Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
File: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft (raw, json)
Hash identifier: kSYqHhNI06/m2b98SDFdNx8e3vmx1khBx9jfmiSoJnM=
Subject key identifier: EE:23:41:74:F5:DE:C9:AC:1C:11:C9:16:12:04:75:B1:EA:6B:AB:CE
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019CE52378ADFC73561B670B4488B55828D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
Manifest number: 187E
Signing time: Fri 13 Mar 2026 03:00:32 +0000
Manifest this update: Fri 13 Mar 2026 03:00:32 +0000
Manifest next update: Sat 14 Mar 2026 03:00:32 +0000
Files and hashes: 1: 3d480J-0prT3T1JWUdnzPc2zMXc.roa (hash: kpOOiDT79qXgOV592RAw6zGcrdS71XzWHuahfllbPzE=)
2: RSqPJhJmjCIX0qYWTCkVHV3x1No.roa (hash: 5c17YPLTHgN/lD3MLHQ8nFE54DN3F5eOJOK020Ype7U=)
3: VCo9Gy3ac0ijwbWb-rW2CLlkx4k.roa (hash: UpkeZzua3g2qypyZlQaUvnR0XOXOnRimcQWmDDMRGzE=)
4: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl (hash: QePi7MhFxXw9bwegp1sCi2Yjk/A7ZKrtqsOHQ6aIb8c=)
5: exc9zw5hfGY6l-qUvVLhZDnDzNg.roa (hash: bfJ9NZgBM46XlTESo3todHD2WcgLhUUxq1hzD5hZ7R4=)
6: hkHYWWrW4y_ul5fdYlpYzXiLvyk.roa (hash: G8zs4iepaUfSzTVyBQdcl2X1K8STLz2UxM5NO2UatAg=)
7: i7BTNifeQAg_X7HpbjiYFKcEkzQ.roa (hash: xDc1crGo8ZscrYDHZvMZeulUo2dvGLGk7mMLTBY4vu4=)
8: tZuRuRjUjAgIt0pwulyiOZXutjY.roa (hash: k/BPRAnhVqp1LthCSTZpNaYiFsaCw2HlOWpQGqQy0hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:78:ad:fc:73:56:1b:67:0b:44:88:b5:58:28:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Mar 13 03:00:32 2026 GMT
Not After : Mar 14 03:00:32 2026 GMT
Subject: CN=ee234174f5dec9ac1c11c916120475b1ea6babce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ea:44:95:6c:bf:a8:6e:32:cd:0d:52:53:ce:
61:17:08:05:4c:d9:e2:0b:9c:76:fb:21:fc:3c:41:
df:0d:ce:77:63:f7:a0:f2:2b:fc:b3:89:c0:f4:05:
34:c1:fa:1d:32:b1:5f:30:7e:e7:ba:22:db:ab:8b:
8c:29:8c:d2:33:95:f1:92:73:24:5e:8c:9f:56:64:
ea:e5:a4:cb:b3:fc:a4:dc:70:c6:81:b3:4e:bf:5f:
b2:01:ca:2f:be:56:4b:f8:a9:dd:11:bd:39:b5:3d:
0a:61:b8:8d:10:cd:51:bb:f1:4b:6b:7b:93:60:4c:
05:ae:a8:99:0b:8c:f5:6e:63:99:43:b8:51:db:4d:
ef:0e:5f:4b:7e:6f:0e:1d:b5:65:6e:52:df:e0:a9:
50:ce:4a:da:26:87:13:33:f6:6f:c4:9d:ef:05:1c:
3e:36:fa:5e:92:13:62:da:18:5e:58:19:b8:8c:e1:
d7:06:c8:f1:95:95:55:6a:83:0a:2b:3a:4c:d5:cb:
c8:f2:03:f1:2a:8c:0e:2d:3f:2b:d6:eb:9e:bd:98:
92:96:17:66:a4:44:41:04:e1:0a:2e:d0:11:96:6f:
c3:88:93:25:ae:17:1b:87:77:5b:ed:a7:d0:44:b3:
c3:5b:68:53:82:90:8b:8f:0c:08:2c:fc:a2:e2:22:
22:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:23:41:74:F5:DE:C9:AC:1C:11:C9:16:12:04:75:B1:EA:6B:AB:CE
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ec:70:6c:52:84:28:be:b4:97:35:a3:e0:76:ed:23:25:d0:
31:49:02:e7:31:26:8d:dd:a6:58:b3:63:90:a1:08:ce:20:c3:
cb:a4:1a:f4:8a:ce:cf:1a:74:3c:ac:6d:0b:b2:2a:7a:2f:26:
e8:fc:ac:2f:c3:ea:67:4d:c8:82:a9:b8:bc:95:82:3a:4d:fc:
9e:ad:ef:69:f1:56:1a:f6:28:52:08:72:57:26:82:95:a5:3b:
da:bd:ce:d4:da:c1:e2:cd:a6:1c:af:8d:23:f9:13:e0:3b:cb:
87:6d:95:ce:1e:fa:7a:a9:fc:58:82:3e:00:68:34:29:f3:89:
fc:cb:8f:78:f7:9c:14:6c:f0:11:09:4d:f8:b8:28:ca:8b:b2:
08:a9:06:5c:80:9f:13:51:04:54:36:86:9b:0b:33:c3:a2:f1:
2c:ca:24:2d:c5:6b:1c:e0:4f:49:1b:a4:c8:74:52:60:34:3d:
98:ba:09:68:0c:1b:29:bc:dd:e7:43:33:22:10:83:01:12:44:
b5:54:6c:fa:55:ce:1d:a9:5b:f2:55:16:8d:3f:cc:3f:a0:d6:
f3:91:6a:a8:fe:44:2b:45:a2:98:54:b4:83:dd:82:ee:3a:b2:
92:2c:d9:99:cd:50:12:f7:9d:61:38:94:2e:7f:98:5a:e2:47:
42:aa:f4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:51:21 2026 by rpki-client