
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
File: olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json)
Hash identifier: TpB2r9hmSE+tNzm3kcjVRs0O2Pbbj5PkGb/BMfntFiM=
Subject key identifier: DF:65:C5:9A:D7:CC:D8:49:69:7B:FC:43:9C:D5:31:DB:3F:88:E7:A6
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 019E1ED9D8095C025BB4143E4EFB256D05CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
Manifest number: 193E
Signing time: Wed 13 May 2026 01:00:53 +0000
Manifest this update: Wed 13 May 2026 01:00:53 +0000
Manifest next update: Thu 14 May 2026 01:00:53 +0000
Files and hashes: 1: 0dbyZwebQgTGMD5-wPhJH6_Pd5I.roa (hash: rG5nZgpv1Ah9jz+mC9094dW59+5lFAhfWaH5ssnQtAk=)
2: 1-SQFDfpp9D_i817zUQFbntY0dRQ.roa (hash: biSe4GCFtSwazcB9PCCa1NKBDVP5/i0SLuwOHponshU=)
3: 2frKTWb3ttQDpCXNMXbTSXrlIqI.roa (hash: obnt34G7IEsjg6vdddM8muzJwshLaBlLPb65paOFsfE=)
4: 3lYygY9QSAAHtzgINKWVRrbCp_4.roa (hash: xTlxdsrlszD3wQ8XFzdmUFKsu5SMwqAldL5Rb7oJqzA=)
5: 4WijXRQsTuAJtSd_hSZYlUqj8lA.roa (hash: cDODijNSh6xud6bY86CXr7OdBhes8GnABNkzt2sQT9E=)
6: 7zTwSbIrIN1tbHKaAerBGKh4H_4.roa (hash: Uj+d0N/fp4CQPw2Wdyt0B7bkrgBCMNOKaEUgThPZLo4=)
7: Gv1ql7t0nNON87AJIldQVqDpbaw.roa (hash: Afsi36EyWB2mwsT0UzfNkOmYYiw9CwLh31zU2SIsaxk=)
8: I2KpdLXbpYuKcc5P2UrERlbUmQI.roa (hash: QwjjNYoou+Yqw7bbIshNHDY3CQQBCro8tQly5UuqIPQ=)
9: K6IIfeYnJcau7XFah26WtRrWoX4.roa (hash: kAmjx0E3nDeIJhDMXwZG/0loikW8ryL2ZHfuoiau2sI=)
10: KfKdKGXKrJVAyc679p1xVdKcOuU.roa (hash: MZjQw9I7nKK82B9sKr7/qbtBGaD/PhRCNNoKDtPpSRQ=)
11: Mq-mUEFWUlYQLR9Q1TOKn44hQIg.roa (hash: 1b2depu8gD6fJwhzPUpGSrMletWb/nZZ5ISRNX0Cqhc=)
12: Nn2M0QjFRAa_T2cmYDVUHTJ5GXs.roa (hash: ROtPVP9nVJ4sSu+guXDuQ34VOIJfTdPXZnYgNbsVTRc=)
13: PT0OVKn7DoYDkXnLiYT9h8XOQSo.roa (hash: P3oRTt1oGGLmL6K2JdXvl8dIu0LI9RbrIcGwZo70+dU=)
14: T-Tc8u-y-A23bEMCsm71F_7_jTg.roa (hash: uvA7IEtWcoBgqQxL/f1PptXnW15RVEqbUY2vsk5myZQ=)
15: TUHp0yldZUy2noEeejLALiKlsOA.roa (hash: hJdNCDGT+WfObUpSa1plMcdJasirz1T8A6b/aK4MsFo=)
16: Urxc-_3dN2rsdSn-CFXZaM1OMmE.roa (hash: KTdVek6dN9t33L+6LCMmAcoph/JKLQZZF3RFY22Laag=)
17: YXUp7zooWjQNk0SCQ3XjU1WJ4p0.roa (hash: H3xsqFycou2fUIkaAZhvKohZiXJw23DIcMEfjOBghak=)
18: aFybrbDshxtrknuOyM8RFxRBKs0.roa (hash: RQU0CLTgvLglUS45QfR69+raL0+alWumuh4CDPItdCA=)
19: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: 4nKFSLhW0BqfsA5yjxtcOL31UQVC5XNkTcn3ZXKqKl0=)
