
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft
File: 3tvumMupuOYloRR7s7VRl9LQoFc.mft (raw, json)
Hash identifier: yyUM6qdGQhCU1kaB4GETQFlNf9fMXhg4FoPSQ6r4T88=
Subject key identifier: C9:55:31:35:C3:74:56:7B:64:83:31:5E:E2:7D:0D:5E:DF:44:6D:C0
Authority key identifier: DE:DB:EE:98:CB:A9:B8:E6:25:A1:14:7B:B3:B5:51:97:D2:D0:A0:57
Certificate issuer: /CN=dedbee98cba9b8e625a1147bb3b55197d2d0a057
Certificate serial: 019CBCCD3EF43FCDB29852B745011EE3713D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft
Manifest number: 08B7
Signing time: Thu 05 Mar 2026 07:01:33 +0000
Manifest this update: Thu 05 Mar 2026 07:01:33 +0000
Manifest next update: Fri 06 Mar 2026 07:01:33 +0000
Files and hashes: 1: 3tvumMupuOYloRR7s7VRl9LQoFc.crl (hash: 4WOvdUiHHEIIFJoJa77f5PEoH43pb/IEaA8S3dFTB10=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bc:cd:3e:f4:3f:cd:b2:98:52:b7:45:01:1e:e3:71:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedbee98cba9b8e625a1147bb3b55197d2d0a057
Validity
Not Before: Mar 5 07:01:33 2026 GMT
Not After : Mar 6 07:01:33 2026 GMT
Subject: CN=c9553135c374567b6483315ee27d0d5edf446dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fb:80:3a:c1:69:de:84:ac:c2:64:a1:86:97:
e8:0c:97:be:d0:fb:d9:d5:7b:32:eb:c5:a0:bc:34:
6d:47:82:62:ed:aa:83:f7:ef:a1:54:cc:e7:0d:e3:
ae:46:68:a0:54:8b:fa:a4:4a:87:a0:b6:fa:07:d3:
ec:0e:ab:8d:b0:f2:ff:dc:35:7b:a4:c2:2d:ed:fe:
74:41:30:ee:48:ce:76:5a:2e:84:ea:8e:6b:28:c9:
a8:a3:f0:7b:0b:36:c6:db:82:03:05:67:fd:21:c1:
c3:44:dd:d7:f0:ec:ce:e3:b6:c1:1b:98:40:98:f8:
49:e4:f9:59:2b:df:b3:50:7a:3e:2e:73:88:29:f8:
66:37:37:bc:e7:7a:1e:30:a8:f0:1c:0f:e9:cc:81:
74:b6:76:a2:27:fa:3a:46:0c:06:9a:a1:b1:43:39:
df:ed:71:20:5b:7c:25:7e:38:1a:ac:b7:04:f5:2d:
96:8e:a0:ca:a0:7b:6a:eb:0a:e5:5a:47:14:43:2e:
44:de:d3:50:a6:7b:22:c2:18:dc:d4:bc:56:db:88:
34:10:6e:e2:ec:e6:ee:a4:d2:2e:8c:fb:dd:27:11:
06:83:55:8e:78:7d:bc:27:a3:16:3b:ca:1a:12:16:
45:1e:18:8b:ca:5f:2e:db:d1:0c:f6:2c:7f:7c:1e:
8d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:55:31:35:C3:74:56:7B:64:83:31:5E:E2:7D:0D:5E:DF:44:6D:C0
X509v3 Authority Key Identifier:
keyid:DE:DB:EE:98:CB:A9:B8:E6:25:A1:14:7B:B3:B5:51:97:D2:D0:A0:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:20:b3:39:51:18:8e:1b:91:22:5f:39:3f:67:e1:18:7f:ed:
fe:c2:ea:61:f6:08:01:f3:f9:30:9c:b5:25:4f:6b:93:4e:4d:
