
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
File: ogiOBtVTz_KT0nf012w6cQvYsvc.mft (raw, json)
Hash identifier: y1rhWWDm1pLiDN22CXuC1pVcQG5juGkg0DK7qlKCs1Q=
Subject key identifier: 38:49:28:56:2F:E2:8C:62:CC:A9:58:FD:1E:39:23:30:7E:80:D5:93
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A0D5DE2FF93EA6E69F0C7BDB219338311A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
Manifest number: 1B0D
Signing time: Fri 25 Sep 2026 00:01:43 +0000
Manifest this update: Fri 25 Sep 2026 00:01:43 +0000
Manifest next update: Sat 26 Sep 2026 00:01:43 +0000
Files and hashes: 1: 0bKooLeEaBVaHZZ5sm_Mxin6SHU.roa (hash: fTg7hso6ct0mZc4J1RnwZCnteGZJ3YXa8o1ssxIWikE=)
2: 15YRYk0OOsur4nmbjHzqrTrzfeQ.roa (hash: WZaueawVRKmmS1Xzndpi76+h8hyQuijG+xnuMLZ7DTo=)
3: 51sMMW7XNb-MLf8Lv5YXdcOtSCk.roa (hash: mnXXWe8YXIcnA1Q/81dW5+gt1IIDz+CKkOS5vMvKy6I=)
4: DGq2WOYgxq7SjytIr-UQOQXVOjM.roa (hash: vo8lVzcZPxxaalBZy7d8pgREZYK500PxzZXHdu7U6AQ=)
5: JNZCYSb0eX2LiAhwYWr792VZYyk.roa (hash: 8a/oxkbq80RN3ANPAzfwubbSf0KUQs2EZXuphhCoNP8=)
6: TQJC17LRiHCpRzm6vZH98Kx2YGE.roa (hash: CC6/FdzY8rWN99NywJxlTj8KoAeOw5QMq59YsrbSols=)
7: U8heiNj-1DXPnLIJw67QF28AxV4.roa (hash: 5br3lEsUqAMI9+vMDkaT1x3v1/JBeCswqWMLa9dVmwI=)
8: _MudUc0Pvd1GYebW0sO-A_Kjoi8.roa (hash: 0tsgFf8KNSTJt7JGL5ElSL3liAR6QXHJEZNRAwsMx5E=)
9: cw3p8OtDCLlC1go49KS1_MxGpnE.roa (hash: Jr8ERSNb16dhdPHQwE9WASS0GyFbBKLbh+bPj3R8bhI=)
10: edX_boH5LwBQxREZ5Yd9Q9rdwZA.roa (hash: Uq4THL9ZfWFz/rodcRv55QUF/2Sqc2zmhQEgoW0B3Zg=)
11: ogiOBtVTz_KT0nf012w6cQvYsvc.crl (hash: 27fplUZl4hlZJgdWpqWjmpHdEjvMtp8kTuqSGgzfo2E=)
12: wdlcghHaFjBg9miwVhfBtTm1gyY.roa (hash: 0wwcVzuglC9MXrfZM5CyEXjj8UTs1IW/BCyl3V3syoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:2f:f9:3e:a6:e6:9f:0c:7b:db:21:93:38:31:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Sep 25 00:01:43 2026 GMT
Not After : Sep 26 00:01:43 2026 GMT
Subject: CN=384928562fe28c62cca958fd1e3923307e80d593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:25:5a:8c:66:2f:fb:7e:11:76:c3:af:24:27:
dd:af:d4:d9:b8:71:ff:ca:21:d4:07:c2:ca:4c:6a:
8b:e9:03:68:4e:e3:44:6d:91:4c:3a:1a:52:34:fe:
79:41:b2:54:40:d2:bb:b5:25:6f:61:35:21:a4:85:
45:3a:a8:02:85:5e:ae:ab:0a:83:f4:51:5b:4a:2a:
97:8e:39:3f:6e:a5:e4:0b:74:66:f0:15:54:eb:34:
c4:e1:d3:31:ee:e1:ca:99:1d:78:41:7b:54:49:50:
c0:89:ca:3f:d3:64:40:6b:03:08:01:e7:bc:08:f1:
26:b2:9c:16:32:97:bb:38:b2:e2:3e:a9:ca:4e:07:
86:2f:ca:f5:65:86:40:e2:26:52:5e:0d:3f:be:61:
18:c6:12:43:6e:ea:39:3b:5a:fa:cb:61:e4:db:be:
30:c5:f4:a8:22:55:e8:dd:df:b2:9b:6b:61:21:38:
fb:39:82:44:37:25:70:25:74:74:72:08:df:b6:3c:
de:bb:c9:79:14:0a:b5:df:fc:83:64:54:a4:f6:c4:
96:30:48:08:70:68:91:fc:0e:e9:7a:fe:1c:fe:cb:
ca:9d:38:6d:f6:b9:32:6f:ea:59:7b:69:a9:f0:99:
26:7a:71:3d:c8:93:68:a4:e6:10:5c:81:60:6e:34:
62:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:49:28:56:2F:E2:8C:62:CC:A9:58:FD:1E:39:23:30:7E:80:D5:93
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:63:6e:dc:69:dd:78:a4:e0:fa:cb:96:6e:43:4e:fa:8a:f6:
08:00:5d:29:5a:3d:08:1b:0c:a0:1e:0d:58:55:f4:2b:81:db:
3b:bd:7f:5c:02:0c:e6:6b:88:64:7a:8d:1b:40:76:f4:cc:57:
8a:24:67:03:0f:4a:16:b7:f8:21:85:09:21:4a:9b:73:85:07:
db:19:44:e9:05:56:d3:e0:09:a6:85:ac:d3:fa:8a:4f:76:c4:
70:b9:d2:c5:69:f0:e4:c8:cf:72:7b:2b:4f:fa:c4:81:7c:db:
48:15:76:79:3a:77:ce:44:be:4f:a5:f6:d6:d2:cf:86:56:f8:
b6:c7:54:08:8e:09:5f:8f:f7:07:92:35:ce:95:ba:e0:de:57:
12:16:79:f0:dd:a0:c2:c4:a0:ca:82:f0:27:59:32:86:44:e8:
86:24:58:31:54:d6:61:e7:9c:6c:a9:17:05:0b:97:b3:a5:ef:
ff:78:6e:9c:2d:0c:33:27:4e:87:17:1b:17:5c:cf:b4:9e:b3:
35:17:9c:11:5c:66:d0:09:28:f5:17:41:4f:39:62:7a:d3:27:
b6:7a:cf:d4:36:21:b7:4b:8a:04:fe:e5:71:9f:de:cd:eb:43:
c0:d5:25:d6:32:04:6b:b3:c4:3f:33:95:17:8e:6c:9f:40:d8:
21:33:e8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:26:37 2026 by rpki-client