Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
File: P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json)
Hash identifier: CJ63VAlDZuBdBT+BmRM/dsydXIwSQWmlMkDh9/SBjXk=
Subject key identifier: DC:D2:CB:FD:B1:15:16:5D:74:FC:BF:4B:0B:E9:28:94:67:AF:2E:DB
Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
Certificate issuer: /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Certificate serial: 019F90C7CD9B3FBF57927E755BE557B3387B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
Manifest number: 04DB
Signing time: Thu 23 Jul 2026 21:00:40 +0000
Manifest this update: Thu 23 Jul 2026 21:00:40 +0000
Manifest next update: Fri 24 Jul 2026 21:00:40 +0000
Files and hashes: 1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: bYSa19Imvadkj+6p6rTE97ZiJZ/2tiu0oQzRORU/MX0=)
2: wmftFtvbm2f7JWmltpRyVvfDvRg.roa (hash: ifS1jUFk0Eu0JB0mDMS9nd/R8eNPClng/HidlRk7lts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:cd:9b:3f:bf:57:92:7e:75:5b:e5:57:b3:38:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Validity
Not Before: Jul 23 21:00:40 2026 GMT
Not After : Jul 24 21:00:40 2026 GMT
Subject: CN=dcd2cbfdb115165d74fcbf4b0be9289467af2edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:10:76:e6:d9:b8:19:b3:88:46:18:5d:69:d7:
1e:ae:10:22:e0:f0:ca:3c:38:27:c9:6d:87:4c:0f:
cf:67:1d:fc:c7:bc:7e:cf:8f:e2:9c:8f:29:d3:c5:
26:9b:93:cd:48:55:40:ca:76:69:cd:dd:99:12:5f:
6b:fe:76:7e:d9:31:33:02:13:04:bb:e4:c4:60:d2:
86:5a:89:72:87:96:ee:4c:e8:7a:e7:72:10:13:a0:
bf:34:8f:1a:05:59:d2:43:12:34:7d:86:77:ef:a1:
cc:65:d9:2c:bf:a7:34:ee:77:a3:3f:83:cd:9b:c4:
51:40:c3:08:65:b2:46:21:49:b3:96:a2:f8:22:ee:
bd:e2:c7:82:05:4e:8a:2b:f1:cc:7a:bf:09:12:06:
66:20:cc:59:a8:07:4b:ee:1b:61:a7:c9:66:e5:b4:
f3:60:9c:19:01:b7:17:ef:4e:11:6d:b2:a5:f1:3a:
e7:4a:28:e1:f9:b5:83:e1:13:86:98:ee:49:38:d4:
c8:a4:cc:f6:05:2c:3e:21:83:ff:91:9c:2b:f6:d0:
c3:1c:8a:bd:7f:da:45:55:fd:28:70:b2:6f:43:ec:
56:4d:b3:75:7a:c7:d8:81:fb:2f:24:ac:40:7a:bd:
13:47:68:c5:d7:53:87:0e:69:4b:9c:db:75:b5:9d:
20:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D2:CB:FD:B1:15:16:5D:74:FC:BF:4B:0B:E9:28:94:67:AF:2E:DB
X509v3 Authority Key Identifier:
keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:7d:a3:93:8c:87:89:72:86:c2:ee:9a:92:0c:96:1d:d7:29:
fb:a7:5e:fa:9b:6f:4f:5d:a0:b1:80:e7:c5:61:c6:7f:4e:a2:
79:b5:8c:a9:89:49:ae:3e:df:df:bf:01:4f:33:bb:00:c6:7b:
d2:0d:d2:9a:31:54:ba:46:d1:8f:71:c1:d7:01:cf:b2:ff:6e:
a4:cc:7d:dd:7f:6b:5f:19:2b:26:d6:fe:d2:23:35:d9:89:a8:
e8:17:16:f7:c4:91:9a:ba:db:4e:3d:a8:02:fd:23:c3:9c:71:
4c:7a:95:9f:ea:61:9a:66:94:fe:93:cf:89:29:7a:43:b4:95:
97:f4:fc:95:df:2e:94:07:47:87:1d:fd:70:0d:b2:74:0d:f5:
3e:ed:e7:e4:d9:fe:41:7d:4f:a0:58:ae:ca:7d:f3:96:03:ac:
6b:19:49:8d:d5:24:09:13:6f:14:9f:b2:76:5f:4c:c4:e6:de:
79:8b:3e:36:16:4e:3b:01:3a:db:a2:65:ac:5a:e2:49:f6:71:
88:a6:dc:d1:d7:f0:40:66:a3:2d:b5:c3:8b:13:02:1a:9f:d0:
19:41:e3:f0:47:e2:25:71:8e:12:8d:a4:10:b3:b4:62:d0:13:
92:7c:8f:7a:66:e0:d7:30:55:95:f5:3f:6d:7c:cb:e5:3c:fc:
6d:a7:15:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:40:24 2026 by rpki-client