
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
File: OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json)
Hash identifier: Y53ZA0B0Y0GYE7BPFzUPgr6AEJSgsfjGL9v93wZnqcM=
Subject key identifier: 1C:43:9A:32:F5:B9:FC:A3:DF:7C:5A:25:9B:1A:D1:DA:2F:66:9F:16
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 01A1DEA79B2C53F6A37A2C6BA4C2800FD04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
Manifest number: 1B09
Signing time: Sun 15 Nov 2026 10:01:28 +0000
Manifest this update: Sun 15 Nov 2026 10:01:28 +0000
Manifest next update: Mon 16 Nov 2026 10:01:28 +0000
Files and hashes: 1: 4F0qq7jfLgA4RD6gA7xmoqFDdAQ.roa (hash: 9eu4ch/L8yFJeyFrLuDangAXcD7SJ7FBYBZ7Pt6AAHE=)
2: 99glb-3Nuv_a0drFASic1bJFZuM.roa (hash: EO6/AN96gR8JorI8GqJHXMAny+YSIF2zqACbqvRTJsE=)
3: IJPq1vTmby5eiLb59FjMHsI8kO8.roa (hash: TSRPeSrUsn2p8OKZKn5eOe4aj6tQf87gvJ5n6A763wg=)
4: IcJ3NkApy3ZuH6zT14y3NRctQTs.roa (hash: YF8uwCi6VEOuzkntI7vmvok4914x30Fr6OxRnIaMfhE=)
5: JPCCmHU8ahX1DiUwh62NrS-GovE.roa (hash: DSN9B+i7KCMrZdm0LMRFnAUtEcKLHOT2ja1tLaLHNkQ=)
6: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: sUqv/BkyJgFggizfg+MMKZohSPQv5el7cSZCj2GUJiY=)
7: OFEBywh1Kwn1I5HYsaeGw4Ma2k4.roa (hash: RYqKKTPbXc/XKGK59E0CVeAp+/m79LKM8knlKmtIDxU=)
8: T5yYywsjzls8YnVZdYQ-a-4k-Ko.roa (hash: krQ0smxzDZda7B7KpUT9hBrYxqmFAcCTTFjGI8ObPzU=)
9: eHECU130cI2IxVdoNjOs2S8NVMI.asa (hash: eIEPTN6wqulUnuaXPEXf8DU4qnDGOsycqRILfhS2exU=)
10: sDR3Qo8DCVWVTmCrOSCeC4FMQOw.roa (hash: AssTAkGRC23ZzSmSnnu6XD2o7Ux1qMOvYA5IiLgtAlw=)
11: uCcKCZ_-ttSdLBoJpXw12HW8zv8.asa (hash: Z775CY+lZCNdBuuxgq50lgOG4WRj8jb7ovNC4/2rwng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:9b:2c:53:f6:a3:7a:2c:6b:a4:c2:80:0f:d0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Nov 15 10:01:28 2026 GMT
Not After : Nov 16 10:01:28 2026 GMT
Subject: CN=1c439a32f5b9fca3df7c5a259b1ad1da2f669f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:98:53:55:d7:25:2a:ee:41:f1:29:33:e4:
f3:2b:24:65:61:d0:a2:30:9c:61:ed:d1:9c:45:e2:
86:5d:90:aa:1e:68:14:b3:71:25:4a:55:6a:3c:04:
d4:ff:19:16:ff:3c:e7:78:f2:05:df:9c:ab:4b:ed:
80:f2:5a:73:fe:f0:ba:9b:bd:88:d2:a1:39:d4:c1:
a4:9d:d4:a2:41:c7:0f:3d:c9:1f:66:23:d5:f2:c5:
16:6c:3c:25:63:e4:05:7f:6c:a0:ef:1c:fa:51:ef:
06:23:28:ba:36:2c:4e:48:9f:20:0f:03:ef:f3:d5:
12:5d:c7:81:14:10:cd:35:cd:b6:89:9f:b8:f2:e6:
96:b2:ab:e2:a7:0d:83:44:fc:f7:a9:82:66:f4:a1:
ae:be:65:b1:ee:15:21:3b:ea:31:18:3f:f6:5e:b1:
dd:79:d4:83:1b:fc:4e:22:14:d2:45:f1:70:39:2e:
6d:df:0e:c9:f6:a9:4c:1a:03:ce:cc:84:c0:24:f0:
48:ba:09:46:81:1c:42:2d:c3:92:da:79:8d:89:db:
