
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
File: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft (raw, json)
Hash identifier: f3z4xhT1shQtkLMATp6CTPxVnXl63dFwHobFc+QNtL8=
Subject key identifier: E3:93:E2:A0:B7:34:50:52:E9:10:34:C7:A7:3E:78:64:0B:C9:7F:A3
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019EBE10FD79AA08DCD30E3CD4344C19AA5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
Manifest number: 1988
Signing time: Fri 12 Jun 2026 23:00:44 +0000
Manifest this update: Fri 12 Jun 2026 23:00:44 +0000
Manifest next update: Sat 13 Jun 2026 23:00:44 +0000
Files and hashes: 1: 8RjWLmkOfBFVB99jlL40-lbquu4.asa (hash: cPK/LotGLsuTU9/s/Ip3nQ0vHAaDXf27kyaBoPUr+rM=)
2: GPDxlZ6Mgtc8M9R7NfXsb6Do6ys.roa (hash: fxquXCdybvfXDDMRSE+/PppS1K/AZObL7YLYVgkksi8=)
3: H9oeWcwVf2xL36Ou9mjxNel_kzo.roa (hash: /Vy6rEoa9E+9TCclPU03mw9Obpsi5J4mKFzmaWOIU+0=)
4: L8ziuzN9ZJW99zUB2j6no1744bQ.roa (hash: aqgFAVHEHZXpTrGrUTYwK9YoeQyCzW64mBEocLytb2c=)
5: LmM48ME-vV9knrJxSTQaxjQp3co.asa (hash: EudqvBBerqU77vXqzfKyktKs74IC9c1mzsls/2yJHmE=)
6: ZMO3GRpIMCOc63JONFzvD70jPxI.roa (hash: OezO4NKW0B8AfY/4oRlgfRT7HTSEOCWWwSaXei6kgkA=)
7: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl (hash: 8gYFCOJzmXjrVmdnURPQHFAfH4xEdYwBOHsTwyhOL3o=)
8: iJx_C_WMT8KQ4owla7AtWiffaR8.roa (hash: cmPWxGf6uIHZJKi9/0I8Bo49XzFIKfEoLuyc9bnyvQ4=)
9: iYvuIq8ZKE6IPDv4GBtfch8s7S4.asa (hash: CoFBVX/R0Ekp3rqLqqIt63HCR6x0nL/mxcevmbkjRKM=)
10: iiUeWWy4vNdQT2JqfLyriOKyBds.roa (hash: X//YchsgfpGi9KC+KU3RuTcaBCPtGN0++IEL/F/EXV0=)
11: p0GDdN-xxKyg8Gf7N5r5gMiQ4M0.roa (hash: 3BflJNAULniEze9ExWAF/NtnD5BDpxEJYWJuUEJNS7k=)
12: uzurr2xmZJqK_nXHAqCc38VmZP4.asa (hash: CQMd8ydPQYMvDSq1KX9EIOXQQgehhV3R64gz2tI74b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:10:fd:79:aa:08:dc:d3:0e:3c:d4:34:4c:19:aa:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Jun 12 23:00:44 2026 GMT
Not After : Jun 13 23:00:44 2026 GMT
Subject: CN=e393e2a0b7345052e91034c7a73e78640bc97fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d4:c3:8f:b5:37:4c:1a:36:fa:70:c4:8d:c5:
86:c3:0f:06:00:d5:70:fe:63:08:d4:14:ab:be:10:
4e:ff:40:2d:a5:c6:01:ff:68:82:9d:ca:f4:31:02:
51:ca:61:63:91:1a:d1:88:a0:42:6a:a0:62:e5:20:
be:ca:eb:46:e5:6d:c2:ad:39:93:fe:81:9a:50:a9:
ad:65:14:68:9c:0c:fd:f9:d7:c9:01:39:80:fc:b0:
cf:c5:31:68:35:f2:b3:9c:ba:9c:da:63:84:60:b8:
ae:c2:3f:bb:d7:da:ce:97:49:62:80:14:93:1d:fa:
4f:03:15:b6:e9:69:c7:f8:de:a9:c8:60:65:14:8d:
f3:aa:b3:e8:d4:d1:64:d0:19:0a:e8:de:70:8e:05:
e9:fd:c6:24:c2:1c:12:22:59:83:a2:a8:b9:fa:cd:
87:a9:78:8f:7f:30:38:e7:d6:ad:57:3f:7c:f2:f9:
