
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
File: ogiOBtVTz_KT0nf012w6cQvYsvc.mft (raw, json)
Hash identifier: R1JADoPibD5grTwAHulpwf1zlxKux3yIjqVPzd0Lh6M=
Subject key identifier: E0:6C:AD:74:19:17:21:F1:44:FE:D9:53:B1:7F:C2:9F:CF:FF:B1:AD
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A0D0EE52F2E09D716FC0B06B9387F12647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
Manifest number: 1B09
Signing time: Thu 24 Sep 2026 01:01:14 +0000
Manifest this update: Thu 24 Sep 2026 01:01:14 +0000
Manifest next update: Fri 25 Sep 2026 01:01:14 +0000
Files and hashes: 1: 0bKooLeEaBVaHZZ5sm_Mxin6SHU.roa (hash: fTg7hso6ct0mZc4J1RnwZCnteGZJ3YXa8o1ssxIWikE=)
2: 15YRYk0OOsur4nmbjHzqrTrzfeQ.roa (hash: WZaueawVRKmmS1Xzndpi76+h8hyQuijG+xnuMLZ7DTo=)
3: 51sMMW7XNb-MLf8Lv5YXdcOtSCk.roa (hash: mnXXWe8YXIcnA1Q/81dW5+gt1IIDz+CKkOS5vMvKy6I=)
4: JNZCYSb0eX2LiAhwYWr792VZYyk.roa (hash: 8a/oxkbq80RN3ANPAzfwubbSf0KUQs2EZXuphhCoNP8=)
5: Ngjw1vhloIp0UT-nauD8USjCudc.roa (hash: g4SQj8Dh7gq6fyHaa1thTApOrgQGR2g0qw8Of/lXJ6M=)
6: TQJC17LRiHCpRzm6vZH98Kx2YGE.roa (hash: CC6/FdzY8rWN99NywJxlTj8KoAeOw5QMq59YsrbSols=)
7: U8heiNj-1DXPnLIJw67QF28AxV4.roa (hash: 5br3lEsUqAMI9+vMDkaT1x3v1/JBeCswqWMLa9dVmwI=)
8: _MudUc0Pvd1GYebW0sO-A_Kjoi8.roa (hash: 0tsgFf8KNSTJt7JGL5ElSL3liAR6QXHJEZNRAwsMx5E=)
9: cw3p8OtDCLlC1go49KS1_MxGpnE.roa (hash: Jr8ERSNb16dhdPHQwE9WASS0GyFbBKLbh+bPj3R8bhI=)
10: ogiOBtVTz_KT0nf012w6cQvYsvc.crl (hash: ZTU1VCDbKELaX2UHOaWtVqltIQl1dpOSQGWTGMTlAEM=)
11: wdlcghHaFjBg9miwVhfBtTm1gyY.roa (hash: 0wwcVzuglC9MXrfZM5CyEXjj8UTs1IW/BCyl3V3syoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ee:52:f2:e0:9d:71:6f:c0:b0:6b:93:87:f1:26:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Sep 24 01:01:14 2026 GMT
Not After : Sep 25 01:01:14 2026 GMT
Subject: CN=e06cad74191721f144fed953b17fc29fcfffb1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:37:18:e9:57:e1:0b:4a:55:1c:35:fd:95:64:
71:24:4f:c6:bb:64:7a:26:65:2d:a5:48:c8:c9:e1:
42:70:30:b4:64:08:f2:1c:12:61:7e:10:64:a3:74:
9a:63:54:b0:61:4a:94:e0:82:42:fe:15:93:38:fd:
c5:ab:18:fd:e3:4b:f8:74:79:31:d2:1e:c1:f0:1d:
33:a6:10:70:99:5d:05:69:ce:3f:26:aa:2a:bc:e6:
c9:63:1d:cc:0e:51:88:b9:d4:71:14:a4:84:ca:73:
7d:b1:10:dd:1f:66:58:37:32:3b:d3:dd:4e:4f:97:
e0:00:bb:33:af:c3:e3:f5:8c:bc:51:ee:7a:01:dd:
84:8b:14:02:ab:9a:82:4c:92:27:63:3c:5a:54:1f:
17:57:34:27:f0:34:7f:c5:f4:52:d6:9f:7a:84:10:
e6:00:2e:dc:d3:9a:df:b7:19:22:cd:98:1a:53:fb:
7b:e6:24:98:d7:44:9a:65:87:93:88:8e:f5:35:f7:
