
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
File: olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json)
Hash identifier: D6vaAAAyWN4zgvJu1crwl9NRosokD7pcfmHVxn6f9Xc=
Subject key identifier: B9:F8:3D:CB:EF:E4:68:54:DC:0D:A2:6E:70:E3:90:0E:19:56:BA:8A
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 019DF8DED9B9C4A8E76C440D4947000623E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
Manifest number: 192A
Signing time: Tue 05 May 2026 16:00:47 +0000
Manifest this update: Tue 05 May 2026 16:00:47 +0000
Manifest next update: Wed 06 May 2026 16:00:47 +0000
Files and hashes: 1: 0dbyZwebQgTGMD5-wPhJH6_Pd5I.roa (hash: rG5nZgpv1Ah9jz+mC9094dW59+5lFAhfWaH5ssnQtAk=)
2: 1-SQFDfpp9D_i817zUQFbntY0dRQ.roa (hash: biSe4GCFtSwazcB9PCCa1NKBDVP5/i0SLuwOHponshU=)
3: 2frKTWb3ttQDpCXNMXbTSXrlIqI.roa (hash: obnt34G7IEsjg6vdddM8muzJwshLaBlLPb65paOFsfE=)
4: 3lYygY9QSAAHtzgINKWVRrbCp_4.roa (hash: xTlxdsrlszD3wQ8XFzdmUFKsu5SMwqAldL5Rb7oJqzA=)
5: 4WijXRQsTuAJtSd_hSZYlUqj8lA.roa (hash: cDODijNSh6xud6bY86CXr7OdBhes8GnABNkzt2sQT9E=)
6: 7zTwSbIrIN1tbHKaAerBGKh4H_4.roa (hash: Uj+d0N/fp4CQPw2Wdyt0B7bkrgBCMNOKaEUgThPZLo4=)
7: Gv1ql7t0nNON87AJIldQVqDpbaw.roa (hash: Afsi36EyWB2mwsT0UzfNkOmYYiw9CwLh31zU2SIsaxk=)
8: I2KpdLXbpYuKcc5P2UrERlbUmQI.roa (hash: QwjjNYoou+Yqw7bbIshNHDY3CQQBCro8tQly5UuqIPQ=)
9: K6IIfeYnJcau7XFah26WtRrWoX4.roa (hash: kAmjx0E3nDeIJhDMXwZG/0loikW8ryL2ZHfuoiau2sI=)
10: KWr1d9bN0TxO3Vyyxh5NZILCR88.roa (hash: f1P78u1Ma27QCc9BoOC2qZIiHB032llb4ntaFCXhm3A=)
11: KfKdKGXKrJVAyc679p1xVdKcOuU.roa (hash: MZjQw9I7nKK82B9sKr7/qbtBGaD/PhRCNNoKDtPpSRQ=)
12: Nn2M0QjFRAa_T2cmYDVUHTJ5GXs.roa (hash: ROtPVP9nVJ4sSu+guXDuQ34VOIJfTdPXZnYgNbsVTRc=)
13: PT0OVKn7DoYDkXnLiYT9h8XOQSo.roa (hash: P3oRTt1oGGLmL6K2JdXvl8dIu0LI9RbrIcGwZo70+dU=)
14: T-Tc8u-y-A23bEMCsm71F_7_jTg.roa (hash: uvA7IEtWcoBgqQxL/f1PptXnW15RVEqbUY2vsk5myZQ=)
15: TUHp0yldZUy2noEeejLALiKlsOA.roa (hash: hJdNCDGT+WfObUpSa1plMcdJasirz1T8A6b/aK4MsFo=)
16: Urxc-_3dN2rsdSn-CFXZaM1OMmE.roa (hash: KTdVek6dN9t33L+6LCMmAcoph/JKLQZZF3RFY22Laag=)
17: aFybrbDshxtrknuOyM8RFxRBKs0.roa (hash: RQU0CLTgvLglUS45QfR69+raL0+alWumuh4CDPItdCA=)
18: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: 9eLX09MAnmdBxyEnUNq2AxTlyPYxiO30P1BCzSVEY1Q=)
19: rZIzlxjNqrmdhiYj8eZcD_DAyYQ.roa (hash: HtYYyQJMTgOPk/TpOD1+JZFhzQ3pNzbNJ5gyclYza/w=)
20: thqMO7NSQ4YZbOJpf7E5T4h4Qx4.roa (hash: CSkwEjedoekw5JE8fDs8zoEDa+VA8TtlPZQTJSLtR3Q=)
21: xqLMI4n3mv1T0FOyglej7wVFdYE.roa (hash: BA8dbC4wqu6gr5aHMdPy/PzpkFFbaeIFkYk6ddxpagE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f8:de:d9:b9:c4:a8:e7:6c:44:0d:49:47:00:06:23:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: May 5 16:00:47 2026 GMT
Not After : May 6 16:00:47 2026 GMT
Subject: CN=b9f83dcbefe46854dc0da26e70e3900e1956ba8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:b0:28:60:33:2f:2d:b0:5d:ba:e5:ff:fb:
7b:06:0c:41:1b:f8:e6:4a:dd:6a:33:76:7f:81:38:
e6:bd:13:56:3c:65:33:c4:6c:a5:a7:d3:a1:a0:4b:
