
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
File: oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft (raw, json)
Hash identifier: YelapOygpbyvKFK3N+2qZuoGAcpZYMOkETobqqM3pVI=
Subject key identifier: 3A:04:88:41:F7:56:21:9D:FE:45:71:61:87:5C:32:82:EE:95:55:FF
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 019E20C81F3EFF2F1772DD4F81D07646F855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
Manifest number: 19DB
Signing time: Wed 13 May 2026 10:00:46 +0000
Manifest this update: Wed 13 May 2026 10:00:46 +0000
Manifest next update: Thu 14 May 2026 10:00:46 +0000
Files and hashes: 1: 4rH8_KArysg1wV6ciMc3tWxygTg.roa (hash: cq85Psa3QmMqDUVP4F4xb9vfchcL6V84oYNIOe6pTDM=)
2: 5vwpHz3SsOG_BBmCIjDNA6eKdfo.roa (hash: fEgj28VMxOBq530JqkQ4L0AkUDxqsTY2W/2Q3rsmUrA=)
3: Dy12ueox4iemeyny5vY-mZAduiI.roa (hash: TlSFsuGfZ5d+gxSWEzsL9O69Jb3O/hSnK0ssg9X6n9c=)
4: HRFCRunnn9wNoyI6JOFSdOd10yI.roa (hash: yo5Bt9GIUkYOumvikP4co3jOtmyICwQImhbhqVKdEUY=)
5: Ho68QlwWf7XmMGL8gfZuoyvkSbo.roa (hash: AcJGVstbrZSqQf+OL9tIENTQwlR+SF+hfnijkNVA4O4=)
6: K87a3SozjRNM0L2VSDzBQDss-TM.roa (hash: 7X4hOZNngfP2AOympHac08iUZmiyE7LGoxs4Na6L/lk=)
7: NT9woNeJwBeU42rNyb848SmBYlo.roa (hash: DTJNFykP/BFz6g6XPdl3htlBBfn53C8lDXv1eaLG5ok=)
8: NbOdHCLfD_9SA0rN9xVT2s8QdlA.roa (hash: frkQB7jrq/YhMcxvQw0JdD7plHmO9jmXrctMInTruNM=)
9: OLCDzI5xxlDKzka6lWJFVjNvDPw.roa (hash: Qs0OIV8lR1PaADu190zcJgT0XahHOWsjHenFFst/arg=)
10: PGD9MZeytPQjHh3vXGAvYMctnV4.roa (hash: dBNP/wJKl2F50HovgyUiUTR33u+q/5vGeSSba/CKPXU=)
11: PLGWIZgwYkMO77MmlmTCSwUg4MA.roa (hash: BOEZWRA0pYEkUwtQYq1CCUzMVWLzHT9J9Pqd9wJtlvY=)
12: Pvldt4Xm66AODz9ub5YATR61bpg.roa (hash: mhUDlLYy/KUsiqdqJUa31hfGo6XBqGiFyvzRAXoUW/g=)
13: Q-T2DLNauDmK_Iqh59GjreXa38w.roa (hash: uPePlPFzm6ziY/l/eHIwOr20eT7Zlr7i15yqJaVaHCI=)
14: QRe1t4xoC5DfawSBrQHzo3FmhLM.roa (hash: E+vj4zV/6ZJ/k1LOoS20wbJJIbfhjuZ939KrL0GVfx4=)
15: SzF5verHf3hk2p85GCVI0yu0wqQ.roa (hash: UQ2kFsVEkqOZdT/DYOyKyl0eSCV0D3RbZXSh3pbXXtQ=)
16: UFEcacEeNtbtwoCZ0nsNFqwZXpI.roa (hash: 2iAF+KKuoS+VDPrsOk1eervY6E3WDgBeeoWYmW5Nrps=)
17: UGVa8Xyqk4ksPGgnfd31vBitCIY.roa (hash: bZ6endjeA2RujV7R8PyJfRemO9ZBIhAjsInbMMWdh90=)
18: UbJlpnELENAbOJkg3y8mRdJtNug.roa (hash: R8XZyKq4b+2UmtcQrg1GUZNwGM29cukfQuERx5uBArw=)
19: VOyxth9qspwPWVU5GtsemH5xu5Y.roa (hash: /TitFEmWF3mLbju9cYq96a2uGnq7dFetaj8cDGfX6bo=)
20: X-EkV-WP2idrAD8cBtl8naElPoA.roa (hash: dkqiN3zxKk6ENg5SKstGMFmP/TT2YPL3QLMR66r2DQ8=)
21: ZAR3134MSG7c8pQeqt21BjTKzHk.roa (hash: H4qYUBv0F0ZniT9I1OT/UVS7jhOeC3g/GkknK01ImTE=)
22: _YMV-r6YGy_b5YOpBOqF7viPoc8.roa (hash: is3oJp1G8er/OBr6GK6OPtF33YU7blB2hOshyfedxsA=)
23: atxYNSY6Yx-7ElIL_eqsGGTZriY.roa (hash: sK5wSL3tcZLQ9cvUwLxP7MoUiyiicJ+mjfpcgXnlWkc=)
24: bBvGTyS2yQa6YR2RFe61hrCsDgk.roa (hash: +61f6+40PPC+07wtISqHIyXFeS6Le/BLpWRYgptfad4=)
25: n1FhBfY5N0qxYTDcams24GjzOyw.roa (hash: uC5J7Du2QgRKMuolabYMQhvNepsnbZaeXNCJCimD9dQ=)
26: oE1O5uGMlt05gWy6EMnmTgraW8k.roa (hash: /DZ/BcePxC8RHCDv/4OF4LqAQV2sdDiRlC/rnovIjbA=)