7f:a1:88:34:33:da:d9:62:9e:a6:54:1d:0a:ce:fe:
2f:fd:6d:dc:fc:ba:32:f3:5c:6d:fc:8c:ef:f5:e2:
93:1f:42:e7:cb:02:43:d7:7b:5c:22:f1:3e:21:20:
a0:ed:d9:38:8b:eb:15:a5:dc:c8:aa:34:92:b9:c1:
df:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6C:AD:74:19:17:21:F1:44:FE:D9:53:B1:7F:C2:9F:CF:FF:B1:AD
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:5b:b7:27:cf:71:da:c0:91:e2:cb:ad:98:83:5d:9b:66:b7:
82:1e:78:60:54:db:3d:80:e6:e8:df:d1:0b:d8:69:27:0f:34:
31:25:35:fa:b3:d4:f3:fb:8a:94:60:e3:90:74:15:5a:9f:43:
a3:76:3c:b8:62:26:a3:aa:7c:27:82:a2:b5:32:33:11:43:41:
ab:b4:bc:a1:76:79:70:95:af:f6:ec:4c:af:a5:f8:6f:ac:85:
11:64:60:19:e3:2a:63:ca:ca:dc:74:39:73:e4:47:d0:a8:8d:
1f:b8:77:a5:2d:6e:aa:ed:75:0b:ff:fc:65:88:86:2c:fc:bd:
31:d9:c6:1c:98:5b:18:89:53:5a:18:ca:46:1d:5c:a6:93:01:
b6:61:ec:e5:32:c7:25:d4:d0:e8:b3:75:6d:45:3e:ad:37:22:
6b:22:c8:9c:37:5a:6a:d6:b8:17:33:cc:27:7c:a5:5a:2f:2f:
b7:6a:39:86:de:36:41:c4:a8:77:df:a7:75:8b:55:03:51:4e:
1a:9e:3c:a3:e1:69:e4:1f:19:35:44:ed:5f:07:16:19:ce:a4:
0c:2d:e1:a5:2a:83:64:3d:d3:d7:fe:87:fa:9d:8b:98:1e:bd:
c8:5b:d9:fb:43:44:a3:9f:39:67:42:7d:65:ee:00:ce:00:d4:
0a:4e:82:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQ7lLy4J1xb8Cwa5OH8SZHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk
OGIyZjcwHhcNMjYwOTI0MDEwMTE0WhcNMjYwOTI1MDEwMTE0WjAzMTEwLwYDVQQD
EyhlMDZjYWQ3NDE5MTcyMWYxNDRmZWQ5NTNiMTdmYzI5ZmNmZmZiMWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojcY6VfhC0pVHDX9lWRxJE/Gu2R6
JmUtpUjIyeFCcDC0ZAjyHBJhfhBko3SaY1SwYUqU4IJC/hWTOP3Fqxj940v4dHkx
0h7B8B0zphBwmV0Fac4/JqoqvObJYx3MDlGIudRxFKSEynN9sRDdH2ZYNzI7091O
T5fgALszr8Pj9Yy8Ue56Ad2EixQCq5qCTJInYzxaVB8XVzQn8DR/xfRS1p96hBDm
AC7c05rftxkizZgaU/t75iSY10SaZYeTiI71Nfd/oYg0M9rZYp6mVB0Kzv4v/W3c
/Loy81xt/Izv9eKTH0LnywJD13tcIvE+ISCg7dk4i+sVpdzIqjSSucHfnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBsrXQZFyHxRP7ZU7F/wp/P/7GtMB8GA1UdIwQY
MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct
YmJlYTI5MThlMTAyLzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy
LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlu3J89x
2sCR4sutmINdm2a3gh54YFTbPYDm6N/RC9hpJw80MSU1+rPU8/uKlGDjkHQVWp9D
o3Y8uGImo6p8J4KitTIzEUNBq7S8oXZ5cJWv9uxMr6X4b6yFEWRgGeMqY8rK3HQ5
c+RH0KiNH7h3pS1uqu11C//8ZYiGLPy9MdnGHJhbGIlTWhjKRh1cppMBtmHs5TLH
JdTQ6LN1bUU+rTciayLInDdaata4FzPMJ3ylWi8vt2o5ht42QcSod9+ndYtVA1FO
Gp48o+Fp5B8ZNUTtXwcWGc6kDC3hpSqDZD3T1/6H+p2LmB69yFvZ+0NEo585Z0J9
Ze4AzgDUCk6Csw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:07:32 2026 by rpki-client