
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
File: 34-WHG77t_nOdCF7HV27VOmBxvI.mft (raw, json)
Hash identifier: Bp2i0L89cn8BlqHSin0ANZEaMqdf4YKE07nqs8MvVBc=
Subject key identifier: 3B:D6:BF:04:07:6F:29:19:55:4D:01:0B:F5:2A:30:AF:98:1E:4A:0A
Authority key identifier: DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
Certificate issuer: /CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Certificate serial: 019F21D9BE7CCB631235C545083396F8D54E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
Manifest number: 1799
Signing time: Thu 02 Jul 2026 08:02:25 +0000
Manifest this update: Thu 02 Jul 2026 08:02:25 +0000
Manifest next update: Fri 03 Jul 2026 08:02:25 +0000
Files and hashes: 1: 34-WHG77t_nOdCF7HV27VOmBxvI.crl (hash: OyHyZJo1ytMATjVc1CuYO0zO/ib+0v+vWMJIGjFXD80=)
2: CtXB1y_WiGwg9xFRHui6XM2zZos.roa (hash: akg6U1CtXak5LkwHmU54KWXlOWQ+wwDwzm5wZMHKxY4=)
3: qqVPSfbsPEwFQO2Ykr_lE0T_b-0.roa (hash: 0pnyO/lOa7rY/JjcyVln/fFFjvMVoH70v7nIsAxN04M=)
4: tFxjCwXyMaEt_QnMeC7XIYXxC2w.roa (hash: PxrGTWaTcjZcpK9gCVSwzRCuIdE/O6cOmfGjhOCu2XY=)
5: x55nB0-fotgrkV-3iW_nOuucEIE.roa (hash: Cs4j2MGGwvzNstaIOZ9CLuyUqcMrrk2RrbYdYlbSinI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:d9:be:7c:cb:63:12:35:c5:45:08:33:96:f8:d5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Validity
Not Before: Jul 2 08:02:25 2026 GMT
Not After : Jul 3 08:02:25 2026 GMT
Subject: CN=3bd6bf04076f2919554d010bf52a30af981e4a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:54:27:fa:2e:f5:1c:ed:a5:13:44:aa:ce:6d:
68:cc:f3:db:1e:4a:87:11:96:b5:30:3c:93:cb:98:
e5:68:78:df:30:a2:80:26:b2:78:95:ac:5d:b0:d3:
a8:ff:07:88:23:ad:b2:29:af:2e:66:76:7e:b5:81:
ea:22:62:06:cc:f8:42:fb:2e:54:33:62:c8:d6:17:
43:9c:db:f1:07:a4:82:4e:a6:d0:84:e9:ce:d4:51:
c0:bb:95:60:1d:e7:cd:be:d4:36:7a:61:ae:be:6e:
30:f9:53:d4:1e:b4:88:bd:2c:8e:43:9a:ec:76:06:
74:cd:27:96:19:bd:ef:a3:a7:b7:0c:d5:4c:b1:2b:
0e:d1:da:67:ed:f7:fe:08:d2:71:53:23:98:49:65:
a6:c1:3e:c7:60:72:a6:53:72:57:39:e0:68:ae:d0:
39:40:bf:ef:49:3b:f9:99:f6:7f:61:0a:65:f3:14:
3c:ce:86:29:9b:75:c3:5a:a0:87:1b:90:28:13:12:
e1:cf:8a:28:28:bf:cb:56:17:cb:75:9a:18:57:c2:
07:01:69:cd:67:cf:c9:43:6d:04:ce:6f:4e:9f:ee:
80:44:89:52:5d:c0:8e:23:a1:d4:aa:83:da:a7:1c:
3a:05:ae:d9:a7:78:6d:46:23:b9:1f:02:3b:d5:c9:
93:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D6:BF:04:07:6F:29:19:55:4D:01:0B:F5:2A:30:AF:98:1E:4A:0A
X509v3 Authority Key Identifier:
keyid:DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b9:1a:54:30:1e:17:e1:93:19:b5:e3:6d:3c:99:5c:d7:58:
41:58:fe:46:5a:cd:66:3f:c5:33:5d:21:01:97:3f:bb:49:84:
9e:fa:ab:13:ce:ba:e4:dd:aa:92:ae:ff:08:ac:d9:04:1c:f6:
19:9a:32:40:fe:3f:e5:32:3c:ac:89:7f:68:0b:07:66:a2:29:
45:64:6b:86:5b:94:83:3a:98:24:e2:bb:fe:69:e5:ee:a5:bc:
93:86:f2:bf:79:be:f6:75:1a:91:5b:9a:5a:7d:79:aa:cf:41:
b9:a9:68:80:e4:89:ca:f3:fe:25:29:2c:a9:c8:e6:ee:2d:04:
f8:8d:16:f6:2c:5e:9a:64:f7:61:fe:b1:e2:90:7f:8f:fd:43:
d7:84:9a:1e:e3:1a:14:c4:37:4a:22:e5:91:48:d0:8b:62:dc:
05:bd:80:61:08:2b:64:27:d2:a7:ef:ed:3d:96:aa:0c:2c:9a:
4f:65:4e:0d:8b:6b:bc:d4:5d:19:4c:9d:c1:91:d8:1f:41:27:
4d:b2:da:62:7a:44:f6:dc:ff:15:a1:42:bd:b9:c3:36:f2:7a:
4a:31:13:26:cc:60:8b:e5:40:a3:42:7e:36:50:ce:a4:07:f8:
3d:66:dc:fd:3f:3c:4d:e6:7b:09:99:66:e6:ae:9e:55:a7:58:
fb:d1:54:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:29:17 2026 by rpki-client