Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
File: P-SE99D_9CD2t3E6k83LDFEAcmc.mft (raw, json)
Hash identifier: jG+xq/TueG8GhWn8BcP2kdsi04oz69FiqSAzqkACq+4=
Subject key identifier: 37:56:AC:AD:17:E4:2B:28:A7:45:65:A0:FF:EE:E7:58:BF:00:3E:A6
Authority key identifier: 3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
Certificate issuer: /CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Certificate serial: 019D25F0F0387D59F3EBCB138204C5DDE7A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
Manifest number: 086D
Signing time: Wed 25 Mar 2026 17:00:40 +0000
Manifest this update: Wed 25 Mar 2026 17:00:40 +0000
Manifest next update: Thu 26 Mar 2026 17:00:40 +0000
Files and hashes: 1: G6M-x4OPkaCwa6o3lpZvCUj6baM.roa (hash: HszMLQTA7YEJiAV1V8sk6igED0ExhrXDxWonrhXatYo=)
2: P-SE99D_9CD2t3E6k83LDFEAcmc.crl (hash: jWDmaQvnCHXhAq0859mFyEKFjcN+ykoaDQbcoIxSNEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:f0:38:7d:59:f3:eb:cb:13:82:04:c5:dd:e7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Validity
Not Before: Mar 25 17:00:40 2026 GMT
Not After : Mar 26 17:00:40 2026 GMT
Subject: CN=3756acad17e42b28a74565a0ffeee758bf003ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ed:02:a0:d4:84:e1:8e:ea:eb:e9:6e:89:43:
4f:d5:27:81:97:f9:9e:1a:4c:b2:d7:b8:cd:71:b5:
8b:3c:ec:a1:9e:80:39:b3:13:71:77:20:26:d8:9b:
0e:fd:df:52:ae:5b:78:a5:f5:5b:bf:c1:89:a1:fe:
f1:e3:c5:d9:7e:35:5d:1d:76:31:94:da:de:f8:b4:
61:2b:e1:42:fa:58:d4:ef:5e:d6:26:bf:15:99:98:
5e:74:97:91:ea:70:37:04:97:a3:67:f2:ef:78:25:
03:77:4b:b4:7c:53:07:cb:21:18:a8:3e:44:47:57:
d4:9e:96:55:74:ee:50:d5:15:4e:f6:df:c3:dd:e2:
92:bb:bb:3a:47:4a:14:80:7e:f6:40:fc:16:3f:17:
9c:69:e6:6d:a7:d3:9b:99:9f:7e:94:fb:91:c2:a0:
38:4b:1f:5e:d6:2a:da:c0:4b:d3:02:47:a4:e7:b5:
e6:5a:22:76:61:4e:be:2b:67:9d:2e:3a:e4:9e:11:
78:4e:2c:b2:a0:c5:a0:27:90:24:9c:b8:b1:7f:ab:
4f:49:8a:db:9a:95:dc:0c:ff:68:2d:2c:b0:ac:71:
8d:0f:58:44:2d:da:ce:41:d9:48:ab:0a:cc:73:d2:
3b:f1:48:88:ac:77:38:5c:da:2e:70:0e:5d:cd:0a:
e6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:56:AC:AD:17:E4:2B:28:A7:45:65:A0:FF:EE:E7:58:BF:00:3E:A6
X509v3 Authority Key Identifier:
keyid:3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:a2:b8:8d:8e:68:74:a1:b2:23:a4:fd:fe:56:18:d4:42:dc:
06:02:17:41:f4:9d:7c:64:61:fb:08:f0:5c:1b:ce:ae:b3:f8:
