Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
File: 3Mx29__HFoYLOtY56_kdxN1hMAA.mft (raw, json)
Hash identifier: pKiMJQt1gOaOTJ/l8sk0VcaQZs7cRf0L9Pzi8n0INKo=
Subject key identifier: 5A:09:E4:C2:CF:B9:5B:4E:FF:2B:43:97:5C:C8:3F:EB:CF:6A:DF:63
Authority key identifier: DC:CC:76:F7:FF:C7:16:86:0B:3A:D6:39:EB:F9:1D:C4:DD:61:30:00
Certificate issuer: /CN=dccc76f7ffc716860b3ad639ebf91dc4dd613000
Certificate serial: 019BFD9CD5E7B9C4C5740583DB8BF77C8B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Mx29__HFoYLOtY56_kdxN1hMAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
Manifest number: 0BAF
Signing time: Tue 27 Jan 2026 04:01:12 +0000
Manifest this update: Tue 27 Jan 2026 04:01:12 +0000
Manifest next update: Wed 28 Jan 2026 04:01:12 +0000
Files and hashes: 1: 3Mx29__HFoYLOtY56_kdxN1hMAA.crl (hash: VHqVV0JkNMJIf1AxBk75dctlhT/4bv50IspV7t+gYV4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fd:9c:d5:e7:b9:c4:c5:74:05:83:db:8b:f7:7c:8b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccc76f7ffc716860b3ad639ebf91dc4dd613000
Validity
Not Before: Jan 27 04:01:12 2026 GMT
Not After : Jan 28 04:01:12 2026 GMT
Subject: CN=5a09e4c2cfb95b4eff2b43975cc83febcf6adf63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d1:95:36:b8:e2:2e:7f:a7:81:ab:d5:af:32:
6c:b4:71:2e:32:4b:43:c7:65:33:97:1b:ee:07:64:
20:2f:3a:91:70:8b:cb:29:3d:fd:17:71:dd:0c:68:
49:5d:d4:6b:4b:1c:fc:ac:3e:7d:8a:cf:5c:87:d7:
61:c3:1e:d3:84:97:4a:ea:3a:94:d1:46:6b:d2:14:
15:e6:db:1d:5b:24:2d:5e:3d:77:aa:0c:ee:6b:9a:
c4:05:5f:96:03:82:fa:3a:94:b6:1e:53:e9:fe:2f:
31:90:32:9c:67:b4:be:4b:f7:57:c3:56:4a:3e:fe:
3d:b5:ae:4f:70:de:db:3d:96:38:31:17:d7:44:dc:
db:01:5a:c3:64:f4:a4:18:95:4c:2c:71:12:81:6a:
3c:c1:3a:1f:5f:5c:da:fb:28:c2:0c:bf:ee:28:f2:
9b:f5:8d:aa:08:50:ef:81:fc:f4:7f:80:33:ae:69:
26:57:9b:57:12:f9:7f:6c:a1:ad:35:a3:0f:3e:75:
e1:10:8b:71:5f:97:9b:5e:2e:e3:49:37:f0:42:f6:
14:32:41:3b:18:46:91:88:c5:d8:94:a8:13:2e:ea:
5b:51:05:9c:62:f0:6c:f2:a2:c5:b6:d6:8f:92:0e:
06:4d:16:b9:e1:2f:d2:83:6d:9b:0b:33:df:bb:bd:
46:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:09:E4:C2:CF:B9:5B:4E:FF:2B:43:97:5C:C8:3F:EB:CF:6A:DF:63
X509v3 Authority Key Identifier:
keyid:DC:CC:76:F7:FF:C7:16:86:0B:3A:D6:39:EB:F9:1D:C4:DD:61:30:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Mx29__HFoYLOtY56_kdxN1hMAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:08:91:14:93:31:c8:e8:28:59:78:34:74:dd:26:99:8b:0e:
94:cf:96:17:21:84:75:21:a3:3b:cd:e8:e7:77:14:55:ce:ea:
2d:32:81:d4:6f:5c:fe:11:b8:f9:46:d9:d6:26:ec:3d:f4:63:
d4:1e:e6:cf:21:bd:a5:99:c2:bd:8d:db:f5:a7:28:7a:3b:a8:
21:e3:e1:ce:e0:4b:2f:b2:37:e9:e4:a0:0e:9b:bb:3d:01:d6:
92:4b:c1:5f:43:3b:b9:01:fb:6e:27:bc:c3:c4:5e:a4:c3:91:
b5:3f:ff:2f:d9:63:11:7a:2b:b7:e2:d3:f9:98:da:f1:8f:d3:
f3:ed:90:43:15:47:9d:56:bb:30:69:26:4a:6d:8e:53:15:a3:
ff:4b:7a:c4:5d:09:8f:8d:35:9e:97:bc:23:87:97:32:92:cc:
6e:c2:61:06:cd:85:26:55:d2:1f:53:aa:2f:47:a3:c4:ff:5e:
32:b0:43:2c:0a:4c:fc:3e:f8:1c:72:a0:69:12:6c:25:87:08:
99:91:70:6b:4f:74:78:6b:01:0e:9c:8b:7a:df:f9:4a:9b:e3:
56:00:92:c7:a1:b3:24:ad:e3:d9:c1:c1:e0:6d:d9:51:59:0f:
4a:f8:0c:7b:82:57:5e:20:8d:ea:07:0d:d7:98:a2:3d:9b:00:
a5:5c:cf:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:47 2026 by rpki-client