Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
File: P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json)
Hash identifier: i76Ab7CA7fq7732FP80sTj8XWEtyI8UjKwYn5FZmSXE=
Subject key identifier: CA:27:C9:58:C2:80:18:30:02:08:C8:B8:D6:2A:19:30:0A:FA:A0:D9
Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
Certificate issuer: /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Certificate serial: 019CAD22B0B9E18F5B0861BE5A805CCD3C1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
Manifest number: 035C
Signing time: Mon 02 Mar 2026 06:00:57 +0000
Manifest this update: Mon 02 Mar 2026 06:00:57 +0000
Manifest next update: Tue 03 Mar 2026 06:00:57 +0000
Files and hashes: 1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: oPa41uljUARtIDSHC5kEMZKFXszIGYnqmxcVhPC/BsU=)
2: wmftFtvbm2f7JWmltpRyVvfDvRg.roa (hash: ifS1jUFk0Eu0JB0mDMS9nd/R8eNPClng/HidlRk7lts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:b0:b9:e1:8f:5b:08:61:be:5a:80:5c:cd:3c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Validity
Not Before: Mar 2 06:00:57 2026 GMT
Not After : Mar 3 06:00:57 2026 GMT
Subject: CN=ca27c958c28018300208c8b8d62a19300afaa0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:e6:e3:7d:ed:5e:dc:17:c9:54:55:3b:42:
4f:6c:1e:ee:b3:c1:89:fa:04:a4:06:9e:7b:59:ba:
47:eb:f4:4e:e5:e5:a7:1e:17:26:59:4a:3e:98:08:
7a:8e:7c:9d:7b:f3:fd:b4:19:11:e9:90:3a:65:2d:
f3:bc:27:d3:81:70:24:5e:2d:c6:6f:25:ef:67:7b:
11:4c:67:09:15:84:71:45:3a:ad:5a:0d:02:b2:70:
4f:3c:d5:23:ae:24:37:e5:71:13:26:70:37:f8:11:
e4:d7:7f:9a:bf:45:e4:f0:30:50:e8:8b:08:76:fa:
b3:07:37:8c:a0:f7:b4:90:98:1d:7c:93:20:84:cd:
5b:51:b1:41:03:60:20:ed:1f:fa:f3:dd:07:f5:c8:
4b:5b:27:8f:91:e9:58:c5:22:2c:b6:12:b6:05:96:
b7:59:e6:70:ac:bf:cb:a2:97:99:78:bc:de:7e:0c:
38:4f:49:b8:64:cf:a3:8f:73:04:17:30:74:55:e5:
44:b4:1c:fb:08:38:1f:62:2e:1c:d7:34:c2:c5:d7:
fa:a8:fe:68:96:22:ca:3e:d6:bf:a4:66:a3:85:66:
23:04:ff:60:a2:1f:8e:46:64:99:ab:e2:e8:3c:b0:
fb:9a:c7:e1:61:73:90:28:fe:49:74:bd:bf:51:b3:
2a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:27:C9:58:C2:80:18:30:02:08:C8:B8:D6:2A:19:30:0A:FA:A0:D9
X509v3 Authority Key Identifier:
keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c5:a9:14:f8:ee:1c:d3:ad:39:47:54:45:e9:23:51:dc:53:
63:f1:10:df:22:6c:50:29:44:49:3a:32:6f:5f:53:07:ba:fa:
70:ba:2f:70:49:21:c6:a6:68:cb:80:c4:d3:70:4f:6a:d1:df:
ca:5a:40:e7:e0:44:e9:6f:35:24:49:f6:eb:c7:4c:a1:a0:79:
45:1f:34:7f:92:a5:f2:a4:0c:d0:ca:52:fd:9e:92:2c:16:12:
db:79:7b:9f:00:f2:0f:8f:75:9e:3e:64:09:fd:d1:27:10:44:
91:9b:3a:99:9c:ce:c7:1b:6d:fd:f4:43:b3:35:86:db:54:07:
fd:c5:9c:20:fd:27:b5:d5:7e:f3:2f:f8:e7:26:88:e8:a1:ad:
64:87:9c:7e:0a:ea:57:43:fd:ff:2e:67:63:81:af:98:8f:6c:
6f:5e:55:ae:77:b2:8a:14:7a:52:5a:0a:7d:f1:bc:0e:16:b0:
59:c6:dc:b6:b6:59:03:0c:cf:d3:d6:29:5d:ac:23:80:89:28:
33:50:a5:dc:79:f2:b0:ea:fc:cc:bd:f9:5f:47:bc:52:86:74:
b8:94:5e:99:bb:cb:51:0d:c7:36:12:f7:fe:52:32:85:ac:d8:
7f:57:3c:0e:a4:72:66:9f:32:38:24:36:cf:35:85:81:aa:26:
ab:d9:a6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:23 2026 by rpki-client