Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
File: P-SE99D_9CD2t3E6k83LDFEAcmc.mft (raw, json)
Hash identifier: ldwBaoKHoiSyJbaS3o1Ks/QJDz4mrM+SmTPTnU59Tz0=
Subject key identifier: 12:A3:9B:A6:29:B2:67:09:54:FB:7D:2D:55:20:69:71:0A:93:DB:58
Authority key identifier: 3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
Certificate issuer: /CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Certificate serial: 019F91DA98F5D3C1499FF6737CDCCA627828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
Manifest number: 09AE
Signing time: Fri 24 Jul 2026 02:00:49 +0000
Manifest this update: Fri 24 Jul 2026 02:00:49 +0000
Manifest next update: Sat 25 Jul 2026 02:00:49 +0000
Files and hashes: 1: G6M-x4OPkaCwa6o3lpZvCUj6baM.roa (hash: HszMLQTA7YEJiAV1V8sk6igED0ExhrXDxWonrhXatYo=)
2: P-SE99D_9CD2t3E6k83LDFEAcmc.crl (hash: S+kdZqO4ZlX3GtxpdbFYilBITU1sIAvPFXW9+xx/W1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:98:f5:d3:c1:49:9f:f6:73:7c:dc:ca:62:78:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Validity
Not Before: Jul 24 02:00:49 2026 GMT
Not After : Jul 25 02:00:49 2026 GMT
Subject: CN=12a39ba629b2670954fb7d2d552069710a93db58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:27:02:32:ce:d3:18:3d:e4:bb:94:4e:81:38:
56:81:a7:fa:a5:0e:c8:1e:c8:78:7a:4e:50:6c:b1:
d7:75:b8:2b:2c:c6:3d:2f:82:f9:0b:63:cd:61:b9:
7d:12:e3:06:8f:0d:9b:2f:b4:0d:13:82:ce:82:fb:
36:7c:83:40:3b:30:da:73:cf:a4:89:05:44:39:53:
35:45:22:ea:be:29:6f:da:19:da:e0:00:57:1f:17:
c8:e6:78:7c:06:d6:64:30:d0:43:4c:68:b2:d3:7e:
85:7c:b4:c2:94:0a:5c:7d:fc:c7:c2:07:46:ce:4a:
81:ce:da:bd:d6:bf:38:32:24:31:a4:08:6e:ca:74:
ae:9a:ff:56:df:1d:06:a8:42:47:0d:c5:8c:dc:89:
e5:b9:83:16:a7:00:92:60:9d:cb:47:27:6e:d9:39:
d2:3b:63:be:6c:cf:1d:86:6f:88:8e:fe:52:08:43:
ab:84:07:b3:8f:16:4d:f8:b3:05:af:b3:f6:03:53:
35:1a:cd:40:44:7e:60:57:21:e3:ca:cb:0d:03:94:
1c:7d:fe:c0:ef:40:63:9f:26:14:1d:1d:ce:5d:e1:
56:90:30:a3:99:8c:5f:66:d2:82:f4:c1:29:94:7a:
af:fa:41:f5:54:c7:30:9f:f9:f0:3a:5b:6d:5d:23:
48:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A3:9B:A6:29:B2:67:09:54:FB:7D:2D:55:20:69:71:0A:93:DB:58
X509v3 Authority Key Identifier:
keyid:3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0b:73:63:4d:09:0d:b7:b7:9c:70:0b:be:31:92:3f:f4:a6:
f7:07:ea:27:e0:da:b3:04:5f:99:a1:67:f7:f5:a0:f1:a1:fa:
f2:74:47:ca:23:ed:d0:dd:a1:b0:55:b4:76:3c:fd:8f:4a:d5:
d9:8b:ee:35:35:13:45:57:9d:0d:c5:7e:97:f8:01:f8:f5:4a:
28:4f:dc:4c:95:3e:8b:82:f6:7d:51:1a:de:db:63:fa:54:79:
13:93:17:73:b9:dd:db:cf:d1:f0:cb:0c:b4:b7:29:61:02:2d:
bd:66:89:f6:1a:73:d3:fc:ac:5f:3c:a4:93:01:71:f0:64:1b:
e4:9d:17:74:e1:67:c3:ec:ea:ba:41:09:0a:5e:49:23:d7:9e:
08:2e:85:c9:ef:cf:39:be:15:8c:bd:07:bc:c9:96:75:59:d4:
5f:e9:76:22:e6:a1:d2:49:62:d2:f1:91:40:ab:33:4c:4d:d1:
df:19:02:10:96:9e:a4:6d:05:6b:0f:60:ac:6b:ee:8a:9f:1a:
ab:a5:b0:1b:07:a6:74:8d:df:da:28:78:80:c0:aa:df:9b:03:
30:dc:46:f8:27:e5:16:43:2a:f1:30:f1:b0:2b:6b:7d:46:96:
94:c1:24:97:6f:ee:2e:29:e0:5b:1a:06:6f:c8:82:c0:4b:3b:
1f:a2:b3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:23:45 2026 by rpki-client