Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
File: P-SE99D_9CD2t3E6k83LDFEAcmc.mft (raw, json)
Hash identifier: RBEIvqAyVLvw1lbH4BFOTy1T6r3CBQEWBcw6maTZ1a4=
Subject key identifier: D4:6E:23:D3:E1:CA:8F:24:D6:05:04:F4:7C:1F:A1:CF:C8:77:15:AB
Authority key identifier: 3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
Certificate issuer: /CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Certificate serial: 01A0C4E96A4AC17B9CE7B9BBFDBC1F1FD27C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
Manifest number: 0A4D
Signing time: Mon 21 Sep 2026 17:00:26 +0000
Manifest this update: Mon 21 Sep 2026 17:00:26 +0000
Manifest next update: Tue 22 Sep 2026 17:00:26 +0000
Files and hashes: 1: G6M-x4OPkaCwa6o3lpZvCUj6baM.roa (hash: HszMLQTA7YEJiAV1V8sk6igED0ExhrXDxWonrhXatYo=)
2: P-SE99D_9CD2t3E6k83LDFEAcmc.crl (hash: y3Wh971gem1+Onwm+DlTcb/8lk7NSMsG1GA6X1VXfWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:6a:4a:c1:7b:9c:e7:b9:bb:fd:bc:1f:1f:d2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Validity
Not Before: Sep 21 17:00:26 2026 GMT
Not After : Sep 22 17:00:26 2026 GMT
Subject: CN=d46e23d3e1ca8f24d60504f47c1fa1cfc87715ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:82:b6:29:8b:dd:11:27:b8:6a:23:64:86:f4:
ed:55:9e:e7:f5:d0:40:1b:ec:4d:89:25:c0:ab:dc:
5a:ff:54:68:54:21:4f:ba:c9:d4:43:5f:91:52:bb:
81:d7:4b:91:57:6f:f7:04:09:bc:72:5c:40:6d:1d:
19:4a:83:e6:6b:ab:07:09:81:dd:5f:3c:9e:ef:07:
7c:2e:a8:85:d3:03:58:03:8a:6c:ff:6f:14:61:0c:
9e:cf:d9:45:8c:24:b9:17:c5:57:d5:57:b6:95:b3:
5d:b4:d9:31:cd:18:53:95:d9:5e:8e:be:1d:3a:18:
28:a9:e4:f6:ce:58:42:f8:1b:d5:26:cc:5d:de:60:
d4:10:f1:3f:fe:8b:f2:53:4d:b5:b9:7d:0d:38:ab:
72:a4:a5:35:9a:d9:c3:c0:ae:23:12:87:87:93:d7:
88:46:67:d3:ce:be:19:ed:3f:d0:b1:06:a2:15:62:
e1:f9:3b:8d:ae:cc:e4:ee:26:f9:7a:07:eb:52:b3:
fd:65:fc:5f:34:77:fd:1e:70:0e:f8:83:f6:ff:6f:
72:25:f8:9a:2c:95:41:80:52:97:78:69:eb:3c:4d:
8f:a3:64:4d:6a:24:fe:c1:a1:91:e3:8c:b4:05:10:
70:66:34:2d:83:4c:a2:00:8f:17:55:8a:75:1a:37:
6a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6E:23:D3:E1:CA:8F:24:D6:05:04:F4:7C:1F:A1:CF:C8:77:15:AB
X509v3 Authority Key Identifier:
keyid:3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:66:6a:58:32:67:10:1b:aa:0d:8c:10:8e:95:19:1c:f7:b2:
88:84:35:cc:ce:ab:91:96:a7:8e:38:01:7d:53:cd:b5:32:e1:
