Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
File: p-LOMQlICu57P9KEbsj4ZGiFzbo.mft (raw, json)
Hash identifier: 5XoTovrqTyaIBoc5sXDb7gCKMmL2Nma47LinCBOzpT8=
Subject key identifier: CD:58:CE:12:E8:B7:9E:8D:89:48:62:C8:1D:D9:A9:24:35:A1:C5:FF
Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Certificate serial: 019E1FB5AE91B4BA2369C1EFD442B9C75520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
Manifest number: 191A
Signing time: Wed 13 May 2026 05:01:00 +0000
Manifest this update: Wed 13 May 2026 05:01:00 +0000
Manifest next update: Thu 14 May 2026 05:01:00 +0000
Files and hashes: 1: 1FmJS162fQbGwB70KRRIxqQYTPA.roa (hash: wZ0mqVcfmtfFGvqCihWmXQC/JMhhCh9+TH6XvIsulCo=)
2: 6oZ5EjqZisGcBSFRGAY0I58w2z8.roa (hash: L22Ki4i/bHR4nsGJUs2wsOygUoNgPdGybFfVf2yeFJ4=)
3: Jcrma76ylAdAlGHz2It6HjItjVY.roa (hash: gxRmdXqrCHXXDsq6yXCM2hWnNFd/SuqVgvjo3oxIpIo=)
4: MBnHYmvHgfFqe99fU0s4rn0KXV4.roa (hash: Wq2dVDQ3LLdiDt+3Q/nPxFVfP5iqbuOdoj4/h9WIEZA=)
5: OkvrHqovIuCvA9DKylZPzJjsiLw.roa (hash: zDYM6sW/jEHSN9/osUFU8Hrx77FyqMIJs5+jayqems0=)
6: Z-Bltd0Hd8Wiwq9a-uJVdfU9kmY.roa (hash: 9o3h5OJ6yuOmpiGRC8WyL9keSG9Y6pKzn5PzuEfOyaY=)
7: huYXzYbwmRIlzSXqCG_XMzLFfLI.roa (hash: KMWYZ0oGUPWGO8v+CPLewWBemgNzQ4Q4bJS+rkHUyUY=)
8: p-LOMQlICu57P9KEbsj4ZGiFzbo.crl (hash: Ro40wK8D1gMxfosau6BUyD3sf/83t4oGXkfaWnXka98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:ae:91:b4:ba:23:69:c1:ef:d4:42:b9:c7:55:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Validity
Not Before: May 13 05:01:00 2026 GMT
Not After : May 14 05:01:00 2026 GMT
Subject: CN=cd58ce12e8b79e8d894862c81dd9a92435a1c5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:03:d1:4c:34:29:7a:b4:30:56:a9:0a:25:
d0:78:7b:63:ca:67:12:98:c0:f6:2e:21:41:8b:0e:
f0:fd:d7:63:ad:9a:f0:42:d2:2f:53:cf:9d:31:3b:
63:48:a2:b4:16:53:93:77:50:6d:d9:07:7e:55:1a:
77:f8:77:12:fc:cf:98:dc:e1:5f:86:70:fa:14:8a:
35:00:bb:c2:49:52:03:c7:16:f3:95:a3:d0:a3:00:
31:1c:32:84:90:bc:ac:bd:a3:53:78:d3:fe:fc:fd:
29:02:83:fa:2a:c6:bb:33:94:35:65:b4:26:b7:e3:
bc:29:47:99:d4:a6:e9:cc:fd:15:ca:c1:21:4b:2a:
9e:58:d0:3c:aa:20:29:4f:70:d2:bb:74:9e:34:6e:
59:82:c9:59:c9:bf:64:6e:22:47:d5:68:74:c3:6d:
c4:c8:b4:58:07:e0:5d:90:7e:de:1e:62:62:07:19:
a0:8a:86:f9:c4:07:91:c9:9a:e9:66:64:25:16:bb:
2c:c6:02:49:fc:83:57:17:c6:26:f0:23:00:44:b1:
9b:9e:d5:67:c1:d9:bf:14:32:62:4c:e5:3a:ab:3c:
f1:24:08:ed:2f:db:b4:f7:30:3c:0f:96:34:34:37:
c7:93:7c:2a:a6:f3:7e:50:86:b7:f1:a0:da:2a:c5:
64:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:58:CE:12:E8:B7:9E:8D:89:48:62:C8:1D:D9:A9:24:35:A1:C5:FF
X509v3 Authority Key Identifier:
keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:62:fd:c8:75:a9:76:19:35:54:3d:57:10:f1:12:57:bf:f9:
70:dd:6a:4e:22:e8:b5:81:cc:f5:06:35:c6:40:6e:2c:8b:12:
2d:d4:9d:19:30:04:39:99:dc:68:a7:6b:30:bf:c3:23:40:c8:
62:1f:79:d8:2f:0b:fb:92:aa:f2:d0:8a:56:6c:15:b0:23:1c:
82:74:e3:9c:83:53:0c:a0:d5:b3:78:78:9a:d5:1b:f1:a5:9f:
fe:65:85:10:bf:8b:d5:e8:27:0e:b8:66:fe:34:a0:51:64:83:
2b:a2:7b:b1:3a:fe:47:f9:60:67:5f:82:9b:11:4b:d8:e4:6c:
42:c1:73:a0:5a:b2:b6:43:9d:89:33:e7:c1:e8:c9:51:74:af:
ff:19:38:c4:29:f6:69:6b:63:85:b4:dc:36:6c:f1:1b:b0:e6:
72:e0:44:30:e5:95:f2:73:f2:44:13:a6:d0:bc:c6:84:dd:94:
96:cc:94:ce:4d:b2:4c:58:9d:78:0d:85:1e:cb:97:82:fd:86:
20:74:1f:cc:df:3a:f8:61:ae:e9:53:14:fc:50:e2:89:2e:72:
33:8c:cf:8d:79:b6:e9:4f:9f:92:ba:4f:72:c9:fe:bd:63:92:
06:7c:25:9d:4a:e4:33:65:eb:9f:b0:84:e7:17:9f:cc:e8:1c:
87:62:06:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:45:04 2026 by rpki-client