Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
File: P-SE99D_9CD2t3E6k83LDFEAcmc.mft (raw, json)
Hash identifier: giizBzPs2ACytg0h4KVMyFUGtbFuKwNlSiRhtrjgjxk=
Subject key identifier: 61:A7:BE:14:2F:73:B2:C2:C3:1C:FE:8D:7E:04:E9:95:1C:50:68:84
Authority key identifier: 3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
Certificate issuer: /CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Certificate serial: 019F1453E55E3C2263222A151ECC42CCA7D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
Manifest number: 096D
Signing time: Mon 29 Jun 2026 17:01:10 +0000
Manifest this update: Mon 29 Jun 2026 17:01:10 +0000
Manifest next update: Tue 30 Jun 2026 17:01:10 +0000
Files and hashes: 1: G6M-x4OPkaCwa6o3lpZvCUj6baM.roa (hash: HszMLQTA7YEJiAV1V8sk6igED0ExhrXDxWonrhXatYo=)
2: P-SE99D_9CD2t3E6k83LDFEAcmc.crl (hash: TjMnoWl3bJeC7N6W8fcb6xaoGT+YUaqKKfaPgItUJqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:53:e5:5e:3c:22:63:22:2a:15:1e:cc:42:cc:a7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Validity
Not Before: Jun 29 17:01:10 2026 GMT
Not After : Jun 30 17:01:10 2026 GMT
Subject: CN=61a7be142f73b2c2c31cfe8d7e04e9951c506884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:18:d5:37:94:a9:da:73:ee:d1:6b:a7:52:a7:
38:bb:3b:e6:1a:e6:e4:65:f3:13:79:6d:b0:e8:84:
b4:68:72:dc:2e:bf:27:e6:d9:90:98:8a:f5:53:73:
82:06:93:8c:bf:35:bd:d5:ac:a9:bd:fb:3f:6f:60:
15:6e:e2:a1:6d:78:39:d0:be:f7:25:e2:44:31:28:
79:26:1a:80:49:dc:67:69:15:83:1f:82:62:44:20:
dc:eb:fc:c3:4b:5b:dd:d7:c4:b4:5c:96:4e:86:f3:
93:b9:70:7b:0e:0a:f8:a9:6b:89:22:06:47:d1:93:
78:4a:e0:37:7f:98:27:db:77:73:60:28:cb:2a:31:
d9:fe:bd:f2:cc:d5:be:da:f3:a5:94:3a:e1:e6:bf:
d8:b7:90:91:8d:fe:5f:82:78:82:8e:f9:2c:b7:5b:
a3:cc:ab:85:18:d7:0b:27:52:7a:ac:07:6f:91:f4:
df:1b:99:ea:db:6a:6a:a0:a6:ba:7b:90:06:47:93:
6b:d1:b7:a1:70:b1:10:b4:20:39:20:c8:eb:7b:bc:
a6:02:b0:4c:42:e0:2a:cf:5a:45:e8:78:dc:60:cb:
d7:05:ae:13:a9:d4:d4:d9:89:9a:79:e2:79:09:d9:
23:5d:92:89:e5:1a:b3:b4:e9:cf:2b:ef:72:b7:5c:
f9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A7:BE:14:2F:73:B2:C2:C3:1C:FE:8D:7E:04:E9:95:1C:50:68:84
X509v3 Authority Key Identifier:
keyid:3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ff:e5:78:e2:02:4a:36:d1:bc:69:1c:87:34:89:ee:8b:5c:
05:d5:d0:54:93:25:87:86:ef:3a:99:56:fe:59:42:7f:20:4b:
52:87:b9:75:7c:7f:5a:ad:77:99:31:a0:81:f6:1d:d0:b6:4b:
e4:6d:a8:f8:a4:7b:b4:39:a2:11:50:ec:ea:07:68:82:a9:e6:
80:25:ff:45:1c:41:bf:13:e8:95:9b:40:57:f5:34:55:1d:0a:
6a:90:8b:cc:f6:6c:b6:c7:87:a8:69:b2:02:3c:b2:87:f4:6f:
d0:3c:41:5d:32:da:99:3b:9d:e0:6e:7f:bb:5d:ad:88:86:49:
6b:8c:4c:eb:f3:d4:69:51:50:7c:0f:27:b2:55:de:6a:1e:47:
09:e4:ca:49:12:99:71:e9:b8:09:17:44:2e:06:2f:09:32:ad:
22:32:62:bd:d0:c5:a2:1d:ba:b5:c9:b9:39:bc:3b:4c:d8:26:
b1:79:22:b9:b8:84:33:58:a8:8f:25:29:94:92:a2:06:1a:37:
2a:2c:f2:47:a6:bf:1a:3a:7e:2d:17:aa:a6:05:aa:a5:17:61:
4e:8c:9f:6e:0c:a0:1e:31:7d:ad:8f:fd:7d:60:4d:31:f6:85:
3d:9f:3a:38:f9:8f:55:50:ef:75:73:79:c2:91:58:7c:89:61:
5e:ef:71:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 20:21:34 2026 by rpki-client