
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
File: P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json)
Hash identifier: v8Wz8jx4D3zn0zRV3v+RHCVYewGbNYXZHR8sPIsVbU0=
Subject key identifier: 01:0C:84:E9:49:DC:77:87:FD:48:06:D2:CC:45:18:33:90:DD:57:E5
Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
Certificate issuer: /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Certificate serial: 01A17B4D670A0014475C822F4D01A2F4E5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
Manifest number: 05D9
Signing time: Tue 27 Oct 2026 03:00:32 +0000
Manifest this update: Tue 27 Oct 2026 03:00:32 +0000
Manifest next update: Wed 28 Oct 2026 03:00:32 +0000
Files and hashes: 1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: 8hLk3kompjRCqFhtAd0n0LMOZFJiqRKvn3YGspMEwYA=)
2: wmftFtvbm2f7JWmltpRyVvfDvRg.roa (hash: ifS1jUFk0Eu0JB0mDMS9nd/R8eNPClng/HidlRk7lts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:67:0a:00:14:47:5c:82:2f:4d:01:a2:f4:e5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Validity
Not Before: Oct 27 03:00:32 2026 GMT
Not After : Oct 28 03:00:32 2026 GMT
Subject: CN=010c84e949dc7787fd4806d2cc45183390dd57e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5e:45:9f:cd:93:ef:f0:14:6d:b7:6c:06:ff:
60:40:8e:f6:ca:10:0c:20:e2:1a:c8:a6:d1:25:ac:
da:da:71:15:c3:e1:87:54:90:4b:be:6a:cd:67:fa:
c5:66:47:8f:5a:19:b2:04:37:11:d8:bd:e7:36:88:
8d:0a:9c:67:6e:7e:c7:4c:f1:8a:59:53:a4:85:82:
7d:16:ad:53:6d:e5:12:88:76:ed:5b:b8:eb:ba:89:
27:77:32:23:cf:2b:50:0f:82:11:ba:e3:ca:0b:f3:
b8:ff:f9:c6:89:b4:ac:ce:d3:e8:49:d8:8c:f3:fd:
d7:8d:6e:0f:02:89:58:8e:35:fa:d9:11:9e:c8:2e:
6a:15:59:e7:62:51:68:f2:4c:32:e0:c8:73:18:96:
3e:a4:eb:f2:f5:9f:68:d4:34:c9:6d:4e:ac:a5:6b:
04:b3:66:9b:89:ef:8e:19:01:0b:28:6e:e3:f2:f4:
ed:21:00:2b:24:8d:63:bd:45:bf:e0:7a:0d:7d:66:
d5:04:53:6f:08:df:b9:5b:fd:2b:60:6b:7c:61:37:
9c:bb:53:05:7a:81:0b:44:d2:2c:e4:73:ba:50:71:
06:2b:4a:10:65:50:68:16:64:78:9f:b4:b3:61:76:
e3:3b:77:f1:fb:ca:b1:e1:d4:05:bc:9d:d1:89:a0:
aa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0C:84:E9:49:DC:77:87:FD:48:06:D2:CC:45:18:33:90:DD:57:E5
X509v3 Authority Key Identifier:
keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c5:ed:e9:fd:0c:79:2e:76:ce:21:98:e1:11:c7:07:9e:fa:
c0:94:72:12:fa:f4:c5:35:62:f8:18:a1:ec:d2:b5:27:55:e9:
90:a9:1c:af:5e:46:58:09:04:9e:b4:ca:94:51:78:45:35:cb:
e8:17:43:4d:52:a1:8a:24:03:dd:7c:1f:e4:d8:db:df:a9:f9:
0e:6a:27:87:0b:24:03:37:b9:b0:ee:33:5e:f2:13:f2:73:d1:
c5:8b:3d:a2:9e:47:d4:e9:3e:95:1d:77:eb:f4:ce:ab:fe:9b:
ca:af:7e:f7:a5:87:02:9a:d6:53:d1:70:1b:ba:19:ce:41:15:
9b:74:d3:18:d8:20:b5:aa:fd:bd:0f:f5:2e:fb:7e:dc:a3:75:
8f:be:23:b7:18:a6:09:7c:9d:8a:b5:86:a4:b3:b9:d5:84:f7:
9d:9b:69:bd:6d:97:63:84:9e:38:6e:45:ed:be:87:e0:29:00:
09:9f:16:3f:bf:f5:a6:3b:e4:bb:33:f0:77:ce:36:8b:36:6d:
30:f0:c3:19:e3:a8:1c:0a:74:8f:75:fe:3f:ac:1b:32:c3:e7:
7c:f7:50:41:ae:6a:2c:d6:02:bb:6a:ca:2e:9c:42:77:2b:04:
f6:54:fe:cc:f5:36:45:42:46:04:2e:af:d0:61:60:aa:ed:6a:
1d:ca:6b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:39:29 2026 by rpki-client