Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft
File: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft (raw, json)
Hash identifier: KATB4cIcXEGVqJn1KG7Ehiyf0CGyUMo0W6J6ig5TLu0=
Subject key identifier: F9:DC:FB:91:71:24:28:23:BC:7F:96:BB:53:C0:58:C8:74:36:E1:A6
Authority key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78
Certificate issuer: /CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578
Certificate serial: 2BE8C3C4FF2AD7681796BF77DD5FE0E6848065AC
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft
Manifest number: 02EE
Signing time: Thu 26 Feb 2026 18:47:28 +0000
Manifest this update: Thu 26 Feb 2026 18:42:26 +0000
Manifest next update: Fri 27 Feb 2026 18:52:26 +0000
Files and hashes: 1: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl (hash: Z9zpYKJJTQ9FRnYDAnokdhQmPAGIUVoa3jHwt0PFaoE=)
2: 326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa (hash: fW3/1bM6uuAVh4/BqcyWFGfZeggD1zO77SW4GWfaw4U=)
3: 326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa (hash: Kgbp0+Zk4p3tpOkyAtCJ3HEWdnZBbzm3NgMcGrByxQs=)
4: 326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa (hash: scCBjh8HfhV3GwKDOrHZF1YXj718at6+uNm0y/KBmOw=)
5: 326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa (hash: b4lO7qQITmIuTe+1DZpcfLD2H0yGfI8Xz4qwvBeBNzo=)
6: 326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa (hash: pRpvcvkpUIjn6KDjm+Ywf0niLgvvVoNWrBKMV64s3Gs=)
7: 326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa (hash: onhCLB3gV3HdQhsHYazqCSyNdZ/2h865cbuFqj2YlvA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:e8:c3:c4:ff:2a:d7:68:17:96:bf:77:dd:5f:e0:e6:84:80:65:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578
Validity
Not Before: Feb 26 18:42:26 2026 GMT
Not After : Feb 27 18:52:26 2026 GMT
Subject: CN=F9DCFB9171242823BC7F96BB53C058C87436E1A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:50:c7:e6:5d:ef:54:06:0f:e5:84:64:c6:
65:cb:7e:ce:60:3d:d0:79:26:51:95:0a:12:00:2d:
66:56:52:79:27:cf:e3:56:8d:d5:d8:b2:87:d8:b4:
4b:6a:a9:d1:1a:62:72:b0:44:da:09:3f:f8:29:b5:
21:29:d0:6b:40:07:a4:8b:d7:46:70:b4:81:a9:7d:
60:56:b3:84:f8:97:e2:66:11:f8:55:a6:fe:a3:cd:
95:e4:b0:4e:f6:bc:62:d4:ea:bc:a9:10:5a:2c:63:
26:21:57:3d:7c:fc:fe:ea:4e:2d:6a:b7:ea:23:15:
13:ed:1c:97:2a:a2:4e:71:3d:ef:27:df:07:32:99:
b4:b0:e8:d3:1c:b5:1b:60:cd:66:3b:4b:32:47:ae:
ba:81:c3:0e:c7:e4:c2:f6:1a:8d:72:4d:6c:8a:f1:
e3:ec:c1:a7:ff:fe:5b:12:83:bc:21:63:2a:26:32:
31:cc:a6:0d:91:c2:e9:cf:b2:4e:d8:38:de:aa:5b:
1e:bb:c8:14:69:79:c0:50:5b:a4:83:cb:70:ec:df:
19:2b:27:46:21:e1:5c:7d:86:de:21:1c:90:94:3a:
02:c2:4e:4d:1d:27:02:02:fd:b7:b7:1c:4d:6f:05:
bd:bb:98:a0:2a:d3:34:0f:80:c4:8a:1f:50:8b:09:
31:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DC:FB:91:71:24:28:23:BC:7F:96:BB:53:C0:58:C8:74:36:E1:A6
X509v3 Authority Key Identifier:
keyid:3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:0a:46:32:88:26:29:ce:f4:e1:17:23:50:f0:c0:09:32:8c:
12:12:b2:5b:28:48:0c:40:56:43:49:7e:36:9c:b9:5a:83:f7:
4a:6e:cf:91:45:ee:cc:62:c2:0c:ca:a6:15:5d:e3:2d:34:ab:
6f:2f:18:5c:36:f6:da:a1:c8:b4:70:b2:42:7d:66:82:97:dd:
de:dd:4f:57:38:46:db:eb:1a:7a:72:cd:17:2e:fb:5c:9e:77:
a3:cb:c7:48:1b:c8:3f:b3:c8:c3:67:ab:84:ed:c9:71:fe:f1:
99:39:9f:b3:ff:f3:25:09:57:8a:27:b4:31:cf:87:02:1c:d9:
1e:16:2e:f2:1e:80:a2:7e:8b:89:ce:8b:03:41:2a:19:ce:ee:
e2:0f:e2:e3:0b:a7:8c:0d:3d:d7:c2:56:d6:e7:39:b2:89:49:
81:00:05:74:aa:81:53:27:e2:5d:9f:3a:74:f0:fd:5a:47:45:
1f:69:21:a2:af:f3:5a:8e:52:1b:9e:76:59:78:f0:22:eb:1f:
01:e6:ae:18:f1:da:83:60:a7:d9:e9:12:dc:71:f8:c6:0a:d9:
de:9d:6b:ce:d1:3d:93:12:e4:a4:20:7c:9e:fb:02:3e:bd:55:
37:01:b7:81:d4:0f:5e:0c:66:64:11:f4:c3:c8:bf:cf:1d:27:
34:c4:01:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:48:19 2026 by rpki-client