
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
File: olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json)
Hash identifier: BKUNMpFiACzoHOSSxFg1Cd7IWStRy1tXSBgx2aMC2tk=
Subject key identifier: 84:DB:99:D5:E4:C5:C3:B4:38:0E:41:3A:28:A5:8F:64:F3:8E:8D:71
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 01A1A4EE683EF95FF0DEC9F3E47830EC1E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
Manifest number: 1B16
Signing time: Wed 04 Nov 2026 05:00:49 +0000
Manifest this update: Wed 04 Nov 2026 05:00:49 +0000
Manifest next update: Thu 05 Nov 2026 05:00:49 +0000
Files and hashes: 1: 0dbyZwebQgTGMD5-wPhJH6_Pd5I.roa (hash: rG5nZgpv1Ah9jz+mC9094dW59+5lFAhfWaH5ssnQtAk=)
2: 1-SQFDfpp9D_i817zUQFbntY0dRQ.roa (hash: biSe4GCFtSwazcB9PCCa1NKBDVP5/i0SLuwOHponshU=)
3: 2frKTWb3ttQDpCXNMXbTSXrlIqI.roa (hash: obnt34G7IEsjg6vdddM8muzJwshLaBlLPb65paOFsfE=)
4: 3lYygY9QSAAHtzgINKWVRrbCp_4.roa (hash: xTlxdsrlszD3wQ8XFzdmUFKsu5SMwqAldL5Rb7oJqzA=)
5: 4WijXRQsTuAJtSd_hSZYlUqj8lA.roa (hash: cDODijNSh6xud6bY86CXr7OdBhes8GnABNkzt2sQT9E=)
6: 7zTwSbIrIN1tbHKaAerBGKh4H_4.roa (hash: Uj+d0N/fp4CQPw2Wdyt0B7bkrgBCMNOKaEUgThPZLo4=)
7: BiFlBqm3KUzEVOiMzYhT_EVILsg.roa (hash: fPfSMKmz3G9txaE/xrCmq0xkzT0anA6fzG93SYzo/Cs=)
8: Gv1ql7t0nNON87AJIldQVqDpbaw.roa (hash: Afsi36EyWB2mwsT0UzfNkOmYYiw9CwLh31zU2SIsaxk=)
9: I2KpdLXbpYuKcc5P2UrERlbUmQI.roa (hash: QwjjNYoou+Yqw7bbIshNHDY3CQQBCro8tQly5UuqIPQ=)
10: K6IIfeYnJcau7XFah26WtRrWoX4.roa (hash: kAmjx0E3nDeIJhDMXwZG/0loikW8ryL2ZHfuoiau2sI=)
11: KfKdKGXKrJVAyc679p1xVdKcOuU.roa (hash: MZjQw9I7nKK82B9sKr7/qbtBGaD/PhRCNNoKDtPpSRQ=)
12: Nn2M0QjFRAa_T2cmYDVUHTJ5GXs.roa (hash: ROtPVP9nVJ4sSu+guXDuQ34VOIJfTdPXZnYgNbsVTRc=)
13: PT0OVKn7DoYDkXnLiYT9h8XOQSo.roa (hash: P3oRTt1oGGLmL6K2JdXvl8dIu0LI9RbrIcGwZo70+dU=)
14: SbOTDMQ2VNb-37WEXepwsuwWPxc.roa (hash: hENxaWOPFxGNIQbmljjeVjoOSxx52ihXBKGb9BCJkvQ=)
15: Ss_HAbXwrBgTnN9olUTWyjQFCB4.roa (hash: nrNxrT3l4poCRT7QhHB8p4Y5AUqyWOUsBfKv8pVp0tQ=)
16: TUHp0yldZUy2noEeejLALiKlsOA.roa (hash: hJdNCDGT+WfObUpSa1plMcdJasirz1T8A6b/aK4MsFo=)
17: Urxc-_3dN2rsdSn-CFXZaM1OMmE.roa (hash: KTdVek6dN9t33L+6LCMmAcoph/JKLQZZF3RFY22Laag=)
18: aFybrbDshxtrknuOyM8RFxRBKs0.roa (hash: RQU0CLTgvLglUS45QfR69+raL0+alWumuh4CDPItdCA=)
19: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: O89LE1Jr3LPgi/IjW2mOhgl9IFRS+iVI9fiiw618n7A=)
