
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
File: ogiOBtVTz_KT0nf012w6cQvYsvc.mft (raw, json)
Hash identifier: jSYR4GIeOhmEKDOGKene83RBJ0YFkT9T8ZYU14h0PrI=
Subject key identifier: 24:75:59:B2:EA:3E:47:A4:8D:8A:52:9A:70:34:69:B7:45:1C:A5:15
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 019E1DFE9B1A8ECFAA94C8BED3492BE9AF1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
Manifest number: 1967
Signing time: Tue 12 May 2026 21:01:25 +0000
Manifest this update: Tue 12 May 2026 21:01:25 +0000
Manifest next update: Wed 13 May 2026 21:01:25 +0000
Files and hashes: 1: 0bKooLeEaBVaHZZ5sm_Mxin6SHU.roa (hash: fTg7hso6ct0mZc4J1RnwZCnteGZJ3YXa8o1ssxIWikE=)
2: 1-MVE0P8P9kGWpbc5r_rVaZZuUSY.roa (hash: 9734hbydI01Mysv+mFWjt5Qw9lCJrYHGrFA7e8epJuo=)
3: 1-TiFvh7L9BQVK4wRLUj5HxxK24U.roa (hash: PTObSICX6ACJJQG4goDLXWCQj+8arc/GovctzTFGHic=)
4: 28MnuBuWMkf8YOUEK1t42dzS8iY.roa (hash: eMlMHl46n0Zt6mHyAMkeO9Sq3gX3a6oaKFf2QAyBvEs=)
5: 66dOPLt0_WTatbD8jTDqviLCby0.roa (hash: 5X3443GxzYaJM9zk480V7FRqeV1QrGs7L4mBsvUHY7g=)
6: JNZCYSb0eX2LiAhwYWr792VZYyk.roa (hash: 8a/oxkbq80RN3ANPAzfwubbSf0KUQs2EZXuphhCoNP8=)
7: TQJC17LRiHCpRzm6vZH98Kx2YGE.roa (hash: CC6/FdzY8rWN99NywJxlTj8KoAeOw5QMq59YsrbSols=)
8: U8heiNj-1DXPnLIJw67QF28AxV4.roa (hash: 5br3lEsUqAMI9+vMDkaT1x3v1/JBeCswqWMLa9dVmwI=)
9: ZXcMeeipBn7sUUJEU91rzEI17zk.roa (hash: 5bsppIb2wCZVXZGFfEu5mwku1Y7/zmbNHcXjdaosbrc=)
10: e6qESxIj0nY-uZpPFa2lyVuqC9Q.roa (hash: fHt+SuPBiZEhucf6WrHaEo2b5b2tZhp0/UZPGsQDWh0=)
11: fJuTGRvozfm4_e0aUam0wS-AlPw.roa (hash: Z1Mjes1iDe2mLSTG+5DMRvvdh4aNMNzB1Vnh815bgHo=)
12: ogiOBtVTz_KT0nf012w6cQvYsvc.crl (hash: AxXTX3oSrENDzSQ/J0TGh4DkClOHGOMC5cFmtR5th9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:9b:1a:8e:cf:aa:94:c8:be:d3:49:2b:e9:af:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: May 12 21:01:25 2026 GMT
Not After : May 13 21:01:25 2026 GMT
Subject: CN=247559b2ea3e47a48d8a529a703469b7451ca515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:07:d1:f9:76:63:e4:f1:c9:16:14:5e:a9:ad:
d8:fe:40:09:da:09:5b:d5:f4:4c:f2:6b:2c:89:63:
11:a2:48:94:bf:c9:87:b8:9c:c9:08:64:38:5a:74:
25:77:ed:d3:36:45:0b:f0:b6:0a:46:b0:4c:ea:41:
e8:36:68:6c:ec:c1:da:2a:8f:0e:14:9e:46:22:bc:
e3:3a:d2:42:d5:b0:b3:bc:5f:f6:92:9d:20:28:fb:
c0:fc:88:dd:41:db:48:36:e4:59:7f:ee:c3:d3:c5:
39:55:c6:06:07:c5:7d:a3:28:ed:bd:1e:49:d0:e1:
8c:35:0d:1f:d5:6d:01:36:d5:a6:cb:09:df:4f:65:
8f:75:05:36:cc:a6:ff:bf:b8:91:8b:16:9d:1e:f1:
5f:7d:f9:62:eb:f0:57:03:aa:50:c8:2b:7e:bc:b1:
8a:7a:57:5e:77:69:ef:d5:87:63:93:e2:c0:fd:d3:
60:e4:b9:e7:16:9b:69:64:e5:03:f2:ad:95:e7:c2:
ba:d2:4d:6d:68:a2:86:1a:e9:79:81:aa:ef:83:09:
d4:30:b4:65:05:48:b2:19:97:65:02:01:32:06:58:
00:26:37:96:4d:10:71:99:71:39:59:c0:4d:15:ea:
1a:37:1f:0e:e3:31:a5:7d:3a:9d:68:a9:e1:c8:09:
f1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:75:59:B2:EA:3E:47:A4:8D:8A:52:9A:70:34:69:B7:45:1C:A5:15
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:5c:9b:b2:9d:0e:b9:a4:60:bc:30:ff:0c:91:42:7a:5b:cd:
82:e5:f3:9e:fd:2d:d7:8b:13:69:20:02:c5:11:c1:14:b0:e7:
1e:42:13:c6:83:3e:0d:6d:8f:25:51:46:a8:a8:1c:2d:a4:3e:
e7:14:92:98:3f:94:af:1f:32:bd:46:3f:93:d2:da:0c:b0:77:
e3:3f:04:c8:64:5b:36:ee:9a:9b:d9:0a:70:bb:97:b1:d9:c5:
b2:e5:ad:cb:10:e2:ac:15:dd:e8:b4:b0:c3:3a:04:fa:27:43:
e2:ee:05:c8:7d:b3:4f:90:aa:f6:77:b2:ef:3a:04:5f:a8:d7:
8e:00:c3:34:3a:b5:e6:5e:b6:f0:aa:22:bc:61:21:15:07:fc:
8e:f7:27:12:cc:5c:26:a3:96:38:b7:b8:66:66:e4:da:96:0e:
d5:41:93:ed:75:18:ee:42:cb:f0:72:71:ce:ad:90:76:66:c9:
d0:d6:7a:bd:68:54:3f:a9:04:98:fa:ff:03:52:ca:89:ec:30:
a5:52:51:ba:97:36:be:9a:9c:18:97:53:51:60:6e:0a:fd:94:
bf:bd:04:38:44:df:5f:b0:6b:eb:db:88:84:0f:fe:ce:7d:96:
26:f7:d3:c7:67:44:c3:e5:86:55:95:36:02:33:62:bd:c2:fa:
95:64:52:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:56:30 2026 by rpki-client