
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
File: olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json)
Hash identifier: A9eofnlzawQXgIwS+Pt3dSzpcaOEXf0ParKzo4uG7Iw=
Subject key identifier: F1:58:D1:A8:A6:F1:F0:FA:99:DD:AF:8E:45:F8:30:91:63:D6:75:27
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 019EE0D4A047EA6E6C6678944CE8285E2AA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
Manifest number: 19A6
Signing time: Fri 19 Jun 2026 17:01:31 +0000
Manifest this update: Fri 19 Jun 2026 17:01:31 +0000
Manifest next update: Sat 20 Jun 2026 17:01:31 +0000
Files and hashes: 1: 0dbyZwebQgTGMD5-wPhJH6_Pd5I.roa (hash: rG5nZgpv1Ah9jz+mC9094dW59+5lFAhfWaH5ssnQtAk=)
2: 1-SQFDfpp9D_i817zUQFbntY0dRQ.roa (hash: biSe4GCFtSwazcB9PCCa1NKBDVP5/i0SLuwOHponshU=)
3: 2frKTWb3ttQDpCXNMXbTSXrlIqI.roa (hash: obnt34G7IEsjg6vdddM8muzJwshLaBlLPb65paOFsfE=)
4: 3lYygY9QSAAHtzgINKWVRrbCp_4.roa (hash: xTlxdsrlszD3wQ8XFzdmUFKsu5SMwqAldL5Rb7oJqzA=)
5: 4WijXRQsTuAJtSd_hSZYlUqj8lA.roa (hash: cDODijNSh6xud6bY86CXr7OdBhes8GnABNkzt2sQT9E=)
6: 5KqisG8I4aftfbpV-Wm5RoZOAu4.roa (hash: aWHlE7ObMJmJWXU63vmIza0enQBptwax9xe4eo6h4LY=)
7: 7zTwSbIrIN1tbHKaAerBGKh4H_4.roa (hash: Uj+d0N/fp4CQPw2Wdyt0B7bkrgBCMNOKaEUgThPZLo4=)
8: BiFlBqm3KUzEVOiMzYhT_EVILsg.roa (hash: fPfSMKmz3G9txaE/xrCmq0xkzT0anA6fzG93SYzo/Cs=)
9: Gv1ql7t0nNON87AJIldQVqDpbaw.roa (hash: Afsi36EyWB2mwsT0UzfNkOmYYiw9CwLh31zU2SIsaxk=)
10: I2KpdLXbpYuKcc5P2UrERlbUmQI.roa (hash: QwjjNYoou+Yqw7bbIshNHDY3CQQBCro8tQly5UuqIPQ=)
11: K6IIfeYnJcau7XFah26WtRrWoX4.roa (hash: kAmjx0E3nDeIJhDMXwZG/0loikW8ryL2ZHfuoiau2sI=)
12: KfKdKGXKrJVAyc679p1xVdKcOuU.roa (hash: MZjQw9I7nKK82B9sKr7/qbtBGaD/PhRCNNoKDtPpSRQ=)
13: Nn2M0QjFRAa_T2cmYDVUHTJ5GXs.roa (hash: ROtPVP9nVJ4sSu+guXDuQ34VOIJfTdPXZnYgNbsVTRc=)
14: PT0OVKn7DoYDkXnLiYT9h8XOQSo.roa (hash: P3oRTt1oGGLmL6K2JdXvl8dIu0LI9RbrIcGwZo70+dU=)
15: Ss_HAbXwrBgTnN9olUTWyjQFCB4.roa (hash: nrNxrT3l4poCRT7QhHB8p4Y5AUqyWOUsBfKv8pVp0tQ=)
16: TUHp0yldZUy2noEeejLALiKlsOA.roa (hash: hJdNCDGT+WfObUpSa1plMcdJasirz1T8A6b/aK4MsFo=)
17: Urxc-_3dN2rsdSn-CFXZaM1OMmE.roa (hash: KTdVek6dN9t33L+6LCMmAcoph/JKLQZZF3RFY22Laag=)
18: aFybrbDshxtrknuOyM8RFxRBKs0.roa (hash: RQU0CLTgvLglUS45QfR69+raL0+alWumuh4CDPItdCA=)
19: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: cDvdvVqTHn0jzgFpusDODO5psYfpNWkYLJriRp7CbDY=)
20: rZIzlxjNqrmdhiYj8eZcD_DAyYQ.roa (hash: HtYYyQJMTgOPk/TpOD1+JZFhzQ3pNzbNJ5gyclYza/w=)
21: thqMO7NSQ4YZbOJpf7E5T4h4Qx4.roa (hash: CSkwEjedoekw5JE8fDs8zoEDa+VA8TtlPZQTJSLtR3Q=)
22: xqLMI4n3mv1T0FOyglej7wVFdYE.roa (hash: BA8dbC4wqu6gr5aHMdPy/PzpkFFbaeIFkYk6ddxpagE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 17:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e0:d4:a0:47:ea:6e:6c:66:78:94:4c:e8:28:5e:2a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jun 19 17:01:31 2026 GMT
Not After : Jun 20 17:01:31 2026 GMT
Subject: CN=f158d1a8a6f1f0fa99ddaf8e45f8309163d67527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:70:3d:31:f6:3d:f2:c4:2b:8f:cb:94:6d:a9:
27:7c:59:89:f5:e9:3a:bb:d3:8b:59:9c:24:ab:7a:
