Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
File: P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json)
Hash identifier: 4QT7yrR9B6dFIM6sOE0GxH3wuIOGpXtzUWnmWheK168=
Subject key identifier: 8B:47:A8:ED:5A:73:C7:E1:D6:CA:D6:4A:4A:AB:B4:97:9C:2A:53:5F
Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
Certificate issuer: /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Certificate serial: 01A0C3D707CB4F4442615324D65F1DA336C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
Manifest number: 057A
Signing time: Mon 21 Sep 2026 12:00:44 +0000
Manifest this update: Mon 21 Sep 2026 12:00:44 +0000
Manifest next update: Tue 22 Sep 2026 12:00:44 +0000
Files and hashes: 1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: QbDADhWntiXhbIBv5F90sSIueiekL5/4AoD7UvfAaAk=)
2: wmftFtvbm2f7JWmltpRyVvfDvRg.roa (hash: ifS1jUFk0Eu0JB0mDMS9nd/R8eNPClng/HidlRk7lts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:07:cb:4f:44:42:61:53:24:d6:5f:1d:a3:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Validity
Not Before: Sep 21 12:00:44 2026 GMT
Not After : Sep 22 12:00:44 2026 GMT
Subject: CN=8b47a8ed5a73c7e1d6cad64a4aabb4979c2a535f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ad:a9:7a:22:5a:a4:33:6b:a1:d9:3a:58:d3:
b6:e6:36:3b:bb:27:79:25:0f:29:31:15:bc:fd:46:
5b:2c:d7:54:ce:72:2f:c7:65:c8:f6:ed:80:cb:65:
18:0f:08:fc:54:ca:b6:ff:68:37:76:18:bd:89:32:
3b:39:bb:c5:96:be:22:9d:64:84:3c:06:62:77:70:
ac:ac:2f:bc:16:81:d2:c2:1a:42:02:cd:74:2d:5f:
51:b0:d3:e5:f6:c2:9f:28:01:2f:d9:07:e0:eb:9a:
23:21:cc:e0:fc:f6:26:f4:f7:b1:0f:50:bf:0c:7d:
ac:be:de:6a:a2:c8:86:a7:23:da:3e:b5:09:55:f4:
0c:6e:d0:e8:9d:3c:85:49:14:b6:39:12:86:f5:a2:
82:0e:9d:b6:d0:d7:23:21:7c:8a:2f:b0:e5:1c:5d:
e6:8c:a3:42:15:70:40:40:35:90:0d:a8:c9:03:ce:
ab:02:8c:d2:4b:31:46:77:fa:c8:17:b4:9e:e9:81:
c6:90:6b:b0:5d:39:2c:48:d7:f9:1a:77:e8:d4:35:
38:fc:3f:51:b0:f9:13:10:7c:42:fe:3e:6c:be:1d:
42:08:21:41:36:13:3e:7c:5b:db:53:af:f0:6e:c1:
69:40:b4:23:b7:cf:d0:01:6b:9d:69:58:43:4c:31:
b5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:47:A8:ED:5A:73:C7:E1:D6:CA:D6:4A:4A:AB:B4:97:9C:2A:53:5F
X509v3 Authority Key Identifier:
keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:43:2a:43:e8:d5:5e:7d:4d:33:ea:fc:40:54:dd:98:34:c7:
02:bb:45:c6:49:2a:d7:56:87:31:88:be:10:31:19:61:3b:1e:
