Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
File: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft (raw, json)
Hash identifier: qWtysP1+dL9fVIkweXvLHG8blZpQA+99pFi8jCo81+M=
Subject key identifier: 60:6A:E6:DF:E3:F0:E9:7A:4D:60:E0:0A:CF:94:CA:CF:A8:02:90:B1
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019CAB343B3477A32A9E858F084B4A03C18B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
Manifest number: 1860
Signing time: Sun 01 Mar 2026 21:00:52 +0000
Manifest this update: Sun 01 Mar 2026 21:00:52 +0000
Manifest next update: Mon 02 Mar 2026 21:00:52 +0000
Files and hashes: 1: 3d480J-0prT3T1JWUdnzPc2zMXc.roa (hash: kpOOiDT79qXgOV592RAw6zGcrdS71XzWHuahfllbPzE=)
2: RSqPJhJmjCIX0qYWTCkVHV3x1No.roa (hash: 5c17YPLTHgN/lD3MLHQ8nFE54DN3F5eOJOK020Ype7U=)
3: VCo9Gy3ac0ijwbWb-rW2CLlkx4k.roa (hash: UpkeZzua3g2qypyZlQaUvnR0XOXOnRimcQWmDDMRGzE=)
4: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl (hash: xwHrCFPyoH+WLLeV5uZr3HP44ZC3yayJGzVkCH44twI=)
5: exc9zw5hfGY6l-qUvVLhZDnDzNg.roa (hash: bfJ9NZgBM46XlTESo3todHD2WcgLhUUxq1hzD5hZ7R4=)
6: hkHYWWrW4y_ul5fdYlpYzXiLvyk.roa (hash: G8zs4iepaUfSzTVyBQdcl2X1K8STLz2UxM5NO2UatAg=)
7: i7BTNifeQAg_X7HpbjiYFKcEkzQ.roa (hash: xDc1crGo8ZscrYDHZvMZeulUo2dvGLGk7mMLTBY4vu4=)
8: tZuRuRjUjAgIt0pwulyiOZXutjY.roa (hash: k/BPRAnhVqp1LthCSTZpNaYiFsaCw2HlOWpQGqQy0hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:3b:34:77:a3:2a:9e:85:8f:08:4b:4a:03:c1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Mar 1 21:00:52 2026 GMT
Not After : Mar 2 21:00:52 2026 GMT
Subject: CN=606ae6dfe3f0e97a4d60e00acf94cacfa80290b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cc:9d:3d:61:04:1f:2f:c0:2c:12:36:e6:db:
0e:4f:96:59:0f:e6:69:84:da:f2:de:6a:db:b8:c8:
47:3b:28:b2:1c:f2:0e:18:99:49:3a:6b:fb:12:4a:
3a:0c:af:e4:7f:39:2d:25:33:2e:59:10:24:93:62:
b0:dd:ab:31:cf:23:90:09:cb:f6:a8:b4:bc:8d:ad:
d6:80:44:bd:a1:19:d7:a4:25:d3:83:24:35:98:05:
17:dc:61:84:e6:69:fb:92:cc:62:ab:46:76:45:e1:
43:36:f4:60:dc:55:48:92:0b:e0:30:7e:a3:2f:4f:
3a:9a:a2:09:49:7a:13:12:30:2e:00:d5:74:dc:b3:
5b:75:1f:e5:1d:0f:24:67:64:63:7a:48:a7:77:2f:
b0:82:76:63:ac:1c:87:8c:6f:6a:bc:0e:4b:6b:a4:
ce:86:2f:99:d4:5d:33:3b:cc:4a:4a:e1:48:af:ad:
a0:8c:53:29:ba:31:ea:7c:50:5a:2a:0b:61:24:83:
48:99:34:6e:b1:7f:5a:e7:8f:3c:48:ea:7c:dc:a8:
e9:f2:87:e9:49:96:4f:cb:c5:52:5c:19:20:82:46:
10:60:e2:c2:5d:a9:07:b7:ce:51:c4:e6:6c:2d:70:
7a:d9:52:bd:b8:7a:c6:10:07:01:35:4c:4c:a8:4d:
fb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6A:E6:DF:E3:F0:E9:7A:4D:60:E0:0A:CF:94:CA:CF:A8:02:90:B1
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:39:4d:b7:10:45:28:14:38:31:a3:16:9f:ea:9b:e6:62:27:
cb:d8:3f:08:d6:2a:f0:ac:d5:7b:78:15:1d:32:62:a9:8e:08:
a6:ad:1c:bc:81:eb:32:6c:a6:9c:c0:48:eb:e3:7b:db:48:8f:
81:9a:be:2b:1e:db:b1:5b:5f:ef:84:54:9b:2a:32:73:d6:7a:
9e:81:0e:1c:b0:fb:e1:3f:29:7c:0c:e6:85:ce:d8:0b:54:05:
46:c0:58:c7:ee:eb:0a:f6:a3:ac:d0:b7:80:e8:f0:4e:01:4b:
9d:5b:c7:01:9b:83:cb:28:55:b7:07:67:bb:25:c7:19:94:d7:
f8:ba:d6:1a:8b:7e:b3:ea:c6:fe:78:95:2b:c6:49:fc:d8:0d:
9c:48:84:23:75:f8:78:75:e6:af:4f:a2:05:9f:10:e1:44:2b:
37:bb:2c:5e:ae:7e:c1:99:ab:f4:89:fa:90:5b:0a:c8:1f:1b:
92:ef:c8:ce:5a:e5:f4:b2:d6:e9:8c:d0:81:b4:90:9b:d9:18:
45:ea:9c:f7:f0:1f:0f:94:4c:97:ad:bb:26:81:76:0d:2a:e6:
ea:ea:5d:e5:86:c5:45:68:37:0a:86:66:4d:a1:04:17:28:95:
27:ad:2f:54:6e:60:35:49:a0:b1:aa:6a:4a:fc:a6:3e:2c:c9:
f5:76:d1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:31 2026 by rpki-client