Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
File: P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json)
Hash identifier: hwYh87GKeyZUTTY/mHufzeJA54aT4tw8rkpII1NoqAI=
Subject key identifier: 26:53:33:ED:4B:3E:98:AF:F1:57:0A:80:6F:6D:67:8D:5C:29:D4:56
Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
Certificate issuer: /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Certificate serial: 019FA7F4F2B0D64744C508E33435E6EE5532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
Manifest number: 04E7
Signing time: Tue 28 Jul 2026 09:01:15 +0000
Manifest this update: Tue 28 Jul 2026 09:01:15 +0000
Manifest next update: Wed 29 Jul 2026 09:01:15 +0000
Files and hashes: 1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: 2jzmvfLqRjlif26zKH3+qlerQN4/wEEuQ7BFHUXZmAY=)
2: wmftFtvbm2f7JWmltpRyVvfDvRg.roa (hash: ifS1jUFk0Eu0JB0mDMS9nd/R8eNPClng/HidlRk7lts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:f2:b0:d6:47:44:c5:08:e3:34:35:e6:ee:55:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Validity
Not Before: Jul 28 09:01:15 2026 GMT
Not After : Jul 29 09:01:15 2026 GMT
Subject: CN=265333ed4b3e98aff1570a806f6d678d5c29d456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c9:cb:0e:c0:2a:2e:bb:a5:8d:fc:b8:08:e0:
e0:c9:4d:86:41:b9:e3:fe:40:13:47:2f:28:60:21:
37:54:78:47:8f:79:3b:d7:36:6b:49:cb:7c:c2:4c:
32:1c:9e:1a:25:87:ce:d5:48:e9:48:fd:f0:1c:24:
68:0a:1a:e4:53:ad:35:ef:f2:e2:3d:4f:cd:6d:ca:
61:ac:1f:93:f9:fd:ec:29:7e:85:e7:ed:fa:e8:6b:
8e:62:c5:5d:d2:13:0b:a7:f4:45:22:40:21:d3:83:
4f:94:f5:77:b5:42:28:fe:48:8f:bd:1b:c7:45:42:
05:08:9e:19:cc:a1:87:c6:28:4a:0a:f5:49:d6:29:
da:50:73:06:bd:a7:b6:76:ae:86:cb:f5:04:53:9f:
60:0a:02:ce:7d:bb:de:10:8d:06:e6:5c:a5:2d:19:
33:e8:3d:a3:26:23:34:59:d1:7e:61:52:26:86:d8:
3f:68:fc:a0:20:c4:e2:85:b9:27:f5:44:17:ff:5e:
12:bb:3e:69:5d:4c:a8:22:12:e4:6e:04:e1:32:a1:
c8:59:88:5e:d4:3e:f7:b4:c5:ea:0b:c6:c1:c1:4c:
61:04:d3:11:14:b3:9e:a9:17:80:39:67:fb:c1:f1:
7f:85:1c:03:1c:29:a0:05:5b:0e:5b:67:16:14:08:
eb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:53:33:ED:4B:3E:98:AF:F1:57:0A:80:6F:6D:67:8D:5C:29:D4:56
X509v3 Authority Key Identifier:
keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:0f:ad:a2:08:c6:fc:ef:5b:ff:e6:15:ce:d6:f3:43:74:47:
f2:23:bd:af:3f:43:33:46:0d:32:6f:1c:fd:dd:42:0c:25:f8:
b4:6c:83:81:c0:e7:20:b6:7e:6f:0f:1b:16:b8:3c:05:89:96:
69:b1:7e:ec:71:cc:5f:86:71:9c:33:27:0e:eb:95:f9:01:b6:
4f:db:dc:df:46:e8:1a:4c:02:cd:ed:bd:d8:72:d6:85:b5:2c:
4d:20:0e:74:26:6d:89:4c:0b:de:68:04:fc:cb:46:69:64:c5:
2e:eb:8d:6b:4e:4a:2c:eb:ff:d4:fb:e4:d8:c3:6f:8d:e8:76:
a7:af:70:2f:10:16:c0:f6:df:a2:7d:af:03:da:7b:77:4c:e0:
be:72:64:e2:e0:65:d8:b7:00:2e:40:b9:25:f1:97:46:d5:40:
c7:cc:ed:63:5d:72:ec:8a:59:fa:63:31:67:bf:37:df:57:bd:
74:10:06:f0:9c:e6:e8:b2:81:9d:65:cc:01:f9:44:3e:eb:90:
cb:5c:d6:65:b6:2d:82:1a:e4:0f:5b:6e:a4:7d:af:ea:a7:93:
f8:f5:f3:21:06:9b:e2:b0:2e:45:3d:95:ef:91:fd:a7:5c:41:
75:e0:8d:59:96:65:2d:37:ee:15:ff:26:67:40:1f:e1:6f:9c:
f5:10:1b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 10:35:01 2026 by rpki-client