Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
File: p-LOMQlICu57P9KEbsj4ZGiFzbo.mft (raw, json)
Hash identifier: NarGxgWuasqpHWX1WeC8JNOwn4NzoYVeG/mN5mldKWo=
Subject key identifier: 32:89:E1:62:2F:6E:AE:FF:ED:EE:B4:69:F9:3F:38:F6:ED:17:5E:65
Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Certificate serial: 019D26960B48597050B784940AC373B37A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
Manifest number: 1899
Signing time: Wed 25 Mar 2026 20:01:00 +0000
Manifest this update: Wed 25 Mar 2026 20:01:00 +0000
Manifest next update: Thu 26 Mar 2026 20:01:00 +0000
Files and hashes: 1: 1FmJS162fQbGwB70KRRIxqQYTPA.roa (hash: wZ0mqVcfmtfFGvqCihWmXQC/JMhhCh9+TH6XvIsulCo=)
2: 6oZ5EjqZisGcBSFRGAY0I58w2z8.roa (hash: L22Ki4i/bHR4nsGJUs2wsOygUoNgPdGybFfVf2yeFJ4=)
3: Jcrma76ylAdAlGHz2It6HjItjVY.roa (hash: gxRmdXqrCHXXDsq6yXCM2hWnNFd/SuqVgvjo3oxIpIo=)
4: MBnHYmvHgfFqe99fU0s4rn0KXV4.roa (hash: Wq2dVDQ3LLdiDt+3Q/nPxFVfP5iqbuOdoj4/h9WIEZA=)
5: OkvrHqovIuCvA9DKylZPzJjsiLw.roa (hash: zDYM6sW/jEHSN9/osUFU8Hrx77FyqMIJs5+jayqems0=)
6: Z-Bltd0Hd8Wiwq9a-uJVdfU9kmY.roa (hash: 9o3h5OJ6yuOmpiGRC8WyL9keSG9Y6pKzn5PzuEfOyaY=)
7: huYXzYbwmRIlzSXqCG_XMzLFfLI.roa (hash: KMWYZ0oGUPWGO8v+CPLewWBemgNzQ4Q4bJS+rkHUyUY=)
8: p-LOMQlICu57P9KEbsj4ZGiFzbo.crl (hash: 593tdlQgXE9r/DAPmyHLPraMU5C6ZKnucUUZi8HucM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:0b:48:59:70:50:b7:84:94:0a:c3:73:b3:7a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Validity
Not Before: Mar 25 20:01:00 2026 GMT
Not After : Mar 26 20:01:00 2026 GMT
Subject: CN=3289e1622f6eaeffedeeb469f93f38f6ed175e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c9:46:c1:b0:f1:ab:8e:54:5c:51:3a:90:bb:
9e:62:b4:98:7b:c9:4b:bc:37:fd:5a:0d:ea:c5:74:
c9:3b:d5:4d:7a:6d:ec:be:2c:62:68:ca:f9:6d:49:
2e:53:bd:98:ed:69:8b:21:34:23:9b:6a:8b:56:d0:
dc:7e:aa:9d:d1:7e:54:55:2c:40:fd:6d:22:e9:79:
81:e5:83:75:31:61:96:e2:fc:7b:2f:14:1d:41:f5:
86:5c:07:fe:db:71:f4:c1:66:c9:ab:c5:da:8d:51:
58:70:c1:1d:29:15:59:11:fb:ab:2e:1c:7c:71:9d:
db:69:f2:88:2a:0f:06:12:6b:76:4d:51:9c:7a:7a:
46:04:73:02:2e:9a:16:0a:93:45:35:c4:ab:a3:57:
d5:ae:55:43:4c:a3:8c:fa:f7:5a:33:f0:fd:94:42:
d8:ea:26:5e:a1:dc:f6:1a:88:35:a2:5b:b3:da:13:
18:e2:36:e8:74:d3:1a:0f:4e:e5:22:5a:36:79:3c:
f5:57:70:7c:8c:2f:74:48:71:85:a7:63:8c:a7:61:
08:35:a3:bd:24:64:6f:ba:f7:05:f4:7a:44:5b:1a:
bb:54:12:87:40:3d:ec:e6:9a:d4:b6:ef:80:d6:85:
00:7d:9a:c4:35:7f:c3:e3:0a:43:bb:95:5a:e3:81:
04:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:89:E1:62:2F:6E:AE:FF:ED:EE:B4:69:F9:3F:38:F6:ED:17:5E:65
X509v3 Authority Key Identifier:
keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4e:09:c8:17:55:6d:f4:67:5f:a2:60:05:d4:34:42:f4:fc:
75:de:68:40:bd:2a:7f:06:ab:ac:d0:4c:93:e4:1f:46:8b:bd:
21:d5:ff:29:c6:08:81:3a:11:75:40:05:ff:2c:74:34:1c:32:
82:d8:38:de:f9:89:6a:ed:84:b3:03:b3:0c:cf:d2:71:c4:79:
12:bd:a0:7d:e5:c8:82:7b:39:72:74:ff:53:37:11:2e:79:b2:
7d:e1:a5:c7:1f:d8:b2:42:88:39:ae:a7:ed:9f:00:e2:98:14:
23:74:ae:3a:6d:a1:5a:95:f0:bb:b5:42:fc:e9:b8:2d:51:c8:
6f:d9:43:d1:d6:32:ad:7f:08:82:f0:17:e8:8d:8a:e8:0f:f9:
cf:9d:39:02:5e:5c:0c:8a:d8:28:0e:da:61:61:e7:41:1a:e7:
38:1f:26:10:ed:75:99:77:c9:88:03:bc:dc:2c:14:0a:e1:c7:
87:1f:8d:5d:7f:9d:cf:d3:17:44:1a:b2:be:74:6b:19:40:c1:
43:8d:05:0c:c1:cc:e0:cf:91:4f:06:89:2a:35:86:3f:21:de:
8b:75:ea:10:69:54:6f:74:41:98:e3:f6:54:db:0a:db:8a:d5:
70:b1:28:87:29:ad:84:01:70:cb:77:04:69:3d:96:9e:18:20:
e5:80:9b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:08 2026 by rpki-client