Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
File: 3xT-bNqQya_oB1kNLVA3SnaijhM.mft (raw, json)
Hash identifier: 80hiGvnMwDIed26zCAYlmOB/a7FDHo00/5uQCAa8CSs=
Subject key identifier: 73:C9:05:8E:DA:AE:52:55:03:49:9C:42:4E:4B:FC:6E:F7:2D:25:74
Authority key identifier: DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
Certificate issuer: /CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Certificate serial: 019F236983E02CB5776A3032A894DAF72723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
Manifest number: 1588
Signing time: Thu 02 Jul 2026 15:19:05 +0000
Manifest this update: Thu 02 Jul 2026 15:19:05 +0000
Manifest next update: Fri 03 Jul 2026 15:19:05 +0000
Files and hashes: 1: 3xT-bNqQya_oB1kNLVA3SnaijhM.crl (hash: W0E7FjM6JuNvcHUSryWKxzgdYE4g4qHhv4xs9U2AXik=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:83:e0:2c:b5:77:6a:30:32:a8:94:da:f7:27:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Validity
Not Before: Jul 2 15:19:05 2026 GMT
Not After : Jul 3 15:19:05 2026 GMT
Subject: CN=73c9058edaae525503499c424e4bfc6ef72d2574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:5b:8b:ac:9b:55:55:8b:0b:37:ca:fd:6d:
10:13:fd:77:e2:9e:93:20:41:8b:05:0f:dd:88:4f:
b7:20:80:39:e1:c2:97:b6:eb:70:75:12:aa:8c:1a:
bd:99:1d:01:cf:30:35:a0:a2:ac:44:45:81:73:01:
28:15:48:ff:86:6f:7d:88:24:16:83:03:c1:9e:06:
95:72:ef:69:41:cd:63:cc:96:6d:cc:e1:74:ef:18:
c1:0f:2e:bc:1c:7b:2d:60:18:15:20:27:1a:db:0a:
54:83:ca:00:7a:bb:b1:bc:79:bd:48:0b:85:f4:f2:
8b:e8:ab:12:c7:69:ec:a8:2d:f5:45:f9:43:9a:5b:
32:20:e3:62:2e:75:fe:42:0c:ec:a8:bf:2d:30:c4:
bc:a5:a3:3c:f5:80:4f:6c:ae:05:05:ce:87:22:3d:
44:79:62:f7:b2:eb:ab:86:4b:11:e5:07:d0:97:b0:
e4:ce:04:56:41:f9:4a:c0:a5:35:a0:25:32:52:db:
ac:b1:a3:0e:a3:0e:ac:e1:d8:10:4f:44:6e:58:6f:
43:30:2c:8b:08:a8:cf:8b:b4:4b:f3:01:d6:80:45:
d9:e0:fc:8d:37:a8:51:9a:ec:b9:0c:8f:f9:3b:99:
00:98:bf:19:a1:c2:ed:7c:cc:ac:8e:c7:7f:47:07:
ee:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C9:05:8E:DA:AE:52:55:03:49:9C:42:4E:4B:FC:6E:F7:2D:25:74
X509v3 Authority Key Identifier:
keyid:DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3d:6f:da:7f:8a:d3:3b:cd:65:6c:c7:3e:1c:3d:a5:e7:ca:
70:2b:48:3c:c7:20:03:8b:ab:69:7d:60:68:51:5f:2d:c3:0e:
f4:8d:c3:d5:e0:3d:91:39:9f:07:4c:58:c0:54:e2:14:f3:84:
d0:6d:c5:61:66:5d:91:ef:04:c3:7c:af:e1:44:95:12:c9:4a:
44:1e:d5:04:b0:12:13:6f:ac:cc:49:39:fd:3f:89:ec:a4:ed:
e4:78:bd:54:17:cd:ff:5d:08:1b:12:7d:cb:ce:e2:be:f0:68:
8c:65:f7:e3:2f:78:51:06:34:06:5b:34:63:9f:44:8c:17:53:
72:b9:5f:f3:1e:d1:d6:ad:5b:1e:b6:f5:fb:55:fc:02:22:46:
ac:4a:72:70:c2:6a:d6:ee:fb:76:b9:ca:5f:38:ea:a8:b0:7a:
25:bf:a1:4e:aa:b9:2f:b5:c1:08:b4:14:10:a0:f9:8e:a5:b6:
d8:21:99:46:86:c8:be:91:84:c1:ff:95:1a:14:76:d0:77:1c:
0c:d6:53:8b:1d:03:13:9a:0d:c2:ce:b5:08:e0:e1:f0:5c:03:
1f:23:4f:98:a4:9c:b2:f8:c2:93:7a:19:11:97:72:57:44:43:
bc:0b:9a:63:be:b9:81:32:b6:b5:64:1d:2f:e5:76:c4:f0:d6:
d7:21:05:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:41:34 2026 by rpki-client