$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft File: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft (raw, json) Hash identifier: umzp6aLRMpShyOyKKqEq+hZ9YfX3LzABFOVQDIMwA00= Subject key identifier: FB:CF:57:23:F9:38:EB:26:35:3D:0D:01:38:22:DC:E1:9B:2E:F0:CA Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e Certificate serial: 019D98F4A967583939EDEAEDD8DBDB445F7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft Manifest number: 18E9 Signing time: Fri 17 Apr 2026 01:01:04 +0000 Manifest this update: Fri 17 Apr 2026 01:01:04 +0000 Manifest next update: Sat 18 Apr 2026 01:01:04 +0000 Files and hashes: 1: 8RjWLmkOfBFVB99jlL40-lbquu4.asa (hash: cPK/LotGLsuTU9/s/Ip3nQ0vHAaDXf27kyaBoPUr+rM=) 2: AMpB0MWbNNIQ3_J5_6gaThW8Xbo.roa (hash: jS5kuk+WsuTPgFicnLXFM5peUN4ZcRUVu4vz/M0ryjY=) 3: EQOmQ7dDCZNjymG9j2xbbIgGtLg.roa (hash: gPgkZPlDxqNc0bw9tuZ1u1Ol2rJVot6nbA8SVnoZzks=) 4: LmM48ME-vV9knrJxSTQaxjQp3co.asa (hash: EudqvBBerqU77vXqzfKyktKs74IC9c1mzsls/2yJHmE=) 5: a1iiCcOaxmzS0-8TIKQtOTVhn-s.roa (hash: VjhgE/ADiBXCV7jVQEBRzjdY9qu85RcYlku/EAwZIuw=) 6: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl (hash: j/hVyxRbjlxtMg2dV3G62mUGAq2RzwVM+fW09aszUpU=) 7: iJx_C_WMT8KQ4owla7AtWiffaR8.roa (hash: cmPWxGf6uIHZJKi9/0I8Bo49XzFIKfEoLuyc9bnyvQ4=) 8: iYvuIq8ZKE6IPDv4GBtfch8s7S4.asa (hash: CoFBVX/R0Ekp3rqLqqIt63HCR6x0nL/mxcevmbkjRKM=) 9: kuOk62kAMWDO3SkuJ8fgV4X_ZQQ.roa (hash: 95GypZwG3yMioVj6JZTz1qbaQqiVz8fVSViXoVD+UZE=) 10: p0GDdN-xxKyg8Gf7N5r5gMiQ4M0.roa (hash: 3BflJNAULniEze9ExWAF/NtnD5BDpxEJYWJuUEJNS7k=) 11: uzurr2xmZJqK_nXHAqCc38VmZP4.asa (hash: CQMd8ydPQYMvDSq1KX9EIOXQQgehhV3R64gz2tI74b8=) 12: z_lG1xcrhTymJ3aoEk62mhnFMFA.roa (hash: DmXw5Okdiht0aYgqb+ibwP1Y4YFtWCLHV51zatKzsTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:f4:a9:67:58:39:39:ed:ea:ed:d8:db:db:44:5f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e Validity Not Before: Apr 17 01:01:04 2026 GMT Not After : Apr 18 01:01:04 2026 GMT Subject: CN=fbcf5723f938eb26353d0d013822dce19b2ef0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:69:85:e7:8c:f4:34:69:3c:36:1e:ed:2d:00: 77:83:b7:36:8a:db:50:44:d9:99:62:7a:21:6b:2f: c1:40:2d:5a:7f:33:8a:13:f3:7e:59:5b:1d:63:36: 73:3f:cb:e2:c5:3d:50:b0:39:71:93:68:dc:4c:ad: f0:a2:55:0c:26:1e:c2:16:15:38:6c:33:83:4d:1f: aa:0d:35:23:77:64:24:59:6f:b1:4f:34:2a:0c:b7: a1:59:c0:fc:2e:1b:fa:46:ce:51:86:22:6d:63:60: 13:84:47:88:58:24:92:f6:42:e7:56:a7:65:35:1d: 08:01:75:2d:4a:62:24:b2:3e:1c:96:d3:5e:65:8d: c0:2e:10:0b:2c:43:f6:68:2d:cc:5c:d9:a9:c4:26: f0:cb:47:31:ad:13:d0:08:fb:4e:1e:48:b8:c8:79: