
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
File: OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft (raw, json)
Hash identifier: tourGfJ43NyNSHjoIkduBnqOrNpvRmmAkaxweLIc5HY=
Subject key identifier: 69:13:69:AA:4B:E7:7B:75:38:F2:CB:8C:64:3B:61:79:C0:21:23:E5
Authority key identifier: 3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
Certificate issuer: /CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Certificate serial: 01A13DEEF9CC99C15AE4C83E8D6F55EDF34F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
Manifest number: 0B29
Signing time: Thu 15 Oct 2026 05:00:33 +0000
Manifest this update: Thu 15 Oct 2026 05:00:33 +0000
Manifest next update: Fri 16 Oct 2026 05:00:33 +0000
Files and hashes: 1: AWYzgkSeU1ruLdcQGWyx3NFOxJQ.roa (hash: P9Q3/GJCp544vg/dW4m/kMtZQYifMjeadrDv+i+SQls=)
2: H2zetjbu6Mqb0o7ATyk278R0bGY.roa (hash: bn4QHQyGhFY9rDnnbmAmmLUzcRf+y73YZKo0db/S5Ss=)
3: OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl (hash: RlZG6zeY6J0i4GL90wrFUN/KDzGXl64UMnrEQfDKOR0=)
4: QpJITU9l6bMr8oGaX825ze1UlB0.roa (hash: e6fSmdbsZJflihklvHaG4cTIHvwJBCCE1qauoGxZ/7c=)
5: _Smc4bBdBO-6MKvuThvX4gAl6Pg.roa (hash: mCRjx/pD6ueYcesgyqYuCCGaR7D8odHRimyrxKf3nE4=)
6: b6wl6UOnM78Lu17GHxPqFqDhyUE.roa (hash: kA09Zc9zhv3l/lp97KkUt2qpUA/O9aXdkknPhTyEEwI=)
7: qQdCoj_2JwppQuwjTQ_EOjn0-cI.roa (hash: +l5KIfbERA9UOrblj5Ez+PPKG4DuoqtWsKoaM93yiFU=)
8: rvS__rQw015TaaBOkmW4cBz1bug.roa (hash: cmcSpRFZSlnzP6e1K+AHDm2VAfZoIyqsC7lkkFh0sCs=)
9: uHtev5eSqC8WE6ycypYpvyTzkPE.roa (hash: tOHZcVwKgbX/CIyGzALYSP5QrShCApH/2VThn/R79QA=)
10: vaYIteS5igEIIJAvOFUUxlbL9iw.roa (hash: FZNQU0LvtoOoER0joQEpoEINbntZYjJgCFYakf2fGAY=)
11: zDOGvp-54c5DIz8rZDqXtpIogVg.roa (hash: 4Aw3hILMm0mcpv1TfZ7Rq5nLkI9ScVMUPUFaf113hZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ee:f9:cc:99:c1:5a:e4:c8:3e:8d:6f:55:ed:f3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Validity
Not Before: Oct 15 05:00:33 2026 GMT
Not After : Oct 16 05:00:33 2026 GMT
Subject: CN=691369aa4be77b7538f2cb8c643b6179c02123e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:d0:00:58:fa:2e:98:84:30:73:64:14:96:
49:db:67:37:12:5c:9d:ae:d2:6a:7f:0b:02:0e:13:
2d:c3:20:15:1f:ab:5f:94:dc:c1:c4:78:b5:e1:dc:
9d:55:41:14:07:e5:00:71:02:d5:ec:01:8d:53:15:
38:00:5a:36:d5:c3:bc:03:85:d6:a5:ad:38:c8:6a:
06:38:8c:06:14:62:c0:b3:f4:87:04:1b:93:83:02:
f1:58:95:fe:83:0a:16:47:5e:8a:de:cc:6b:3d:11:
18:6e:49:8f:d3:69:de:7f:a8:ab:e5:13:2a:31:b6:
03:21:4c:15:1d:f1:4f:fc:e3:75:3a:a1:d3:7a:79:
3d:21:f7:1d:ca:c3:e6:68:40:fd:76:76:d4:6b:4f:
c0:f4:49:0d:74:91:df:63:4b:4c:18:e1:9f:37:46:
05:9c:e4:a3:17:63:47:c3:c4:3b:34:7c:2e:90:38:
58:ac:ce:b2:89:0b:59:b1:56:88:4b:98:67:e9:ee:
af:a1:5a:bc:4a:ca:a6:44:55:13:6a:f0:4b:b9:5c:
36:f0:f1:db:6c:7b:fa:9f:37:59:aa:f2:5e:3c:31:
