Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
File: P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json)
Hash identifier: cVwHq5YAtMQod4Fh1Mgt21lCwMI1SVbmIk/Dno4eub0=
Subject key identifier: F4:FE:A2:43:2E:AB:11:8A:AA:0E:48:49:4A:D6:B7:E5:F6:F7:05:07
Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
Certificate issuer: /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Certificate serial: 019E1DFDEDC6190C69D8B3E928CDA79A03ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
Manifest number: 041B
Signing time: Tue 12 May 2026 21:00:41 +0000
Manifest this update: Tue 12 May 2026 21:00:41 +0000
Manifest next update: Wed 13 May 2026 21:00:41 +0000
Files and hashes: 1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: 14viFuCJU6f5xWaiGMn2VoytQuThTocjRf0U8LtoTwU=)
2: wmftFtvbm2f7JWmltpRyVvfDvRg.roa (hash: ifS1jUFk0Eu0JB0mDMS9nd/R8eNPClng/HidlRk7lts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:ed:c6:19:0c:69:d8:b3:e9:28:cd:a7:9a:03:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Validity
Not Before: May 12 21:00:41 2026 GMT
Not After : May 13 21:00:41 2026 GMT
Subject: CN=f4fea2432eab118aaa0e48494ad6b7e5f6f70507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:67:f2:08:4f:47:a4:78:e6:77:d2:8d:14:f5:
08:25:b4:f5:b1:98:de:00:0e:c9:1b:b0:af:12:bd:
b2:15:89:62:2d:61:9a:29:7b:ec:8c:77:14:b7:2f:
14:92:63:35:e1:01:0d:2e:ec:c6:83:1a:9f:95:59:
fc:4c:39:f0:67:bf:02:93:37:5a:1a:a7:07:9f:28:
c9:69:d3:32:2e:87:fc:84:10:bd:19:f9:d6:bd:46:
7a:09:c7:82:8a:6d:c0:dc:ee:95:c9:cc:ef:84:d5:
8a:61:48:f7:76:2b:49:80:02:11:d2:05:22:6a:82:
a9:fc:1a:95:85:f2:0c:65:3f:70:c6:67:64:99:38:
41:39:c6:06:67:fc:79:3e:45:f2:75:a9:40:4c:39:
54:23:50:3f:46:49:bb:72:04:a7:4a:ff:db:e4:3f:
61:4a:1e:3e:c1:33:c8:95:45:97:74:e6:0c:8f:89:
ea:0e:7a:cd:fd:f5:1e:59:13:ec:80:88:87:e6:9c:
2f:56:bc:37:8d:6e:ce:2c:06:b6:06:f4:91:8f:bc:
55:1d:d8:a9:56:b5:67:70:7d:a4:83:a9:11:c1:01:
9e:7b:14:cf:ba:f8:52:cd:4b:a1:cf:cf:4a:b0:b5:
8b:14:c2:9f:ab:c4:46:f8:64:58:ab:af:56:64:43:
50:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FE:A2:43:2E:AB:11:8A:AA:0E:48:49:4A:D6:B7:E5:F6:F7:05:07
X509v3 Authority Key Identifier:
keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:86:09:40:e0:80:56:e6:ad:67:1a:84:62:e9:85:32:f0:c4:
81:50:fe:e9:04:d7:db:fb:7c:52:57:25:3b:6f:bd:34:4e:71:
17:e6:4a:dd:a4:60:d7:7f:35:d0:64:dc:50:be:63:85:51:74:
de:d6:17:32:e7:cb:d5:4a:c6:c8:f3:a0:32:fe:3d:57:80:8b:
d7:ff:64:3d:11:47:c7:9c:34:81:ff:ea:6f:ca:88:b9:a6:e4:
fa:ec:22:bf:c5:e2:03:53:5d:49:5e:35:d6:59:22:d6:02:45:
00:ac:84:84:4c:09:0e:2f:d4:b5:18:e5:99:31:7f:99:63:f7:
20:6b:81:89:64:ec:64:33:d2:10:36:d2:82:4a:9b:00:3e:7a:
4a:aa:1b:e2:ce:ad:e5:54:29:6a:09:9f:5a:d9:49:01:93:bb:
d6:a0:70:f6:00:60:69:c4:ba:09:db:61:cb:ff:c5:b9:c0:e7:
cf:d6:5b:4b:4e:96:99:69:ec:96:de:f2:45:03:be:77:7f:f5:
9c:8e:ef:32:59:d1:2b:14:3a:a4:f3:11:22:9e:d4:98:5e:2e:
12:97:f3:63:d9:01:66:1f:50:bc:03:1f:0a:14:fa:86:71:27:
ef:96:ba:35:24:fb:a5:7e:23:3e:12:d3:d1:99:8f:dd:34:f2:
e0:25:f1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:28:42 2026 by rpki-client