Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
File: P-SE99D_9CD2t3E6k83LDFEAcmc.mft (raw, json)
Hash identifier: wigTdGhLJ0RvHd81yWSMCtt5gyzScey0oVTQY6M079g=
Subject key identifier: CD:99:63:F1:0D:04:F9:02:AE:59:0B:FA:2E:EE:3F:57:F9:72:1E:47
Authority key identifier: 3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
Certificate issuer: /CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Certificate serial: 01A106932CFA7C8CB8F636FAA9EE58731397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
Manifest number: 0A6F
Signing time: Sun 04 Oct 2026 11:01:10 +0000
Manifest this update: Sun 04 Oct 2026 11:01:10 +0000
Manifest next update: Mon 05 Oct 2026 11:01:10 +0000
Files and hashes: 1: G6M-x4OPkaCwa6o3lpZvCUj6baM.roa (hash: HszMLQTA7YEJiAV1V8sk6igED0ExhrXDxWonrhXatYo=)
2: P-SE99D_9CD2t3E6k83LDFEAcmc.crl (hash: sCo03r967C6ts7VXcC20Jk+fNXWO69TKT9lK0DK74xI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:93:2c:fa:7c:8c:b8:f6:36:fa:a9:ee:58:73:13:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Validity
Not Before: Oct 4 11:01:10 2026 GMT
Not After : Oct 5 11:01:10 2026 GMT
Subject: CN=cd9963f10d04f902ae590bfa2eee3f57f9721e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:08:dc:28:31:a5:39:88:33:df:a4:7d:73:c7:
59:2b:8f:77:01:e7:f6:d0:ba:21:dd:1d:1a:66:90:
df:29:ce:fb:45:49:56:c6:81:f8:57:5d:6e:1f:15:
ea:a8:0d:70:6a:0a:51:8a:81:e7:b5:5d:4e:1e:fa:
1f:4f:c5:1b:3b:39:f6:b4:2f:e2:41:37:b0:a2:3e:
34:2e:fa:4e:ed:b6:a0:2f:2c:83:42:c4:52:4d:18:
78:d1:c7:ea:0e:0c:0b:a5:f6:e9:45:e8:cb:95:5b:
86:06:2b:69:45:72:e9:e2:74:b0:a8:bf:96:8f:76:
3a:0a:38:7d:18:75:97:8e:8f:68:31:4d:1a:54:03:
7c:75:72:70:19:b6:03:13:bd:11:d0:cf:1e:bb:e7:
23:9b:2a:28:fd:cd:21:83:a1:b4:7e:5a:46:7f:d0:
10:0f:79:2c:de:c6:a4:62:de:2f:ae:f2:72:16:39:
31:b8:b1:d0:7a:e9:5e:57:a7:96:a9:4e:52:f6:6d:
82:51:f8:84:1a:ef:8b:7d:b8:f6:b5:71:af:e1:2e:
4e:9c:67:eb:14:c5:d7:59:47:ed:cb:d1:3b:2d:08:
a8:c4:89:ac:2e:22:83:10:72:da:bb:3b:4c:26:c0:
ab:c0:39:b7:8a:aa:df:0e:61:66:0e:2f:01:7e:97:
12:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:99:63:F1:0D:04:F9:02:AE:59:0B:FA:2E:EE:3F:57:F9:72:1E:47
X509v3 Authority Key Identifier:
keyid:3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:41:6f:32:2e:f7:79:77:8e:2d:35:ed:78:86:18:43:8d:e8:
61:be:b8:cb:46:b5:d5:a3:ec:be:75:05:4a:fb:55:d9:c8:13:
88:1b:f3:94:a7:1f:65:37:e7:80:c4:d8:64:fd:bb:f3:2e:b9:
93:e6:4c:85:20:ef:5b:97:e2:48:f7:92:0e:ae:5d:7c:15:18:
79:41:68:17:ce:0b:85:ba:07:f9:5a:f3:aa:2f:f1:be:ce:36:
75:86:0d:16:bc:8c:d5:e6:cc:96:a3:c5:3b:46:ef:68:ae:a2:
3b:ad:f6:e6:23:f9:20:04:ae:dd:52:b8:85:39:e1:bb:6a:ea:
e9:44:75:7a:b5:fb:31:36:9c:3b:4a:18:a0:6e:91:3e:f8:c3:
35:c1:ab:6a:3a:e8:a0:86:81:93:75:12:59:4f:e2:5b:3f:1d:
5f:3b:bc:6e:f9:78:e1:31:7e:ee:b8:8e:ad:b6:73:ab:20:3e:
4b:0e:8a:05:f8:c4:36:a6:ec:6e:b3:9c:46:81:a5:31:d6:96:
50:83:7a:c1:cc:04:1f:e8:cc:eb:04:dd:f0:29:57:e2:e3:08:
1f:57:df:a4:6d:6f:cd:c4:0f:a0:b9:19:49:2c:44:da:23:e3:
07:01:a2:e7:b7:7c:01:b4:69:11:fa:00:a9:0b:dd:3a:ec:18:
4d:68:2c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:00:21 2026 by rpki-client