Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
File: 1-3R7GNuDDz6-M4b8n8jaldkyetg.mft (raw, json)
Hash identifier: BDN1y7qqEJWucOlIzrMU9eCi71wt46SDvAsmfH4hIaY=
Subject key identifier: 63:22:EB:71:CC:57:58:B6:71:F9:8B:11:63:DD:7F:28:F8:94:71:C8
Authority key identifier: FB:74:7B:18:DB:83:0F:3E:BE:33:86:FC:9F:C8:DA:95:D9:32:7A:D8
Certificate issuer: /CN=fb747b18db830f3ebe3386fc9fc8da95d9327ad8
Certificate serial: 019C53DF078FD0B59AE9B8D9807323504AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
Manifest number: 0429
Signing time: Thu 12 Feb 2026 22:00:51 +0000
Manifest this update: Thu 12 Feb 2026 22:00:51 +0000
Manifest next update: Fri 13 Feb 2026 22:00:51 +0000
Files and hashes: 1: 1-3R7GNuDDz6-M4b8n8jaldkyetg.crl (hash: D61Ze++d+jWyqXSMphYwf+C8HZxAvtpF1KdTky/R/Go=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:53:df:07:8f:d0:b5:9a:e9:b8:d9:80:73:23:50:4a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb747b18db830f3ebe3386fc9fc8da95d9327ad8
Validity
Not Before: Feb 12 22:00:51 2026 GMT
Not After : Feb 13 22:00:51 2026 GMT
Subject: CN=6322eb71cc5758b671f98b1163dd7f28f89471c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6f:f0:13:b7:04:a5:c3:09:4d:d3:74:28:2d:
23:0f:b0:9b:f4:d8:3a:ad:e9:56:63:73:4d:0e:82:
b2:bf:3f:bd:1f:97:aa:6e:8f:b6:44:04:ed:05:5f:
0c:c2:d2:d0:2b:b9:04:43:bc:62:26:9e:22:77:f2:
cd:5f:e3:75:80:a2:c4:44:74:ec:eb:2e:e9:c7:4f:
92:69:8d:fe:0f:15:d8:95:27:a8:6d:62:22:e1:8c:
8c:68:3a:85:fb:e4:0a:56:a4:4a:81:21:f9:67:d3:
7f:dc:b2:27:33:62:f2:fe:c6:57:b0:52:45:f9:c5:
f9:51:31:42:d9:20:2e:58:00:49:10:47:91:ea:bc:
b6:c1:70:ed:a7:63:07:ce:44:1b:69:dc:4e:2e:61:
53:07:60:c5:0d:34:56:7c:4b:fe:71:7f:a5:1f:40:
33:72:32:d4:d4:84:5b:d4:3d:14:1a:30:ab:42:9f:
4b:6d:d3:3b:1b:dd:3e:07:b7:e2:7f:82:37:ea:61:
75:09:19:00:23:28:3d:2d:05:13:a2:8c:da:6d:f9:
28:3c:c0:39:0f:84:9e:e7:35:e2:71:ba:84:b7:01:
91:b7:21:68:58:e8:39:2c:3a:4f:b9:cc:f4:c2:65:
5d:3d:56:82:b1:05:29:34:12:a3:0a:39:6d:bb:9f:
33:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:22:EB:71:CC:57:58:B6:71:F9:8B:11:63:DD:7F:28:F8:94:71:C8
X509v3 Authority Key Identifier:
keyid:FB:74:7B:18:DB:83:0F:3E:BE:33:86:FC:9F:C8:DA:95:D9:32:7A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c3:7e:ca:7a:5f:cc:67:98:e2:5e:ed:98:46:f4:d2:5c:99:
43:7d:a8:9e:81:95:6b:4a:7b:d9:80:bf:45:c1:11:0a:5d:2d:
3a:35:35:f6:c4:72:eb:5e:a8:4c:e4:bd:a4:8a:ff:46:7c:ae:
cf:e5:8a:26:df:5d:df:a4:e3:ac:ae:9e:08:dc:75:34:fd:10:
0d:31:54:da:4f:84:9b:f2:a6:79:a9:75:42:1c:e2:65:ce:be:
d2:47:85:bc:80:97:6b:fe:a9:5b:4f:ec:95:3a:29:87:7a:a3:
16:25:0f:fd:79:21:85:53:96:22:59:12:22:60:cc:0a:a1:53:
51:4a:37:00:fc:ce:17:c6:db:97:e8:81:55:ad:f6:70:3e:6c:
67:3e:95:b2:2d:5d:f4:0d:cb:49:c5:02:64:30:13:01:9f:f6:
09:25:1a:31:74:0d:71:b7:14:26:38:e9:22:56:70:ee:e8:07:
3b:7d:21:ef:5f:94:68:e0:48:53:c2:b2:76:c6:08:31:9a:42:
df:ef:f8:a4:3d:8c:f0:d3:97:b8:7b:b1:cb:5a:07:74:09:81:
ce:c1:79:00:67:1d:b9:40:fb:75:71:12:f5:ce:0d:0a:51:5a:
b5:dd:08:e2:d0:98:b2:78:c5:73:d5:5e:80:4a:e8:9e:c8:dd:
43:4e:ab:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:56 2026 by rpki-client