Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
File: P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json)
Hash identifier: QHct3DrRNjobkmLBaurnt/aYfqAeOVo8prq2y83OCEc=
Subject key identifier: BE:4C:86:2D:43:0C:F7:FC:12:0B:BD:31:7B:23:FD:20:78:0A:2F:CF
Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
Certificate issuer: /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Certificate serial: 019D9AAC211D6582BFEDF0EB29CB4EA27BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
Manifest number: 03D7
Signing time: Fri 17 Apr 2026 09:01:05 +0000
Manifest this update: Fri 17 Apr 2026 09:01:05 +0000
Manifest next update: Sat 18 Apr 2026 09:01:05 +0000
Files and hashes: 1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: 0ycYeMu97hcPqWQ7X/F4C1gYDAMwE7XJqg5vCjGJJME=)
2: wmftFtvbm2f7JWmltpRyVvfDvRg.roa (hash: ifS1jUFk0Eu0JB0mDMS9nd/R8eNPClng/HidlRk7lts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:21:1d:65:82:bf:ed:f0:eb:29:cb:4e:a2:7b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Validity
Not Before: Apr 17 09:01:05 2026 GMT
Not After : Apr 18 09:01:05 2026 GMT
Subject: CN=be4c862d430cf7fc120bbd317b23fd20780a2fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f7:cf:aa:9c:82:1e:48:e8:7b:b4:1a:36:74:
a6:82:61:a4:f3:06:97:36:b8:56:03:7f:3f:a2:08:
04:62:6b:fa:7e:10:07:bc:21:ff:b4:62:f9:3a:b9:
a1:40:9c:20:90:ca:e9:b5:90:74:39:6e:dc:b6:27:
48:89:6d:29:e3:5c:0f:43:db:48:a3:7f:21:25:b4:
31:11:bc:e2:ec:ec:aa:68:3a:eb:8c:d6:cf:0d:d5:
0a:c6:bc:47:8f:c8:8a:14:2e:1b:f2:08:07:79:8a:
f9:de:3e:27:eb:e7:54:00:cb:b8:a9:4e:5b:49:c1:
d0:07:76:dd:87:06:3d:72:69:e0:c8:df:42:b3:78:
7b:43:f8:9c:ef:53:60:5a:01:5a:ed:34:cc:96:91:
ab:9d:11:e8:1b:35:23:a0:31:d6:40:dc:89:48:02:
70:96:1f:f1:03:12:5b:ac:40:7b:db:5b:7e:bc:1a:
e8:20:4e:9d:11:48:33:5d:ec:e3:7c:19:4b:e5:9c:
0b:c9:da:5c:82:fc:46:4e:a0:64:20:d2:0b:b9:f5:
f0:d9:c4:c9:62:4f:25:e2:a7:e1:95:1a:f0:58:02:
f4:c2:90:38:be:e5:2a:64:5f:38:cf:05:f7:a5:d3:
49:38:3a:cb:5a:bc:a8:14:b4:b1:f1:38:1c:c8:20:
aa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4C:86:2D:43:0C:F7:FC:12:0B:BD:31:7B:23:FD:20:78:0A:2F:CF
X509v3 Authority Key Identifier:
keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:a8:f3:4c:ba:6d:b9:7d:cd:50:c0:23:3a:83:ba:0b:09:df:
06:58:a1:bf:c6:7b:4c:fa:07:20:aa:49:f4:ad:4d:73:dc:19:
9e:b3:6c:b0:6a:36:a8:30:47:14:1a:ff:8e:60:a0:0c:46:53:
98:02:aa:b9:c0:64:21:f8:7f:a2:8b:56:a4:d8:cd:da:2d:c2:
05:7e:9a:f1:b7:e1:76:15:f2:a3:56:97:fe:12:cf:8e:a5:fc:
9a:71:b7:97:3b:8e:3f:f1:44:3a:29:a7:93:84:b3:1f:57:46:
c7:d2:00:cd:af:87:0f:6a:c1:af:07:56:9b:9f:62:af:c9:60:
e4:af:1c:96:fc:01:13:a0:d6:a6:7c:f4:00:22:b5:34:8c:41:
4d:29:1f:95:7b:b7:73:54:39:1f:82:65:cf:5e:a4:1f:40:15:
c2:39:65:df:91:0d:1f:a0:64:33:e6:2b:36:88:79:79:0a:81:
2b:ec:93:47:2a:82:54:16:d3:97:24:8e:da:73:6e:e0:92:bc:
8f:1e:75:90:21:c7:53:b3:1e:ce:d9:b4:1d:2c:2a:ed:75:a7:
80:a3:e8:e6:aa:86:fd:65:0d:ee:b8:d4:1e:7f:ee:31:bc:62:
33:27:c3:58:ed:89:c3:b0:cd:d9:43:df:3c:16:fe:11:09:73:
b1:2d:c6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:13:48 2026 by rpki-client