e2:d1:f8:d1:fe:ab:e9:4c:39:3c:63:57:73:91:cd:
f4:57:f7:ed:8b:ac:aa:74:ec:35:25:a2:f6:dd:76:
75:92:43:57:69:ef:ab:85:1b:1d:bb:81:d1:cc:1a:
45:de:71:fe:d4:5d:2c:f4:f5:b0:f2:90:15:f9:6a:
f1:05:91:ac:30:44:9d:5e:c9:bb:d6:87:ec:26:f4:
d5:9e:68:41:8b:66:20:5c:a3:73:0a:98:be:de:3c:
31:7f:76:71:29:b9:63:5a:c1:61:a4:5c:0f:80:21:
11:9d:c8:56:8e:50:b5:52:21:2b:2f:f1:e7:cf:5a:
f9:9a:5b:3d:69:eb:e5:05:ac:35:af:bd:f6:de:46:
72:53:71:39:82:ee:82:6d:83:75:58:15:0a:7f:32:
b7:2b:6a:f3:42:57:84:0c:69:7a:50:5c:76:5f:81:
c1:17:19:4d:8d:9b:e5:ba:82:e8:19:4b:9d:2d:dd:
c5:e1:86:b0:fd:7c:77:52:96:d3:6e:09:fa:d6:44:
50:5f:ca:01:64:9f:90:ca:1e:36:50:08:4b:99:a3:
da:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F8:3D:CB:EF:E4:68:54:DC:0D:A2:6E:70:E3:90:0E:19:56:BA:8A
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:91:19:bb:73:24:fb:ed:99:3f:bf:03:68:ac:7f:f9:5b:dd:
65:c8:44:9a:e6:aa:7d:a4:fc:ec:08:2f:b7:16:0a:e7:ee:92:
d5:7f:d0:61:15:d5:00:ec:2d:9f:60:82:81:d1:bc:a4:0e:11:
81:f1:6f:af:92:15:86:1c:77:d7:22:74:12:8e:11:e6:89:00:
0c:aa:bd:b2:35:15:06:27:f6:d0:09:f2:72:9d:f1:eb:92:18:
f0:5f:17:04:20:d5:27:20:00:a1:bc:fb:6a:1f:9a:26:72:6e:
79:4c:f7:a9:cc:78:08:18:39:d6:ec:b7:f4:85:45:18:1e:94:
c8:58:0f:06:6b:c7:e2:88:d7:b9:22:15:f3:08:7c:9f:be:f2:
04:d3:56:45:f3:58:27:85:20:44:55:3c:e3:d2:f9:45:55:43:
20:79:39:35:29:3f:bd:01:c3:10:c9:f1:2a:d3:6c:18:b3:03:
cf:77:d3:ba:c9:98:c3:ac:3d:4d:6b:4f:1f:cd:e8:1b:a0:89:
41:df:70:87:c1:56:ee:65:51:ba:85:d4:c2:e5:69:3d:97:96:
13:a7:87:35:55:8e:1e:6c:05:bd:c6:50:c1:15:d4:ed:8e:dd:
16:e5:d4:07:d4:2c:3c:c5:b6:34:5d:da:68:72:a9:af:ce:4c:
d5:ec:b3:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ343tm5xKjnbEQNSUcABiPkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz
MGVhMTAwHhcNMjYwNTA1MTYwMDQ3WhcNMjYwNTA2MTYwMDQ3WjAzMTEwLwYDVQQD
EyhiOWY4M2RjYmVmZTQ2ODU0ZGMwZGEyNmU3MGUzOTAwZTE5NTZiYThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJiwKGAzLy2wXbrl//t7BgxBG/jm
St1qM3Z/gTjmvRNWPGUzxGylp9OhoEvi0fjR/qvpTDk8Y1dzkc30V/fti6yqdOw1
JaL23XZ1kkNXae+rhRsdu4HRzBpF3nH+1F0s9PWw8pAV+WrxBZGsMESdXsm71ofs
JvTVnmhBi2YgXKNzCpi+3jwxf3ZxKbljWsFhpFwPgCERnchWjlC1UiErL/Hnz1r5
mls9aevlBaw1r7323kZyU3E5gu6CbYN1WBUKfzK3K2rzQleEDGl6UFx2X4HBFxlN
jZvluoLoGUudLd3F4Yaw/Xx3UpbTbgn61kRQX8oBZJ+Qyh42UAhLmaPaaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLn4Pcvv5GhU3A2ibnDjkA4ZVrqKMB8GA1UdIwQY
MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt
YWRkZjBlMTg0OWViLzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi
LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpEZu3Mk
++2ZP78DaKx/+VvdZchEmuaqfaT87AgvtxYK5+6S1X/QYRXVAOwtn2CCgdG8pA4R
gfFvr5IVhhx31yJ0Eo4R5okADKq9sjUVBif20Anycp3x65IY8F8XBCDVJyAAobz7
ah+aJnJueUz3qcx4CBg51uy39IVFGB6UyFgPBmvH4ojXuSIV8wh8n77yBNNWRfNY
J4UgRFU849L5RVVDIHk5NSk/vQHDEMnxKtNsGLMDz3fTusmYw6w9TWtPH83oG6CJ
Qd9wh8FW7mVRuoXUwuVpPZeWE6eHNVWOHmwFvcZQwRXU7Y7dFuXUB9QsPMW2NF3a
aHKpr85M1eyzbg==
-----END CERTIFICATE-----
Generated at Tue May 5 20:11:29 2026 by rpki-client