27: oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl (hash: IZSwN6vEdXKkaDJfw6z/jf24m2Sv013QYFAnFwMURBk=)
28: oOrJ1mX-eBcznfB-6h_-uiPoUU4.roa (hash: JC0s2WTzEg4/KUWP2gEhCQYV0XyL5LJW76D+euRX/Y8=)
29: r8r911ceJgErmagjccGWtP7JKZM.roa (hash: fqNaDWj1DnYH2erYDtEPh2cuFFkCIyLSyPbWVfnqgxA=)
30: tHRvty-RlUw0Falh2OpgwqWerCo.roa (hash: 30HyZEY0OdrKQq3zOLaCSH/elkuCREvNILd0PXgRBSs=)
31: uuRczKZwsSuhCu172Grh6B9knxk.roa (hash: P4PWs2fsYglkv3o2ELArEKxvKuDLCR2pbc5p9qH3He8=)
32: vTyaSOcTKNK7HOEpRoHOTWIFFhs.roa (hash: o99W7jY/Y+nX4RuXt0Qn61sP42zZM8y5fY23/UCcTmM=)
33: w5TIz9UXktiNlyDUD2lDoEdhEQE.roa (hash: ikqIWz4GbbCq/SA0jYO5bGzmtr0yVrKpoGSYDIJCyeY=)
34: xLrDeMIdOHc_uW7MQY4GNPFpZuo.roa (hash: s/x17aNCOaU2UsnCEqFwmKabzlSylan6beu6oAqMMFc=)
35: ykPAskiY2eo6bwenp7rou0Cd4Co.roa (hash: 7MaXibZAcGAVoxSztPs4C8RQcPHCjtKPNjMHd2bXMxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:1f:3e:ff:2f:17:72:dd:4f:81:d0:76:46:f8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: May 13 10:00:46 2026 GMT
Not After : May 14 10:00:46 2026 GMT
Subject: CN=3a048841f756219dfe457161875c3282ee9555ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:ee:83:50:c7:d4:0f:b2:77:5d:1c:80:82:
45:33:ed:6a:96:b5:7d:e9:8d:0c:62:f1:8d:fc:fa:
eb:67:b0:56:d3:e0:0c:38:97:9a:c2:88:52:9f:16:
7e:a2:a7:e0:89:75:24:6a:eb:87:0b:c7:16:8f:c0:
3f:20:cf:12:ea:66:c6:8a:c7:bc:48:81:5e:a8:9e:
bf:93:2d:0a:f4:ec:60:11:cb:48:dc:13:7c:6c:2c:
8b:76:bf:5c:6c:2e:db:92:94:5b:2b:79:fc:16:15:
d8:2d:0c:c3:2b:3d:38:78:e7:af:9a:5c:f4:7b:35:
d0:dd:9d:1d:30:d3:f6:34:07:33:a5:fe:ba:86:e5:
05:45:c6:47:23:0b:ef:2b:ac:17:7a:2e:65:69:4c:
0c:ff:e0:b8:1a:53:e2:8a:3b:69:7b:51:bf:05:77:
14:2a:d1:e7:ed:80:a7:3b:6f:10:4f:ec:63:97:2c:
9c:89:01:46:48:5b:ae:cb:b3:bd:5d:61:2e:0d:cc:
2e:f5:df:57:d5:b8:8d:a8:49:2e:9c:de:5f:df:1a:
46:00:57:c6:51:fc:d8:ca:5e:56:a3:ff:32:79:47:
cf:64:64:6d:79:e2:95:21:1a:41:01:c1:f4:fe:16:
b7:40:6c:8b:ed:ef:fe:6b:4a:45:b7:aa:c3:c6:c7:
4f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:04:88:41:F7:56:21:9D:FE:45:71:61:87:5C:32:82:EE:95:55:FF
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:3e:6e:ca:28:b3:46:29:1c:fb:6a:cb:e7:4e:31:27:e9:64:
f0:1a:1b:a2:54:e5:b2:76:40:20:4a:8e:e0:73:0f:ce:c9:83:
15:e3:79:49:2a:c7:0f:15:23:75:84:41:9f:12:3d:41:a3:9d:
99:3e:8e:dc:09:ce:3a:15:b4:b7:cf:cb:9f:f6:03:6d:fb:8a:
a8:6f:14:21:04:0c:83:e0:da:2d:04:6b:15:d5:26:91:39:87:
c7:ab:37:de:58:e7:cd:c8:80:7e:8e:d2:76:c4:d6:6b:90:89:
d8:65:8a:72:3f:93:1c:3c:25:0a:4e:cf:e1:b4:82:b9:47:1b:
33:47:7d:b2:ee:66:f2:78:7c:4a:b2:70:05:2f:79:5d:61:11:
72:dd:e3:bd:17:08:d9:ed:54:5f:bb:2f:52:d2:50:9a:3a:90:
53:0a:c8:ff:dd:e9:aa:4b:4d:13:8d:ab:f2:e5:23:1e:95:71:
71:ac:ce:d4:f7:19:20:a4:28:b0:c3:e4:cd:20:84:65:c1:a9:
7c:6b:44:67:6e:bb:0a:51:35:41:a8:51:ce:27:0b:47:41:0c:
4a:44:7f:78:07:0e:94:14:83:c4:55:3f:59:fb:44:77:8c:6d:
61:eb:ac:df:86:1b:bc:0a:6b:7a:35:43:fe:d3:c7:04:e8:65:
33:ca:70:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:10:37 2026 by rpki-client