d7:2b:6f:06:f2:0c:c5:22:ff:5c:f1:a7:65:3a:5d:3b:db:d1:
1e:d6:56:31:43:d6:6e:c0:64:ec:e2:c1:48:c5:9d:6b:1a:7d:
67:a1:59:21:0a:ff:ab:eb:bb:7a:e8:ca:0f:dc:cf:d7:32:9e:
78:73:19:60:a3:fd:3b:23:b9:9e:9a:07:85:a0:de:9c:f0:21:
e2:e2:87:cb:20:09:33:b2:2b:f7:a9:49:b4:20:ad:52:0b:50:
72:28:c2:14:cf:90:00:7d:a5:a0:ed:84:64:fb:5d:b6:9d:50:
2f:87:3c:4d:10:32:1d:37:46:b2:40:98:aa:a9:24:b3:5a:b1:
e1:4f:2f:95:3a:05:32:6d:9f:47:c0:5c:91:0b:41:2c:7a:50:
16:e6:b5:46:e9:a6:92:c8:be:40:00:dc:bc:5b:28:04:15:af:
2a:49:e0:ee:45:f3:7a:60:84:10:b2:51:9e:00:cf:af:ef:b0:
b8:68:76:a7:ab:32:42:e2:49:51:58:96:3f:0d:d7:f9:5f:1d:
10:7d:00:7a:81:36:d8:bd:b0:7f:e0:33:54:cc:1c:99:32:28:
88:91:a6:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8PA4fVnz68sTggTF3eegMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZTQ4NGY3ZDBmZmY0MjBmNmI3NzEzYTkzY2RjYjBjNTEw
MDcyNjcwHhcNMjYwMzI1MTcwMDQwWhcNMjYwMzI2MTcwMDQwWjAzMTEwLwYDVQQD
EygzNzU2YWNhZDE3ZTQyYjI4YTc0NTY1YTBmZmVlZTc1OGJmMDAzZWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2e0CoNSE4Y7q6+luiUNP1SeBl/me
Gkyy17jNcbWLPOyhnoA5sxNxdyAm2JsO/d9Srlt4pfVbv8GJof7x48XZfjVdHXYx
lNre+LRhK+FC+ljU717WJr8VmZhedJeR6nA3BJejZ/LveCUDd0u0fFMHyyEYqD5E
R1fUnpZVdO5Q1RVO9t/D3eKSu7s6R0oUgH72QPwWPxecaeZtp9ObmZ9+lPuRwqA4
Sx9e1irawEvTAkek57XmWiJ2YU6+K2edLjrknhF4TiyyoMWgJ5AknLixf6tPSYrb
mpXcDP9oLSywrHGND1hELdrOQdlIqwrMc9I78UiIrHc4XNoucA5dzQrmrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdWrK0X5Csop0VloP/u51i/AD6mMB8GA1UdIwQY
MBaAFD/khPfQ//Qg9rdxOpPNywxRAHJnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC1TRTk5RF85Q0QydDNFNms4M0xERkVBY21jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xYjcxMGItZDJmMS00ZTE1LWFhM2Mt
OTMyNjA2OTNhZGQ1LzEvUC1TRTk5RF85Q0QydDNFNms4M0xERkVBY21jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8xYjcxMGItZDJmMS00ZTE1LWFhM2MtOTMyNjA2OTNhZGQ1
LzEvUC1TRTk5RF85Q0QydDNFNms4M0xERkVBY21jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxaK4jY5o
dKGyI6T9/lYY1ELcBgIXQfSdfGRh+wjwXBvOrrP41ytvBvIMxSL/XPGnZTpdO9vR
HtZWMUPWbsBk7OLBSMWdaxp9Z6FZIQr/q+u7eujKD9zP1zKeeHMZYKP9OyO5npoH
haDenPAh4uKHyyAJM7Ir96lJtCCtUgtQcijCFM+QAH2loO2EZPtdtp1QL4c8TRAy
HTdGskCYqqkks1qx4U8vlToFMm2fR8BckQtBLHpQFua1Rummksi+QADcvFsoBBWv
Kkng7kXzemCEELJRngDPr++wuGh2p6syQuJJUViWPw3X+V8dEH0AeoE22L2wf+Az
VMwcmTIoiJGmCQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:49 2026 by rpki-client