Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.mft
File: qJ3jcDei8quO2_asHfHCmZfIiMg.mft (raw, json)
Hash identifier: TYKKmR2opkW/Eg2c9JAnJM0NpEUCjxvwhsw7t5VFC4Y=
Subject key identifier: 2D:2B:74:6D:D2:8A:24:D7:51:C9:A1:E9:BC:5E:0C:1D:8F:C9:41:9A
Authority key identifier: A8:9D:E3:70:37:A2:F2:AB:8E:DB:F6:AC:1D:F1:C2:99:97:C8:88:C8
Certificate issuer: /CN=a89de37037a2f2ab8edbf6ac1df1c29997c888c8
Certificate serial: 019B9252F098699E88B6F825AF2C10E6C544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJ3jcDei8quO2_asHfHCmZfIiMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.mft
Manifest number: 04B8
Signing time: Tue 06 Jan 2026 08:01:07 +0000
Manifest this update: Tue 06 Jan 2026 08:01:07 +0000
Manifest next update: Wed 07 Jan 2026 08:01:07 +0000
Files and hashes: 1: qJ3jcDei8quO2_asHfHCmZfIiMg.crl (hash: B14t9TksApLjGab07DKV2X5opUQRUyfv52LYkwz3rTs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:92:52:f0:98:69:9e:88:b6:f8:25:af:2c:10:e6:c5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a89de37037a2f2ab8edbf6ac1df1c29997c888c8
Validity
Not Before: Jan 6 08:01:07 2026 GMT
Not After : Jan 7 08:01:07 2026 GMT
Subject: CN=2d2b746dd28a24d751c9a1e9bc5e0c1d8fc9419a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4c:9f:0c:a2:60:f7:b7:db:4c:c0:83:05:b1:
2d:9f:98:f9:41:bf:cb:82:b5:87:10:60:c5:00:92:
88:49:08:e4:d8:66:a7:5e:22:ab:53:b8:58:a2:9b:
37:39:07:99:0a:88:75:7d:ad:72:dd:5b:39:f6:8a:
73:f8:71:19:e3:f7:57:be:72:65:c2:11:70:26:23:
68:de:fb:cf:10:33:c0:e5:f5:a5:19:9b:f1:69:62:
a4:8b:40:33:74:a8:0f:a4:6d:a8:77:9e:04:e0:dc:
b4:2c:72:e4:28:72:32:ad:b4:b3:cd:4c:09:96:40:
4c:7e:82:df:8d:df:c5:a6:1f:7c:a9:e0:75:c6:ea:
c8:77:b6:c4:13:24:f3:6a:13:46:66:c5:af:af:20:
3f:a0:35:a2:4e:3a:b0:a2:0b:7a:4b:4a:0f:a6:38:
cb:d3:c5:92:b4:4c:bc:e7:80:73:94:04:e5:e1:6f:
9a:b5:b0:47:2a:0b:52:f0:f2:f4:87:44:99:ff:5d:
c0:5c:9b:11:5a:82:ad:b7:e9:08:14:ad:c2:a6:0f:
1d:e2:12:57:63:f8:da:7a:2f:4b:04:ca:0a:ca:e3:
12:0d:27:61:97:18:e8:71:1f:a5:d3:68:9e:73:e3:
f6:97:75:95:7b:3b:e4:c1:84:d8:ce:0b:6f:3a:2a:
b8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2B:74:6D:D2:8A:24:D7:51:C9:A1:E9:BC:5E:0C:1D:8F:C9:41:9A
X509v3 Authority Key Identifier:
keyid:A8:9D:E3:70:37:A2:F2:AB:8E:DB:F6:AC:1D:F1:C2:99:97:C8:88:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJ3jcDei8quO2_asHfHCmZfIiMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f9:8d:7a:c7:62:cf:cf:74:34:69:20:36:63:3b:2e:7f:ed:
b0:69:1e:be:b7:b1:1a:ff:a1:26:d5:e4:a8:9c:3f:00:88:2d:
fb:0e:51:b4:8c:8c:32:6a:91:58:a2:9e:13:1f:ca:9e:c8:ef:
76:05:cd:71:94:8d:22:9b:4e:a6:52:45:a7:13:6b:b8:9c:e6:
5d:49:37:e4:1f:0e:49:6b:66:3e:08:41:56:94:5a:6b:d6:6a:
fc:48:c1:27:d6:ac:6b:d6:fe:b4:56:a4:54:2b:ab:8b:fc:6b:
63:bf:be:3a:8a:18:6a:59:7f:fe:79:f5:97:95:c7:9f:cf:6f:
2d:d3:97:31:25:6b:6d:ca:03:33:b3:ca:fd:40:86:65:25:d2:
99:66:26:6b:a2:88:c3:c6:21:3c:25:7f:f9:a9:49:03:72:4b:
af:c9:ec:29:3e:64:45:ac:85:d8:df:ce:f7:8c:0e:78:63:59:
76:37:f5:1e:96:87:37:2f:fb:51:17:21:e1:52:2b:67:89:d0:
4e:95:aa:eb:88:a1:cb:15:19:c0:bd:b0:b0:15:e9:f1:41:29:
5c:3f:d3:9c:5b:cc:5d:79:15:98:c5:22:7b:97:c1:44:fd:6b:
cf:29:dc:78:01:c8:f0:f8:8e:0c:41:e3:8b:b0:2a:8b:4f:d9:
32:4a:8a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:37:51 2026 by rpki-client