e3:a5:38:c0:bf:1e:81:12:e4:c1:61:47:bb:33:6d:
f0:4f:3a:2a:6e:30:d1:80:35:ac:eb:26:d2:24:b4:
bd:e6:2c:53:a5:a5:57:4b:dc:72:b8:60:bc:f6:bd:
ef:42:8b:b1:8f:49:10:65:ef:a5:a3:a0:1b:0a:b4:
74:cf:1a:79:9f:c5:8b:8e:b1:ce:12:01:12:f6:02:
d9:30:8c:77:0d:90:1d:e7:78:07:d9:32:fd:6d:89:
4e:38:ed:e7:c3:aa:cb:ff:5b:11:8d:75:15:62:a7:
2f:85:3a:2c:89:41:5c:6e:1b:8f:4b:8f:74:9d:3f:
a9:09:fe:f5:b1:2f:1c:34:93:aa:ca:11:1d:70:81:
d6:96:a2:24:0c:27:9e:a1:61:e0:2f:86:b6:ec:7b:
0c:56:20:57:65:47:35:6c:51:02:b0:b2:7c:f4:5d:
b4:0b:e5:23:dd:90:d3:84:07:ce:24:6c:09:3e:2a:
60:1b:a1:db:bb:b1:89:ef:1b:ee:ed:06:c2:6b:a2:
13:2a:1e:8d:14:dd:87:55:4d:49:55:db:40:74:c4:
77:74:c5:22:26:c8:98:bd:e9:d8:9a:88:e5:45:15:
ec:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:58:D1:A8:A6:F1:F0:FA:99:DD:AF:8E:45:F8:30:91:63:D6:75:27
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:30:2f:63:a4:9e:b4:9a:4d:86:bc:1a:46:a8:4a:8a:16:64:
69:7d:86:6e:ec:7c:66:20:25:91:61:8c:26:b9:4a:66:56:2c:
3d:0b:b8:af:a0:7c:7c:8c:b6:ad:26:04:8b:a1:ad:fc:34:3f:
2d:f8:0a:bb:3f:55:7f:3c:7b:c7:6d:08:65:c3:50:9e:af:3e:
d8:c5:8c:0f:1d:49:df:09:23:da:26:f7:14:a7:40:da:32:a2:
c0:79:a5:7f:88:55:14:4c:4f:b0:61:d9:fb:26:67:de:ee:49:
28:60:f6:4a:de:8a:36:0f:3e:b8:0e:38:0d:aa:5a:60:e6:e3:
b6:9c:38:4c:2b:ed:70:3b:29:41:00:5a:d9:93:39:8a:61:9f:
f9:ca:62:50:1b:73:df:14:1d:74:1e:99:01:80:64:1e:ed:15:
d3:e6:96:3f:ba:d6:14:c1:13:be:85:46:67:70:00:2f:b0:52:
29:7f:34:b4:5e:15:28:ef:e1:35:2e:b2:b2:7a:ab:70:be:8a:
8f:06:aa:ab:b5:44:fe:eb:d7:45:f4:bf:b2:d1:c1:ac:44:ec:
11:d4:be:1b:fb:18:f7:20:7c:a3:62:10:6a:12:53:44:e7:60:
b5:6c:b8:ba:50:c9:0a:35:4b:36:c0:3b:90:d0:23:a5:69:8c:
2d:08:6d:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7g1KBH6m5sZniUTOgoXiqnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz
MGVhMTAwHhcNMjYwNjE5MTcwMTMxWhcNMjYwNjIwMTcwMTMxWjAzMTEwLwYDVQQD
EyhmMTU4ZDFhOGE2ZjFmMGZhOTlkZGFmOGU0NWY4MzA5MTYzZDY3NTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXA9MfY98sQrj8uUbaknfFmJ9ek6
u9OLWZwkq3rjpTjAvx6BEuTBYUe7M23wTzoqbjDRgDWs6ybSJLS95ixTpaVXS9xy
uGC89r3vQouxj0kQZe+lo6AbCrR0zxp5n8WLjrHOEgES9gLZMIx3DZAd53gH2TL9
bYlOOO3nw6rL/1sRjXUVYqcvhTosiUFcbhuPS490nT+pCf71sS8cNJOqyhEdcIHW
lqIkDCeeoWHgL4a27HsMViBXZUc1bFECsLJ89F20C+Uj3ZDThAfOJGwJPipgG6Hb
u7GJ7xvu7QbCa6ITKh6NFN2HVU1JVdtAdMR3dMUiJsiYvenYmojlRRXsPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFY0aim8fD6md2vjkX4MJFj1nUnMB8GA1UdIwQY
MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt
YWRkZjBlMTg0OWViLzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi
LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzAvY6Se
tJpNhrwaRqhKihZkaX2Gbux8ZiAlkWGMJrlKZlYsPQu4r6B8fIy2rSYEi6Gt/DQ/
LfgKuz9Vfzx7x20IZcNQnq8+2MWMDx1J3wkj2ib3FKdA2jKiwHmlf4hVFExPsGHZ
+yZn3u5JKGD2St6KNg8+uA44DapaYObjtpw4TCvtcDspQQBa2ZM5imGf+cpiUBtz
3xQddB6ZAYBkHu0V0+aWP7rWFMETvoVGZ3AAL7BSKX80tF4VKO/hNS6ysnqrcL6K
jwaqq7VE/uvXRfS/stHBrETsEdS+G/sY9yB8o2IQahJTROdgtWy4ulDJCjVLNsA7
kNAjpWmMLQhtDQ==
-----END CERTIFICATE-----
Generated at Sat Jun 20 04:15:19 2026 by rpki-client