Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f08604-9bea-4ad1-bc06-79b6e12ea2c5/1/Mlgl7sDrKb1zCaY73eGrq0ov0SA.mft
File: Mlgl7sDrKb1zCaY73eGrq0ov0SA.mft (raw, json)
Hash identifier: M7vSfYPgZXCUbLCCT7zaRc/bTJgG+cYJAY3K/lgWbYY=
Subject key identifier: 43:5D:F0:2F:F6:78:4B:51:9F:1C:96:13:3C:DA:39:FD:A3:65:84:89
Authority key identifier: 32:58:25:EE:C0:EB:29:BD:73:09:A6:3B:DD:E1:AB:AB:4A:2F:D1:20
Certificate issuer: /CN=325825eec0eb29bd7309a63bdde1abab4a2fd120
Certificate serial: 019C8494C17320BEDEAE70F7B24B53227C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mlgl7sDrKb1zCaY73eGrq0ov0SA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f08604-9bea-4ad1-bc06-79b6e12ea2c5/1/Mlgl7sDrKb1zCaY73eGrq0ov0SA.mft
Manifest number: B3
Signing time: Sun 22 Feb 2026 09:01:07 +0000
Manifest this update: Sun 22 Feb 2026 09:01:07 +0000
Manifest next update: Mon 23 Feb 2026 09:01:07 +0000
Files and hashes: 1: Mlgl7sDrKb1zCaY73eGrq0ov0SA.crl (hash: 6BNgUwJUAwD9a9dvQ1xWg+Ee2ybN7EQY1YnLIMNyqBU=)
2: XyH28G6Udt7TZ3HYC5_W3qdy8DQ.asa (hash: Ss7U/HXiSh2QAURnARyT63xfi6OEExCtvkX7WYbjeQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:84:94:c1:73:20:be:de:ae:70:f7:b2:4b:53:22:7c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325825eec0eb29bd7309a63bdde1abab4a2fd120
Validity
Not Before: Feb 22 09:01:07 2026 GMT
Not After : Feb 23 09:01:07 2026 GMT
Subject: CN=435df02ff6784b519f1c96133cda39fda3658489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:fd:13:be:51:13:74:be:33:fa:6f:1e:98:
32:e8:29:4b:14:a3:6a:f7:d1:54:b1:f1:27:41:c9:
9b:8c:ed:17:e5:cf:46:67:2a:31:d8:08:80:27:9a:
ee:4c:e3:22:c5:4b:38:2d:5a:ee:de:91:d2:b5:57:
d7:15:b8:c7:2c:66:05:81:57:84:a2:c4:fd:86:94:
3d:45:48:40:06:44:5b:a3:e2:ba:19:66:56:5a:d4:
d9:fc:0c:d5:f6:69:eb:1d:64:cf:d1:b4:57:df:ea:
a7:67:e3:0d:af:27:87:5b:89:6f:78:93:e5:fa:17:
55:51:63:5b:ac:68:7a:ac:41:ba:71:ef:d8:c8:c0:
ad:1a:e0:50:62:f0:ac:dd:1c:b8:ca:ba:db:1e:b0:
ad:e2:1d:6b:17:cc:d3:aa:0f:a5:49:9e:d6:62:9d:
df:a1:39:4b:9f:03:df:e9:e4:1b:09:84:c9:44:b9:
e2:6c:13:4e:2f:c8:93:e4:4e:48:cb:45:ba:1c:6f:
19:ee:69:cf:3c:bc:fe:a7:61:ea:d8:bd:29:ad:78:
f2:9a:6f:f0:23:7d:0c:3a:48:a0:a1:4a:14:d5:8d:
88:76:1a:64:ac:8a:38:e6:ed:7a:11:ae:b2:f1:9b:
9c:eb:44:fc:d3:f9:08:56:df:2c:0e:d9:ea:a2:ab:
1a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5D:F0:2F:F6:78:4B:51:9F:1C:96:13:3C:DA:39:FD:A3:65:84:89
X509v3 Authority Key Identifier:
keyid:32:58:25:EE:C0:EB:29:BD:73:09:A6:3B:DD:E1:AB:AB:4A:2F:D1:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mlgl7sDrKb1zCaY73eGrq0ov0SA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f08604-9bea-4ad1-bc06-79b6e12ea2c5/1/Mlgl7sDrKb1zCaY73eGrq0ov0SA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f08604-9bea-4ad1-bc06-79b6e12ea2c5/1/Mlgl7sDrKb1zCaY73eGrq0ov0SA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fd:99:a0:b0:f6:91:f1:53:83:c0:08:37:64:c5:f2:c8:5e:
59:57:34:85:f2:41:7f:40:e7:56:87:b5:6c:8a:52:ec:26:41:
c9:9a:d2:bd:6a:55:60:93:5f:59:1c:85:3f:16:71:24:37:1d:
ee:de:91:e5:7c:05:47:0f:09:f8:9c:01:83:af:bc:37:b5:20:
d4:ab:a1:bd:1e:0b:78:1c:4a:aa:d9:d1:8e:1e:bf:5c:a7:7a:
eb:9f:9f:54:e6:cc:da:2d:90:37:70:c4:17:77:18:6b:78:e7:
25:87:d3:c5:76:51:82:b1:87:ad:89:df:6b:65:8e:da:50:b0:
6d:0a:ba:8b:9f:3d:95:8d:11:48:11:59:94:30:25:ab:e0:f1:
04:8b:b2:02:05:b1:2d:68:2d:a5:e3:5b:57:e1:19:44:06:25:
52:29:1f:21:b7:f4:a9:f8:23:ef:3a:fe:6b:cd:e3:cc:24:06:
77:56:62:60:32:70:62:eb:5a:49:7d:c4:7c:f0:37:e1:70:9a:
d7:c2:74:61:1a:34:f8:3b:01:80:e2:2d:0d:fe:03:17:36:58:
18:78:b3:19:36:2a:60:dd:e7:e1:ee:4b:18:57:60:36:92:e9:
5f:ad:db:bd:c7:28:ac:5e:fe:73:24:59:73:12:a9:ff:65:cc:
25:4e:ab:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 05:35:39 2026 by rpki-client