20: rZIzlxjNqrmdhiYj8eZcD_DAyYQ.roa (hash: HtYYyQJMTgOPk/TpOD1+JZFhzQ3pNzbNJ5gyclYza/w=)
21: thqMO7NSQ4YZbOJpf7E5T4h4Qx4.roa (hash: CSkwEjedoekw5JE8fDs8zoEDa+VA8TtlPZQTJSLtR3Q=)
22: wQ9dNmdcEyCDZFANlGcTdV5kceY.roa (hash: EbN31k2L7rzxR5Zfb8n18MNBWg/Wwvt9aLqoTUOGP00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a4:ee:68:3e:f9:5f:f0:de:c9:f3:e4:78:30:ec:1e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Nov 4 05:00:49 2026 GMT
Not After : Nov 5 05:00:49 2026 GMT
Subject: CN=84db99d5e4c5c3b4380e413a28a58f64f38e8d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:5a:17:8f:60:2b:54:08:3c:3a:de:40:22:
41:b1:b8:5f:34:c0:b9:74:78:d7:c3:78:a0:78:84:
44:04:a9:d8:d0:e7:8b:c1:5b:ea:1f:c5:9e:95:71:
c6:e7:44:bd:f7:35:26:ce:90:ea:39:2b:ae:c8:b4:
64:36:ef:a6:ea:74:3b:9b:ef:fa:ec:a5:78:fe:06:
12:f5:5d:ca:a2:32:06:cf:31:f9:66:89:5f:77:4c:
bc:fe:b3:e6:5f:f6:a6:b9:e9:08:d5:46:49:bf:90:
a7:d2:91:48:95:32:5f:ff:af:2e:05:12:12:8e:9f:
6e:ce:bb:09:ed:f1:25:f3:86:96:10:cd:54:fe:85:
0c:44:c1:e1:04:c0:bc:bb:55:19:ae:5d:9f:77:0f:
a3:85:99:04:7a:b0:eb:24:39:b1:13:b3:9c:3d:df:
5d:73:5f:80:b5:21:b4:bd:59:b1:6b:09:71:54:85:
45:f7:6b:f6:30:7b:2a:83:ef:7e:29:94:e6:d9:68:
1d:57:a5:8e:d5:4b:8c:84:c4:6e:94:4a:9a:ed:1a:
5f:bc:97:ee:3f:2f:95:49:f5:ad:69:9f:3a:3b:e1:
65:ba:e6:9c:84:f8:d8:22:9d:d9:cf:91:49:34:5d:
03:44:6a:7e:7e:8b:87:a5:6d:a8:4b:3a:ae:36:65:
d2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DB:99:D5:E4:C5:C3:B4:38:0E:41:3A:28:A5:8F:64:F3:8E:8D:71
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:17:08:e1:10:4c:91:37:e6:7b:c6:5a:76:58:3c:6a:cc:b3:
a1:93:f2:d0:3e:ca:3a:88:94:0c:42:88:46:80:9a:7b:e2:ce:
ff:7a:61:b8:32:65:1b:b4:e5:b3:c6:61:34:c6:e6:59:f1:dd:
36:5a:9d:30:19:c5:2b:d5:15:d9:09:5b:01:46:77:bd:04:1e:
d7:7b:8c:f6:f2:0c:eb:21:6b:1f:1d:8f:db:a5:10:37:c2:07:
57:61:0e:95:1c:6e:3e:5e:ab:f6:cc:9f:ee:54:eb:aa:5d:bf:
de:c4:d0:4d:33:49:f3:1b:fd:67:ed:3d:94:1e:db:75:19:bb:
f7:af:16:0e:2c:38:e5:f4:46:f5:50:f1:59:0b:17:8b:30:03:
35:6a:12:e7:17:a1:20:63:57:6b:9b:59:95:85:9d:64:fe:f0:
81:e2:29:6f:78:c4:af:61:bb:b1:dd:a2:a1:b0:49:ce:5e:70:
29:f1:48:4f:eb:6c:1d:a0:f3:31:94:da:20:c6:5e:ad:d2:b8:
b3:71:7d:e5:5b:b8:c3:03:d0:ce:cd:89:eb:9b:31:02:08:e1:
a5:58:83:04:9b:9d:e6:a9:29:2f:65:78:58:90:e4:39:85:05:
60:4d:bc:f7:4b:4b:ee:a4:65:2d:92:fe:85:b4:73:41:58:17:
94:7e:bc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 12:51:32 2026 by rpki-client