Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
File: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft (raw, json)
Hash identifier: TVszBAZXXcyxWTUWYtGVK7DZWFUuZpKmXMI18LiIOyU=
Subject key identifier: 3F:22:64:3C:F7:E8:9F:D0:C3:BD:E4:F9:F2:66:70:14:C4:13:AB:7D
Authority key identifier: DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
Certificate issuer: /CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Certificate serial: 019EF86EF249892A9C928E6B700C44086FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
Manifest number: 155B
Signing time: Wed 24 Jun 2026 07:01:20 +0000
Manifest this update: Wed 24 Jun 2026 07:01:20 +0000
Manifest next update: Thu 25 Jun 2026 07:01:20 +0000
Files and hashes: 1: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl (hash: tXP1hUXoxsK65PfYXOfYh78WkEspWbllmI8tPlxPR+M=)
2: DXnEQHiVvNu7Vyoq9JcZ6dLMCdI.roa (hash: 4AlE0r+iRVTgtlkq9V/mm0BrnXYUrFnqbuKHIAvSdgs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:6e:f2:49:89:2a:9c:92:8e:6b:70:0c:44:08:6f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Validity
Not Before: Jun 24 07:01:20 2026 GMT
Not After : Jun 25 07:01:20 2026 GMT
Subject: CN=3f22643cf7e89fd0c3bde4f9f2667014c413ab7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b9:08:43:e9:2f:71:64:b5:de:80:e8:f8:c7:
aa:10:5c:00:c2:65:65:58:5d:bc:4a:c8:b7:65:52:
f5:74:b3:bb:c4:fc:75:45:ba:24:ee:40:2b:df:c7:
63:aa:82:06:ee:93:e6:04:2e:2d:ba:83:9b:7e:3e:
00:ad:de:fe:6e:5d:c7:f1:23:1d:be:1d:d4:d3:3f:
67:3b:e7:31:74:29:eb:f4:19:14:a8:48:84:ba:ed:
91:88:da:85:79:6e:3f:4b:b5:f2:c4:9f:5e:c9:91:
b9:39:22:ba:82:af:5d:56:2e:38:b1:cb:e7:ad:91:
31:18:16:eb:05:5f:7d:14:eb:cc:6c:d1:7b:7e:77:
73:65:bc:28:9e:b7:2e:e1:8b:40:1d:d5:09:91:d5:
40:f5:45:bc:ed:5e:9b:7c:61:34:2c:1f:be:11:08:
85:e3:17:60:6f:8f:b8:ea:76:42:a3:ae:36:89:37:
fd:8e:7b:d0:bb:99:72:2e:d0:02:fb:d4:80:d0:b4:
3f:57:8c:40:36:e2:0d:4f:d3:bb:96:58:22:88:fd:
5c:16:77:0c:d4:2d:a1:9a:b1:f7:07:4c:da:ec:7e:
9c:0b:a8:d1:26:da:3a:0f:9d:0c:63:94:9a:8b:03:
8c:13:61:14:5a:a6:c5:5c:11:91:d9:96:79:63:75:
0d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:22:64:3C:F7:E8:9F:D0:C3:BD:E4:F9:F2:66:70:14:C4:13:AB:7D
X509v3 Authority Key Identifier:
keyid:DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b2:e5:c1:44:03:e5:4c:06:8e:30:f5:67:c5:2d:22:87:48:
9d:9f:ac:02:7d:21:2e:d5:42:04:a2:6e:11:c4:e3:35:85:d0:
2c:34:b6:67:02:6a:71:91:30:a0:05:0b:3e:e3:57:37:2c:ea:
c6:41:7e:9c:4a:73:72:76:b6:b9:00:d3:77:6b:ec:ef:ca:f1:
95:01:1d:9d:37:f6:47:e2:ac:9f:82:49:5c:aa:d0:4c:cd:6d:
3a:50:3a:af:cf:2f:fd:b4:d9:7d:82:b0:28:7b:a2:f6:63:6d:
ea:1f:86:b6:9b:6b:29:41:32:66:2c:06:18:54:1b:61:d4:1f:
e6:89:78:d9:fb:f4:c4:01:3d:a6:46:77:2e:d3:cc:3e:33:32:
c5:fa:b5:6d:df:d1:7d:d8:94:98:62:f9:b7:e6:a9:5b:18:5d:
51:e7:6b:4b:21:fa:7c:db:40:9e:c1:3d:95:f8:ef:99:d1:f4:
be:3e:06:7b:ec:49:63:ac:76:37:6d:69:54:e6:ac:89:f0:da:
ff:4c:77:26:3e:fb:e9:d7:35:48:ce:80:05:60:a1:c5:16:76:
99:8b:84:d7:ca:c1:a6:7d:b6:35:c7:c4:a3:dc:5b:a0:d9:1c:
f3:80:d1:ac:f0:20:f7:1d:9d:69:35:51:8b:48:f5:26:a8:3b:
67:c3:4b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:10 2026 by rpki-client