45:58:04:53:b5:be:15:f4:d8:42:5b:55:97:2e:77:
b7:38:32:49:a3:0b:e0:b9:e0:17:c1:e9:c4:f6:10:
a6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:13:69:AA:4B:E7:7B:75:38:F2:CB:8C:64:3B:61:79:C0:21:23:E5
X509v3 Authority Key Identifier:
keyid:3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:fd:2e:4e:a0:1c:91:af:f4:c0:ef:ac:8e:76:7b:11:f0:83:
6c:96:3c:27:42:1f:fc:22:d3:9f:6a:2f:e0:f4:d9:94:5b:5c:
4e:86:ab:d3:96:fb:55:22:9f:b3:e7:a6:66:35:35:d5:32:8b:
5e:19:0d:17:49:ef:2f:4e:92:96:55:d1:43:17:a9:de:0d:56:
9f:fc:94:4c:9b:8e:28:87:0b:39:d2:72:b8:93:2e:6c:83:d6:
c3:99:07:a5:1f:cb:1f:76:13:ad:a7:74:d9:a2:9b:f3:35:b2:
42:50:c2:d6:ec:2e:d3:b5:11:72:33:38:8e:88:b0:55:f1:fb:
d6:19:5f:35:23:d0:db:d1:2b:ca:5c:59:06:23:83:26:f4:98:
7a:7d:3a:74:d2:aa:91:d5:40:ed:0b:c0:5a:e6:e8:e0:9e:03:
d0:a6:eb:45:5e:20:ee:66:f1:83:b9:b9:c9:b7:38:98:aa:42:
3b:3b:d8:ca:ee:d0:01:24:6b:b3:3b:b7:03:06:ad:a6:eb:70:
92:e4:17:5e:31:c1:37:21:ae:0c:6f:65:2c:d8:26:0c:11:8f:
28:04:1e:4d:74:57:17:44:7b:e4:4f:ee:2a:e8:ed:81:98:2b:
71:98:fc:fe:88:54:49:8b:fa:f8:61:d7:20:9c:1b:23:bd:9f:
12:33:15:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE97vnMmcFa5Mg+jW9V7fNPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMGJmMThkNmJiZGIzM2RhODJmZTYxYTI4NjI0YmE3MmUy
MzUwNDAwHhcNMjYxMDE1MDUwMDMzWhcNMjYxMDE2MDUwMDMzWjAzMTEwLwYDVQQD
Eyg2OTEzNjlhYTRiZTc3Yjc1MzhmMmNiOGM2NDNiNjE3OWMwMjEyM2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt17QAFj6LpiEMHNkFJZJ22c3Elyd
rtJqfwsCDhMtwyAVH6tflNzBxHi14dydVUEUB+UAcQLV7AGNUxU4AFo21cO8A4XW
pa04yGoGOIwGFGLAs/SHBBuTgwLxWJX+gwoWR16K3sxrPREYbkmP02nef6ir5RMq
MbYDIUwVHfFP/ON1OqHTenk9IfcdysPmaED9dnbUa0/A9EkNdJHfY0tMGOGfN0YF
nOSjF2NHw8Q7NHwukDhYrM6yiQtZsVaIS5hn6e6voVq8SsqmRFUTavBLuVw28PHb
bHv6nzdZqvJePDFFWARTtb4V9NhCW1WXLne3ODJJowvgueAXwenE9hCm0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkTaapL53t1OPLLjGQ7YXnAISPlMB8GA1UdIwQY
MBaAFDsL8Y1rvbM9qC/mGihiS6cuI1BAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3d2eGpXdTlzejJvTC1ZYUtHSkxweTRqVUVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS81ZGRlZTktYzFjNC00YjU3LWI2Yjgt
ZDQ5OTE2YjVmMmI0LzEvT3d2eGpXdTlzejJvTC1ZYUtHSkxweTRqVUVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS81ZGRlZTktYzFjNC00YjU3LWI2YjgtZDQ5OTE2YjVmMmI0
LzEvT3d2eGpXdTlzejJvTC1ZYUtHSkxweTRqVUVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYf0uTqAc
ka/0wO+sjnZ7EfCDbJY8J0If/CLTn2ov4PTZlFtcToar05b7VSKfs+emZjU11TKL
XhkNF0nvL06SllXRQxep3g1Wn/yUTJuOKIcLOdJyuJMubIPWw5kHpR/LH3YTrad0
2aKb8zWyQlDC1uwu07URcjM4joiwVfH71hlfNSPQ29ErylxZBiODJvSYen06dNKq
kdVA7QvAWubo4J4D0KbrRV4g7mbxg7m5ybc4mKpCOzvYyu7QASRrszu3Awatputw
kuQXXjHBNyGuDG9lLNgmDBGPKAQeTXRXF0R75E/uKujtgZgrcZj8/ohUSYv6+GHX
IJwbI72fEjMVKQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:11 2026 by rpki-client