72:e0:5b:c0:e4:2b:b6:2d:46:89:83:ea:a6:b1:9a:d3:39:98:
36:c7:22:0f:99:0c:e0:4f:ee:74:6f:62:5c:f9:ad:90:4b:9f:
6b:93:c5:f3:84:49:a0:d3:96:40:2a:01:ec:7d:03:ca:25:21:
61:b1:0e:25:8c:89:f2:85:56:b7:b4:9b:32:7d:5f:24:1e:59:
df:c0:c4:e9:a8:a3:ae:81:14:20:c1:f2:da:b5:1f:89:ff:c3:
ac:f0:94:ba:27:49:a0:2a:e1:7f:a5:47:a5:13:8a:e7:2d:b3:
22:41:21:ac:1f:0c:3c:20:33:30:76:29:c0:a5:10:b9:e1:2c:
2e:06:3c:b0:d2:b3:cc:53:aa:10:7e:36:60:7b:eb:4a:36:3b:
a4:a9:52:da:34:f7:61:8c:7d:6c:71:6f:9b:09:d6:f5:15:05:
c7:99:62:ed:bf:42:08:a7:fb:ff:b2:99:28:3a:a7:22:3f:34:
a6:04:be:e1:3c:f0:f6:93:13:1d:9c:1b:3f:30:74:6c:b4:87:
5a:25:85:a2:a2:e0:1e:e4:8e:f3:38:1a:6d:b8:41:e1:9f:18:
c0:36:66:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy8zT70P82ymFK3RQEe43E9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZGJlZTk4Y2JhOWI4ZTYyNWExMTQ3YmIzYjU1MTk3ZDJk
MGEwNTcwHhcNMjYwMzA1MDcwMTMzWhcNMjYwMzA2MDcwMTMzWjAzMTEwLwYDVQQD
EyhjOTU1MzEzNWMzNzQ1NjdiNjQ4MzMxNWVlMjdkMGQ1ZWRmNDQ2ZGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fuAOsFp3oSswmShhpfoDJe+0PvZ
1Xsy68WgvDRtR4Ji7aqD9++hVMznDeOuRmigVIv6pEqHoLb6B9PsDquNsPL/3DV7
pMIt7f50QTDuSM52Wi6E6o5rKMmoo/B7CzbG24IDBWf9IcHDRN3X8OzO47bBG5hA
mPhJ5PlZK9+zUHo+LnOIKfhmNze853oeMKjwHA/pzIF0tnaiJ/o6RgwGmqGxQznf
7XEgW3wlfjgarLcE9S2WjqDKoHtq6wrlWkcUQy5E3tNQpnsiwhjc1LxW24g0EG7i
7ObupNIujPvdJxEGg1WOeH28J6MWO8oaEhZFHhiLyl8u29EM9ix/fB6NuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlVMTXDdFZ7ZIMxXuJ9DV7fRG3AMB8GA1UdIwQY
MBaAFN7b7pjLqbjmJaEUe7O1UZfS0KBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3R2dW1NdXB1T1lsb1JSN3M3VlJsOUxRb0ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wZWY2NzgtNzg3MC00ZTA4LWFiMjUt
MThmMGI4MGYyNTBkLzEvM3R2dW1NdXB1T1lsb1JSN3M3VlJsOUxRb0ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8wZWY2NzgtNzg3MC00ZTA4LWFiMjUtMThmMGI4MGYyNTBk
LzEvM3R2dW1NdXB1T1lsb1JSN3M3VlJsOUxRb0ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjiCzOVEY
jhuRIl85P2fhGH/t/sLqYfYIAfP5MJy1JU9rk05NcuBbwOQrti1GiYPqprGa0zmY
NsciD5kM4E/udG9iXPmtkEufa5PF84RJoNOWQCoB7H0DyiUhYbEOJYyJ8oVWt7Sb
Mn1fJB5Z38DE6aijroEUIMHy2rUfif/DrPCUuidJoCrhf6VHpROK5y2zIkEhrB8M
PCAzMHYpwKUQueEsLgY8sNKzzFOqEH42YHvrSjY7pKlS2jT3YYx9bHFvmwnW9RUF
x5li7b9CCKf7/7KZKDqnIj80pgS+4Tzw9pMTHZwbPzB0bLSHWiWFoqLgHuSO8zga
bbhB4Z8YwDZmVw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:24:26 2026 by rpki-client