b4:34:3f:41:d1:c3:40:11:3f:dc:82:6f:3d:10:62: cc:38:b5:3d:35:8c:63:7d:80:e9:14:36:c3:e4:98: a6:83:b6:a2:a3:25:46:43:e8:59:12:a7:7f:9f:3a: 69:8e:28:1c:6c:ec:d6:dc:0c:6b:53:2c:cd:89:7c: bc:b8:e1:37:48:9a:6e:d0:99:b9:13:fd:29:e7:a3: 2a:1f:ff:a2:2a:ee:39:2c:61:d2:ac:b6:53:80:62: bc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CF:57:23:F9:38:EB:26:35:3D:0D:01:38:22:DC:E1:9B:2E:F0:CA X509v3 Authority Key Identifier: keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:0a:56:f0:27:11:f3:40:11:44:3c:d7:fd:ba:c2:02:f5:c0: 56:7b:d4:8c:11:93:2f:56:29:18:37:93:a5:f4:cd:ba:a7:90: 93:75:fa:25:8e:b6:5a:d6:71:e4:71:f5:d7:5c:6e:16:7a:a5: c5:b1:30:82:73:40:44:ba:d4:5e:a6:6c:fe:1e:b7:21:87:71: a0:f7:d9:0c:0a:e1:73:76:da:1b:b4:80:62:54:c6:a8:29:98: 91:a7:f8:e7:93:c2:70:d3:23:ae:47:52:00:ea:96:23:1f:24: 71:8e:07:ad:57:fe:8a:80:fc:14:b0:3b:37:6b:74:9f:e7:ae: f0:5a:7b:84:8a:f3:9c:be:13:1d:83:77:eb:c0:ab:a0:e8:5b: 65:fb:2c:0b:fd:6e:8f:78:54:31:02:ac:40:62:68:39:4a:95: 44:ad:cc:be:b6:62:1e:84:b7:1f:a0:39:51:46:bb:fc:c2:4e: 20:9a:fd:7d:78:f3:98:5a:e3:5b:e7:11:b3:92:22:26:7b:ca: 97:10:e6:2e:b3:70:60:06:73:4d:1e:90:c1:16:8c:75:1c:dd: 75:f5:2c:79:f2:cc:24:f3:e0:17:a7:ca:2b:29:4d:8f:28:0b: 3f:df:90:b6:66:d0:85:a0:14:95:0b:bd:a5:2f:a7:6d:5b:3a: a7:2a:84:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2Y9KlnWDk57ert2NvbRF9+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1 ZDAwN2UwHhcNMjYwNDE3MDEwMTA0WhcNMjYwNDE4MDEwMTA0WjAzMTEwLwYDVQQD EyhmYmNmNTcyM2Y5MzhlYjI2MzUzZDBkMDEzODIyZGNlMTliMmVmMGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2mF54z0NGk8Nh7tLQB3g7c2ittQ RNmZYnohay/BQC1afzOKE/N+WVsdYzZzP8vixT1QsDlxk2jcTK3wolUMJh7CFhU4 bDODTR+qDTUjd2QkWW+xTzQqDLehWcD8Lhv6Rs5RhiJtY2AThEeIWCSS9kLnVqdl NR0IAXUtSmIksj4cltNeZY3ALhALLEP2aC3MXNmpxCbwy0cxrRPQCPtOHki4yHm0 ND9B0cNAET/cgm89EGLMOLU9NYxjfYDpFDbD5Jimg7aioyVGQ+hZEqd/nzppjigc bOzW3AxrUyzNiXy8uOE3SJpu0Jm5E/0p56MqH/+iKu45LGHSrLZTgGK8NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvPVyP5OOsmNT0NATgi3OGbLvDKMB8GA1UdIwQY MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt MWZiYzY0MWI1MGIxLzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwpW8CcR 80ARRDzX/brCAvXAVnvUjBGTL1YpGDeTpfTNuqeQk3X6JY62WtZx5HH111xuFnql xbEwgnNARLrUXqZs/h63IYdxoPfZDArhc3baG7SAYlTGqCmYkaf455PCcNMjrkdS AOqWIx8kcY4HrVf+ioD8FLA7N2t0n+eu8Fp7hIrznL4THYN368CroOhbZfssC/1u j3hUMQKsQGJoOUqVRK3MvrZiHoS3H6A5UUa7/MJOIJr9fXjzmFrjW+cRs5IiJnvK lxDmLrNwYAZzTR6QwRaMdRzddfUsefLMJPPgF6fKKylNjygLP9+QtmbQhaAUlQu9 pS+nbVs6pyqEOg== -----END CERTIFICATE-----Generated at Fri Apr 17 05:34:47 2026 by rpki-client