Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
File: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft (raw, json)
Hash identifier: 2IF8XW/CC7nE5W9B/ohXuNcLUvttFLcNsx0tsemY5sg=
Subject key identifier: 87:89:3C:32:49:58:CB:9C:44:58:64:19:0E:EE:C2:8D:F2:75:0B:41
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019D284D84ADB173568499E2076F39FC12D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
Manifest number: 18A7
Signing time: Thu 26 Mar 2026 04:01:02 +0000
Manifest this update: Thu 26 Mar 2026 04:01:02 +0000
Manifest next update: Fri 27 Mar 2026 04:01:02 +0000
Files and hashes: 1: 4TwmNuGfyBIVeU9HIdhUXSI6OKM.roa (hash: WbADxTwqJ7Nrf6tTkOO3B9hub+mYE5UyXmlSkAhmv0Q=)
2: 8eLGuq2wm0ST75Nc6wYZHuCYsJE.roa (hash: vMrV06h4dj90hrIPC+644OzHHG7+LEnFLgT6M0Py4q0=)
3: Nxs6tS3gpvVZDTXgWewi49rURC4.roa (hash: 1LA5/OqatPnKwLIuRVLOa6iMj8y9qkygVQE1vbKraWQ=)
4: RSqPJhJmjCIX0qYWTCkVHV3x1No.roa (hash: 5c17YPLTHgN/lD3MLHQ8nFE54DN3F5eOJOK020Ype7U=)
5: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl (hash: nnfLQmmWMIN+zqaO0B6b7JgW8/4sYgg2iBl5Hgxu/48=)
6: feJBFtuSedKYx8hKJbRGExQNMM4.roa (hash: s2bPD/pJAa8e5cSBOBrIAruOgYwmVNs+Z/xZevCP9W4=)
7: iJx_C_WMT8KQ4owla7AtWiffaR8.roa (hash: cmPWxGf6uIHZJKi9/0I8Bo49XzFIKfEoLuyc9bnyvQ4=)
8: oLk7wrfgqcGWPZqt1Cw2kJaO3jY.roa (hash: DozXl5oLqZiJ/02iZakTe36fBhsLgmWvyP0VwtTG8uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:84:ad:b1:73:56:84:99:e2:07:6f:39:fc:12:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Mar 26 04:01:02 2026 GMT
Not After : Mar 27 04:01:02 2026 GMT
Subject: CN=87893c324958cb9c445864190eeec28df2750b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c6:ed:71:bd:4a:e5:cb:95:79:b7:b6:de:b8:
aa:86:48:ac:71:13:47:78:bd:9e:73:71:13:e8:6c:
d6:32:fd:f6:a5:62:6d:93:3d:fa:ae:65:4d:f6:3a:
c7:98:ba:f7:aa:dd:b7:bb:0e:ac:38:e4:9d:b3:0b:
9e:ae:37:0f:31:a9:24:73:7c:e3:32:69:1c:30:3e:
67:40:8b:37:e6:2f:37:d6:de:ba:89:8d:9c:69:40:
b2:de:a0:d7:79:2f:32:80:e3:b7:db:fa:e8:70:db:
41:f8:59:c4:da:9f:2f:cb:c1:c4:7e:45:86:dd:b3:
77:d1:10:d1:9c:e5:ab:ab:39:69:89:1f:7f:1c:86:
80:2b:aa:a8:1d:55:72:6f:e2:00:01:f4:de:3b:67:
ea:e0:87:f3:7e:d2:a2:78:0f:56:dd:39:b2:7d:bc:
0c:04:3d:80:43:1c:e5:81:c7:ef:88:db:fb:dd:35:
b2:6d:34:4e:b2:f4:87:39:c9:d1:d8:93:c2:f7:72:
75:18:93:ce:ab:2e:a8:5b:67:12:89:2b:98:5d:23:
96:14:6a:23:9a:99:2e:6d:13:9a:d3:bc:c4:b5:a5:
d7:b6:c2:bc:6d:ca:35:f4:03:f5:c4:ec:89:69:5a:
e8:28:4b:56:5c:cb:ac:70:e0:d7:bd:20:7f:66:b5:
77:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:89:3C:32:49:58:CB:9C:44:58:64:19:0E:EE:C2:8D:F2:75:0B:41
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6d:19:38:f4:b4:8c:38:12:7c:b3:42:21:c2:93:a2:b7:9c:
05:68:aa:94:93:9e:6c:4f:8c:4d:f3:d8:73:a1:4e:3b:60:4b:
7b:b8:f8:a9:9b:1f:d8:51:f6:ef:c2:01:a9:3b:f6:3b:31:de:
44:d4:da:59:7e:db:16:46:bd:5a:fa:39:cc:9e:a0:eb:f8:82:
58:44:85:aa:5c:aa:72:2a:f5:e2:5c:5f:3a:88:5e:23:45:61:
71:0f:dd:15:f8:5a:2f:24:91:03:c1:2a:a9:bd:e3:03:01:43:
10:16:7c:6a:df:73:6a:f3:06:ff:34:41:2f:01:44:e7:de:a2:
cb:7b:4b:d3:46:56:37:7d:87:52:69:9f:ac:ee:f0:20:c4:a1:
83:fd:d2:c1:4b:9b:74:99:5d:5a:e1:63:c6:28:73:7f:e9:61:
c3:2c:1a:57:7d:f9:f1:41:db:f8:ab:67:f4:0c:8d:96:99:c7:
5f:b8:dd:03:b9:37:de:24:36:78:14:c8:f0:74:17:dd:af:ad:
40:cb:c2:15:af:2f:1e:3c:e8:d1:08:e2:26:15:bf:9c:7c:6a:
05:a2:d6:b3:00:c5:61:55:26:37:95:cc:33:16:03:85:3a:1d:
09:b4:07:bb:23:b7:2f:35:fa:16:eb:e0:85:09:e7:f9:19:e2:
49:9a:d0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:57:07 2026 by rpki-client