Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
File: P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json)
Hash identifier: TeLf8pg/gVNGf3nPIJ6Pau3Aso9BOoskUy7e+a4deQw=
Subject key identifier: C8:38:65:B7:71:1F:E7:E7:E3:BA:80:F4:00:20:CD:0B:77:78:4B:7B
Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
Certificate issuer: /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Certificate serial: 019D382E64FA1DCAAC2EA9701579D4117E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
Manifest number: 03A4
Signing time: Sun 29 Mar 2026 06:00:57 +0000
Manifest this update: Sun 29 Mar 2026 06:00:57 +0000
Manifest next update: Mon 30 Mar 2026 06:00:57 +0000
Files and hashes: 1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: ZZ+p7qxJ6Y5h1+ZBJZ2ELi2CMWGAjauh05U0Xe0+Jzk=)
2: wmftFtvbm2f7JWmltpRyVvfDvRg.roa (hash: ifS1jUFk0Eu0JB0mDMS9nd/R8eNPClng/HidlRk7lts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:64:fa:1d:ca:ac:2e:a9:70:15:79:d4:11:7e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Validity
Not Before: Mar 29 06:00:57 2026 GMT
Not After : Mar 30 06:00:57 2026 GMT
Subject: CN=c83865b7711fe7e7e3ba80f40020cd0b77784b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e0:1f:69:fa:73:c7:9f:97:68:70:79:99:74:
35:a4:8b:46:d6:e7:b5:77:80:35:57:86:43:81:8c:
c3:7b:c2:92:55:1f:f8:89:e4:35:d2:58:e2:bc:3b:
ba:8d:1a:a8:ba:57:01:aa:1b:34:86:d6:34:48:41:
31:a8:cb:69:a0:d6:95:04:e9:1c:8b:b3:08:54:d1:
a6:8e:b3:42:12:ce:32:7a:da:bd:08:8f:06:c6:d1:
af:2b:a3:58:fe:ea:34:d8:9e:52:89:d1:b0:bd:e5:
14:51:d4:87:01:f7:24:95:c7:48:d5:f0:80:5f:bd:
25:b9:b6:82:90:d5:72:fd:d9:69:92:d0:6b:51:9d:
c1:3e:0c:d4:3f:56:88:98:5f:f8:8c:80:a3:59:af:
af:0d:58:32:2f:8c:32:4e:52:ef:ba:0d:5d:cc:57:
5a:a3:1f:b5:d9:2d:ad:27:64:54:c9:fd:eb:28:4d:
61:63:ea:fb:89:42:14:4f:88:97:c6:86:dc:72:51:
7e:90:fa:eb:ad:8b:28:33:4d:75:a5:c6:27:fc:79:
35:95:40:f3:49:5f:40:63:ca:13:47:28:31:9a:97:
dd:74:2d:d3:ec:a0:06:59:e6:de:40:80:a7:1d:28:
fd:91:d1:6a:af:ab:86:17:70:a2:6c:26:4b:08:2e:
e4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:38:65:B7:71:1F:E7:E7:E3:BA:80:F4:00:20:CD:0B:77:78:4B:7B
X509v3 Authority Key Identifier:
keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:82:cc:25:43:03:0e:5e:87:65:cb:d0:77:61:ff:f7:8a:7b:
8c:d7:62:c3:6f:82:67:bd:2b:c1:38:32:4f:7d:f7:3d:9d:de:
3f:19:ab:50:9b:4a:e1:e2:00:6f:c7:2d:f6:5f:97:b0:b3:13:
96:72:15:c6:1c:ba:45:83:60:e1:63:67:75:72:3e:ce:44:cf:
b2:4c:d6:01:f6:1f:a2:1a:41:4c:a4:15:2d:4e:09:50:1a:1f:
0b:94:74:63:ef:0e:a2:a9:ed:d0:b9:38:08:35:ca:df:89:51:
ed:69:f4:8b:6b:59:43:a9:93:82:df:8f:69:ae:b4:a3:16:3f:
4c:e9:9d:ba:4f:f9:be:aa:72:21:0b:76:c8:26:f0:ec:7d:3d:
2c:40:bd:6a:60:2d:3d:1d:0c:e2:b3:76:4b:1f:2a:b8:42:47:
7f:70:40:5c:4e:d0:04:50:dd:d4:2e:88:fb:75:12:88:d0:bf:
0c:1e:6f:ca:7e:13:fd:59:57:20:21:70:f0:3f:92:83:63:e8:
41:2e:5c:a9:9f:20:19:a2:03:67:64:25:4d:c5:5e:64:fc:47:
33:b7:08:da:91:17:6c:1b:ce:1d:5a:d9:75:4b:93:a8:ba:b9:
16:08:a0:61:bc:78:6d:8d:6a:68:b3:14:cf:be:a8:08:a4:f7:
ca:fa:5b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:33 2026 by rpki-client