Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
File: P-SE99D_9CD2t3E6k83LDFEAcmc.mft (raw, json)
Hash identifier: axGDHoHb3YpT32qU3hbIxvq8yr4Dx30RylN3++OGx30=
Subject key identifier: 1E:33:B1:73:AD:89:3B:BB:39:A3:81:5C:FD:9C:E8:AD:60:A7:C0:4D
Authority key identifier: 3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
Certificate issuer: /CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Certificate serial: 01A112291A9842B67BCC9B19887684564B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
Manifest number: 0A75
Signing time: Tue 06 Oct 2026 17:00:45 +0000
Manifest this update: Tue 06 Oct 2026 17:00:45 +0000
Manifest next update: Wed 07 Oct 2026 17:00:45 +0000
Files and hashes: 1: G6M-x4OPkaCwa6o3lpZvCUj6baM.roa (hash: HszMLQTA7YEJiAV1V8sk6igED0ExhrXDxWonrhXatYo=)
2: P-SE99D_9CD2t3E6k83LDFEAcmc.crl (hash: h3/+cvAheyDKW3BBOJySt0GPnIM2qzX6Rp64xq/itA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:29:1a:98:42:b6:7b:cc:9b:19:88:76:84:56:4b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Validity
Not Before: Oct 6 17:00:45 2026 GMT
Not After : Oct 7 17:00:45 2026 GMT
Subject: CN=1e33b173ad893bbb39a3815cfd9ce8ad60a7c04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:d9:01:2f:42:76:51:82:bb:b6:fd:5d:43:
91:75:ee:32:ab:39:e2:1c:31:cb:fb:f1:93:2f:34:
c8:e1:da:a7:34:83:85:85:0f:59:bd:88:37:e4:40:
c9:a2:ff:47:af:c6:0a:27:4d:64:51:0c:2e:48:85:
5a:66:eb:d2:d9:bf:2f:1f:29:59:f9:54:2d:f0:2d:
69:2c:1f:96:a0:3b:fe:c5:de:74:e2:22:f9:10:97:
9c:ac:2b:3c:3b:02:92:fb:c8:48:7d:57:fd:68:c6:
56:cb:70:ec:96:f6:8e:68:c9:66:8a:4b:70:9c:30:
34:18:a1:21:e5:57:69:2c:98:2f:e3:49:46:e6:d5:
2b:09:6e:4b:99:e7:b2:a1:de:59:0f:a1:1a:6b:f4:
9b:50:69:d1:e6:76:e0:7a:9a:65:a5:75:f5:92:d6:
13:d0:2c:25:fd:a3:50:48:e0:be:44:47:ed:af:17:
7f:67:cc:a5:e6:22:5f:05:d0:f6:5e:24:a8:ed:70:
2a:aa:73:61:30:ae:50:63:23:e5:66:19:2b:e2:09:
bd:7b:8c:b5:3c:7a:e6:de:02:98:67:58:b3:24:2e:
09:a0:3e:ff:e2:b0:2b:8e:57:71:3d:b6:cf:af:bf:
e9:f7:08:ed:63:94:0f:af:fc:7b:fd:35:17:ef:df:
4d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:33:B1:73:AD:89:3B:BB:39:A3:81:5C:FD:9C:E8:AD:60:A7:C0:4D
X509v3 Authority Key Identifier:
keyid:3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:40:48:55:64:11:c2:13:f0:dd:7f:a5:df:d4:71:33:f4:2a:
2f:8d:52:cc:0f:ea:f5:ca:77:40:f8:6d:ae:c2:df:73:fa:96:
04:22:1d:72:7a:05:78:74:19:ba:b2:31:aa:3c:74:dc:4d:5d:
e5:9c:ca:9b:e8:1e:79:2e:00:94:9d:50:50:b5:04:1d:a0:39:
34:7f:d0:32:fa:23:c3:c5:69:69:a9:1c:ba:5e:3b:5b:5f:63:
6d:83:93:09:2a:d5:d3:20:04:b8:60:d2:70:ff:01:74:b7:08:
06:e7:f9:6a:e6:91:73:c4:f3:69:14:8b:94:61:b7:7a:e8:c2:
8e:98:d6:ae:52:31:a7:36:54:85:7b:43:2d:74:55:31:11:72:
f8:13:2e:7c:b7:bd:b6:0d:6a:ff:a6:b6:97:0f:33:72:3b:9f:
ca:d4:eb:25:89:6e:0a:f9:2a:0f:bc:24:02:a2:02:46:55:d6:
24:27:f8:62:fc:29:36:9a:5a:9b:e6:fd:4b:b7:84:6b:b8:5c:
3a:30:2e:e9:1f:70:f1:4d:81:1d:7c:65:fa:70:aa:fa:42:d0:
05:69:a3:a3:ad:71:3f:b6:59:50:ca:6c:49:ae:3e:74:80:b0:
df:11:40:57:fa:5b:22:74:f0:9c:1d:53:e8:42:17:c9:57:4c:
93:d7:9e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:06:37 2026 by rpki-client