$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft File: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft (raw, json) Hash identifier: hmMhMFeEdn8X3aiXIp7NVol1aglclBLlz/jIrF/jwuU= Subject key identifier: E0:87:29:62:5A:88:25:C6:38:99:21:C4:80:C4:A2:51:C9:52:A7:15 Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e Certificate serial: 019DCDF4B481023C4636C52F03B573CDDFAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft Manifest number: 1906 Signing time: Mon 27 Apr 2026 08:00:59 +0000 Manifest this update: Mon 27 Apr 2026 08:00:59 +0000 Manifest next update: Tue 28 Apr 2026 08:00:59 +0000 Files and hashes: 1: 3icyqMRyF07fP-RxdVUnoaWnivQ.roa (hash: IR/JrGZ5RG8UbNwfnBd1Iq6Q3uAPql2TC4EcXRy5H24=) 2: 8RjWLmkOfBFVB99jlL40-lbquu4.asa (hash: cPK/LotGLsuTU9/s/Ip3nQ0vHAaDXf27kyaBoPUr+rM=) 3: LmM48ME-vV9knrJxSTQaxjQp3co.asa (hash: EudqvBBerqU77vXqzfKyktKs74IC9c1mzsls/2yJHmE=) 4: Wk_tHv_Q2J-KR1xJ-Z-Iy3SV_uo.roa (hash: 58PIUJgDY4Md7RFDg58vKTzVyKwlD7GKunnyX3sVfSo=) 5: a1iiCcOaxmzS0-8TIKQtOTVhn-s.roa (hash: VjhgE/ADiBXCV7jVQEBRzjdY9qu85RcYlku/EAwZIuw=) 6: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl (hash: H1huZBJB+7fwNtR9Vsm4eFzS5CtNfgl1vUsLSzmqjGI=) 7: iJx_C_WMT8KQ4owla7AtWiffaR8.roa (hash: cmPWxGf6uIHZJKi9/0I8Bo49XzFIKfEoLuyc9bnyvQ4=) 8: iYvuIq8ZKE6IPDv4GBtfch8s7S4.asa (hash: CoFBVX/R0Ekp3rqLqqIt63HCR6x0nL/mxcevmbkjRKM=) 9: kQohzrGvabDbphNJEZe46Efa3yk.roa (hash: ZU/Qi3R1fxI1ErrHkxAk+kh6ZGrQUja4saILLw5MFNg=) 10: p0GDdN-xxKyg8Gf7N5r5gMiQ4M0.roa (hash: 3BflJNAULniEze9ExWAF/NtnD5BDpxEJYWJuUEJNS7k=) 11: qp981CWaAhJGZSFVeukRH1vZLCs.roa (hash: LD2Ef8NFp9+LfbXlntUc3ly3on2B23cWNN5jr7deXSA=) 12: uzurr2xmZJqK_nXHAqCc38VmZP4.asa (hash: CQMd8ydPQYMvDSq1KX9EIOXQQgehhV3R64gz2tI74b8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cd:f4:b4:81:02:3c:46:36:c5:2f:03:b5:73:cd:df:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e Validity Not Before: Apr 27 08:00:59 2026 GMT Not After : Apr 28 08:00:59 2026 GMT Subject: CN=e08729625a8825c6389921c480c4a251c952a715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:09:4d:44:be:53:59:57:13:c6:cd:d7:75:a2: 54:f8:f9:2f:00:25:1f:3f:97:bc:b8:70:b0:bd:b4: 4c:12:0c:c0:56:02:f0:3a:38:c2:1b:3e:ed:57:05: 6c:e0:98:20:0f:bf:0f:60:86:48:8e:b2:9a:72:84: 3e:50:d5:cc:9c:e9:d0:ef:dc:f4:fa:96:d1:74:e8: 95:69:a0:5b:06:3c:d1:8f:2a:65:40:0c:36:92:32: aa:7b:6b:a5:7c:dd:aa:75:30:13:af:2e:a1:5d:66: 84:b0:5f:5a:2c:6e:91:48:1f:eb:3d:e6:1b:f7:f2: d6:47:d4:c6:36:6c:a3:df:d3:e2:4e:8f:79:db:f1: 39:18:8d:80:f3:c5:53:af:ee:1a:96:11:60:0c:6d: 02:45:dd:7d:5b:f5:d2:3a:d9:ec:7b:66:99:90:c3: 