Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
File: P-SE99D_9CD2t3E6k83LDFEAcmc.mft (raw, json)
Hash identifier: BEHZfpJhzSZobsm1RVKxj8/hb4ihHZR4K48HbDimlpE=
Subject key identifier: 1C:D7:84:89:7A:8E:E6:82:50:BC:2A:2B:45:9B:E4:F1:F9:D3:DF:53
Authority key identifier: 3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
Certificate issuer: /CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Certificate serial: 019CAA585267FC3435363CFEA5EC3F24A2A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
Manifest number: 082D
Signing time: Sun 01 Mar 2026 17:00:40 +0000
Manifest this update: Sun 01 Mar 2026 17:00:40 +0000
Manifest next update: Mon 02 Mar 2026 17:00:40 +0000
Files and hashes: 1: G6M-x4OPkaCwa6o3lpZvCUj6baM.roa (hash: HszMLQTA7YEJiAV1V8sk6igED0ExhrXDxWonrhXatYo=)
2: P-SE99D_9CD2t3E6k83LDFEAcmc.crl (hash: MXTmCz8Z+vWlD11oQsvVD4d+3J4xCde9STJvvuLHO58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:52:67:fc:34:35:36:3c:fe:a5:ec:3f:24:a2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Validity
Not Before: Mar 1 17:00:40 2026 GMT
Not After : Mar 2 17:00:40 2026 GMT
Subject: CN=1cd784897a8ee68250bc2a2b459be4f1f9d3df53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:bd:12:57:22:90:d8:af:7f:d4:7d:e4:e2:
79:b3:5d:24:b4:19:09:e9:73:35:b9:3a:b1:10:b4:
af:04:7d:e5:87:cd:28:b0:5d:32:62:a6:30:5d:70:
53:6c:3e:1a:77:f8:a1:f0:99:80:13:54:fc:6c:b7:
d6:bd:4f:8d:7a:fa:81:c9:24:f8:93:a6:b4:e5:c3:
8e:f3:32:00:4b:6e:92:37:ae:ef:71:ba:24:0b:83:
0c:65:6e:c6:13:0c:23:ac:2b:b6:0e:ad:1c:c9:64:
63:d2:0c:6d:5a:a2:c8:49:35:08:89:f3:c3:42:51:
41:20:c6:f5:9c:5d:a8:7c:b5:5f:a0:a9:d1:86:b7:
72:c3:ae:a9:bd:9f:bd:ef:1e:07:12:cb:64:85:de:
ba:cf:56:d4:10:9e:0f:03:93:1b:ed:42:6b:98:a8:
20:c9:24:f2:76:33:63:94:37:44:6f:d6:64:5f:73:
00:bb:e7:a4:67:64:22:b8:12:f9:8b:a4:4a:31:8d:
97:fe:ca:87:14:6e:77:1a:61:75:e6:0b:ac:48:eb:
ee:39:70:1e:2c:d6:b8:51:e0:3d:49:77:bc:c4:ac:
7e:13:94:ce:dd:88:b8:2c:2f:67:84:94:cd:55:cf:
0b:29:08:24:88:8f:e2:3f:83:2e:fc:8f:46:c8:af:
7e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D7:84:89:7A:8E:E6:82:50:BC:2A:2B:45:9B:E4:F1:F9:D3:DF:53
X509v3 Authority Key Identifier:
keyid:3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2d:3a:05:11:40:4b:a4:6f:d7:51:2d:aa:35:b9:2e:df:93:
8b:f2:eb:d5:36:41:e6:be:5d:22:81:41:1b:67:89:39:de:3f:
fc:4f:a2:5a:3e:06:fe:03:29:86:31:b5:b9:a9:47:ec:ca:c2:
32:03:f7:95:8b:56:3d:b2:1a:25:84:9e:af:2d:70:70:8d:37:
af:5c:ed:82:3d:38:56:01:9a:da:bd:be:0a:5b:fc:75:57:d6:
b2:3e:81:8c:a8:ea:ec:82:03:22:83:47:8c:3a:91:26:f7:9a:
d6:d0:3d:30:1d:3b:b1:b9:6f:6f:11:eb:97:d0:21:52:7d:5e:
dd:6a:ab:30:f6:c8:06:a1:60:93:3d:20:6a:25:f5:23:5d:a9:
49:c7:1a:f7:54:aa:41:77:42:5a:39:15:35:36:47:70:60:6b:
e0:a4:56:03:35:73:63:bc:39:6e:3c:18:fd:94:5f:cd:32:a0:
aa:2a:86:85:34:4d:e4:3a:8b:0d:4f:0f:10:df:c7:0e:49:4d:
b6:4b:06:2c:1c:cd:14:18:05:2d:c5:f5:ba:41:a5:ff:69:00:
a9:a8:a9:35:2c:0f:d8:51:0c:52:58:d5:75:fd:19:1b:db:d6:
4f:c6:f2:3b:a2:37:67:89:15:2d:57:c6:16:b0:4a:f5:a3:e0:
07:4a:b9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:24 2026 by rpki-client