Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
File: 3gr32Dxe6w1DStdTxqX0dUlpizc.mft (raw, json)
Hash identifier: QkVZ/b32OrbmDH13DznRDCbnE9T2eSACoz5rr+MKCe4=
Subject key identifier: 1B:C1:40:05:B4:6A:FB:FE:04:0C:84:84:70:DF:93:2D:AC:E1:AD:64
Authority key identifier: DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37
Certificate issuer: /CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37
Certificate serial: 019C0254F40054649613AEB88928C4821A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
Manifest number: 1781
Signing time: Wed 28 Jan 2026 02:00:47 +0000
Manifest this update: Wed 28 Jan 2026 02:00:47 +0000
Manifest next update: Thu 29 Jan 2026 02:00:47 +0000
Files and hashes: 1: 3gr32Dxe6w1DStdTxqX0dUlpizc.crl (hash: OIhUY00m3VizNVBRm/xtNhMHgbKjiijblfxTF4fp5iU=)
2: WEFbXTk7yeRkC088JT7a_ioRbi0.roa (hash: 3qKJYS5NzbZWhGkSEbXPMuOX8xOy4zfcmmxRc/G+Gk4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:02:54:f4:00:54:64:96:13:ae:b8:89:28:c4:82:1a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37
Validity
Not Before: Jan 28 02:00:47 2026 GMT
Not After : Jan 29 02:00:47 2026 GMT
Subject: CN=1bc14005b46afbfe040c848470df932dace1ad64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3e:2e:9d:bf:28:67:29:f1:8c:04:b1:9a:e3:
27:88:88:31:53:4a:73:ce:98:56:a0:7f:58:c7:c4:
a9:79:d1:eb:43:5b:87:40:9c:d4:3c:d6:4e:09:48:
76:65:d1:f0:b9:58:61:1e:22:e5:91:03:68:37:3a:
ce:6c:df:ed:f1:36:e7:95:9e:24:e0:81:24:7f:5d:
4e:85:98:5d:f8:be:cc:34:4a:91:ae:34:b3:0c:d8:
cd:8c:1c:4e:a7:57:c3:b5:b5:d4:60:42:5d:10:e8:
db:62:fa:c6:39:5b:82:e6:f7:e6:39:fc:af:3a:c3:
7f:2e:91:80:91:83:7e:96:2c:60:ea:49:e7:c4:90:
93:41:42:82:13:d7:df:9f:a3:c0:8a:26:1c:34:16:
62:30:a1:81:63:41:a7:87:fe:06:32:bd:ec:f4:fd:
1b:4b:3c:07:f9:32:01:d3:3b:7c:a8:64:c4:31:89:
e8:77:2a:e5:c2:82:52:a3:50:cc:49:49:3f:d6:76:
fb:ac:3a:ef:cc:a0:55:da:e8:1d:d6:09:71:f2:28:
3c:09:37:c4:5c:f8:63:83:07:17:ac:1f:3e:87:68:
60:69:72:0e:04:ab:06:42:9a:80:3f:3d:6f:82:b7:
27:ba:3d:c2:f5:f0:17:4c:f2:9a:62:02:42:8a:73:
69:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C1:40:05:B4:6A:FB:FE:04:0C:84:84:70:DF:93:2D:AC:E1:AD:64
X509v3 Authority Key Identifier:
keyid:DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:2c:d5:1b:85:a7:49:1e:4d:a4:14:f7:dd:51:b3:88:2f:2b:
fe:66:b2:b6:a8:6b:dc:01:e4:57:f5:d3:ef:b5:74:bd:0a:db:
b8:16:d8:ed:c9:e3:b5:00:6d:fd:c7:a7:cc:ba:a9:f9:7a:96:
ae:04:4e:6a:ae:0f:d2:0b:c2:84:a2:05:71:79:9d:0d:75:73:
17:9f:2e:dd:d0:c6:e4:38:a1:ed:d6:a8:e8:80:83:bc:dd:7c:
ae:e8:40:d1:ea:3c:bd:39:a3:b2:c4:de:d0:2e:c1:9c:54:c8:
7c:08:29:c3:a2:5b:9f:54:1e:2d:8e:f8:cd:dc:ee:cf:5a:b3:
7f:30:ce:96:a3:04:91:49:f4:d6:2a:82:b3:f9:a7:f7:ef:48:
2b:e6:c4:c5:93:5a:ee:8b:66:24:2b:39:98:4a:2a:e0:5f:1e:
b7:c2:fa:74:27:e2:6f:11:86:88:91:e6:54:7b:20:36:48:0f:
f9:0d:d0:0f:f6:8b:85:40:98:a5:f8:f0:01:86:49:cc:9c:1a:
7e:eb:fc:15:48:7b:b6:2e:f4:00:8b:ab:67:4f:b8:e0:e8:56:
6a:eb:eb:f7:8f:08:0e:8a:4f:34:bb:b6:ed:da:80:76:42:35:
fc:b8:4e:94:78:90:87:a8:42:28:1b:98:8b:9d:67:1b:c7:31:
3e:9c:1d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:50 2026 by rpki-client