Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
File: 03o_Gc-XFmpEQiB-Em8qA7bL65g.mft (raw, json)
Hash identifier: /O3KUcKrSoHslPODBBpyokC662WigX07OeJMn3tde7I=
Subject key identifier: 18:73:2C:55:86:04:D3:C0:80:67:9F:DC:93:15:1D:61:32:AE:F9:A5
Authority key identifier: D3:7A:3F:19:CF:97:16:6A:44:42:20:7E:12:6F:2A:03:B6:CB:EB:98
Certificate issuer: /CN=d37a3f19cf97166a4442207e126f2a03b6cbeb98
Certificate serial: 019C6BB0C83873F5FF2BE68ED9399A0121D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03o_Gc-XFmpEQiB-Em8qA7bL65g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
Manifest number: 1822
Signing time: Tue 17 Feb 2026 13:01:13 +0000
Manifest this update: Tue 17 Feb 2026 13:01:13 +0000
Manifest next update: Wed 18 Feb 2026 13:01:13 +0000
Files and hashes: 1: 03o_Gc-XFmpEQiB-Em8qA7bL65g.crl (hash: o2nosJG67dbR4EZvVXWyUV4eCsKVXsq+7PMKHYXG+nE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6b:b0:c8:38:73:f5:ff:2b:e6:8e:d9:39:9a:01:21:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d37a3f19cf97166a4442207e126f2a03b6cbeb98
Validity
Not Before: Feb 17 13:01:13 2026 GMT
Not After : Feb 18 13:01:13 2026 GMT
Subject: CN=18732c558604d3c080679fdc93151d6132aef9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e3:73:74:b2:bc:a2:77:8c:13:6b:ab:11:da:
12:7d:51:32:c9:fa:c8:ba:5d:4a:a2:ca:25:fe:12:
62:b6:1a:e5:2d:84:d1:19:ba:43:52:4f:55:a4:eb:
14:7b:bb:ab:d9:56:44:5c:0a:1f:c2:9f:0a:9e:d3:
56:c2:bc:a9:3d:72:6b:35:ac:99:08:95:fc:f1:12:
77:f7:c7:bb:01:f5:e6:be:32:51:e0:74:25:ac:db:
55:da:37:dc:87:ca:e7:80:17:1b:ea:15:21:bb:ae:
27:46:89:e4:db:0b:9c:f7:d0:38:68:55:5a:3a:89:
e4:9d:e3:eb:57:11:1e:33:c6:d1:f8:30:d6:55:e6:
14:4c:3f:76:d6:ad:00:47:a5:15:0a:49:64:55:7e:
26:cd:0f:4b:94:50:51:92:e8:07:ee:d6:0c:f0:1d:
0d:54:05:e7:d6:94:71:36:91:64:10:6a:59:ce:52:
a1:6b:b6:9a:f9:ae:24:9e:42:b2:26:a1:a5:02:6d:
ef:61:57:3a:57:01:6d:71:08:30:ca:d6:ac:4c:53:
b6:89:02:1c:0f:ad:88:d9:54:58:74:35:e2:de:09:
a9:b6:af:94:ba:4f:d3:96:67:b4:27:a6:cd:47:ad:
37:7b:53:48:99:65:95:29:17:89:2e:38:99:65:03:
b7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:73:2C:55:86:04:D3:C0:80:67:9F:DC:93:15:1D:61:32:AE:F9:A5
X509v3 Authority Key Identifier:
keyid:D3:7A:3F:19:CF:97:16:6A:44:42:20:7E:12:6F:2A:03:B6:CB:EB:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03o_Gc-XFmpEQiB-Em8qA7bL65g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5e:52:94:81:7a:31:34:4c:21:0d:aa:cf:15:c6:b8:22:b1:
3b:f3:a1:15:27:00:0e:90:1d:bc:8c:a8:c2:58:4d:0c:d3:90:
7a:ab:48:b1:4b:aa:14:82:44:62:19:f4:a4:79:90:c4:68:85:
66:d6:75:f4:f0:9f:6a:fe:cd:22:da:c9:eb:e3:96:f4:cb:43:
c1:51:5e:bf:b5:72:4c:58:af:d1:61:a3:6e:2c:a1:50:47:0b:
8d:06:96:c1:c8:a6:d4:aa:82:43:dd:32:fe:31:0b:f7:4a:14:
b9:c2:61:28:4d:7c:2a:97:5e:6e:dd:5e:2a:6a:7e:03:6d:2f:
9d:94:f6:33:9d:b3:fb:d3:ef:6b:ce:f1:fe:c1:f1:a0:0d:74:
42:2d:3a:02:be:b7:21:a2:22:74:3f:67:e6:a3:c1:7c:e2:4c:
79:8e:2e:8f:e4:de:96:ed:cc:b1:cc:f3:9f:d6:f6:2d:76:25:
aa:b3:ac:23:5b:5c:a4:09:18:39:03:ed:f1:e2:ca:c3:e3:db:
a1:0a:ca:84:da:fd:72:77:61:68:7b:0d:f5:90:13:6f:3f:77:
88:aa:6a:56:6a:7e:ec:53:19:16:62:41:c7:9e:44:30:ef:1b:
ae:5a:44:4c:10:cc:14:f3:eb:36:54:cd:ae:bf:1a:95:2a:89:
19:ca:b0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:06:37 2026 by rpki-client