68:60:ac:a2:60:f9:49:7e:d8:ad:e5:76:fa:70:9f:
fa:85:eb:d7:b4:49:ba:de:c6:c0:76:0a:2f:ab:61:
84:7d:21:99:f8:eb:f5:f9:f2:3e:1b:3f:53:ea:b1:
14:07:c1:3d:dd:3f:6d:6b:44:9a:01:02:bc:2f:a4:
1b:33:28:fa:4d:66:4b:a3:6b:ea:5b:cf:45:c7:78:
79:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:93:E2:A0:B7:34:50:52:E9:10:34:C7:A7:3E:78:64:0B:C9:7F:A3
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c8:ff:49:65:c4:0e:da:49:5c:3d:87:47:97:a6:80:af:e1:
1a:b5:50:42:16:9c:33:e9:ad:92:6a:c5:9f:fe:5d:2e:79:44:
bd:44:71:38:bf:a5:42:83:5e:73:c7:a5:65:0f:4f:2e:e1:4f:
03:01:de:ec:47:cc:44:44:1c:2f:40:4a:aa:d6:e0:a1:4b:37:
99:a7:3b:94:a9:59:4f:c4:30:31:6f:55:5e:aa:11:93:50:75:
3c:1b:fc:f9:59:4f:de:3e:87:6a:c7:d6:55:af:15:71:19:e9:
d3:35:be:3a:f9:65:2d:90:7e:be:5c:89:3f:48:61:54:98:a7:
40:58:86:25:43:29:da:ea:01:54:c0:6b:7a:6e:f8:6e:2c:58:
f9:8d:08:f6:b1:ea:a0:fa:88:6f:a7:35:b1:b7:e0:b5:ba:19:
37:29:35:35:cf:c7:03:48:65:a4:06:ec:e2:8a:cf:20:6e:f6:
e9:18:08:35:0c:08:fd:28:b6:c3:1f:ff:0f:0d:54:66:c7:2e:
ae:4b:17:72:ef:6e:b1:0f:61:b0:b1:8e:c7:79:f9:c4:f4:7f:
0a:f3:72:bc:33:97:db:2c:54:ab:c3:f9:e7:9a:a6:cf:bd:f5:
c6:4a:18:9c:87:f8:9e:f0:8f:3e:d0:9e:ec:50:ff:ac:10:d2:
69:bc:06:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+EP15qgjc0w481DRMGapaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1
ZDAwN2UwHhcNMjYwNjEyMjMwMDQ0WhcNMjYwNjEzMjMwMDQ0WjAzMTEwLwYDVQQD
EyhlMzkzZTJhMGI3MzQ1MDUyZTkxMDM0YzdhNzNlNzg2NDBiYzk3ZmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NTDj7U3TBo2+nDEjcWGww8GANVw
/mMI1BSrvhBO/0AtpcYB/2iCncr0MQJRymFjkRrRiKBCaqBi5SC+yutG5W3CrTmT
/oGaUKmtZRRonAz9+dfJATmA/LDPxTFoNfKznLqc2mOEYLiuwj+719rOl0ligBST
HfpPAxW26WnH+N6pyGBlFI3zqrPo1NFk0BkK6N5wjgXp/cYkwhwSIlmDoqi5+s2H
qXiPfzA459atVz988vloYKyiYPlJftit5Xb6cJ/6hevXtEm63sbAdgovq2GEfSGZ
+Ov1+fI+Gz9T6rEUB8E93T9ta0SaAQK8L6QbMyj6TWZLo2vqW89Fx3h5CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOT4qC3NFBS6RA0x6c+eGQLyX+jMB8GA1UdIwQY
MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt
MWZiYzY0MWI1MGIxLzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx
LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMj/SWXE
DtpJXD2HR5emgK/hGrVQQhacM+mtkmrFn/5dLnlEvURxOL+lQoNec8elZQ9PLuFP
AwHe7EfMREQcL0BKqtbgoUs3mac7lKlZT8QwMW9VXqoRk1B1PBv8+VlP3j6HasfW
Va8VcRnp0zW+OvllLZB+vlyJP0hhVJinQFiGJUMp2uoBVMBrem74bixY+Y0I9rHq
oPqIb6c1sbfgtboZNyk1Nc/HA0hlpAbs4orPIG726RgINQwI/Si2wx//Dw1UZscu
rksXcu9usQ9hsLGOx3n5xPR/CvNyvDOX2yxUq8P555qmz731xkoYnIf4nvCPPtCe
7FD/rBDSabwGbw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:21:48 2026 by rpki-client