0d:b4:e6:72:
3e:7c:4d:8c:9e:75:bb:a0:41:19:a1:97:cf:bf:87:
08:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:16:CC:3B:05:F7:21:B2:69:7A:38:DF:83:E6:EB:D0:4C:86:27:2E
X509v3 Authority Key Identifier:
keyid:DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4b:87:d6:fb:1f:e9:c7:d3:dd:4e:36:b3:93:bd:0c:a5:b5:
f9:e6:da:fa:fa:f1:4d:e8:87:53:f7:c7:2b:2a:f4:76:37:10:
05:83:27:36:c9:0a:de:57:c2:55:66:94:ee:c7:4b:70:cb:f6:
6a:40:22:59:9e:8e:46:88:bb:22:24:96:e8:67:79:97:72:21:
d3:d9:6d:bb:20:61:b3:bf:eb:77:a8:31:fc:53:f3:7a:85:16:
96:a6:bf:40:5a:99:63:51:b1:97:d7:03:48:0d:40:e3:2f:32:
5b:05:dc:ee:52:3c:cb:c4:35:f6:cd:b3:93:64:48:4f:e1:da:
5e:e3:b4:03:1b:7c:e2:0e:5f:06:68:43:fb:41:aa:9f:4c:89:
cf:71:4a:4f:3d:68:bb:a0:f4:e5:86:8b:d1:a4:f7:74:7b:3e:
f6:82:bf:22:8e:98:1b:c8:a9:ee:88:57:75:ee:bf:75:d1:c3:
fc:2e:3e:a7:40:96:0c:97:b1:3e:68:7d:e8:89:a0:9c:ca:ae:
b5:b7:59:f8:54:08:a8:13:d9:b3:61:36:55:c2:06:53:66:d3:
5b:de:1d:51:e3:40:02:d2:ae:44:33:5b:70:ee:07:5a:6b:2a:
e5:f3:1d:63:2b:28:bd:17:db:6d:ec:32:c6:7a:ac:6b:59:40:
23:31:73:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:37:07 2026 by rpki-client