
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
File: OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json)
Hash identifier: NDqTM50Bhr9ByAUgiSQZWKvixLv7j+ZDdryWs7diF60=
Subject key identifier: DB:37:80:7A:5E:FB:AE:F5:22:4A:8D:A9:CE:14:7B:A5:6F:65:16:01
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 019CE591449E6B3764D9B8C6A842393F9B26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
Manifest number: 1876
Signing time: Fri 13 Mar 2026 05:00:28 +0000
Manifest this update: Fri 13 Mar 2026 05:00:28 +0000
Manifest next update: Sat 14 Mar 2026 05:00:28 +0000
Files and hashes: 1: 0Bk51Mjn6qErtAhOivvm_I8c0aE.roa (hash: aq3ZMEYBOh/rpC3SYBAxrvfX3FzvIksQARIozff4ffc=)
2: 3l3JwyRn9LUMsz8MYG14zOnBHdc.roa (hash: 2A1HY2h9Phgu+RFmc7588XfC02kPw7N3ZbQ8wc/kW84=)
3: 8bVGqU-tjWPnIG8sBYrZvrrahKI.roa (hash: IFFyNQvZAT+Bna1YbPC14TW6c3lxt7eZvL1L0yVl4NA=)
4: 8cAZRJhTLPqKsm4TAUR87r4-9JA.roa (hash: sx3g13vfM7xaU8g2AQwyXKrMTuN6j6YaMqFMPUpyTc0=)
5: CQTXAg4uTXvVTudN5hFeeXkNvkQ.roa (hash: MvXWyNfB+L1JsnBDH+iw0vhodg+qR3E3YtxwCLlLcLM=)
6: H_ZqL6RkECdFkORWPkQHZkQLmTw.roa (hash: iJ7KZIZmr4InzppQ2C7K5GIf14/i+7a4DnEB+2Vcn7s=)
7: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: u2+nl3t2RLXIi60qMDCPES8xJwlELBHuqp4RZvxYseo=)
8: PZJni5TxpYn092_2LgQ4TzNg1Vk.roa (hash: KAnI/w7Z4z73b7zbsNexFN30a6Ok+1UWHYIM1LyRw7A=)
9: TZUj41Zk_a4ctgh6bkXXZRSBnwo.roa (hash: SlDdEwpdjEtSII8TXEBDIBic9lrt5T7OD2GqENaMep4=)
10: dc8BS5CRu-zycD-wNYY8YKfw4Cw.roa (hash: 2OEK8MCyAYfbPpIXmNvUjGE5NLgSoSESlZhOHxxGtOM=)
11: g96pKLe6ZF1dh195VH6q_6jtDKE.roa (hash: GXl5Z35Jg4C6xTmicgl5RWGF0PIPfwr7nEkhMgfzcrU=)
12: iKkbPcQ4WIJAurPfzrtorCYjeJc.roa (hash: t+1uw36Adk7Pip1XNPSev194m4wMZgCV8f3gz9/3gjg=)
13: jT0g8lVx3dcAMaKxYxMOa3DkEIY.roa (hash: m3BcVFDXlnD1YdMRwzlLYT9pFM0ZGvuCdz2ltBkF8AA=)
14: n-mejQ3q29BELhma3oWoUOm-iuQ.roa (hash: NGJx12o2aUAcKnv8G9XcrR/xbQgpGxsRftcm0M1WRmc=)
15: oQGGdDTaNSA17PKm44IDHYFop2E.roa (hash: zwBhRxHLQ9o3LHpah+oy4Xr0d2WLdIvePEERXND5wzs=)
16: tklVWYVDGXe5URD0QFeTFCI-yOg.roa (hash: gNNzPMTDn7JasW09Gz6g9NSXq8GJJJOIAedRgSZzHrE=)
17: xXkiOHP5GPVKZFmsEyZEMy5ArTU.roa (hash: xeH/fFNJIFUXQ3IjYea8XVk8nJ8Z09onGn+NwK+Mb24=)
18: yVcflys92CzAxU-EuN_3N-w3nlE.roa (hash: zUTtMpuZxFGygRwVxvfWbYqYKDMVT6hU9O37iMaFGcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:44:9e:6b:37:64:d9:b8:c6:a8:42:39:3f:9b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Mar 13 05:00:28 2026 GMT
Not After : Mar 14 05:00:28 2026 GMT
Subject: CN=db37807a5efbaef5224a8da9ce147ba56f651601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f8:cc:65:d3:ba:85:df:fe:09:3c:31:2b:95:
31:7e:6e:76:12:2e:35:70:e1:50:fa:c6:aa:ba:d9:
dc:46:8c:f3:29:cf:be:c2:fd:36:92:65:36:d2:09:
e4:53:19:3c:33:73:9c:c9:08:42:1e:a3:f1:f7:f6:
d1:ae:ee:6a:14:ba:bf:af:8c:f2:4a:43:47:28:c7:
f3:89:9e:c6:24:3c:24:e9:4f:f7:d5:98:db:e2:72:
