Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
File: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft (raw, json)
Hash identifier: yLQiQGQncg6EwBj1SkUb1fPJcFtBmQDmYkqXbuCeLZY=
Subject key identifier: 42:77:CB:9F:22:23:0B:EA:E9:84:7C:45:56:66:A6:A7:E2:62:22:26
Authority key identifier: DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
Certificate issuer: /CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Certificate serial: 019F468A0FF068D0522E07B6C3D6C7BE1CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
Manifest number: 08B8
Signing time: Thu 09 Jul 2026 11:01:20 +0000
Manifest this update: Thu 09 Jul 2026 11:01:20 +0000
Manifest next update: Fri 10 Jul 2026 11:01:20 +0000
Files and hashes: 1: 2U3Vq1QnP8ctuHADYZl7AYfrN8Q.roa (hash: aSqIWAFTh+DEyVISsUqiiF4heoz8JVrFxkyTiK/xNAk=)
2: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl (hash: aWvrsdkdsGdIMteEZe93z93MtsJzzX1fwH9WAclm8ew=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:8a:0f:f0:68:d0:52:2e:07:b6:c3:d6:c7:be:1c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Validity
Not Before: Jul 9 11:01:20 2026 GMT
Not After : Jul 10 11:01:20 2026 GMT
Subject: CN=4277cb9f22230beae9847c455666a6a7e2622226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7d:d6:ec:dc:03:a6:7e:a6:df:a0:f7:c8:71:
10:5e:75:a3:a8:ed:17:af:10:b1:db:e3:ea:ec:4d:
8b:22:ac:a7:6b:20:e8:4d:e3:89:93:27:02:b3:06:
a2:64:cf:d4:15:3d:69:ea:de:2b:d0:42:04:33:50:
27:34:8f:09:c1:f8:cb:47:39:5c:50:e5:4c:d2:25:
75:f1:38:ec:a5:fd:ca:69:01:76:54:1a:03:96:8c:
45:88:f1:4d:00:1c:00:b4:38:6a:06:a0:4d:1b:dd:
2c:be:72:f7:86:26:41:93:5b:aa:a3:40:51:ee:84:
c0:f5:19:d7:38:96:08:f9:80:31:d4:e8:38:bb:11:
6e:40:13:c4:3d:78:8b:61:fe:8b:78:0b:6b:34:a4:
6d:af:57:61:52:95:97:41:05:c9:7f:6e:1d:51:4e:
d9:08:0b:5a:80:f1:d2:43:2c:cc:62:db:27:8b:19:
3c:80:21:98:f6:e6:a2:72:f7:79:97:46:37:fb:3a:
27:73:37:76:77:80:21:1a:94:1b:48:de:74:2e:63:
46:65:d3:cf:21:ba:55:ac:70:10:e7:90:1e:15:6c:
75:8c:25:f1:10:98:bf:05:29:50:88:b8:5b:26:3f:
93:97:91:19:65:b4:c8:15:16:e9:16:73:d5:1d:e7:
e5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:77:CB:9F:22:23:0B:EA:E9:84:7C:45:56:66:A6:A7:E2:62:22:26
X509v3 Authority Key Identifier:
keyid:DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:02:ed:dd:89:44:dd:54:a3:34:bb:15:5a:01:15:6e:7c:fb:
b7:ca:df:a1:3d:06:0f:d2:19:7d:01:9a:66:b6:eb:14:07:b2:
5f:0b:66:7f:f9:58:3a:c9:7d:24:5c:ab:32:e7:f5:47:7c:ea:
3b:e4:4d:22:46:b8:c6:56:0c:31:f2:0c:07:41:85:7e:9f:0e:
14:45:83:9e:6d:8e:75:39:74:fb:d7:6b:ad:ee:97:be:f5:60:
53:0c:07:57:3f:05:cf:67:4f:d0:09:b7:13:68:84:6f:eb:7b:
9e:98:46:42:1b:e0:7a:ea:5b:fb:24:dc:a6:81:29:b6:9e:1a:
96:eb:00:b1:79:1d:a6:b7:44:b3:fd:64:f7:09:a0:9f:38:39:
5a:58:1f:07:66:c0:81:5b:3b:d0:b3:f1:62:de:54:02:4d:1c:
fa:f0:4d:76:11:4a:e9:f1:b5:9d:51:bd:d8:7f:24:57:e1:8d:
c7:e9:73:6e:91:59:de:ea:56:0f:e3:54:29:76:0e:74:5d:51:
4d:f7:63:fe:c9:3b:11:41:97:a0:7c:94:dc:65:9d:60:e5:be:
1d:30:32:39:9a:a5:0f:5a:12:da:e1:32:a7:c5:80:69:ca:e8:
cb:d1:d2:27:03:3a:6c:7c:af:eb:ef:77:ec:a5:fa:69:25:1e:
8d:e8:07:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:27 2026 by rpki-client