2b:eb:8b:26:47:03:01:fa:38:58:42:a7:51:45:99:
3e:91:78:52:11:d6:a4:a4:8b:b5:c7:22:94:93:b0:
04:94:56:4c:8f:45:77:72:0a:7a:3d:48:d5:80:21:
44:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:43:9A:32:F5:B9:FC:A3:DF:7C:5A:25:9B:1A:D1:DA:2F:66:9F:16
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:38:0c:8a:43:b5:64:33:a1:b6:18:8b:b2:b8:2b:2c:86:08:
6a:49:b3:b0:5a:f7:59:8d:ba:b5:b7:02:70:24:b2:69:fb:24:
d8:13:b9:94:81:a2:f3:b2:10:72:7f:66:18:a4:67:9c:2c:66:
9a:86:82:7d:a0:4e:ee:52:12:91:01:56:62:d0:ec:2f:df:2e:
55:2d:16:be:d1:14:61:76:94:30:04:82:50:af:b2:a4:3a:ae:
e7:cd:a5:41:c1:af:2f:95:5e:ee:b5:e4:1b:fa:ae:6e:18:1c:
d7:d6:a5:24:24:92:79:cb:47:58:bc:29:94:72:22:56:82:e6:
5e:e9:f9:21:2e:b6:1b:6c:ce:36:71:89:7c:12:9d:aa:33:e2:
12:d5:6a:07:11:f7:da:24:ca:e7:11:f3:aa:c7:66:25:d8:c6:
dc:fc:80:fa:c5:11:61:5c:98:e8:fb:65:4c:d9:1a:8c:3e:e5:
4b:a3:04:e0:8e:b0:30:b7:fe:0a:5a:0b:7d:2f:fd:1f:9b:93:
b8:43:4e:51:67:47:58:22:36:b8:2c:d9:75:fe:00:b1:37:c2:
67:53:fa:d4:5e:20:15:8a:40:3e:46:c0:75:54:0d:0b:e0:3f:
9e:3f:4c:6a:ae:3b:1d:f6:e1:0f:5d:81:e9:54:33:e8:db:1d:
a7:60:62:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHep5ssU/ajeixrpMKAD9BLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MGIyODNhMDUxMzk0MGQ1MjBhNjgwYjhiM2QxNGRiYzM2
Nzc3MGQwHhcNMjYxMTE1MTAwMTI4WhcNMjYxMTE2MTAwMTI4WjAzMTEwLwYDVQQD
EygxYzQzOWEzMmY1YjlmY2EzZGY3YzVhMjU5YjFhZDFkYTJmNjY5ZjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLWYU1XXJSruQfEpM+TzKyRlYdCi
MJxh7dGcReKGXZCqHmgUs3ElSlVqPATU/xkW/zznePIF35yrS+2A8lpz/vC6m72I
0qE51MGkndSiQccPPckfZiPV8sUWbDwlY+QFf2yg7xz6Ue8GIyi6NixOSJ8gDwPv
89USXceBFBDNNc22iZ+48uaWsqvipw2DRPz3qYJm9KGuvmWx7hUhO+oxGD/2XrHd
edSDG/xOIhTSRfFwOS5t3w7J9qlMGgPOzITAJPBIuglGgRxCLcOS2nmNidsr64sm
RwMB+jhYQqdRRZk+kXhSEdakpIu1xyKUk7AElFZMj0V3cgp6PUjVgCFEiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxDmjL1ufyj33xaJZsa0dovZp8WMB8GA1UdIwQY
MBaAFDgLKDoFE5QNUgpoC4s9FNvDZ3cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEt
Y2NmNjQ1NGJiMjRjLzEvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEtY2NmNjQ1NGJiMjRj
LzEvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeDgMikO1
ZDOhthiLsrgrLIYIakmzsFr3WY26tbcCcCSyafsk2BO5lIGi87IQcn9mGKRnnCxm
moaCfaBO7lISkQFWYtDsL98uVS0WvtEUYXaUMASCUK+ypDqu582lQcGvL5Ve7rXk
G/qubhgc19alJCSSectHWLwplHIiVoLmXun5IS62G2zONnGJfBKdqjPiEtVqBxH3
2iTK5xHzqsdmJdjG3PyA+sURYVyY6PtlTNkajD7lS6ME4I6wMLf+CloLfS/9H5uT
uENOUWdHWCI2uCzZdf4AsTfCZ1P61F4gFYpAPkbAdVQNC+A/nj9Maq47HfbhD12B
6VQz6Nsdp2BixQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:29:49 2026 by rpki-client