Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
File: 3Bo6oM-N-pFn0k2S7YoW6054BEw.mft (raw, json)
Hash identifier: sZTVoDdKG9vl8OwNOe6UPiio2QoKBCI1idVcbQjLMrA=
Subject key identifier: A2:03:4D:84:F0:23:A0:38:EF:E1:C9:3C:67:A4:C4:4F:18:78:F2:D4
Authority key identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
Certificate issuer: /CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Certificate serial: 019F236A379A7BE08888B683B00A7D502F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
Manifest number: 0B63
Signing time: Thu 02 Jul 2026 15:19:51 +0000
Manifest this update: Thu 02 Jul 2026 15:19:51 +0000
Manifest next update: Fri 03 Jul 2026 15:19:51 +0000
Files and hashes: 1: 3Bo6oM-N-pFn0k2S7YoW6054BEw.crl (hash: axnuMCWIYZHkVohfGFSVyWgNPdBBXbAKZJMkF6nBfHw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:37:9a:7b:e0:88:88:b6:83:b0:0a:7d:50:2f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Validity
Not Before: Jul 2 15:19:51 2026 GMT
Not After : Jul 3 15:19:51 2026 GMT
Subject: CN=a2034d84f023a038efe1c93c67a4c44f1878f2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:39:98:ff:a4:96:60:06:f8:9a:bd:24:59:70:
b1:b6:cd:53:ce:26:5b:e1:6b:67:bc:8f:2d:b3:97:
73:c5:59:c6:6c:03:be:0f:3e:0f:34:e8:9e:9b:c0:
aa:4d:3d:7f:ca:0e:34:84:07:24:ac:3f:4d:1d:a5:
de:88:0c:03:0a:82:44:a0:7a:cb:03:f4:62:d4:fb:
d2:4a:02:e3:6a:26:9b:c2:36:10:1d:74:e6:eb:54:
40:d2:69:08:f0:41:aa:55:4f:91:c2:e0:fb:a7:8e:
90:4d:9d:49:66:bb:24:c3:d1:53:07:a6:62:1e:a2:
72:39:6b:0e:60:7d:f7:a9:55:dc:be:ff:ce:f7:5d:
a1:fc:8d:8f:90:e5:bb:b5:fa:12:80:83:bd:90:85:
24:00:61:01:e2:47:12:f9:b9:f1:12:64:56:18:86:
c1:a4:cf:75:db:9b:fe:39:b9:7e:87:5a:5a:67:86:
b8:69:fe:72:9c:e6:64:95:73:c7:99:a1:50:2e:27:
88:2f:0f:a4:ad:2c:cc:df:2b:3a:1f:cf:85:61:bb:
df:74:11:45:52:34:fe:eb:d9:fb:c2:68:17:43:c7:
23:8f:cf:c9:69:03:2c:27:7a:97:c7:ae:ae:89:d3:
09:18:32:ea:69:8b:00:a7:03:72:90:9e:66:f7:94:
42:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:03:4D:84:F0:23:A0:38:EF:E1:C9:3C:67:A4:C4:4F:18:78:F2:D4
X509v3 Authority Key Identifier:
keyid:DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2a:cf:54:f0:5b:fa:20:db:5e:81:12:71:a5:c6:0f:47:b5:
30:27:65:8e:6d:aa:e1:e1:34:c6:61:70:ed:9c:06:2a:9a:a3:
dc:e2:4a:93:c1:71:7c:b0:36:16:7d:a8:a0:dc:87:0c:bc:06:
2c:35:77:a8:1c:a1:9c:1b:90:1b:2f:a9:7a:1b:e8:50:2c:bd:
23:00:9e:97:2d:de:0e:a1:48:b5:32:5a:f7:ad:f3:19:a6:6b:
4e:9d:dc:73:ba:09:61:46:73:a1:c6:f5:38:72:b2:7d:dc:22:
ca:80:25:a1:02:e2:95:bf:f6:b4:33:99:99:39:e7:cc:73:00:
08:b1:f3:5d:88:0a:95:84:f8:56:8d:61:1e:54:df:d2:82:73:
8f:72:b3:12:43:aa:a9:09:b7:22:d7:32:93:25:7d:a9:57:17:
14:39:32:88:a3:c1:46:91:7a:c7:10:1e:01:4b:86:86:78:fd:
ee:a4:4e:dd:db:22:65:67:3b:a8:47:aa:3b:48:b9:80:13:02:
6a:d1:56:eb:c5:1b:31:b6:7d:35:2b:81:60:e1:1a:22:9f:1d:
dd:0f:3d:f0:31:ff:cc:01:d8:62:e3:38:02:1a:9c:c6:2a:17:
aa:fc:76:09:1c:5d:2a:8a:64:42:b7:65:f9:81:8f:fb:87:3f:
7e:a1:02:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:35:54 2026 by rpki-client