ff:c1:97:3f:de:ad:27:b8:f9:61:5e:75:d3:a2:df:4f:c7:7b:
61:78:6e:08:ca:49:ab:17:8b:a3:5c:4e:3a:61:3e:22:e0:55:
29:91:da:00:91:cd:ee:b2:92:34:57:21:4e:ba:c0:e1:e5:03:
c5:91:03:17:17:c9:b9:7a:4d:59:26:cd:b9:fd:0d:8c:1f:88:
bc:d9:4a:75:e3:52:48:50:67:04:07:d0:fe:30:4e:da:70:3d:
f5:15:d0:bf:f9:1a:e4:2a:99:97:73:a4:7f:ae:13:f6:25:f0:
3c:78:c1:b1:be:40:db:07:f5:e3:21:05:79:4e:d5:f6:69:01:
5d:0e:94:32:82:dc:62:02:08:fd:9e:42:2d:03:ab:d7:e3:87:
4a:b1:e5:8b:b3:6b:46:00:20:a8:52:2e:dd:78:d2:97:2a:47:
ef:62:94:56:86:9b:85:38:ee:f6:4f:a6:f5:36:84:14:41:0b:
4c:21:3a:6f:c1:64:90:77:d8:86:00:a4:de:c8:fc:04:99:35:
6f:12:a3:bb:b1:f4:55:34:c4:b7:25:a9:bd:2b:ae:b5:9f:20:
b1:1e:4b:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDE6WpKwXuc57m7/bwfH9J8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZTQ4NGY3ZDBmZmY0MjBmNmI3NzEzYTkzY2RjYjBjNTEw
MDcyNjcwHhcNMjYwOTIxMTcwMDI2WhcNMjYwOTIyMTcwMDI2WjAzMTEwLwYDVQQD
EyhkNDZlMjNkM2UxY2E4ZjI0ZDYwNTA0ZjQ3YzFmYTFjZmM4NzcxNWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oK2KYvdESe4aiNkhvTtVZ7n9dBA
G+xNiSXAq9xa/1RoVCFPusnUQ1+RUruB10uRV2/3BAm8clxAbR0ZSoPma6sHCYHd
Xzye7wd8LqiF0wNYA4ps/28UYQyez9lFjCS5F8VX1Ve2lbNdtNkxzRhTldlejr4d
OhgoqeT2zlhC+BvVJsxd3mDUEPE//ovyU021uX0NOKtypKU1mtnDwK4jEoeHk9eI
RmfTzr4Z7T/QsQaiFWLh+TuNrszk7ib5egfrUrP9ZfxfNHf9HnAO+IP2/29yJfia
LJVBgFKXeGnrPE2Po2RNaiT+waGR44y0BRBwZjQtg0yiAI8XVYp1GjdqxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRuI9Phyo8k1gUE9Hwfoc/IdxWrMB8GA1UdIwQY
MBaAFD/khPfQ//Qg9rdxOpPNywxRAHJnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC1TRTk5RF85Q0QydDNFNms4M0xERkVBY21jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xYjcxMGItZDJmMS00ZTE1LWFhM2Mt
OTMyNjA2OTNhZGQ1LzEvUC1TRTk5RF85Q0QydDNFNms4M0xERkVBY21jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8xYjcxMGItZDJmMS00ZTE1LWFhM2MtOTMyNjA2OTNhZGQ1
LzEvUC1TRTk5RF85Q0QydDNFNms4M0xERkVBY21jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmZqWDJn
EBuqDYwQjpUZHPeyiIQ1zM6rkZanjjgBfVPNtTLh/8GXP96tJ7j5YV5106LfT8d7
YXhuCMpJqxeLo1xOOmE+IuBVKZHaAJHN7rKSNFchTrrA4eUDxZEDFxfJuXpNWSbN
uf0NjB+IvNlKdeNSSFBnBAfQ/jBO2nA99RXQv/ka5CqZl3Okf64T9iXwPHjBsb5A
2wf14yEFeU7V9mkBXQ6UMoLcYgII/Z5CLQOr1+OHSrHli7NrRgAgqFIu3XjSlypH
72KUVoabhTju9k+m9TaEFEELTCE6b8FkkHfYhgCk3sj8BJk1bxKju7H0VTTEtyWp
vSuutZ8gsR5LGA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:18:52 2026 by rpki-client