Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
File: 3pj4NjKYKX-6uupodyArXEQOWpA.mft (raw, json)
Hash identifier: rAOWB7Mz0rY1ZFiAGC+AKzpqQ8FPpTvzLiw5fziOhws=
Subject key identifier: 62:97:55:88:6F:A6:00:27:A7:5D:C8:35:74:AA:E5:BE:69:C6:63:34
Authority key identifier: DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90
Certificate issuer: /CN=de98f8363298297fbabaea6877202b5c440e5a90
Certificate serial: 019C2818ED67BE8C2287032D8B5F79A20EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
Manifest number: 0E91
Signing time: Wed 04 Feb 2026 10:00:48 +0000
Manifest this update: Wed 04 Feb 2026 10:00:48 +0000
Manifest next update: Thu 05 Feb 2026 10:00:48 +0000
Files and hashes: 1: 3pj4NjKYKX-6uupodyArXEQOWpA.crl (hash: OlxVa9/uXhvHslSwtaTbpKBsa+ARb2zCTZYA0fNPdYM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:28:18:ed:67:be:8c:22:87:03:2d:8b:5f:79:a2:0e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de98f8363298297fbabaea6877202b5c440e5a90
Validity
Not Before: Feb 4 10:00:48 2026 GMT
Not After : Feb 5 10:00:48 2026 GMT
Subject: CN=629755886fa60027a75dc83574aae5be69c66334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ed:13:42:66:38:b4:ef:f3:e8:d8:6b:87:a8:
aa:1e:0b:f5:04:1b:c7:d0:97:d5:cd:bd:34:37:b3:
c9:6b:50:da:a5:c3:97:19:59:be:51:86:7e:a0:f7:
02:bb:55:16:4a:81:2a:56:eb:ba:55:e5:82:37:41:
2a:8a:44:40:1a:a6:16:b0:f2:f5:32:99:d2:6b:ea:
ef:51:ae:2a:0d:8d:ba:a7:4e:74:4f:82:c5:9a:2c:
7c:5c:cc:e6:3a:75:8d:2a:65:84:0f:70:ef:02:bf:
9b:50:c5:05:67:0c:eb:b7:72:eb:56:40:87:e7:cc:
22:e7:5c:88:db:f7:ac:f2:1c:b8:d5:7c:ac:d8:5f:
40:4f:38:89:22:8d:40:a3:3f:81:27:7d:f9:61:c0:
f1:9f:e4:4b:08:43:2e:a7:02:46:b2:e2:f2:81:c2:
67:59:08:c4:d5:6f:14:b8:a4:81:c2:9d:c2:f9:98:
51:57:ed:11:24:f7:a4:9d:0d:d2:2a:9f:09:8f:55:
7f:67:23:ae:1f:34:ad:cc:73:a2:4a:93:41:d8:aa:
95:0f:3a:e8:50:27:c3:52:d0:70:ad:bf:c8:31:c3:
58:df:37:fa:4a:18:1a:bd:d7:dc:77:4b:ba:8c:be:
34:19:77:9b:d8:6f:84:a7:c5:16:87:c6:4e:2a:eb:
80:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:97:55:88:6F:A6:00:27:A7:5D:C8:35:74:AA:E5:BE:69:C6:63:34
X509v3 Authority Key Identifier:
keyid:DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2f:ae:16:7b:7e:18:ed:79:b3:d6:73:c9:cf:14:91:f9:da:
ff:1f:b4:4f:36:f2:f3:ec:19:35:9d:36:f4:4a:64:67:ec:fd:
36:68:8a:49:28:a8:d0:ac:5a:65:9c:3b:82:8c:26:c7:62:e4:
84:3a:c3:15:a8:e8:86:88:de:ba:b4:d3:f0:b1:63:0b:37:b0:
1d:d8:d8:fc:4c:ae:a7:e8:bb:ec:d9:47:d0:91:b0:ef:39:9c:
2a:ec:92:50:37:70:e3:63:7c:5c:c3:19:75:b5:29:25:7f:ba:
ad:4b:1b:29:88:fa:c8:50:2d:c3:0d:10:b0:5d:6d:49:4a:76:
75:97:eb:6c:29:a0:8b:14:11:f3:54:e8:51:14:23:40:12:0e:
d7:7e:7d:66:2b:08:61:44:18:86:51:c6:82:d0:f4:46:f8:65:
e9:6e:7f:c5:5c:33:bc:55:2b:74:e4:ad:0d:1d:bc:5e:69:d7:
1d:e4:49:f3:07:d1:14:92:be:48:67:64:55:de:8b:d0:32:0b:
ae:40:27:2a:a2:d1:a6:94:81:86:86:51:be:bf:80:b3:cd:a7:
43:8a:a4:f5:1c:65:d0:bc:37:b9:78:6a:c4:b6:58:36:dc:fd:
59:57:71:69:59:4b:0b:3f:2d:41:e9:87:e7:58:2b:1d:d3:21:
49:ae:ea:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:27 2026 by rpki-client