Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft
File: B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft (raw, json)
Hash identifier: +K8mkAEcbEB3F+br584bvLeGhPJKhfdIB2QY/XwOFeo=
Subject key identifier: DE:67:6D:65:69:D4:90:B6:90:27:19:D2:BD:71:2A:86:41:28:41:08
Authority key identifier: B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2
Certificate issuer: /CN=B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2
Certificate serial: 1AE62C07DB5D67699D922755B9FAFB5C6727DAEF
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft
Manifest number: 0122
Signing time: Sat 21 Feb 2026 22:44:17 +0000
Manifest this update: Sat 21 Feb 2026 22:39:17 +0000
Manifest next update: Sun 22 Feb 2026 22:50:17 +0000
Files and hashes: 1: 326130613a363034343a623334333a3a2f34382d3438203d3e20323039373335.roa (hash: gl3XcUXLDzu/fH6TlbsYQk5DZAQEnfCBBv+yPT42ay4=)
2: 326130613a363034343a623363303a3a2f34342d3434203d3e203434373333.roa (hash: rJLCwnl4uhsE/sIS8YisrOAIem98x56OxfgeBDZO+zk=)
3: B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl (hash: YbM35+QNhXF42Xz7b/Ort2s/xJGoU/f7MnIquYXaAz4=)
4: 326130613a363034343a623330303a3a2f34322d3432203d3e20323134383039.roa (hash: rL0HqOB+MnXMFAFPM77NjHuvY8wsbwqcrhR4UPqYqsc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:e6:2c:07:db:5d:67:69:9d:92:27:55:b9:fa:fb:5c:67:27:da:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2
Validity
Not Before: Feb 21 22:39:17 2026 GMT
Not After : Feb 22 22:50:17 2026 GMT
Subject: CN=DE676D6569D490B6902719D2BD712A8641284108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b9:a4:ea:99:71:ce:c9:83:b7:0b:54:35:1a:
87:c7:11:e1:8b:12:ee:41:99:3b:c3:6d:42:9a:ca:
5f:c7:2e:24:1a:6a:47:15:d5:a4:ce:4e:e3:f1:80:
35:65:17:19:42:4b:b8:02:5b:95:cd:85:ec:10:8c:
87:94:ff:9f:3a:07:77:33:d5:31:62:c7:05:ce:b7:
d4:2a:42:a1:01:5b:4e:70:28:67:be:06:b1:53:29:
f6:2b:a3:23:d3:76:3c:b3:3e:44:1c:4f:46:64:0e:
7e:bc:34:a3:31:b2:79:0b:60:04:72:ce:93:13:d9:
83:2e:a2:8c:5a:15:f5:ee:d0:97:20:ae:10:af:d6:
cd:42:32:f3:0b:a5:f7:f9:89:43:a6:c9:52:90:1c:
55:55:e9:7d:d0:6a:6a:19:ee:1c:f6:b8:e4:de:23:
8c:6a:b7:1f:f9:0e:a5:5b:ec:9c:18:b1:ec:15:65:
62:04:c6:19:76:15:d9:f6:3a:0c:8e:1a:13:85:8b:
aa:3d:50:8e:79:e3:48:36:d0:8d:e3:32:12:66:02:
cd:89:1c:10:03:95:14:7d:46:84:a5:a3:7d:2b:71:
f3:c2:d2:96:e9:31:88:c9:6c:ce:ee:52:9c:b4:d0:
e3:e5:41:65:02:67:2d:0d:75:f8:49:83:d3:b7:00:
eb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:67:6D:65:69:D4:90:B6:90:27:19:D2:BD:71:2A:86:41:28:41:08
X509v3 Authority Key Identifier:
keyid:B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:10:f4:8d:a0:43:f6:44:d0:e9:39:fe:0a:49:9f:d6:3b:d5:
dd:6c:8d:7c:c9:d9:f6:c0:4a:eb:47:81:49:38:02:6e:c5:74:
b1:4d:2e:60:6f:83:ca:ee:d9:aa:80:59:0c:a1:03:d3:c0:b2:
f5:c8:48:f8:19:74:6a:ec:c8:99:7e:24:8c:d4:c2:cb:f1:59:
e9:97:ab:cf:4a:f7:ff:f8:42:4e:73:ae:22:a4:ec:e4:0b:53:
1e:fa:5b:82:5e:56:1a:8b:ef:02:32:e5:b0:18:d2:07:db:b4:
f6:bd:62:f1:f8:90:3b:4a:52:79:94:9f:1f:67:cf:c1:00:ed:
a8:e9:61:ba:4f:be:20:2a:7c:6d:82:18:5b:f1:2a:fb:4b:44:
11:da:f9:9a:9d:5e:ac:9f:c1:23:ef:04:fe:28:fe:dd:47:34:
99:b7:c4:21:45:02:20:c6:10:5c:d2:59:c8:fa:83:e3:ac:88:
b8:66:0a:50:de:9b:31:b5:25:7d:22:54:8e:71:af:1d:a3:1a:
eb:d2:e8:1e:f7:3a:04:3e:90:8e:c8:5f:f9:e5:3e:5b:ab:30:
28:d0:b2:97:c5:aa:5e:4c:47:31:30:6a:8b:c8:0d:99:e1:5b:
6c:1f:28:23:b1:f3:75:0a:d1:19:10:3f:61:fd:48:6b:5c:0a:
e9:1d:ac:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 13:31:44 2026 by rpki-client