Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
File: P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json)
Hash identifier: 0CvIL/37tRMMZC+A+7UpziaYlFrhej8Pn9jcxAn/438=
Subject key identifier: 5B:2A:BA:74:1B:A2:BC:5D:BB:56:4A:F0:51:A8:EE:23:11:42:92:87
Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
Certificate issuer: /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Certificate serial: 019F92B5F9F37CD079F9AF2CBE13A21445F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
Manifest number: 04DC
Signing time: Fri 24 Jul 2026 06:00:27 +0000
Manifest this update: Fri 24 Jul 2026 06:00:27 +0000
Manifest next update: Sat 25 Jul 2026 06:00:27 +0000
Files and hashes: 1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: 0RS83BelcDXZNcUAVyYsk1hVHedSY0hBzRn4h7BPw5U=)
2: wmftFtvbm2f7JWmltpRyVvfDvRg.roa (hash: ifS1jUFk0Eu0JB0mDMS9nd/R8eNPClng/HidlRk7lts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:f9:f3:7c:d0:79:f9:af:2c:be:13:a2:14:45:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Validity
Not Before: Jul 24 06:00:27 2026 GMT
Not After : Jul 25 06:00:27 2026 GMT
Subject: CN=5b2aba741ba2bc5dbb564af051a8ee2311429287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:57:42:75:c0:f7:12:ac:7a:bd:80:a0:81:
cb:cd:b9:3a:8b:f0:9f:0c:f3:2d:4d:08:d7:10:86:
e7:f6:2e:5d:ee:e4:ab:39:3d:96:74:62:4c:ae:bb:
60:4b:df:f2:2d:82:37:35:d1:95:48:15:1d:e9:30:
34:a2:d0:12:f7:c5:50:fc:f1:8f:b8:c3:8e:1a:6a:
26:e2:81:4a:99:3b:8b:b7:9c:8c:df:c0:89:1d:9e:
f1:4f:0b:93:6b:10:ac:33:98:90:a1:1e:28:c1:83:
95:12:e7:0f:c4:dd:99:df:90:62:41:40:19:95:86:
4e:d1:5f:54:3d:15:ab:31:d4:cc:b0:32:67:6a:df:
32:94:a4:9d:8e:e5:99:8c:ba:8e:d7:18:9a:22:6e:
ce:64:50:b5:7c:46:11:a5:0b:94:8e:9d:07:ca:f4:
cf:8d:92:a8:93:53:dc:ac:44:1d:b1:25:46:54:d9:
01:0c:58:a9:bc:a3:a9:5f:bc:ec:1f:8e:cf:39:f4:
e6:25:be:e2:e7:09:3c:b4:01:12:66:a5:5e:67:9f:
7b:31:92:9e:a4:62:29:a9:bb:e4:d0:ea:6a:04:13:
08:19:71:43:27:a0:6d:dc:4d:27:72:65:1e:59:36:
47:e5:c0:6b:68:3c:4d:42:37:3b:37:47:c8:ff:3e:
3a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2A:BA:74:1B:A2:BC:5D:BB:56:4A:F0:51:A8:EE:23:11:42:92:87
X509v3 Authority Key Identifier:
keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:31:3b:f3:ea:a8:83:17:80:b8:bb:46:98:62:3c:2e:ab:55:
6d:dc:99:0c:8e:9d:bb:7c:ab:35:5d:ee:50:a3:cd:19:62:0a:
b3:d5:96:ac:d4:a9:ee:77:d0:db:60:a0:3c:01:71:4c:ef:41:
69:61:0d:fd:2b:c9:42:00:8b:b8:7f:5f:a4:5f:22:ef:82:8e:
a4:6c:47:c4:e9:71:66:f2:cc:34:e6:59:73:9f:e1:f1:2b:4d:
7f:e2:94:73:70:dd:31:2c:b1:37:92:b2:b9:9d:b3:0f:40:bc:
66:9c:a2:00:44:c3:35:ae:41:5f:67:cb:6b:a5:6f:b9:48:06:
c6:7a:32:29:8f:57:fe:ae:15:fa:a0:4a:a5:ca:3a:15:8a:f6:
dc:88:88:3f:2c:79:39:0e:11:4d:8b:b7:80:b4:af:4f:26:d0:
5a:fa:a6:54:0c:c1:4d:25:e9:db:f5:ff:c8:c8:83:ad:d3:67:
a1:32:b2:29:3c:39:29:cd:d9:96:a2:aa:23:37:07:91:37:ff:
15:e7:a1:c0:ac:cb:9f:b2:9a:7e:9c:e2:98:bd:c3:ef:e8:67:
24:dd:eb:58:06:9e:d1:43:e1:94:ff:87:43:02:43:33:93:bc:
f6:ed:ac:5a:44:2f:3a:c8:5d:82:71:a1:8a:e9:2c:9f:05:4a:
f6:5f:85:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:28:19 2026 by rpki-client