
$ rpki-client -vvvf rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
File: B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft (raw, json)
Hash identifier: 0RRvdRnAWy199tytw46wpnYnN9oJaGd30wSDcrs7ejo=
Subject key identifier: 72:AA:84:0E:D8:B7:25:D3:5E:5A:D1:AB:78:8A:E5:23:E0:10:8B:9D
Authority key identifier: B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
Certificate issuer: /CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Certificate serial: 74EC9C36C5428EE48620DA4834F01C1C743C0AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
Manifest number: 0954
Signing time: Tue 22 Sep 2026 19:18:50 +0000
Manifest this update: Tue 22 Sep 2026 19:13:50 +0000
Manifest next update: Wed 23 Sep 2026 19:46:50 +0000
Files and hashes: 1: 326130373a643838343a3130303a3a2f34302d3438203d3e203433333537.roa (hash: yeff1biVXFnDfLVq6U0VkDmadS8A+3gHSrquiSqGCKc=)
2: 326130373a643838303a3a2f32392d3438203d3e203233393539.roa (hash: qGd+wIVY1wqkASQibEXj2QpbD1aPO5BnQO1eh6F4i0c=)
3: 326130373a643838303a3a2f32392d3438203d3e203433333537.roa (hash: mfCV9LkyEGdRemQKdu8mH1kHPLmn54juZg9GVgVwr3w=)
4: B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl (hash: wJznfCz0PfhjDVIMfdWJiQBUQW5DwaDaqDTtV8Mq1Ak=)
5: 3139342e3132372e3136342e302f32342d3234203d3e2033323134.roa (hash: tMBh3KrIPDBf40a5eDFSEYYfU52DDDdL7oyXJxL+jfY=)
6: 3139342e3132372e3136352e302f32342d3234203d3e20323132353132.roa (hash: pondLsaW0A4/xxm08LrRTFjqYke8hgGyZm2AT+9cLd0=)
7: 326130373a643838303a3a2f33322d3438203d3e2033323134.roa (hash: e82HG0cCY0mm7ZtvveCVyewkQTaStMm/Ui5MHOoSICU=)
8: 3139342e3132372e3136372e302f32342d3234203d3e2033323134.roa (hash: q9Ue5D6lC/ESJ4sGyUbFTYvdAHOBgvb3v4ka30bP/Sg=)
9: 3139342e3132372e3136342e302f32322d3234203d3e203233393539.roa (hash: nfoAGrLyOv96LLWwTEA5zQLwduXQT7PdCc96Ex1xMGQ=)
10: 326130373a643838353a3a2f34302d3438203d3e20323132353132.roa (hash: e1uyEHl+JctHQ7sCDbMmEajqBK28G40MfdDUe7KeSNA=)
11: 3139342e3132372e3136372e302f32342d3234203d3e203433333537.roa (hash: /rCvPypNn8AfE07uBlJrYmpUpyqckFPY1n51eN+xg/Q=)
12: 326130373a643838303a323a3a2f34382d3438203d3e203433333537.roa (hash: 4LPx+zWmyFbHbymWSrYxEtoJgsSvm/NNWXcEtJVcC7o=)
13: 3139342e3132372e3136342e302f32322d3234203d3e203433333537.roa (hash: 9DU8qnUgWwou6cMiRyTE/qYtUzrrEGldSCHbIsIYo3g=)
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:46:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ec:9c:36:c5:42:8e:e4:86:20:da:48:34:f0:1c:1c:74:3c:0a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Validity
Not Before: Sep 22 19:13:50 2026 GMT
Not After : Sep 23 19:46:50 2026 GMT
Subject: CN=72AA840ED8B725D35E5AD1AB788AE523E0108B9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:5f:a4:be:3f:ff:ba:d0:a4:f1:9f:13:6b:
ab:5d:24:ee:22:be:f8:44:0f:44:c6:11:8e:67:d9:
5c:bb:80:65:53:10:23:94:9e:ca:c7:7e:94:f7:ef:
b5:42:fd:2c:24:f3:8d:11:c6:5e:de:59:7c:c9:49:
65:8d:f1:64:9c:13:af:d3:8a:d7:22:4d:65:00:2e:
6c:4f:5e:72:fb:ae:bb:23:bf:ec:23:f9:a2:c5:b2:
77:c3:23:ec:a0:49:53:6b:f0:38:6c:94:57:06:69:
c4:bc:98:66:35:ff:a8:75:69:8f:a9:4d:5d:dd:cc:
43:e5:d8:d1:ee:52:07:fe:ec:b8:d8:db:7e:1e:27:
7a:ae:c0:be:a3:bd:54:8a:95:02:e9:43:9b:a1:3b:
5c:5f:8d:51:d7:35:80:0f:a3:ee:08:93:c3:a3:c7:
df:21:24:50:cf:84:40:c8:97:94:b4:47:ab:25:25:
ca:ff:cd:ff:7d:72:8f:ff:94:74:7c:ad:37:e5:fd:
b7:02:1f:d8:6d:39:42:e5:96:28:62:79:a2:b1:b8:
4d:83:f5:bd:e9:e2:44:1c:bd:10:a4:a4:06:1b:d5:
b0:b1:55:da:d0:b1:b5:5e:f6:a8:ce:cf:43:bc:da:
2c:73:19:db:82:3e:c2:6c:0c:7f:db:65:b9:c9:9f:
cb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AA:84:0E:D8:B7:25:D3:5E:5A:D1:AB:78:8A:E5:23:E0:10:8B:9D
X509v3 Authority Key Identifier:
keyid:B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:4a:ba:6d:33:84:4c:65:a9:eb:31:21:2f:01:1d:04:f6:e2:
5f:ba:3a:eb:4a:10:62:32:9d:46:67:2a:df:7e:15:11:f2:05:
05:b4:e4:7d:b6:2c:f4:ca:c7:53:39:3f:2b:44:9f:7b:63:bb:
0f:df:30:08:6c:79:66:78:be:2a:7f:9e:f0:59:b6:b2:22:de:
a6:2a:da:ec:13:53:7b:61:de:74:ed:27:63:04:c6:a2:25:6b:
12:cc:0b:ac:12:91:ff:1b:4c:22:99:86:c7:18:f0:5d:03:af:
37:31:d3:a9:d4:93:cd:54:03:df:22:b3:e0:c0:1f:90:4e:a0:
47:ea:8f:ed:79:02:a2:60:4f:63:e3:10:1f:87:d9:4a:7d:18:
52:6b:97:6a:ab:1f:0c:8e:9d:8f:50:bf:7d:10:20:f0:39:f8:
14:59:23:56:ae:55:17:ca:66:6b:10:76:51:0d:b8:9d:50:93:
b6:09:b8:36:ab:93:64:1c:bd:25:74:45:53:4f:a3:6f:f6:f5:
f0:c3:96:28:7d:ae:97:5b:5f:d6:93:2a:4f:01:b1:82:d7:2f:
a5:5e:33:92:62:3b:9a:d9:c1:54:e3:6b:62:9e:6d:30:53:cf:
15:76:e2:20:ec:5a:25:ce:86:39:07:82:e6:43:1c:65:75:94:
39:2e:17:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:10:47 2026 by rpki-client