64:e4:7b:b5:e0:c5:00:e5:16:63:dd:75:aa:5a:16: a7:b2:4b:3a:08:fd:78:83:88:6a:ce:b8:2a:14:2c: 3b:1a:a2:8e:ab:6d:04:df:9c:c0:60:2d:e7:c0:30: f9:dc:dd:71:6f:19:a9:7e:cd:09:11:84:1d:6b:70: 83:ee:ca:3a:33:72:a6:9e:60:49:e5:4b:25:18:3d: 30:b0:36:35:e8:98:f4:f0:93:de:02:72:50:93:18: 9a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:87:29:62:5A:88:25:C6:38:99:21:C4:80:C4:A2:51:C9:52:A7:15 X509v3 Authority Key Identifier: keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:1b:da:b0:f5:3c:58:6b:23:6f:7e:ad:10:51:96:09:49:f4: 3e:43:96:b7:98:77:c5:24:78:43:cc:02:03:f0:17:7e:fa:c4: 63:b6:c0:48:d7:f3:c2:10:44:ab:b2:eb:9e:56:7f:bf:4c:26: 9d:b0:92:15:2a:0d:1a:c8:43:a9:6a:13:08:b1:93:52:db:30: aa:57:bc:85:3a:d8:12:4f:9e:44:0f:a7:e2:ac:13:01:7a:a2: 78:50:52:0a:c3:21:bf:7c:ea:c5:45:e1:11:c0:cb:38:23:1d: d2:56:40:d4:32:86:72:b6:fe:c3:48:57:e4:eb:b1:67:ff:f0: a4:48:5e:2f:9f:5d:e3:19:03:ee:9f:34:80:7b:b0:80:04:7f: c7:79:8d:7d:8f:85:d4:2d:57:95:ea:bb:02:5f:b2:f6:37:eb: ab:d1:3e:b9:53:e7:f5:42:c4:b6:15:11:bb:90:b3:2d:01:3c: d6:0c:41:39:ac:5c:97:71:79:9d:e0:be:f2:d4:89:ac:ec:ca: e2:c5:81:f0:20:7b:60:7a:0c:e3:77:50:02:e2:51:0c:75:1a: 74:aa:22:fa:17:b5:99:66:f6:8f:c1:ec:bc:dd:71:6d:de:f8: 26:a8:6f:0e:9d:ca:05:fb:02:1d:23:ae:d5:75:5f:64:1f:59: 36:9f:c1:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3N9LSBAjxGNsUvA7Vzzd+tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1 ZDAwN2UwHhcNMjYwNDI3MDgwMDU5WhcNMjYwNDI4MDgwMDU5WjAzMTEwLwYDVQQD EyhlMDg3Mjk2MjVhODgyNWM2Mzg5OTIxYzQ4MGM0YTI1MWM5NTJhNzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwlNRL5TWVcTxs3XdaJU+PkvACUf P5e8uHCwvbRMEgzAVgLwOjjCGz7tVwVs4JggD78PYIZIjrKacoQ+UNXMnOnQ79z0 +pbRdOiVaaBbBjzRjyplQAw2kjKqe2ulfN2qdTATry6hXWaEsF9aLG6RSB/rPeYb 9/LWR9TGNmyj39PiTo952/E5GI2A88VTr+4alhFgDG0CRd19W/XSOtnse2aZkMNk 5Hu14MUA5RZj3XWqWhansks6CP14g4hqzrgqFCw7GqKOq20E35zAYC3nwDD53N1x bxmpfs0JEYQda3CD7so6M3KmnmBJ5UslGD0wsDY16Jj08JPeAnJQkxiaqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCHKWJaiCXGOJkhxIDEolHJUqcVMB8GA1UdIwQY MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt MWZiYzY0MWI1MGIxLzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxvasPU8 WGsjb36tEFGWCUn0PkOWt5h3xSR4Q8wCA/AXfvrEY7bASNfzwhBEq7LrnlZ/v0wm nbCSFSoNGshDqWoTCLGTUtswqle8hTrYEk+eRA+n4qwTAXqieFBSCsMhv3zqxUXh EcDLOCMd0lZA1DKGcrb+w0hX5OuxZ//wpEheL59d4xkD7p80gHuwgAR/x3mNfY+F 1C1Xleq7Al+y9jfrq9E+uVPn9ULEthURu5CzLQE81gxBOaxcl3F5neC+8tSJrOzK 4sWB8CB7YHoM43dQAuJRDHUadKoi+he1mWb2j8HsvN1xbd74JqhvDp3KBfsCHSOu 1XVfZB9ZNp/BJA== -----END CERTIFICATE-----Generated at Mon Apr 27 17:21:26 2026 by rpki-client