Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
File: P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json)
Hash identifier: FrhvuUSq3xkCGNGrCiSWc5b44ShEFRL67YB8TOnHwrw=
Subject key identifier: 2C:C1:50:37:AB:B6:02:E4:42:FD:BB:02:18:CD:3A:28:32:8A:EA:26
Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
Certificate issuer: /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Certificate serial: 019D26CD4A439173E7D37870C7B610A11EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
Manifest number: 039B
Signing time: Wed 25 Mar 2026 21:01:21 +0000
Manifest this update: Wed 25 Mar 2026 21:01:21 +0000
Manifest next update: Thu 26 Mar 2026 21:01:21 +0000
Files and hashes: 1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: Q1ukMiv5LZkC8Aht3YpIRvfc4aWXN2rEdMUqXLxAY/0=)
2: wmftFtvbm2f7JWmltpRyVvfDvRg.roa (hash: ifS1jUFk0Eu0JB0mDMS9nd/R8eNPClng/HidlRk7lts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:4a:43:91:73:e7:d3:78:70:c7:b6:10:a1:1e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Validity
Not Before: Mar 25 21:01:21 2026 GMT
Not After : Mar 26 21:01:21 2026 GMT
Subject: CN=2cc15037abb602e442fdbb0218cd3a28328aea26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:9b:03:ef:79:5b:8e:22:87:43:e5:42:f8:
b1:7f:8e:46:01:3c:72:41:bb:19:25:43:76:4d:c3:
74:dd:9c:3e:7c:a1:a3:1b:d0:e9:b3:f8:f8:9c:9c:
e4:56:bb:86:96:01:87:8b:9b:25:bf:d1:df:2a:4c:
84:46:2b:57:6c:20:c8:f6:2e:ba:11:32:b6:f4:f3:
0b:1f:5d:a0:72:e0:73:94:4c:99:0d:7e:12:9e:a3:
d0:1a:34:e4:c2:06:07:ed:6a:58:1c:c4:cc:27:ad:
62:91:29:39:21:0b:99:97:25:d7:0e:af:fa:5a:7d:
30:ed:79:a8:70:ba:fb:b5:05:45:9b:13:4b:fc:d6:
04:a3:8b:9f:12:7e:06:7f:37:c4:01:73:95:b8:5e:
d3:d0:30:fb:58:48:d7:ba:9e:b1:21:1a:ad:fe:d0:
88:06:d9:d2:00:9e:01:b9:86:f5:eb:c6:49:70:8c:
c2:22:36:64:e5:72:a0:3e:2c:c0:1a:4b:cd:3a:a5:
a6:bc:eb:fd:1b:f5:71:c5:8e:37:42:23:47:f3:71:
fb:0f:52:c4:11:e6:f8:43:f9:81:2e:b5:c1:35:13:
62:24:ef:0b:00:8b:f7:2d:69:52:be:83:34:1f:75:
e5:04:d1:19:53:09:ea:59:77:ce:ba:98:cc:71:85:
81:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C1:50:37:AB:B6:02:E4:42:FD:BB:02:18:CD:3A:28:32:8A:EA:26
X509v3 Authority Key Identifier:
keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:84:f4:0f:b1:cb:17:de:7b:7c:c0:93:91:25:86:5a:d8:12:
3b:ea:d8:56:7e:6f:82:29:a9:b0:ae:06:6b:87:9e:c3:d1:b7:
29:6f:67:b6:b8:c7:a9:83:ac:fd:73:e8:73:fe:1d:14:97:ca:
72:05:82:df:3d:af:01:2e:e2:57:46:23:75:75:c8:cb:f0:3e:
b7:4f:82:14:e6:2e:ce:b4:c2:77:89:a2:9a:3d:0b:01:f6:4a:
64:40:17:5f:fa:b2:1b:4c:a6:65:cc:aa:bb:8b:57:48:a8:0e:
20:08:32:80:21:b3:e9:2e:bf:b5:ec:66:e4:67:15:33:57:92:
6a:92:2c:24:46:a3:71:24:7d:03:b6:d7:a8:3f:df:91:5f:e5:
a4:d7:72:01:d7:3d:e9:de:55:81:f2:b0:ce:d8:c3:ba:3e:40:
89:f3:f3:60:9e:df:13:cf:93:6d:7d:16:e9:b6:72:0b:79:06:
c7:5d:88:4c:05:99:d7:dc:a6:35:47:10:7b:6a:e0:d6:95:fa:
df:96:76:23:19:59:0e:29:0a:5c:47:b0:f2:39:b4:6a:83:b1:
1f:de:35:f4:67:fa:62:2f:f9:24:88:80:94:0e:5c:bb:b5:d9:
ad:d9:79:04:a6:8c:73:4e:60:97:9e:a8:65:ae:4b:81:bb:1a:
08:00:d6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:35:09 2026 by rpki-client