35:62:50:5c:cf:5e:15:83:89:18:5d:4a:ad:4d:a4:a8:eb:de:
9b:27:15:45:a6:f3:76:d3:76:7a:7b:e2:8e:1c:0a:e7:67:9e:
cc:f1:c0:7b:ff:01:cf:d6:f8:5a:60:ff:5b:1b:ee:7d:b7:45:
f2:c7:71:8c:99:5b:2a:ca:6f:09:17:b1:f7:c1:bc:ec:30:0b:
b0:9e:4d:4b:8f:22:63:17:cb:99:bf:8c:86:92:f5:01:f6:f7:
e5:cb:1a:2f:90:94:bb:08:64:d9:59:20:e0:7e:7f:0c:24:8a:
43:f2:ad:65:7e:f1:7f:d0:bd:a0:0f:ba:00:6e:69:87:ca:bd:
5e:c5:0f:99:88:cd:96:4f:1b:f2:fe:9b:85:fe:ad:3c:3d:65:
6b:8c:73:85:de:81:43:68:52:f6:83:fa:7c:b9:a6:70:c2:7c:
e0:76:e1:12:b0:4d:f6:53:4c:23:7b:84:28:28:8b:20:bb:2c:
44:64:92:aa:c8:93:15:f4:c6:fe:29:85:d8:f0:0a:d1:0e:23:
14:09:99:bd:6e:fc:0a:45:27:4b:c4:cb:19:cc:19:20:ce:c1:
e2:ba:a4:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDD1wfLT0RCYVMk1l8dozbAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZmM2Y2RmZTE5NmQ1YjM5ZDJlYTYwZTkwYzk1ZGI3MDQ0
NWQ5YjkwHhcNMjYwOTIxMTIwMDQ0WhcNMjYwOTIyMTIwMDQ0WjAzMTEwLwYDVQQD
Eyg4YjQ3YThlZDVhNzNjN2UxZDZjYWQ2NGE0YWFiYjQ5NzljMmE1MzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4q2peiJapDNrodk6WNO25jY7uyd5
JQ8pMRW8/UZbLNdUznIvx2XI9u2Ay2UYDwj8VMq2/2g3dhi9iTI7ObvFlr4inWSE
PAZid3CsrC+8FoHSwhpCAs10LV9RsNPl9sKfKAEv2Qfg65ojIczg/PYm9PexD1C/
DH2svt5qosiGpyPaPrUJVfQMbtDonTyFSRS2ORKG9aKCDp220NcjIXyKL7DlHF3m
jKNCFXBAQDWQDajJA86rAozSSzFGd/rIF7Se6YHGkGuwXTksSNf5Gnfo1DU4/D9R
sPkTEHxC/j5svh1CCCFBNhM+fFvbU6/wbsFpQLQjt8/QAWudaVhDTDG18QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItHqO1ac8fh1srWSkqrtJecKlNfMB8GA1UdIwQY
MBaAFD/8bN/hltWznS6mDpDJXbcERdm5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUF94czMtR1cxYk9kTHFZT2tNbGR0d1JGMmJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80YWJmODEtNTQxNy00M2FjLWI1OWMt
MTU1YjM5ZTA3NmMyLzEvUF94czMtR1cxYk9kTHFZT2tNbGR0d1JGMmJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy80YWJmODEtNTQxNy00M2FjLWI1OWMtMTU1YjM5ZTA3NmMy
LzEvUF94czMtR1cxYk9kTHFZT2tNbGR0d1JGMmJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxEMqQ+jV
Xn1NM+r8QFTdmDTHArtFxkkq11aHMYi+EDEZYTseNWJQXM9eFYOJGF1KrU2kqOve
mycVRabzdtN2envijhwK52eezPHAe/8Bz9b4WmD/WxvufbdF8sdxjJlbKspvCRex
98G87DALsJ5NS48iYxfLmb+MhpL1Afb35csaL5CUuwhk2Vkg4H5/DCSKQ/KtZX7x
f9C9oA+6AG5ph8q9XsUPmYjNlk8b8v6bhf6tPD1la4xzhd6BQ2hS9oP6fLmmcMJ8
4HbhErBN9lNMI3uEKCiLILssRGSSqsiTFfTG/imF2PAK0Q4jFAmZvW78CkUnS8TL
GcwZIM7B4rqkjw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:54:43 2026 by rpki-client