Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
File: 3gr32Dxe6w1DStdTxqX0dUlpizc.mft (raw, json)
Hash identifier: Rh97TRQjPkz5KPTxqRUgNcvDFhcbGzIRDZfkh9VcNNc=
Subject key identifier: 2A:8D:66:EA:2A:2C:A8:FE:65:12:79:EA:35:D4:7E:69:08:90:2F:C1
Authority key identifier: DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37
Certificate issuer: /CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37
Certificate serial: 019C044341991508E9FF2E4CED8C3532B4AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
Manifest number: 1782
Signing time: Wed 28 Jan 2026 11:00:42 +0000
Manifest this update: Wed 28 Jan 2026 11:00:42 +0000
Manifest next update: Thu 29 Jan 2026 11:00:42 +0000
Files and hashes: 1: 3gr32Dxe6w1DStdTxqX0dUlpizc.crl (hash: NNrCR1/YwTsgvhSUiY+QT9scsFyt2e4ixWeHE25jp90=)
2: WEFbXTk7yeRkC088JT7a_ioRbi0.roa (hash: 3qKJYS5NzbZWhGkSEbXPMuOX8xOy4zfcmmxRc/G+Gk4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:04:43:41:99:15:08:e9:ff:2e:4c:ed:8c:35:32:b4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37
Validity
Not Before: Jan 28 11:00:42 2026 GMT
Not After : Jan 29 11:00:42 2026 GMT
Subject: CN=2a8d66ea2a2ca8fe651279ea35d47e6908902fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:96:5c:72:50:9f:1e:b3:2c:75:60:92:58:
25:1b:b3:f1:02:bb:3d:98:dc:c0:c9:9e:99:f4:47:
43:6a:1e:4c:7c:d9:51:df:a3:dc:2b:ca:b7:76:c8:
ca:e9:61:e9:65:16:59:48:5d:91:15:be:1c:fc:ce:
51:f6:12:e4:f6:dd:ba:17:b3:46:c2:a3:1a:e5:cb:
77:bb:10:4f:0b:20:cb:67:12:8f:90:20:70:db:db:
2c:8b:88:ce:3e:88:df:ce:66:22:15:66:c5:a5:e8:
bd:4b:1f:48:be:d7:e1:d4:72:a6:8c:e1:4c:6f:65:
42:62:be:12:18:d9:95:a0:7b:a7:79:29:a9:08:9e:
3e:6a:95:34:eb:f0:21:d0:f0:98:eb:8a:a6:a5:ab:
4f:84:cc:06:47:6c:d4:14:fa:a5:5d:08:3d:46:e7:
60:44:d5:85:fc:26:7e:52:a2:86:f4:ce:4b:f9:64:
92:13:b5:04:ec:b9:1a:1c:17:e3:b7:67:c3:29:88:
25:5b:d4:73:64:27:7b:08:6a:4c:c3:8f:8e:96:1d:
72:4d:c6:6a:a3:e1:bd:05:b3:fb:d0:4c:7b:70:bc:
ed:8f:19:45:b3:b2:75:db:2b:85:0e:f4:cb:f3:0c:
84:cc:31:6d:84:26:f5:82:6b:ff:1a:fd:b0:9b:28:
da:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8D:66:EA:2A:2C:A8:FE:65:12:79:EA:35:D4:7E:69:08:90:2F:C1
X509v3 Authority Key Identifier:
keyid:DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7d:dd:2e:4e:33:8a:49:bb:bb:ff:3f:c3:de:d1:c2:cf:37:
d0:d4:46:be:90:ac:7f:e9:cc:90:94:fe:c7:a3:d4:c4:e7:4f:
e6:5c:36:26:93:9d:49:34:40:4f:67:5e:b7:39:37:28:ef:0b:
73:40:65:a0:08:ad:f7:05:8c:5f:79:bc:23:a1:42:70:46:80:
23:69:ae:41:e3:e2:77:f0:cd:df:43:4c:69:42:91:40:23:56:
11:e4:8d:56:2e:52:00:31:25:6d:2b:bc:77:7b:54:1a:8e:fa:
d5:a4:89:bd:a1:19:b7:44:59:2b:1a:64:cb:8e:b4:3c:8b:38:
a3:0c:25:83:f5:58:24:82:3e:e2:61:90:96:91:77:36:82:8d:
96:b9:ea:06:4c:7d:2e:85:20:d4:28:3b:17:06:77:bd:96:0b:
fd:ce:29:dd:49:a8:a1:5a:5e:c9:b9:03:39:71:12:f5:2c:aa:
d1:c3:59:54:9b:ff:2c:6e:a4:de:7e:41:03:b5:c6:70:e1:12:
c6:3a:52:ba:f0:84:2f:a2:9c:82:39:3d:72:00:c7:23:85:00:
15:d5:dd:f9:c4:90:1a:9f:ae:43:73:1f:b9:5c:ad:75:ec:7d:
d0:08:75:54:df:c2:5a:ce:d4:30:e1:b6:af:7d:49:66:63:d3:
21:07:84:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:53:04 2026 by rpki-client