20: rZIzlxjNqrmdhiYj8eZcD_DAyYQ.roa (hash: HtYYyQJMTgOPk/TpOD1+JZFhzQ3pNzbNJ5gyclYza/w=)
21: thqMO7NSQ4YZbOJpf7E5T4h4Qx4.roa (hash: CSkwEjedoekw5JE8fDs8zoEDa+VA8TtlPZQTJSLtR3Q=)
22: xqLMI4n3mv1T0FOyglej7wVFdYE.roa (hash: BA8dbC4wqu6gr5aHMdPy/PzpkFFbaeIFkYk6ddxpagE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:d8:09:5c:02:5b:b4:14:3e:4e:fb:25:6d:05:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: May 13 01:00:53 2026 GMT
Not After : May 14 01:00:53 2026 GMT
Subject: CN=df65c59ad7ccd849697bfc439cd531db3f88e7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:9d:e8:69:15:5a:7e:27:63:1a:43:3a:4b:
53:8f:8b:2a:ab:c4:6b:6b:83:71:65:bb:3e:e7:6c:
6d:24:55:05:a9:80:50:4f:6f:d9:19:51:ec:09:12:
b0:97:46:04:cf:64:6b:b2:0b:81:08:19:aa:54:f1:
41:b7:1c:40:c1:ad:88:7c:6f:f4:8c:9a:c4:99:f5:
63:9f:7b:3a:76:e2:41:4f:27:65:dc:4a:26:3a:57:
d4:97:fd:f1:02:59:32:4d:90:31:8d:ab:73:eb:7d:
d6:ff:e8:b8:a5:9d:7c:54:5f:ac:f0:1a:bc:df:d9:
1a:96:38:57:66:ba:0a:48:28:47:95:c2:9a:d9:00:
08:7d:56:a1:c3:7a:08:de:55:f9:3b:8e:1c:82:aa:
e7:6d:4b:af:5b:f9:c5:6a:85:b3:43:c5:15:b7:f4:
b4:64:d3:42:6d:a0:93:8d:b1:c5:b9:b5:6a:33:44:
5b:18:60:0c:00:2d:20:c5:c7:99:ea:a2:98:19:e8:
4d:3c:98:2d:0e:e4:64:65:94:72:c3:5c:c6:5d:7d:
7f:ed:e0:39:e9:5b:49:c7:b3:3e:c8:43:9a:3c:5b:
6d:ae:4e:71:09:f7:28:94:3d:d5:5e:45:72:7a:94:
29:6f:71:e1:40:a1:01:35:26:06:91:d2:11:bc:6e:
69:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:65:C5:9A:D7:CC:D8:49:69:7B:FC:43:9C:D5:31:DB:3F:88:E7:A6
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:df:8c:26:9b:a8:19:ff:eb:5d:f2:d7:6a:74:e3:5e:3f:78:
25:e2:3a:f6:15:e4:41:bf:67:64:e4:bb:b6:ac:aa:d4:36:99:
e3:c6:41:fa:f0:f1:05:66:eb:5b:3f:fa:98:01:1b:5e:8f:a5:
61:ef:89:f8:54:9c:c8:2c:a0:bf:48:17:8d:74:f9:1d:b3:13:
23:b7:fa:0c:d2:0c:ec:ce:d6:d3:d8:37:bd:60:86:08:fc:23:
10:27:be:75:2d:70:75:10:96:39:4a:b0:b7:e7:ab:37:23:a1:
8b:75:f2:87:c7:87:79:a9:ef:d7:dc:b2:5c:36:e4:10:8c:ac:
a5:c3:90:50:9b:72:87:8b:10:b8:a8:48:84:81:c5:8c:b5:24:
df:16:e5:48:96:6d:4c:27:69:01:22:c7:12:d3:77:64:9b:33:
3f:b3:07:44:db:42:b2:5e:b3:ed:5a:db:e3:96:46:41:48:92:
d7:b3:df:ab:6d:50:36:60:11:2b:0e:41:fb:07:43:9f:14:71:
97:20:65:d5:aa:b7:38:0c:45:ff:22:f7:de:38:92:44:e2:86:
a0:45:37:8c:c6:c8:e4:d2:4c:8b:6b:a6:48:5b:01:c3:76:35:
cb:22:12:ac:e0:64:8e:8c:2a:f2:13:3d:1e:64:cb:0f:7e:88:
98:b8:a5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:33:35 2026 by rpki-client