
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
File: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft (raw, json)
Hash identifier: a49xwAw6ZBj3j0vjXvcNl94exo1p25tWGzkjVyEJQqU=
Subject key identifier: 3D:C1:F0:8A:85:61:D2:D4:15:31:6B:82:7E:7F:3F:66:8E:EA:21:A4
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019EB846035575B526864882614F4974FACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
Manifest number: 1985
Signing time: Thu 11 Jun 2026 20:00:56 +0000
Manifest this update: Thu 11 Jun 2026 20:00:56 +0000
Manifest next update: Fri 12 Jun 2026 20:00:56 +0000
Files and hashes: 1: 8RjWLmkOfBFVB99jlL40-lbquu4.asa (hash: cPK/LotGLsuTU9/s/Ip3nQ0vHAaDXf27kyaBoPUr+rM=)
2: GPDxlZ6Mgtc8M9R7NfXsb6Do6ys.roa (hash: fxquXCdybvfXDDMRSE+/PppS1K/AZObL7YLYVgkksi8=)
3: H9oeWcwVf2xL36Ou9mjxNel_kzo.roa (hash: /Vy6rEoa9E+9TCclPU03mw9Obpsi5J4mKFzmaWOIU+0=)
4: L8ziuzN9ZJW99zUB2j6no1744bQ.roa (hash: aqgFAVHEHZXpTrGrUTYwK9YoeQyCzW64mBEocLytb2c=)
5: LmM48ME-vV9knrJxSTQaxjQp3co.asa (hash: EudqvBBerqU77vXqzfKyktKs74IC9c1mzsls/2yJHmE=)
6: ZMO3GRpIMCOc63JONFzvD70jPxI.roa (hash: OezO4NKW0B8AfY/4oRlgfRT7HTSEOCWWwSaXei6kgkA=)
7: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl (hash: T7ZN2OX9l8AF0RYfgaOCJE7c+BskCG7nl6XEl8q5S48=)
8: iJx_C_WMT8KQ4owla7AtWiffaR8.roa (hash: cmPWxGf6uIHZJKi9/0I8Bo49XzFIKfEoLuyc9bnyvQ4=)
9: iYvuIq8ZKE6IPDv4GBtfch8s7S4.asa (hash: CoFBVX/R0Ekp3rqLqqIt63HCR6x0nL/mxcevmbkjRKM=)
10: iiUeWWy4vNdQT2JqfLyriOKyBds.roa (hash: X//YchsgfpGi9KC+KU3RuTcaBCPtGN0++IEL/F/EXV0=)
11: p0GDdN-xxKyg8Gf7N5r5gMiQ4M0.roa (hash: 3BflJNAULniEze9ExWAF/NtnD5BDpxEJYWJuUEJNS7k=)
12: uzurr2xmZJqK_nXHAqCc38VmZP4.asa (hash: CQMd8ydPQYMvDSq1KX9EIOXQQgehhV3R64gz2tI74b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:46:03:55:75:b5:26:86:48:82:61:4f:49:74:fa:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Jun 11 20:00:56 2026 GMT
Not After : Jun 12 20:00:56 2026 GMT
Subject: CN=3dc1f08a8561d2d415316b827e7f3f668eea21a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6a:f6:41:35:b2:25:90:e5:80:78:ea:f1:cf:
5c:54:af:8e:32:4a:3a:54:71:6e:39:b2:17:8e:c0:
e7:5a:23:4a:0d:ae:81:6b:7e:2c:02:39:5d:2d:c4:
4a:f5:e0:2e:0b:84:95:74:4b:b7:27:1b:26:30:31:
77:29:7c:bb:83:87:58:62:a8:68:84:b3:f4:00:c1:
a8:1a:aa:80:34:d7:fe:75:5a:24:a5:2f:c1:c6:3a:
4a:ca:74:e5:92:98:46:e4:a4:e4:fb:f0:da:da:e7:
32:27:d5:a9:b0:a3:a5:6e:36:a7:f8:59:51:36:ab:
f4:57:fb:2a:57:37:91:2d:d4:54:b1:5d:d3:43:96:
ec:f8:7b:06:b3:ce:6c:39:dc:a2:68:8e:51:5a:68:
cc:24:3a:89:c6:9b:b3:dc:8c:bb:4b:57:57:1b:ec:
54:fa:af:89:24:1c:f7:11:d1:47:2f:4c:86:bd:88:
d5:57:7e:ba:b0:93:74:3e:1a:27:77:2c:0a:9e:38:
58:a7:09:4e:b6:ad:7e:25:8a:8c:a2:13:67:ff:dd:
62:d0:1c:68:bd:0a:d9:ad:f7:c2:18:1b:2c:67:50:
c8:fe:cd:85:3a:d9:41:1c:c2:5d:0d:c2:b8:18:a3:
62:87:ba:1a:64:36:9e:99:15:0e:0c:19:45:3c:22:
d7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C1:F0:8A:85:61:D2:D4:15:31:6B:82:7E:7F:3F:66:8E:EA:21:A4
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b7:1f:9b:66:12:d2:f4:70:75:d7:9f:ed:7f:b0:99:37:1c:
6d:e2:9b:68:f1:cc:40:c7:e5:bb:a0:c3:4a:7a:ff:60:80:16:
61:a4:97:04:9b:79:94:dc:12:d0:3f:88:65:a7:72:9b:03:df:
08:67:94:d1:96:a5:b3:13:91:05:6e:38:c6:cb:9f:07:3b:01:
e9:6a:1a:17:48:60:50:66:29:61:b9:22:8c:75:91:5f:c0:e5:
5c:f2:a3:c4:3f:04:e0:1e:0f:dc:ea:13:6d:f0:a1:f0:c9:59:
c5:35:32:c8:cc:8c:3e:b0:d9:0d:13:2c:67:12:b1:22:64:0e:
b7:b4:1c:a2:63:db:95:f6:f9:81:df:a4:49:4c:15:7f:68:d1:
74:2a:43:58:6e:05:e1:06:c7:aa:35:3a:c9:3e:8b:ee:d8:21:
2c:93:a9:06:44:59:73:9d:9b:18:ef:82:1e:8e:9d:cb:e8:57:
b4:82:67:7b:d0:4c:97:40:af:72:f2:75:ac:d8:08:a0:bf:fe:
99:68:26:a2:e7:f1:f0:a1:81:87:f7:4a:0c:05:a2:02:2d:8f:
f1:56:23:3c:13:92:c2:f1:98:19:d1:e6:b1:47:64:7e:3a:12:
4e:99:45:6b:19:a9:05:50:16:ca:bf:d2:8d:67:fd:93:26:e1:
b2:3a:34:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:54:14 2026 by rpki-client