
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
File: OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft (raw, json)
Hash identifier: 30M5oMAEFvQeoeN+AvCD5L1f1jZEsDblCnlEPhFY1N8=
Subject key identifier: 05:38:21:82:F4:0B:2D:71:F5:3E:32:78:80:E1:38:C3:24:E4:E6:92
Authority key identifier: 3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
Certificate issuer: /CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Certificate serial: 01A1DE39CC50CC0A51E808C297FCB772C5AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
Manifest number: 0B7C
Signing time: Sun 15 Nov 2026 08:01:32 +0000
Manifest this update: Sun 15 Nov 2026 08:01:32 +0000
Manifest next update: Mon 16 Nov 2026 08:01:32 +0000
Files and hashes: 1: AWYzgkSeU1ruLdcQGWyx3NFOxJQ.roa (hash: P9Q3/GJCp544vg/dW4m/kMtZQYifMjeadrDv+i+SQls=)
2: H2zetjbu6Mqb0o7ATyk278R0bGY.roa (hash: bn4QHQyGhFY9rDnnbmAmmLUzcRf+y73YZKo0db/S5Ss=)
3: OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl (hash: jr5xin0V5yeaLRwioVBKutBfbYg7tq05v7bUgEc1YzI=)
4: QpJITU9l6bMr8oGaX825ze1UlB0.roa (hash: e6fSmdbsZJflihklvHaG4cTIHvwJBCCE1qauoGxZ/7c=)
5: _Smc4bBdBO-6MKvuThvX4gAl6Pg.roa (hash: mCRjx/pD6ueYcesgyqYuCCGaR7D8odHRimyrxKf3nE4=)
6: b6wl6UOnM78Lu17GHxPqFqDhyUE.roa (hash: kA09Zc9zhv3l/lp97KkUt2qpUA/O9aXdkknPhTyEEwI=)
7: qQdCoj_2JwppQuwjTQ_EOjn0-cI.roa (hash: +l5KIfbERA9UOrblj5Ez+PPKG4DuoqtWsKoaM93yiFU=)
8: rvS__rQw015TaaBOkmW4cBz1bug.roa (hash: cmcSpRFZSlnzP6e1K+AHDm2VAfZoIyqsC7lkkFh0sCs=)
9: uHtev5eSqC8WE6ycypYpvyTzkPE.roa (hash: tOHZcVwKgbX/CIyGzALYSP5QrShCApH/2VThn/R79QA=)
10: vaYIteS5igEIIJAvOFUUxlbL9iw.roa (hash: FZNQU0LvtoOoER0joQEpoEINbntZYjJgCFYakf2fGAY=)
11: zDOGvp-54c5DIz8rZDqXtpIogVg.roa (hash: 4Aw3hILMm0mcpv1TfZ7Rq5nLkI9ScVMUPUFaf113hZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:cc:50:cc:0a:51:e8:08:c2:97:fc:b7:72:c5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Validity
Not Before: Nov 15 08:01:32 2026 GMT
Not After : Nov 16 08:01:32 2026 GMT
Subject: CN=05382182f40b2d71f53e327880e138c324e4e692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fa:6a:3b:e6:e6:3e:24:09:a2:0f:d9:ed:7e:
de:71:3e:5f:25:df:86:4f:fe:c1:52:76:0c:19:ca:
bf:5b:47:c3:4b:37:47:38:7f:65:8b:69:cd:b1:d1:
22:7e:5b:8c:11:90:40:ab:79:a8:0a:f4:a1:d2:c9:
96:a5:0e:21:16:dc:28:9b:4d:69:1e:3a:8c:30:b4:
65:c9:bc:46:85:aa:42:66:f7:3b:ff:8f:a1:08:d8:
d5:34:71:40:8d:c7:13:27:c5:81:41:de:7c:88:e3:
80:af:b4:36:4a:81:be:5a:fa:fc:a6:64:37:89:24:
cd:01:80:d3:4a:7a:18:e4:db:63:c6:6d:92:39:7d:
fd:9d:8a:8f:3b:36:c6:11:fd:17:d5:c8:5a:4b:38:
c1:d7:52:3b:ff:3a:00:fd:30:b0:ce:17:9b:c9:b8:
1b:f7:3c:f6:15:87:96:19:f8:3c:c8:0d:22:c5:d5:
d9:c9:ee:f0:82:47:89:fa:9c:5f:02:c3:c1:bb:5c:
08:98:c3:49:39:05:78:67:42:92:c6:54:7f:c4:ea:
28:37:68:7a:19:ef:5f:04:b4:25:1f:6b:6b:f1:98:
6a:bb:dd:96:36:33:17:6a:64:39:a9:37:0f:c9:cd:
4c:bd:c1:51:8f:9f:56:be:15:64:7b:12:8a:13:52:
00:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:38:21:82:F4:0B:2D:71:F5:3E:32:78:80:E1:38:C3:24:E4:E6:92
X509v3 Authority Key Identifier:
keyid:3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:57:0d:75:b5:00:72:b7:47:23:96:98:3a:98:f0:b8:28:74:
f1:4e:6b:be:0c:1d:f1:0f:49:40:6b:e5:93:1e:42:67:d8:7c:
e3:95:86:ba:8b:45:18:54:c7:e1:99:7c:79:95:c4:14:fa:70:
d6:9b:ff:dd:9d:29:bc:65:8a:67:0b:79:51:59:9e:e5:db:67:
2d:e5:e7:0f:42:3b:b0:3e:ce:08:05:33:c1:5f:0c:0d:70:ad:
05:bb:4a:64:00:20:cf:8b:4e:b1:7c:44:93:37:ee:30:8b:27:
5d:8b:c2:b7:54:3a:03:5b:71:8b:44:f5:05:3d:70:44:14:8b:
84:f6:9a:76:a2:69:51:be:6c:73:dc:26:39:4b:7d:5e:7e:47:
26:0e:50:36:54:ab:8d:89:38:cf:1e:55:07:46:cb:45:a4:79:
f1:98:4e:35:d9:31:d4:a1:7e:fa:d7:fe:14:4f:2c:73:5d:2a:
76:7d:47:f6:ec:c6:0f:e1:a9:12:f3:0d:55:9c:62:f4:53:ad:
92:23:58:66:39:18:ca:1b:4a:73:4a:11:90:57:a6:98:9e:2f:
5d:37:e3:29:2b:b3:62:7d:f7:e0:c0:6e:ea:d6:e0:5f:e8:88:
dd:7c:80:78:10:91:b9:9f:dd:d6:eb:ef:78:4e:d9:bd:8e:28:
b5:59:88:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:13:46 2026 by rpki-client