
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json)
Hash identifier: EtRLCVNzj+yfajyqC5kMDh3jKdf2vN0wopJUjyGF5e0=
Subject key identifier: 5B:BC:82:45:41:5D:6E:3F:84:69:4D:FA:D1:B0:68:F0:31:C3:3D:A2
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial: 019F9059DCE5E183E7134029D40762004014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
Manifest number: 18CD
Signing time: Thu 23 Jul 2026 19:00:35 +0000
Manifest this update: Thu 23 Jul 2026 19:00:35 +0000
Manifest next update: Fri 24 Jul 2026 19:00:35 +0000
Files and hashes: 1: KQgcPbLRBBc_xsh51xPt4IehnO4.roa (hash: pCfM4q8twqlvRaHLGHOBBp4aKXHoEg09la6QGcZB7h0=)
2: MCBZ2CxaM7LC481GLSYWHeppO5E.roa (hash: 02Ro7KtAxSGq3svayvXMnjLyQYv+fnx2uhv691O7tMc=)
3: OJxTLDXJ9pqUGXVl4-ml1R-2R0g.roa (hash: /fFWCePAVkjb5ODL9wnIO10abW6/OG68dBuoesYNJwY=)
4: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: Joi9owtJxhU5NCxdBf/qEWp5KbkrWwSJmC+/+bPXj3I=)
5: UNEG0RbhpGfDIQfxZ4i2ieICO9g.roa (hash: kKbhwxHzyZ1nQMHyypRvyIhRmV3QS30VEm56g35Omd4=)
6: Vg59mkjZjPChn5V72yQkRuYsw5w.roa (hash: ZT1vWv2NLvyggQYSfbG/ST95n5y42mBT1SrPiyV/11c=)
7: dnVcuIVq43rB8PBNyYX_JeEUFJ0.roa (hash: Ff78hIKwiWd51/Bth5HBmfNxfzKtqYOa3kRFT0AYoJo=)
8: rjNblK4bxhZyMeZC4OHShSQ8Jlc.roa (hash: yvBwo79kSdn4a3N6pjUOiYNe2QQKF2EmdQtpBeT8m8w=)
9: ui12U8ehqDuyNEV4dxeMmGkBpyU.roa (hash: yINc/cfZuw+HDq9yk/ySvw+zjfDYf1qaipCTcvu1wXg=)
10: ybxPsztAzlmVPObK0OoBTddoDSQ.roa (hash: d3b9yiAURGnHAdeyevteUI2cI7ETobUn55NXVEoQFao=)
11: znRtvDjx6p6QKqOpN-UH1Bqd7ao.roa (hash: +4jJSJNUJ8eFyd4hEIFej6uo6SX/BvFj2H5hv/FUtHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:dc:e5:e1:83:e7:13:40:29:d4:07:62:00:40:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
Validity
Not Before: Jul 23 19:00:35 2026 GMT
Not After : Jul 24 19:00:35 2026 GMT
Subject: CN=5bbc8245415d6e3f84694dfad1b068f031c33da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c2:87:38:8c:83:3c:82:50:1f:47:3f:14:04:
98:4a:f4:b0:d1:d5:95:a3:a2:20:77:aa:df:00:54:
f6:c4:ad:b2:fb:bb:57:54:17:e5:57:6e:c0:2d:d9:
89:2d:82:ac:e8:dc:cf:f5:a8:a1:85:d8:66:35:04:
ed:f9:ca:3d:69:f7:4e:74:b3:cf:17:f6:91:cd:47:
ea:95:d4:ba:73:dc:01:35:a8:52:85:3a:4f:66:88:
fd:c6:d5:d9:0e:b3:9c:de:7d:8f:43:6b:06:ba:fe:
81:01:e0:be:29:09:df:c4:8d:78:ec:8a:bc:1f:fc:
f6:e4:49:a5:29:2a:7b:41:ab:e1:fb:db:0a:d7:f0:
e0:e0:be:e5:b2:f7:bd:bc:32:98:f5:f7:cb:c5:65:
61:84:43:4b:b9:ed:80:e9:1d:d2:db:12:a6:a7:bd:
63:fb:30:f7:ec:bc:ff:94:d2:02:85:81:8b:6d:85:
ff:f2:29:e7:ea:22:93:3f:c8:ca:21:e2:c6:43:6d:
aa:ec:b9:39:6b:8f:f0:38:a1:18:62:bc:7b:86:e8:
89:b4:9a:cf:02:5d:60:37:ba:9f:22:05:0d:09:f2:
6e:0f:b1:ec:0a:c6:77:c7:d5:db:3c:2e:32:85:4f:
ab:27:74:c0:de:78:4d:55:55:9e:a5:c9:ca:f0:6c:
57:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BC:82:45:41:5D:6E:3F:84:69:4D:FA:D1:B0:68:F0:31:C3:3D:A2
X509v3 Authority Key Identifier:
keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:22:68:8d:d0:33:9a:d0:22:e0:d2:11:c4:41:6f:4e:6e:3a:
75:9e:df:ae:e0:26:43:fb:80:29:e6:be:0e:ef:38:a5:3b:dc:
d7:1d:18:e7:08:5d:37:7e:96:a6:26:94:bd:90:5c:5a:92:11:
ca:68:1e:f0:cd:9f:ef:29:89:bc:86:ab:45:3a:20:61:2d:2b:
5e:65:61:01:30:06:91:ad:04:cd:2c:5c:89:4c:9b:00:26:7c:
a0:33:d1:ec:3a:05:d6:c7:e0:bb:87:23:33:6e:8f:6a:79:ce:
2e:60:53:25:9c:e3:02:aa:40:a1:21:8b:0c:da:51:f9:82:d0:
9c:21:f7:50:30:93:8e:b3:b4:43:c8:e0:5b:a0:69:e9:9c:26:
a6:95:5b:40:33:e4:3e:26:fc:ec:d3:35:85:39:e4:76:73:15:
e2:af:d6:5c:35:5b:04:97:7f:74:a5:c9:c9:fb:e4:49:7b:3c:
bb:82:e6:41:68:7c:5c:8b:e1:f0:73:aa:16:db:0d:f2:1a:81:
8e:1d:37:d8:15:52:60:ef:2e:d7:cd:ad:ab:5d:7d:2f:ef:a0:
5f:a0:56:52:9b:c1:6f:c4:7d:ae:c1:c0:9a:e0:fb:63:6b:de:
89:95:38:36:c4:db:82:7a:0b:7c:11:e6:16:4c:b0:c2:3a:9a:
a9:e4:27:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:21:42 2026 by rpki-client