Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
File: p-LOMQlICu57P9KEbsj4ZGiFzbo.mft (raw, json)
Hash identifier: VfL+AamTF6l7jf1Kn4C+tvRNZYWWPZwDW6gz9SJhDH0=
Subject key identifier: 88:EF:78:6C:7E:1D:C3:D5:3C:CA:6B:DC:B8:C3:D6:41:7F:7C:9F:7A
Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Certificate serial: 019D9E51864A27E837238487A4EE4B3A3E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
Manifest number: 18D7
Signing time: Sat 18 Apr 2026 02:00:35 +0000
Manifest this update: Sat 18 Apr 2026 02:00:35 +0000
Manifest next update: Sun 19 Apr 2026 02:00:35 +0000
Files and hashes: 1: 1FmJS162fQbGwB70KRRIxqQYTPA.roa (hash: wZ0mqVcfmtfFGvqCihWmXQC/JMhhCh9+TH6XvIsulCo=)
2: 6oZ5EjqZisGcBSFRGAY0I58w2z8.roa (hash: L22Ki4i/bHR4nsGJUs2wsOygUoNgPdGybFfVf2yeFJ4=)
3: Jcrma76ylAdAlGHz2It6HjItjVY.roa (hash: gxRmdXqrCHXXDsq6yXCM2hWnNFd/SuqVgvjo3oxIpIo=)
4: MBnHYmvHgfFqe99fU0s4rn0KXV4.roa (hash: Wq2dVDQ3LLdiDt+3Q/nPxFVfP5iqbuOdoj4/h9WIEZA=)
5: OkvrHqovIuCvA9DKylZPzJjsiLw.roa (hash: zDYM6sW/jEHSN9/osUFU8Hrx77FyqMIJs5+jayqems0=)
6: Z-Bltd0Hd8Wiwq9a-uJVdfU9kmY.roa (hash: 9o3h5OJ6yuOmpiGRC8WyL9keSG9Y6pKzn5PzuEfOyaY=)
7: huYXzYbwmRIlzSXqCG_XMzLFfLI.roa (hash: KMWYZ0oGUPWGO8v+CPLewWBemgNzQ4Q4bJS+rkHUyUY=)
8: p-LOMQlICu57P9KEbsj4ZGiFzbo.crl (hash: YVuTf8yPTQ3N9SnI4BBycdGazUV+twoD2D1DzxWUu1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:51:86:4a:27:e8:37:23:84:87:a4:ee:4b:3a:3e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Validity
Not Before: Apr 18 02:00:35 2026 GMT
Not After : Apr 19 02:00:35 2026 GMT
Subject: CN=88ef786c7e1dc3d53cca6bdcb8c3d6417f7c9f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5f:1a:de:0f:b3:29:ed:c4:9e:4c:6a:fe:5d:
05:62:bc:d3:f2:b0:47:93:6f:e2:83:a9:94:4a:e4:
00:60:7a:d3:0e:05:4a:66:8e:bc:b0:74:5b:c6:b6:
ef:bd:f3:93:c0:c6:05:f7:3e:01:0a:e8:38:a1:1b:
02:18:4c:81:71:d1:04:d0:8b:f1:d1:26:e7:5c:22:
cf:ab:a3:29:76:0c:ff:88:a5:f6:c7:5e:b0:69:95:
ee:8c:49:fe:ba:dd:7b:22:f0:18:c5:41:96:76:84:
1e:3d:b9:43:27:da:14:59:a4:77:13:ba:3b:bb:be:
8e:ac:a0:65:ef:4b:d7:d8:51:cf:96:6c:88:c8:8f:
7c:44:e8:69:21:b2:5a:af:65:13:34:55:57:11:47:
3a:82:de:63:98:00:52:87:e7:54:b1:c6:69:f9:37:
7d:41:32:66:25:a8:77:bd:64:5b:a1:a0:66:2b:2b:
ab:40:5b:08:e2:9f:4a:06:09:74:ba:25:07:88:86:
be:37:e1:1a:32:72:c1:e4:6a:cb:c3:f0:27:d0:56:
f9:0a:54:d6:42:0b:92:04:09:e5:6a:85:e9:a8:f6:
88:86:4c:b7:18:f9:d0:de:6b:ff:e6:b0:15:15:c6:
21:19:b9:8f:b7:c8:6d:7c:26:4e:c3:69:39:59:8c:
70:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EF:78:6C:7E:1D:C3:D5:3C:CA:6B:DC:B8:C3:D6:41:7F:7C:9F:7A
X509v3 Authority Key Identifier:
keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4d:6d:a0:b2:82:be:ec:1a:b6:e8:ce:ad:53:d0:da:fb:e7:
43:42:cb:32:fb:5a:2d:4d:0e:ba:68:b4:74:23:65:5d:5c:df:
6f:ed:16:6c:56:3b:15:e2:4e:4f:d1:f2:06:9b:a9:2a:a2:23:
d6:63:3e:67:2a:00:40:92:c0:14:0c:7b:21:d5:73:7a:df:24:
b0:cd:30:ca:67:90:7c:f0:2d:ec:d8:f6:ec:f5:1d:55:f0:ec:
4b:40:f5:53:7e:31:92:1c:15:79:fa:02:11:7b:db:a4:c3:6c:
27:83:14:c6:9b:d0:8e:fc:77:de:c7:57:8a:f2:5a:4e:eb:4a:
17:26:fe:5c:56:65:3a:bc:05:bc:2f:33:2f:60:50:0b:64:a7:
37:0e:15:51:d2:21:25:47:e2:31:00:5e:92:66:da:7d:7c:6b:
49:b8:c3:47:40:1c:7e:2d:b1:4b:e7:77:0c:6f:30:68:a7:7e:
c3:51:45:df:2d:e4:3d:30:bc:79:76:80:8d:cc:32:f6:cd:a8:
7a:ba:61:57:ea:f6:9b:f6:68:ed:ff:51:1f:13:6e:63:2c:6b:
35:85:43:b5:47:35:6f:da:64:84:fc:18:b4:06:9d:e4:b4:2d:
37:b3:b5:87:d0:95:72:df:ab:49:83:58:6b:4f:d1:8c:19:a8:
ca:26:7b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:38:01 2026 by rpki-client