Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
File: f3c03-oSBldBLqhn3bx7hNEyv3g.mft (raw, json)
Hash identifier: LQeMDBd5c6Gl+qz7KEdR7JKw6Bxap5rIyxG+Kxd3tzI=
Subject key identifier: 39:C8:9F:AA:4A:88:18:3B:82:45:C5:B9:6D:2C:B9:DA:9D:06:5E:34
Authority key identifier: 7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78
Certificate issuer: /CN=7f7734dfea120657412ea867ddbc7b84d132bf78
Certificate serial: 019D1FB857C4BA3D6BC8A0B0B9C1E7888BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
Manifest number: 1132
Signing time: Tue 24 Mar 2026 12:01:07 +0000
Manifest this update: Tue 24 Mar 2026 12:01:07 +0000
Manifest next update: Wed 25 Mar 2026 12:01:07 +0000
Files and hashes: 1: f3c03-oSBldBLqhn3bx7hNEyv3g.crl (hash: WReHY5rh2ypHhOiOt5a7ho7lL5nbY5nDpcU0Ha0Y1qE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:b8:57:c4:ba:3d:6b:c8:a0:b0:b9:c1:e7:88:8b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7734dfea120657412ea867ddbc7b84d132bf78
Validity
Not Before: Mar 24 12:01:07 2026 GMT
Not After : Mar 25 12:01:07 2026 GMT
Subject: CN=39c89faa4a88183b8245c5b96d2cb9da9d065e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a6:32:e8:52:12:26:59:65:62:85:ec:7d:58:
3b:dd:fa:a4:5f:80:9c:f2:ae:4f:64:57:fe:d0:fc:
3c:dd:c7:8a:38:49:69:ca:5a:72:50:05:ce:1e:2c:
ce:6a:26:31:03:94:3d:e0:ee:20:f2:7a:e5:05:81:
32:51:c0:b5:8b:84:44:5f:30:8a:98:a3:70:57:74:
de:34:87:08:59:e4:af:58:9d:39:98:bd:18:32:53:
39:72:7f:7b:d9:c5:7f:c5:47:06:ab:77:95:ae:e3:
96:05:3a:79:c3:4e:71:7e:b5:9f:45:39:b8:35:f4:
bf:49:e4:21:46:3c:5c:79:a9:e9:a8:97:03:af:fc:
1d:92:78:ff:8c:42:b1:c4:74:41:19:2b:6b:58:e8:
d5:39:62:a7:aa:55:dd:bb:c2:62:6d:f8:5d:d8:29:
82:0a:75:32:38:f1:61:c8:74:c7:76:9a:b9:69:8e:
93:4f:0f:75:42:93:b0:75:ed:94:dd:d0:85:91:25:
4c:6b:1f:c1:0a:4a:8f:8a:f3:d8:4b:26:4e:bc:9f:
65:e9:d4:80:15:7c:1f:2f:d0:46:f2:5b:ff:0b:86:
ed:5c:ed:56:a3:95:aa:3e:45:40:c6:6d:a4:74:03:
81:84:eb:f9:72:72:e5:06:ce:7b:50:45:83:a1:69:
72:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C8:9F:AA:4A:88:18:3B:82:45:C5:B9:6D:2C:B9:DA:9D:06:5E:34
X509v3 Authority Key Identifier:
keyid:7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:04:41:36:ed:7f:78:28:cd:69:1f:c9:95:1e:f3:6b:a1:df:
f8:93:68:ea:bb:f9:b8:17:02:62:e8:aa:c5:4e:f9:a3:72:17:
bf:0d:78:ca:b1:72:9a:32:7a:2d:48:66:25:76:31:16:6e:3b:
fc:a7:5d:fa:6d:c7:51:5e:c2:34:01:6d:aa:10:35:e0:f5:db:
20:3a:ff:05:06:3b:7f:4e:f9:59:86:ce:01:ff:d3:f7:ed:85:
34:55:87:09:6a:42:c6:c3:04:c8:53:29:09:aa:af:47:44:ef:
d7:00:fa:3e:e6:d4:a0:de:76:a2:64:ae:ba:7d:19:1a:1f:a2:
9a:0f:2c:35:d0:2c:bf:be:ce:9f:8d:b1:39:de:23:de:9c:53:
93:41:c3:d7:e1:84:2c:96:a2:db:d2:01:a2:25:84:2e:75:d5:
85:40:34:13:29:3a:7a:6a:49:f3:2e:72:95:16:cc:5e:a3:3c:
27:8f:eb:29:ce:7c:c9:3e:9c:21:af:eb:bb:c4:b7:06:29:14:
77:3e:f0:07:ee:65:b9:9c:66:42:e6:e4:0e:4e:8e:e2:97:84:
3e:ad:16:13:f5:1a:06:17:00:e4:f5:13:0e:48:72:80:c7:2e:
cb:d6:f4:f3:b2:5d:32:4d:7b:8b:42:ed:11:20:17:13:d8:83:
23:e8:cf:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:20:24 2026 by rpki-client