Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
File: P-SE99D_9CD2t3E6k83LDFEAcmc.mft (raw, json)
Hash identifier: OLhtN3FYdTpNKQJMSmDTWGTNrLDgdX+EjBP9r1ropr8=
Subject key identifier: CD:75:9A:52:6F:35:91:FA:33:01:E0:D6:25:57:E3:9E:48:78:25:7D
Authority key identifier: 3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
Certificate issuer: /CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Certificate serial: 019D97E1AB442F133E2144616248CEDBBD0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
Manifest number: 08A8
Signing time: Thu 16 Apr 2026 20:00:42 +0000
Manifest this update: Thu 16 Apr 2026 20:00:42 +0000
Manifest next update: Fri 17 Apr 2026 20:00:42 +0000
Files and hashes: 1: G6M-x4OPkaCwa6o3lpZvCUj6baM.roa (hash: HszMLQTA7YEJiAV1V8sk6igED0ExhrXDxWonrhXatYo=)
2: P-SE99D_9CD2t3E6k83LDFEAcmc.crl (hash: f/ILwtIt9jsqEWFKqT5EW/yGmuAJEqosxvA42BiuyGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:ab:44:2f:13:3e:21:44:61:62:48:ce:db:bd:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Validity
Not Before: Apr 16 20:00:42 2026 GMT
Not After : Apr 17 20:00:42 2026 GMT
Subject: CN=cd759a526f3591fa3301e0d62557e39e4878257d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:34:3b:16:2a:4c:87:18:92:90:27:9e:16:c0:
e9:3e:e4:8d:1b:70:48:e7:19:cb:ac:61:26:71:c1:
e0:0b:32:5e:5a:5d:3e:20:4c:50:8f:c2:b4:33:b7:
8d:4b:1a:71:cb:73:0e:28:99:eb:2a:37:ea:5a:aa:
f6:fc:c9:3d:4e:b8:76:87:3c:e7:c7:2c:d5:a0:64:
51:38:6a:65:78:6f:b2:64:b2:45:a6:57:1f:6f:1d:
93:28:df:8c:0f:e3:5d:56:06:e1:d4:8a:a1:2c:05:
a1:cc:b9:fa:7b:d7:68:db:4e:b6:0f:6c:e9:68:80:
d9:47:ef:f4:06:51:42:fb:7d:34:b0:f4:f3:41:bf:
be:8f:ed:64:3e:aa:5e:9d:7b:72:01:d7:00:b5:a5:
f9:f9:e2:84:b7:6e:04:81:13:3a:fc:bf:39:ce:bb:
11:10:0e:c4:5e:8a:2d:9a:22:87:a2:7c:13:27:d7:
13:ca:86:4b:b8:88:d0:d7:96:ab:1d:c0:ec:7c:70:
c6:a5:65:9a:73:e4:13:8f:53:f1:37:9b:7e:3e:de:
fb:c2:91:b1:bb:22:90:e5:ec:fb:52:09:03:07:71:
a8:b8:9d:97:d9:a9:2a:16:02:a3:90:85:f7:24:a8:
8b:35:f5:80:fd:f9:1b:70:2f:c2:e0:23:eb:4f:89:
76:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:75:9A:52:6F:35:91:FA:33:01:E0:D6:25:57:E3:9E:48:78:25:7D
X509v3 Authority Key Identifier:
keyid:3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:e4:f8:f3:b1:08:dd:61:8d:fd:6c:0a:44:9b:f9:92:f3:6c:
37:67:83:b6:d0:70:3e:d4:b3:64:e7:9a:92:c6:20:fb:ea:bb:
03:31:41:33:59:74:7e:be:cb:8d:9c:dd:d7:47:bc:07:54:97:
36:1e:a4:c1:13:27:9f:81:6b:4d:3b:38:d2:7e:6b:e7:ee:de:
79:09:f1:42:2b:9e:81:b5:1a:04:45:43:25:a4:e6:1c:fa:67:
86:3a:1d:83:b2:6c:76:9f:d3:7b:6f:74:bf:a5:03:b8:64:9f:
cd:d2:ff:15:4d:f2:74:b1:2d:28:ff:9a:f7:58:23:7e:9c:66:
b0:d9:11:49:df:32:ed:41:8c:16:ca:f0:9f:07:80:80:da:87:
0e:e5:e0:d6:fc:20:75:79:7c:67:81:6a:8f:b9:68:a9:5c:75:
c6:8d:7c:65:c4:4e:30:c3:8a:9f:a3:ee:64:94:eb:9f:ba:3d:
ce:6d:4c:cd:df:ed:90:e7:70:a1:3b:92:9e:aa:35:67:d5:62:
c5:2b:12:c9:c7:8d:c0:d8:80:a6:0d:18:8f:61:ca:9c:9a:ed:
5c:f1:ac:62:60:e2:85:c0:1b:92:fe:e2:a2:b1:39:f0:dc:61:
9a:60:03:17:18:8a:c4:2c:bc:52:96:9a:a2:1f:61:71:ca:e8:
07:30:3f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:22:31 2026 by rpki-client