Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
File: 3tRskpaCjJwCVTCqaEFgmt8FaaA.mft (raw, json)
Hash identifier: hkwUNwrHx6zPFw6R7T/CORSnP8zaPDk/5PQRIJEPCMQ=
Subject key identifier: D9:7A:7B:26:52:9E:A4:2E:99:43:14:16:1D:BB:F7:D7:F1:64:74:64
Authority key identifier: DE:D4:6C:92:96:82:8C:9C:02:55:30:AA:68:41:60:9A:DF:05:69:A0
Certificate issuer: /CN=ded46c9296828c9c025530aa6841609adf0569a0
Certificate serial: 019F22100BB411032CA29EFB83F9F0B283DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
Manifest number: 06A4
Signing time: Thu 02 Jul 2026 09:01:44 +0000
Manifest this update: Thu 02 Jul 2026 09:01:44 +0000
Manifest next update: Fri 03 Jul 2026 09:01:44 +0000
Files and hashes: 1: 3tRskpaCjJwCVTCqaEFgmt8FaaA.crl (hash: vEkd9Lw9MFw3S93ogANd2cTFJ0pvN/bhhyq9ATZWFLo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:10:0b:b4:11:03:2c:a2:9e:fb:83:f9:f0:b2:83:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded46c9296828c9c025530aa6841609adf0569a0
Validity
Not Before: Jul 2 09:01:44 2026 GMT
Not After : Jul 3 09:01:44 2026 GMT
Subject: CN=d97a7b26529ea42e994314161dbbf7d7f1647464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9c:79:cd:e6:27:ba:ab:01:be:5e:dc:c1:c5:
1a:b4:ee:bf:26:69:0a:57:7d:26:ab:25:1c:b0:4e:
3a:0f:16:23:31:7d:7d:f3:8f:a5:e4:15:5f:82:7c:
f3:e6:c7:6f:ec:63:34:88:14:9d:da:c7:85:28:82:
cf:c4:be:a2:6f:37:31:16:e8:bf:92:a4:5a:c7:0d:
cc:e7:b3:65:b4:3b:bb:68:a4:8c:93:33:0a:16:b5:
66:3f:41:dc:f7:14:a4:e7:ec:30:67:fc:bf:69:6c:
d6:f4:48:0b:ad:68:b7:4b:4b:5a:fb:34:f4:1e:6a:
8a:3a:0b:00:f0:56:b9:cf:ab:d3:95:d3:89:9e:e8:
54:2e:61:6d:7a:5f:e0:0e:c0:f1:c6:e2:db:fc:ec:
a8:ff:79:6a:3e:7b:2a:82:ea:48:99:02:36:fb:dc:
3e:f0:b0:d6:e2:e4:28:48:ac:fe:f8:11:25:9a:fe:
ce:0e:ca:7b:e2:b1:26:85:a2:0c:f4:bf:a1:83:ce:
40:e6:61:7a:4f:da:47:b0:a1:36:54:96:ef:9a:f8:
7c:53:8c:4f:2d:f4:9d:d0:0a:b9:5d:eb:5a:57:d1:
17:51:ea:dd:f8:5e:d2:36:ca:8b:bf:bb:64:ad:3c:
93:7d:80:b5:ba:b9:b9:30:a3:9d:95:30:5f:dc:1d:
d5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7A:7B:26:52:9E:A4:2E:99:43:14:16:1D:BB:F7:D7:F1:64:74:64
X509v3 Authority Key Identifier:
keyid:DE:D4:6C:92:96:82:8C:9C:02:55:30:AA:68:41:60:9A:DF:05:69:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:93:70:f5:2a:3d:b2:6c:2b:0f:47:c4:18:ba:54:33:3c:7d:
4e:32:6e:0f:af:31:6b:85:2c:cf:5a:eb:ba:ae:6d:10:65:ee:
70:00:a6:6f:22:09:84:e1:b3:e9:b7:45:3d:26:c6:22:ee:b7:
d1:a8:7c:af:1d:4c:af:d8:20:98:15:75:4d:74:e2:39:62:22:
5c:bc:4a:74:3a:87:b5:0d:36:94:f8:fe:d6:b9:fb:fd:b2:f1:
e1:c7:51:21:a6:95:d1:ae:4e:97:71:6e:7b:e8:5a:81:34:cb:
d8:e8:9f:40:f5:81:75:a6:4b:44:7f:44:d2:63:78:cb:53:f5:
c8:12:58:e5:df:06:75:03:4c:79:f5:fb:b4:3f:6f:df:df:5b:
66:05:c8:ac:76:dd:18:fc:3c:8e:8b:37:8c:a4:b7:59:e1:07:
9f:00:62:2b:37:cd:57:89:11:3b:f8:7a:60:e2:4f:bc:c5:dc:
3b:fb:31:11:65:27:51:95:8d:70:12:63:3d:d7:d3:8a:66:11:
02:b2:6e:9e:c6:53:13:b0:c8:17:29:e6:9b:a8:e1:82:80:72:
1d:e0:10:51:0a:4b:9c:5f:be:85:82:cb:56:6b:1f:b1:a9:45:
28:7d:df:d9:89:b7:ea:e8:f4:09:89:f5:3b:c2:bf:11:89:10:
5f:56:57:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:42:02 2026 by rpki-client