19:3b:ce:a7:11:fa:86:21:8d:28:4b:de:42:f7:2c:
65:5e:43:32:58:7a:98:d3:6a:c1:63:5a:3f:ab:8a:
ca:8c:3a:af:b7:20:7e:30:65:5b:63:09:bc:bd:d0:
4b:15:5f:cf:6e:fa:72:93:ed:ac:02:d1:7f:32:cb:
cc:e9:0d:a0:5d:eb:77:51:94:e6:9d:70:97:8a:70:
11:88:0c:13:d2:14:89:17:f7:e0:18:f9:42:93:8a:
5d:ad:49:a0:8d:65:38:c6:6a:51:e7:98:8a:fb:1a:
12:50:2d:bd:b3:3f:47:3b:ee:a6:b0:f2:a0:e4:3c:
5d:e6:98:07:52:ba:8a:68:c3:10:a0:ca:07:3e:e5:
3a:30:4f:2d:cd:f5:a0:f6:39:0e:48:81:61:dd:2a:
7a:7a:4b:1b:30:85:a6:f9:9e:7f:be:4e:90:9c:b1:
e4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:37:80:7A:5E:FB:AE:F5:22:4A:8D:A9:CE:14:7B:A5:6F:65:16:01
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:67:f6:26:cb:98:cc:a8:3f:cd:48:ef:5d:65:66:4b:04:cb:
8e:c3:e2:f0:ea:79:6b:d9:c9:f6:42:9c:87:97:91:2e:c2:42:
81:3a:3f:5f:01:cf:fe:67:d9:42:bd:0f:a0:89:f8:69:00:e6:
23:7f:f8:3a:79:b5:f4:67:74:4b:76:c5:97:de:77:bb:f3:47:
e0:60:5e:8f:70:96:d8:78:a4:da:0d:a5:d4:65:7d:5a:ac:5c:
97:4e:8b:b7:72:01:75:a7:ea:46:59:e4:e3:89:25:74:97:dd:
8b:0e:01:14:a5:50:45:c8:58:e8:b1:bd:55:05:d4:49:fa:ec:
d0:f3:ce:e2:33:ca:01:12:85:73:77:da:d6:88:f4:c6:77:cc:
cd:16:3b:72:ab:b1:59:91:c9:6f:28:da:c6:6c:a1:7c:d2:f1:
f1:19:b5:96:71:56:d9:76:d2:a2:96:ed:ab:a2:71:fc:a9:69:
2e:f4:fd:02:93:a4:8e:94:9f:2b:fe:3a:4e:31:2f:01:67:d6:
5c:ef:2e:e6:bb:e0:99:03:6f:ba:ad:3d:0f:2d:bf:73:1f:53:
a3:64:0d:fb:a3:d9:63:f1:a4:2b:f6:4c:04:39:84:c3:3f:58:
74:9f:d5:f2:a5:f5:34:5c:4a:35:c6:69:4d:3f:18:6b:9d:73:
4b:78:7d:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlkUSeazdk2bjGqEI5P5smMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1
N2E0OGIwHhcNMjYwMzEzMDUwMDI4WhcNMjYwMzE0MDUwMDI4WjAzMTEwLwYDVQQD
EyhkYjM3ODA3YTVlZmJhZWY1MjI0YThkYTljZTE0N2JhNTZmNjUxNjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/jMZdO6hd/+CTwxK5Uxfm52Ei41
cOFQ+saqutncRozzKc++wv02kmU20gnkUxk8M3OcyQhCHqPx9/bRru5qFLq/r4zy
SkNHKMfziZ7GJDwk6U/31Zjb4nIZO86nEfqGIY0oS95C9yxlXkMyWHqY02rBY1o/
q4rKjDqvtyB+MGVbYwm8vdBLFV/Pbvpyk+2sAtF/MsvM6Q2gXet3UZTmnXCXinAR
iAwT0hSJF/fgGPlCk4pdrUmgjWU4xmpR55iK+xoSUC29sz9HO+6msPKg5Dxd5pgH
UrqKaMMQoMoHPuU6ME8tzfWg9jkOSIFh3Sp6eksbMIWm+Z5/vk6QnLHkcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNs3gHpe+671IkqNqc4Ue6VvZRYBMB8GA1UdIwQY
MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt
YjIwZTI4ZjUxODhmLzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm
LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnmf2JsuY
zKg/zUjvXWVmSwTLjsPi8Op5a9nJ9kKch5eRLsJCgTo/XwHP/mfZQr0PoIn4aQDm
I3/4Onm19Gd0S3bFl953u/NH4GBej3CW2Hik2g2l1GV9Wqxcl06Lt3IBdafqRlnk
44kldJfdiw4BFKVQRchY6LG9VQXUSfrs0PPO4jPKARKFc3fa1oj0xnfMzRY7cqux
WZHJbyjaxmyhfNLx8Rm1lnFW2XbSopbtq6Jx/KlpLvT9ApOkjpSfK/46TjEvAWfW
XO8u5rvgmQNvuq09Dy2/cx9To2QN+6PZY/GkK/ZMBDmEwz9YdJ/V8qX1NFxKNcZp
TT8Ya51zS3h9lQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 07:46:21 2026 by rpki-client