Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
File: P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json)
Hash identifier: UKDyatUpqriSbCNrm+9YUMTvySWildDZ3/5QhNy4hV8=
Subject key identifier: 06:0C:A4:D2:FB:D9:E0:18:D8:06:6E:1F:E5:77:6B:98:6A:A3:CF:68
Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
Certificate issuer: /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Certificate serial: 01A0CF6D828FE910610F8ACD17E5732D9D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
Manifest number: 0580
Signing time: Wed 23 Sep 2026 18:00:55 +0000
Manifest this update: Wed 23 Sep 2026 18:00:55 +0000
Manifest next update: Thu 24 Sep 2026 18:00:55 +0000
Files and hashes: 1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: 2t/srGFLh/g6wfvSuWwRSr/gxRLE3SU5P2RX5/Kd0LM=)
2: wmftFtvbm2f7JWmltpRyVvfDvRg.roa (hash: ifS1jUFk0Eu0JB0mDMS9nd/R8eNPClng/HidlRk7lts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:82:8f:e9:10:61:0f:8a:cd:17:e5:73:2d:9d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Validity
Not Before: Sep 23 18:00:55 2026 GMT
Not After : Sep 24 18:00:55 2026 GMT
Subject: CN=060ca4d2fbd9e018d8066e1fe5776b986aa3cf68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ee:73:76:fe:f4:e7:c0:13:50:a6:16:95:81:
9f:38:cf:70:d8:a4:08:3c:43:77:ef:31:b6:4e:12:
b0:12:7c:7d:a4:fb:e6:92:7f:4a:7c:8f:37:90:a7:
53:ad:23:00:89:9c:58:b4:b4:f1:e6:1f:6f:3e:56:
d9:82:72:37:43:7c:c2:35:d7:a5:d1:60:0d:60:60:
b5:f8:fb:23:99:45:16:8f:62:8f:eb:fc:76:73:19:
3f:13:2a:b4:1a:a6:1c:e9:68:a7:a6:cc:ca:4a:22:
8c:b0:8f:73:d1:49:57:c4:e0:d1:7f:0b:63:1b:19:
7c:a6:0e:90:5d:4b:21:29:b7:a9:20:4b:0b:7f:50:
6a:6b:12:30:1f:e1:90:3c:70:6b:b7:18:da:6d:75:
de:a9:76:56:23:d5:af:88:8a:b5:df:f2:22:32:b3:
4a:88:b7:0e:4a:5c:fa:88:47:f7:69:78:c8:4f:1e:
04:97:e2:6a:0a:d1:f0:e6:c6:bb:29:f8:fe:20:92:
4b:a5:20:e1:1d:5d:92:25:1f:dd:c2:9c:78:41:de:
f3:55:6c:b0:52:86:06:b0:ad:e7:1e:bc:c1:ad:38:
e2:37:9c:76:bf:59:18:bb:08:81:b4:92:1f:05:96:
e9:10:72:ab:83:bc:72:b3:9c:c8:68:b7:0f:e4:27:
a8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0C:A4:D2:FB:D9:E0:18:D8:06:6E:1F:E5:77:6B:98:6A:A3:CF:68
X509v3 Authority Key Identifier:
keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7c:0d:07:d2:c5:3b:ee:4d:a2:f7:e1:d1:ce:41:b0:2c:2c:
48:8c:af:da:64:75:5a:63:bb:88:8c:e2:f6:3f:7a:e8:a2:0f:
3f:05:d4:3a:7b:ef:97:59:db:a2:91:54:3e:5f:e5:15:87:6d:
a2:5e:7d:78:9e:07:21:3d:ce:25:f4:01:cc:2f:2f:62:04:29:
40:82:19:6d:93:45:e9:eb:fc:65:6f:d1:12:7d:1f:ee:2b:c1:
8b:ba:38:c1:f2:6d:8a:22:8d:e6:df:00:83:6b:dd:a6:03:a1:
67:ed:8a:2d:2a:20:50:53:00:f5:e4:09:d0:22:97:66:64:10:
c5:bb:7d:82:f9:c3:ff:3a:6b:8f:09:ab:50:f1:71:ac:a2:6a:
1a:c9:8e:43:43:15:aa:2d:31:99:c9:64:4d:d6:3b:7b:c9:c3:
cf:45:11:f2:82:8f:d9:56:cc:5c:06:25:65:2b:05:5a:92:d9:
e2:86:6d:7a:d8:06:92:6e:2d:78:9a:7d:bf:40:1c:29:3d:af:
d7:eb:cd:17:87:c7:50:30:1c:9a:09:80:74:1c:68:e4:fc:3d:
81:c2:68:4f:88:90:30:94:c7:b3:fa:d3:5b:72:b5:a6:73:cc:
b8:ae:24:eb:d5:4e:4d:21:81:b1:b3:5f:75:f2:68:b1:e4:e9:
47:59:38:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:22:51 2026 by rpki-client