
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
File: LyoPogODMyo_QU8FR1OgtgsluhA.mft (raw, json)
Hash identifier: a5AAFAW7e9BCuy0AkU2aXH9ZTPsJt5nZIOclktfCaHY=
Subject key identifier: A7:2B:A5:43:F9:6E:6E:31:8D:1B:9B:43:A9:CB:D3:11:8A:D0:33:8C
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial: 01A1859B5048C1ABA2B94C0AEB17A44EE763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
Manifest number: 093D
Signing time: Thu 29 Oct 2026 03:01:50 +0000
Manifest this update: Thu 29 Oct 2026 03:01:50 +0000
Manifest next update: Fri 30 Oct 2026 03:01:50 +0000
Files and hashes: 1: 6QujOxzf4C6K0r-hHQOFn_yfCUI.roa (hash: VpztrU2iFQ8Ah/D8jT+xPTLG0sW08bpvg3e6MmJ6Zdg=)
2: CnGC1xBcS_Hw0l7OYLlFgmMRghM.roa (hash: yl/TzXvizjcQkXaqTrcqSMtt/sGUH2HO4v5PSOx89k0=)
3: DlvqEbHES6ltEIxiAXhjM2CW4ec.roa (hash: Mj5DDW92tIkxs3VmT9Gs5UYbHsVDvGDo2+Bxg89LMQg=)
4: E9M1Pbo6cojKNq6aCzRN9lYK2TI.roa (hash: 6xlPlwiU6/vgt77UfvKPKbZAHPmxOxzp9UBEFyHwp2U=)
5: FByufrsg7bKYHDMxbcBLAlB4vaU.roa (hash: DCeiAiCXVyoHXBBHASBBXQvv1tWIt/MfWP81jfPGDnQ=)
6: IBVzEPC10N6US5KaErFSedKeI1Q.roa (hash: RU5umX0s3T/s0oLhPcgLEFjXt2aMHfj/aPPYStVkbnI=)
7: LyoPogODMyo_QU8FR1OgtgsluhA.crl (hash: 5u4VGJ7MWqrxUR9lgA9flP/P713zHIH5PzGbHNh8DVg=)
8: SX294m--1vDxMY6Pvv6-ci7dNJ4.roa (hash: bzsnnZDkBTJaiqPd5qwvFscE5qs3E0+zYHYP17Yj7CA=)
9: ThQUC52isDtb_-9iij-owp8YmEA.roa (hash: mEwbHKFNnMVNihOJAKuBMkpDxnn5mdN7MfY1PV/KiCU=)
10: YQNtFtvvqMYE-Ept4Jt-1X-D8GU.roa (hash: 7bQB5C7qCud/5lMim5zbAwJfTKkakqQnQnxe4JCmZNM=)
11: YcsByhB53GKxLT3dTdKtQcH3egc.asa (hash: W5NUR4wHaDrqknw9qJ6RUsilTsvNd7Z/qyrIz7nXJHg=)
12: j24Xn1OVDzmRc0YHejjOlzAmgRk.roa (hash: /5EdM1LEZ2tK4zjsCtxS9n3mfLKzazy5AKKxuUfX/Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 03:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:9b:50:48:c1:ab:a2:b9:4c:0a:eb:17:a4:4e:e7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Validity
Not Before: Oct 29 03:01:50 2026 GMT
Not After : Oct 30 03:01:50 2026 GMT
Subject: CN=a72ba543f96e6e318d1b9b43a9cbd3118ad0338c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:7f:66:68:a6:96:30:e4:5d:aa:56:f6:7f:
90:43:46:f4:1b:b9:95:e3:68:7a:54:2d:5d:c1:ba:
84:70:c9:2a:6b:bd:c9:4e:90:87:e6:c4:06:c1:d3:
2d:1d:50:72:0c:41:4b:12:0c:a5:18:19:db:07:f5:
63:ab:42:0c:a7:c3:fa:f2:06:fa:56:fa:73:f6:45:
a0:f8:ce:c6:d5:50:0c:46:4c:f4:dd:d1:dc:b1:ce:
a1:ce:1d:48:ae:53:ef:25:a8:dd:be:bd:81:e6:3b:
51:ea:9c:2e:70:9e:16:78:e4:35:2b:36:af:a7:4f:
3e:94:84:f8:da:a3:49:cc:e2:4c:cb:75:b0:07:8a:
12:14:89:6f:b7:c1:c8:45:ec:33:fa:80:06:48:48:
52:b9:50:f0:35:79:76:94:d0:7b:c0:8e:7b:1c:a4:
de:1b:23:86:b0:29:92:a5:e4:d7:d1:57:69:f6:6e:
6c:8f:2c:54:da:b6:23:71:9a:9f:03:c0:31:fb:fd:
2e:61:79:f2:5e:f3:05:96:6c:97:4d:41:fc:02:19:
55:86:5a:30:1f:1f:13:98:2d:a4:34:d9:e5:9d:d7:
e7:19:ff:dc:50:7b:b8:73:40:57:f1:dc:e5:08:a3:
d3:f6:a6:c0:78:93:d2:49:64:ed:3e:4e:68:9f:b8:
70:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2B:A5:43:F9:6E:6E:31:8D:1B:9B:43:A9:CB:D3:11:8A:D0:33:8C
X509v3 Authority Key Identifier:
keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:38:2c:f3:5a:40:31:f7:17:5b:db:f7:e6:a3:8c:53:20:c1:
63:c3:74:22:9c:67:81:4a:c9:3e:f6:a5:5e:5b:13:3b:fc:d0:
c8:79:4b:6b:f9:9a:92:c8:50:11:60:28:7f:f1:49:1c:c4:94:
ba:c0:56:74:aa:dd:bd:b9:31:39:36:91:66:7c:60:11:97:f9:
91:6b:cb:ec:c0:2e:7b:2d:74:5a:0f:f1:06:6e:2b:df:ff:3c:
31:c6:fa:7c:8e:34:73:9a:c6:08:54:f5:56:d6:44:4f:b4:40:
04:2b:f0:c4:4d:5c:00:bd:a5:59:93:62:21:18:f8:1c:47:de:
07:49:df:b8:d4:97:c2:d4:ef:22:21:9c:ce:1f:f5:f5:bb:ce:
10:83:f9:c5:1b:00:12:56:26:87:9a:8f:50:5b:8e:5b:b9:28:
17:f3:16:59:5b:79:4c:2a:75:2b:a2:d5:99:98:73:2e:e5:6d:
f4:1a:7a:1e:54:9c:54:12:68:f8:ef:3a:89:2d:cc:c6:bf:45:
4c:da:e8:92:0e:ef:23:bf:eb:73:63:e9:b8:9a:7e:6c:34:dc:
6e:64:bb:bb:fb:c8:62:a3:f9:ef:59:47:dc:19:88:78:9d:ae:
e5:d0:d7:20:d3:21:b7:2a:c4:a7:e1:c3:22:50:ed:08:55:c0:
95:c3:de:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:47:51 2026 by rpki-client