
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
File: p-LOMQlICu57P9KEbsj4ZGiFzbo.mft (raw, json)
Hash identifier: 6WapTMw+G0/AXpxoqL8fvWaxXQzW7QmgBZ1fZKNvn4U=
Subject key identifier: 9E:09:C6:1B:1D:64:63:52:ED:D0:04:23:AE:E0:74:62:D8:08:9A:C7
Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Certificate serial: 01A0E02A5FDBAF7A9BF09731B79BC79C3B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
Manifest number: 1A87
Signing time: Sun 27 Sep 2026 00:01:08 +0000
Manifest this update: Sun 27 Sep 2026 00:01:08 +0000
Manifest next update: Mon 28 Sep 2026 00:01:08 +0000
Files and hashes: 1: 1FmJS162fQbGwB70KRRIxqQYTPA.roa (hash: wZ0mqVcfmtfFGvqCihWmXQC/JMhhCh9+TH6XvIsulCo=)
2: 6oZ5EjqZisGcBSFRGAY0I58w2z8.roa (hash: L22Ki4i/bHR4nsGJUs2wsOygUoNgPdGybFfVf2yeFJ4=)
3: HWUcvkLmGASdhSYwC9AP_DWAGsE.roa (hash: xz26m/XdZaiAuUnY/3mFY/BnQNYa0NzUclmOKktyTEI=)
4: Jcrma76ylAdAlGHz2It6HjItjVY.roa (hash: gxRmdXqrCHXXDsq6yXCM2hWnNFd/SuqVgvjo3oxIpIo=)
5: MBnHYmvHgfFqe99fU0s4rn0KXV4.roa (hash: Wq2dVDQ3LLdiDt+3Q/nPxFVfP5iqbuOdoj4/h9WIEZA=)
6: OkvrHqovIuCvA9DKylZPzJjsiLw.roa (hash: zDYM6sW/jEHSN9/osUFU8Hrx77FyqMIJs5+jayqems0=)
7: Z-Bltd0Hd8Wiwq9a-uJVdfU9kmY.roa (hash: 9o3h5OJ6yuOmpiGRC8WyL9keSG9Y6pKzn5PzuEfOyaY=)
8: huYXzYbwmRIlzSXqCG_XMzLFfLI.roa (hash: KMWYZ0oGUPWGO8v+CPLewWBemgNzQ4Q4bJS+rkHUyUY=)
9: p-LOMQlICu57P9KEbsj4ZGiFzbo.crl (hash: 0uf991HlV+p7xg3VOMhih11q/KLhzDHHzvuKdrdHPQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:5f:db:af:7a:9b:f0:97:31:b7:9b:c7:9c:3b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Validity
Not Before: Sep 27 00:01:08 2026 GMT
Not After : Sep 28 00:01:08 2026 GMT
Subject: CN=9e09c61b1d646352edd00423aee07462d8089ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:af:c3:97:af:1f:84:0e:7a:ca:68:7c:d3:b2:
bf:04:61:cd:48:a1:9e:c7:67:45:27:dc:75:2b:2d:
d9:24:60:e9:29:5b:0e:e7:53:77:1b:f5:0a:0a:05:
33:2b:68:e3:ec:1c:64:7e:3d:0d:24:d0:85:f2:9f:
2b:aa:21:f9:a1:82:93:a9:23:25:e1:bf:cb:a1:7a:
c7:57:11:5b:62:ee:97:43:dc:11:73:1f:68:23:e9:
d2:a9:85:f2:99:0f:0e:12:fd:d9:c3:bd:74:6d:3c:
6f:c0:56:e8:80:f4:2e:12:0a:51:c9:cd:d0:da:83:
87:51:0c:5a:f3:49:88:3e:17:0b:4f:56:2a:f1:b2:
70:89:7a:1e:c1:49:fc:52:ac:a0:fb:69:a9:f4:1e:
24:61:c4:23:06:96:d2:01:6c:82:08:a5:90:4f:3b:
0c:d7:18:11:d0:01:56:db:fe:14:14:6c:f1:a1:e5:
70:c6:15:de:24:1d:90:7d:da:b7:d8:7c:5e:fc:da:
59:68:15:1d:72:43:3b:43:71:2b:bf:01:dc:22:e7:
b6:c4:71:88:bf:5a:31:5f:25:3a:31:d7:41:8e:95:
c2:f0:b5:9a:e3:64:82:5a:c7:ea:eb:e1:e0:4a:57:
59:24:e7:dd:99:00:19:21:39:fb:18:1b:f1:2c:4a:
fe:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:09:C6:1B:1D:64:63:52:ED:D0:04:23:AE:E0:74:62:D8:08:9A:C7
X509v3 Authority Key Identifier:
keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:31:bf:ee:0c:b2:b0:61:a6:42:d8:9d:80:9a:d8:f1:0b:4b:
a1:e9:44:6c:d2:cf:45:19:43:b8:24:3a:13:62:df:38:73:49:
fd:7f:9f:ea:cb:2a:cb:cd:46:b9:27:b2:a6:05:c3:ea:b8:15:
7d:bd:74:80:8e:0e:e1:64:83:48:ae:73:67:1f:90:79:c5:2e:
26:d6:4a:a8:cb:38:3a:e6:43:9f:e5:f8:2f:8d:57:28:b8:88:
dd:4e:1f:37:59:72:4a:ce:fa:82:63:2e:c1:8f:d8:a6:a4:a6:
4b:60:b0:21:3f:c6:19:b3:e4:f2:a9:01:0b:b4:80:0c:6e:21:
de:84:55:75:3e:07:46:6c:04:52:42:69:c4:97:9f:ad:11:a9:
a4:94:71:a8:6a:49:fe:18:2a:cf:ca:ff:59:63:76:f0:09:a3:
d3:71:46:3a:5b:d9:72:c3:32:92:33:0e:b5:4a:ea:32:a5:1e:
74:a1:6a:f5:d9:c6:31:fd:f8:0a:c3:92:8b:8a:3f:6d:f6:c0:
fb:06:76:fd:6d:31:9e:b2:5d:6e:d9:17:f6:97:c9:42:dd:19:
d3:01:2c:6e:6c:0f:f2:89:f7:4b:8d:29:78:f1:14:b9:96:e3:
d5:f1:73:f0:0b:83:2a:44:d2:38:4b:dc:86:ff:88:79:c0:f3:
27:7a:c3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:03:05 2026 by rpki-client