Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
File: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft (raw, json)
Hash identifier: VcY1BlPle+FgUODW7pwoP7LpsOSDTtFOxRftSRCo4B0=
Subject key identifier: FE:BF:BC:89:6D:63:34:2F:63:E9:8B:0D:3D:8F:37:93:0E:41:2A:1E
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 019F236A6E66D11143EA63A69C6D6928FA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
Manifest number: 1901
Signing time: Thu 02 Jul 2026 15:20:05 +0000
Manifest this update: Thu 02 Jul 2026 15:20:05 +0000
Manifest next update: Fri 03 Jul 2026 15:20:05 +0000
Files and hashes: 1: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl (hash: rI1AVurFgeJdQK88u5ezu+LTb8coIjoMcloBYcgALlM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:6e:66:d1:11:43:ea:63:a6:9c:6d:69:28:fa:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jul 2 15:20:05 2026 GMT
Not After : Jul 3 15:20:05 2026 GMT
Subject: CN=febfbc896d63342f63e98b0d3d8f37930e412a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6e:68:88:7b:94:b6:93:6d:27:06:fa:87:28:
d4:d1:59:64:1c:ff:02:f6:ff:6c:73:c9:c6:9f:38:
23:4e:81:3b:16:37:33:df:4a:70:c3:07:84:13:01:
11:44:56:d8:89:a6:0f:46:58:ce:96:8c:42:2b:2f:
b9:04:8d:90:64:8b:42:d8:d6:3e:54:fd:e8:2b:05:
38:73:bd:b4:bc:a2:fa:d5:57:b2:ba:76:f8:37:e4:
0a:74:4b:5f:b1:22:ef:f3:95:8d:c5:7f:85:99:2c:
77:58:14:f4:41:4e:28:5a:98:c8:29:35:8e:a3:39:
86:aa:86:00:94:1c:d1:d1:82:47:4d:1a:c2:b1:51:
3f:cc:77:2c:53:6e:7c:98:fd:44:92:56:a2:be:27:
c7:53:bf:93:fd:34:db:6d:d0:85:6a:25:25:ae:01:
7d:6a:26:6e:47:38:b5:f0:ec:c9:9b:28:f4:ea:1c:
77:51:8e:39:ac:d5:47:a8:f1:9f:a2:f9:07:4b:c3:
80:ca:0d:9c:d3:b9:de:87:49:4c:c4:ec:74:12:37:
06:f7:93:29:c5:77:4d:0b:d5:0e:ee:11:c5:36:fd:
6a:e6:2f:bd:81:4f:0d:82:46:52:4a:47:1c:b5:89:
91:c4:b6:f1:47:58:a1:8f:c1:73:14:02:c3:97:be:
35:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BF:BC:89:6D:63:34:2F:63:E9:8B:0D:3D:8F:37:93:0E:41:2A:1E
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ce:71:79:e6:4e:c6:6f:1d:55:4a:f4:9e:eb:d6:0c:7f:c8:
28:91:6f:57:20:9c:06:e7:69:53:be:fe:d1:8c:ce:56:e5:e5:
31:d9:1a:7a:12:0a:c4:c1:40:84:67:25:61:04:09:f5:5c:40:
f3:af:a7:5b:09:e3:de:81:19:19:d6:b4:f5:9a:8c:78:b8:c4:
78:c3:40:c7:2a:42:b2:96:c4:66:05:4d:98:d2:0e:40:5e:4c:
2a:60:e2:ed:b4:0a:dc:b3:b8:d1:34:d1:e2:c3:7c:56:3f:17:
61:67:54:b3:ff:30:1a:1f:12:7e:d7:23:a9:1e:10:03:08:82:
3d:52:f5:b3:24:e3:9b:61:14:bf:22:ca:4f:a2:15:d1:84:f3:
67:30:be:98:e6:0f:b2:a5:0e:f1:ad:c3:de:4b:25:1e:b3:7a:
25:89:be:26:4b:4b:1e:44:be:4d:63:c3:2a:e6:cf:15:2e:6f:
d6:b7:85:95:17:30:fa:90:bd:79:6d:4f:9e:3f:17:11:24:5f:
f7:fe:92:1e:0d:9a:5f:7c:9b:69:2b:b5:af:cd:0f:92:5c:9b:
0b:f5:ad:d4:72:4a:83:ae:98:f2:d8:48:bd:3b:b3:07:68:90:
d6:9a:89:3a:5d:af:ae:a6:b5:83:a9:00:77:4c:32:7c:18:4b:
16:76:79:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:23 2026 by rpki-client