Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
File: P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json)
Hash identifier: vjaFYS/RcCNc5GM5p/hIr5y7xlCNeuxZkkinq2bZq8A=
Subject key identifier: D7:C8:7A:DD:4F:A4:53:E0:DC:3B:AA:F1:1B:28:7B:6D:34:28:16:20
Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
Certificate issuer: /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Certificate serial: 019FA9E2A160A233AA39592AF10E1F07D45C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
Manifest number: 04E8
Signing time: Tue 28 Jul 2026 18:00:29 +0000
Manifest this update: Tue 28 Jul 2026 18:00:29 +0000
Manifest next update: Wed 29 Jul 2026 18:00:29 +0000
Files and hashes: 1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: EO2HPNIciaCqup0rQF6OVQQ5OnjiLy0t3LYX9z6Sm/Y=)
2: wmftFtvbm2f7JWmltpRyVvfDvRg.roa (hash: ifS1jUFk0Eu0JB0mDMS9nd/R8eNPClng/HidlRk7lts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:a1:60:a2:33:aa:39:59:2a:f1:0e:1f:07:d4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Validity
Not Before: Jul 28 18:00:29 2026 GMT
Not After : Jul 29 18:00:29 2026 GMT
Subject: CN=d7c87add4fa453e0dc3baaf11b287b6d34281620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:54:3b:46:55:b5:03:f7:73:9a:d0:41:c3:32:
72:24:b2:12:be:9e:41:c5:10:e5:58:af:41:da:08:
77:ef:29:de:3d:1f:56:d3:00:48:5e:b6:1e:66:72:
6b:77:bb:f3:76:7c:c5:c7:19:67:32:95:82:85:c1:
7a:07:35:cd:34:13:a5:98:9c:31:02:41:39:f3:de:
7c:23:86:28:59:c8:e8:17:c2:0f:e3:aa:e7:e7:9f:
76:da:d8:e3:58:58:0e:ca:d7:89:eb:9c:aa:d2:14:
4a:ea:c3:e0:9b:a0:72:59:30:70:92:84:95:c8:a3:
e1:2a:76:d0:70:95:ca:b3:53:79:8c:c8:df:c7:ba:
ea:be:b2:0b:e3:ad:00:7a:23:f5:0c:01:ec:a2:a9:
52:2d:6c:d0:70:b6:bc:6f:b7:be:d3:4a:2d:de:98:
43:e1:58:d1:0c:ff:cd:ea:77:17:e1:e6:d5:96:42:
e7:a4:4f:f5:ba:6b:36:90:a3:37:ea:2e:cf:90:23:
81:c7:75:72:fa:b7:5b:c0:e5:18:9a:0d:9d:9b:e5:
c0:12:81:8b:7f:67:52:fb:7a:76:7e:b6:73:2c:6b:
55:9c:66:94:c5:2e:34:ea:1e:8d:ff:fd:0f:a3:f3:
10:ef:53:aa:7b:c6:5e:9d:07:4f:1d:db:1c:ab:58:
6b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C8:7A:DD:4F:A4:53:E0:DC:3B:AA:F1:1B:28:7B:6D:34:28:16:20
X509v3 Authority Key Identifier:
keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:4f:0c:da:65:d9:e0:03:ed:35:99:ac:1e:b0:36:33:b2:6a:
a6:b9:a8:fe:ad:29:6a:74:17:af:b6:80:dc:18:27:38:38:44:
56:13:b4:1c:09:bd:dc:f8:73:7b:11:4a:4b:f4:e4:04:57:ff:
f8:e7:3f:d6:f0:00:e6:55:c4:bd:14:4c:c1:9e:35:d8:2b:02:
0f:00:19:ee:0f:0d:3f:59:b0:37:61:91:75:ac:0a:ce:0e:a1:
60:36:52:c9:a2:3e:4c:29:62:ee:a4:c3:aa:3c:2e:c4:7a:fa:
93:61:0b:1d:74:9b:6e:64:00:95:c2:90:84:7c:a9:1b:53:dd:
82:38:0a:0a:27:13:49:ac:17:fa:34:55:6c:18:df:71:15:3a:
e4:13:d5:b0:52:3e:66:a7:ca:7b:15:f2:f4:e0:98:90:25:f6:
67:1e:23:ba:3d:a2:cb:b0:b8:16:ab:79:c4:26:86:35:ea:e3:
de:2c:3d:22:dc:ca:4d:57:12:53:14:c4:87:a3:9b:dc:ab:f2:
54:51:eb:c7:4e:33:0d:64:14:ba:fc:32:c4:18:d0:8d:38:8a:
fd:b3:3c:6d:bf:40:ec:81:9c:5a:8c:de:ac:bd:91:c3:bf:c9:
23:b9:c9:6f:0b:4e:a1:11:a9:80:eb:3d:06:c7:ae:14:4e:eb:
6e:96:a8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:56:05 2026 by rpki-client