Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
File: p-LOMQlICu57P9KEbsj4ZGiFzbo.mft (raw, json)
Hash identifier: I7LL2de4tyc+aTrDX2+21g36FMeC/My64sfDl+wMv3A=
Subject key identifier: DF:85:23:02:CC:EC:11:A0:CE:E7:92:CC:33:7F:71:4B:74:43:B0:06
Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Certificate serial: 01A17C97DC77BCA55F922A5D1B83E928648E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
Manifest number: 1AD8
Signing time: Tue 27 Oct 2026 09:01:29 +0000
Manifest this update: Tue 27 Oct 2026 09:01:29 +0000
Manifest next update: Wed 28 Oct 2026 09:01:29 +0000
Files and hashes: 1: 1FmJS162fQbGwB70KRRIxqQYTPA.roa (hash: wZ0mqVcfmtfFGvqCihWmXQC/JMhhCh9+TH6XvIsulCo=)
2: 6oZ5EjqZisGcBSFRGAY0I58w2z8.roa (hash: L22Ki4i/bHR4nsGJUs2wsOygUoNgPdGybFfVf2yeFJ4=)
3: HWUcvkLmGASdhSYwC9AP_DWAGsE.roa (hash: xz26m/XdZaiAuUnY/3mFY/BnQNYa0NzUclmOKktyTEI=)
4: Jcrma76ylAdAlGHz2It6HjItjVY.roa (hash: gxRmdXqrCHXXDsq6yXCM2hWnNFd/SuqVgvjo3oxIpIo=)
5: MBnHYmvHgfFqe99fU0s4rn0KXV4.roa (hash: Wq2dVDQ3LLdiDt+3Q/nPxFVfP5iqbuOdoj4/h9WIEZA=)
6: OkvrHqovIuCvA9DKylZPzJjsiLw.roa (hash: zDYM6sW/jEHSN9/osUFU8Hrx77FyqMIJs5+jayqems0=)
7: Z-Bltd0Hd8Wiwq9a-uJVdfU9kmY.roa (hash: 9o3h5OJ6yuOmpiGRC8WyL9keSG9Y6pKzn5PzuEfOyaY=)
8: huYXzYbwmRIlzSXqCG_XMzLFfLI.roa (hash: KMWYZ0oGUPWGO8v+CPLewWBemgNzQ4Q4bJS+rkHUyUY=)
9: p-LOMQlICu57P9KEbsj4ZGiFzbo.crl (hash: 3qYicJOx8Tss6GA0/3vQOkaie7HALkdEiCgObB3Td20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:dc:77:bc:a5:5f:92:2a:5d:1b:83:e9:28:64:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Validity
Not Before: Oct 27 09:01:29 2026 GMT
Not After : Oct 28 09:01:29 2026 GMT
Subject: CN=df852302ccec11a0cee792cc337f714b7443b006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:54:f8:be:f1:7d:98:2b:44:1f:77:86:67:4b:
70:9e:ce:4c:4b:96:a8:dc:55:44:f8:99:50:6d:03:
68:d9:ef:50:6f:a0:48:be:06:78:08:1d:66:98:96:
7e:9d:0b:b8:80:1f:06:cf:0f:48:70:2e:05:03:94:
91:e3:d8:66:be:5b:fd:b7:b4:90:19:74:43:5a:ab:
12:ca:5a:bd:b3:cc:a6:c0:6c:f6:41:c8:37:e1:1e:
ff:f3:c1:ae:8c:5f:6d:d4:1f:5d:e0:20:d4:8a:5d:
d7:75:33:b0:b8:43:85:1c:78:e1:7b:5b:7d:60:45:
42:ec:ed:92:f9:ab:f4:cd:51:90:8a:45:2c:a2:52:
52:78:4a:4a:10:f8:9d:62:d0:14:60:be:3e:a0:31:
aa:2d:db:4d:7b:e7:2e:af:ed:b2:ee:b0:c3:3b:6a:
74:ff:43:8d:92:ad:0d:0e:05:9b:ba:44:d1:7a:6b:
a7:88:73:54:b2:e2:50:f1:c3:b1:61:73:b8:81:45:
89:4d:ba:8e:28:3b:41:29:68:0c:e7:ce:da:07:69:
06:b2:3a:68:3d:25:e8:af:a5:27:57:60:15:c7:d2:
e7:b6:1b:71:64:bc:c2:fc:30:f4:96:39:4f:ae:59:
61:e1:b3:fb:79:97:15:90:d0:50:10:7e:54:0f:8a:
05:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:85:23:02:CC:EC:11:A0:CE:E7:92:CC:33:7F:71:4B:74:43:B0:06
X509v3 Authority Key Identifier:
keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:77:a8:d6:92:1e:96:b2:62:b0:4a:83:df:b1:59:2a:b3:6e:
7e:95:f7:2a:f2:16:09:8a:4b:d3:88:77:10:56:15:b5:84:ab:
b7:ad:1d:ce:ed:bc:5e:94:62:92:8c:86:26:96:4a:1a:04:1b:
fc:45:9a:32:d1:69:96:86:7b:75:3e:68:f1:95:cf:8e:d6:35:
cf:72:fc:0c:53:36:de:61:8b:c7:b8:ab:ea:7b:35:c4:46:c9:
c0:83:b7:27:1d:b1:ce:98:66:3e:25:04:4b:5c:0b:fa:b4:01:
08:1c:cf:87:65:18:c2:1c:54:3b:b7:8b:18:18:1f:71:4f:1b:
1f:7e:66:1a:74:1b:64:24:86:67:44:c6:77:92:66:ed:bb:65:
67:cb:55:c8:62:fa:88:8a:c6:ea:21:6a:98:18:7f:71:03:fc:
67:28:0c:1c:2d:f8:1b:07:24:46:e7:d5:23:ca:a7:eb:0c:59:
30:96:2e:fe:e6:8a:0b:55:61:ef:b5:66:94:41:92:0c:da:ac:
90:52:2c:37:40:ff:0a:13:d8:57:6d:b2:a1:10:bd:9a:56:38:
ac:e0:e0:af:d5:29:6a:57:77:9f:78:e1:dd:03:af:7b:b6:91:
49:c7:19:36:1c:11:59:6e:13:b4:69:54:6b:91:24:05:18:5c:
e6:a3:3f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:39:00 2026 by rpki-client