
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
File: olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json)
Hash identifier: Myig+dcgPxriA46EHW9rsqyR5p3E64tr3YgQF0vlZjg=
Subject key identifier: 90:9F:68:6F:95:45:FE:7C:A4:A7:64:22:1F:03:21:DB:BF:DF:F3:A2
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 019D0F321898A4B2A7B6600B54F8B7733108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
Manifest number: 18B0
Signing time: Sat 21 Mar 2026 07:00:34 +0000
Manifest this update: Sat 21 Mar 2026 07:00:34 +0000
Manifest next update: Sun 22 Mar 2026 07:00:34 +0000
Files and hashes: 1: 0dbyZwebQgTGMD5-wPhJH6_Pd5I.roa (hash: rG5nZgpv1Ah9jz+mC9094dW59+5lFAhfWaH5ssnQtAk=)
2: 1-SQFDfpp9D_i817zUQFbntY0dRQ.roa (hash: biSe4GCFtSwazcB9PCCa1NKBDVP5/i0SLuwOHponshU=)
3: 2frKTWb3ttQDpCXNMXbTSXrlIqI.roa (hash: obnt34G7IEsjg6vdddM8muzJwshLaBlLPb65paOFsfE=)
4: 3lYygY9QSAAHtzgINKWVRrbCp_4.roa (hash: xTlxdsrlszD3wQ8XFzdmUFKsu5SMwqAldL5Rb7oJqzA=)
5: 4WijXRQsTuAJtSd_hSZYlUqj8lA.roa (hash: cDODijNSh6xud6bY86CXr7OdBhes8GnABNkzt2sQT9E=)
6: 7zTwSbIrIN1tbHKaAerBGKh4H_4.roa (hash: Uj+d0N/fp4CQPw2Wdyt0B7bkrgBCMNOKaEUgThPZLo4=)
7: Gv1ql7t0nNON87AJIldQVqDpbaw.roa (hash: Afsi36EyWB2mwsT0UzfNkOmYYiw9CwLh31zU2SIsaxk=)
8: I2KpdLXbpYuKcc5P2UrERlbUmQI.roa (hash: QwjjNYoou+Yqw7bbIshNHDY3CQQBCro8tQly5UuqIPQ=)
9: K6IIfeYnJcau7XFah26WtRrWoX4.roa (hash: kAmjx0E3nDeIJhDMXwZG/0loikW8ryL2ZHfuoiau2sI=)
10: KfKdKGXKrJVAyc679p1xVdKcOuU.roa (hash: MZjQw9I7nKK82B9sKr7/qbtBGaD/PhRCNNoKDtPpSRQ=)
11: KhnFPatizLYzbuYdUdtwNlimK_A.roa (hash: p+Mj3EP56tIkokr0WqjKkNv7zw4zz51aSvtLv2wkCDw=)
12: Nn2M0QjFRAa_T2cmYDVUHTJ5GXs.roa (hash: ROtPVP9nVJ4sSu+guXDuQ34VOIJfTdPXZnYgNbsVTRc=)
13: PT0OVKn7DoYDkXnLiYT9h8XOQSo.roa (hash: P3oRTt1oGGLmL6K2JdXvl8dIu0LI9RbrIcGwZo70+dU=)
14: T-Tc8u-y-A23bEMCsm71F_7_jTg.roa (hash: uvA7IEtWcoBgqQxL/f1PptXnW15RVEqbUY2vsk5myZQ=)
15: TUHp0yldZUy2noEeejLALiKlsOA.roa (hash: hJdNCDGT+WfObUpSa1plMcdJasirz1T8A6b/aK4MsFo=)
16: TgBpdGwKgCYXVi-ZeVCMbfdynwQ.roa (hash: WSlOfiJJGk4JzRn+dJ1iw8VYAl7aA0mI15CFDBrgID0=)
17: Urxc-_3dN2rsdSn-CFXZaM1OMmE.roa (hash: KTdVek6dN9t33L+6LCMmAcoph/JKLQZZF3RFY22Laag=)
18: aFybrbDshxtrknuOyM8RFxRBKs0.roa (hash: RQU0CLTgvLglUS45QfR69+raL0+alWumuh4CDPItdCA=)
19: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: VPP2q+zXdI3jS5ENSG/cIlnvGveQBuzAScWQDQAJEYo=)
20: rZIzlxjNqrmdhiYj8eZcD_DAyYQ.roa (hash: HtYYyQJMTgOPk/TpOD1+JZFhzQ3pNzbNJ5gyclYza/w=)
21: thqMO7NSQ4YZbOJpf7E5T4h4Qx4.roa (hash: CSkwEjedoekw5JE8fDs8zoEDa+VA8TtlPZQTJSLtR3Q=)
22: xqLMI4n3mv1T0FOyglej7wVFdYE.roa (hash: BA8dbC4wqu6gr5aHMdPy/PzpkFFbaeIFkYk6ddxpagE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0f:32:18:98:a4:b2:a7:b6:60:0b:54:f8:b7:73:31:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Mar 21 07:00:34 2026 GMT
Not After : Mar 22 07:00:34 2026 GMT
Subject: CN=909f686f9545fe7ca4a764221f0321dbbfdff3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0b:5a:b6:e6:d3:36:25:c2:b5:8f:5f:67:f6:
a9:55:a9:1b:33:2e:de:53:82:bb:26:93:8a:96:23:
b9:fa:72:7c:71:65:91:14:b6:84:84:17:bd:38:bd:
16:c6:d9:1c:52:5a:4c:61:81:a7:a6:fa:10:c8:09:
26:20:46:23:8a:85:97:1a:aa:e8:e3:13:f8:ed:7a:
b3:63:dd:2f:e1:92:20:a4:30:09:7d:6d:0b:35:96:
ed:77:38:35:bf:53:82:bf:09:6c:b3:61:a9:92:2b:
2a:af:03:66:ae:eb:c1:ae:e9:fa:64:4c:c0:49:35:
22:93:42:ae:fa:0b:b8:67:b6:aa:04:8b:02:3f:7a:
ff:b1:2e:b7:b4:c1:3b:e8:f2:2d:64:67:2c:8a:1b:
d5:33:75:7b:b4:68:49:87:32:9d:b4:1d:6e:7e:24:
cf:2a:a6:12:0d:c9:8c:4e:34:a4:34:c6:ac:90:b0:
bf:6e:b4:b7:23:1e:c3:97:64:f9:a1:f2:bf:b4:3b:
d6:ca:a6:fb:f2:78:bd:08:59:e5:55:87:63:b4:08:
59:09:85:c7:12:43:7f:3d:16:d5:4f:3f:49:fa:55:
2d:9d:0a:a4:8e:d5:55:20:21:0a:8b:07:48:34:7f:
20:ae:32:22:04:0b:bc:10:52:93:4b:37:c6:fb:a4:
61:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9F:68:6F:95:45:FE:7C:A4:A7:64:22:1F:03:21:DB:BF:DF:F3:A2
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b2:69:d0:47:22:c7:b4:d7:d8:13:54:e4:c2:20:26:75:b7:
b5:7f:73:5f:ad:8e:55:a8:2d:41:04:36:f8:82:4a:ae:b8:a5:
7a:d5:25:4f:4b:eb:cc:2d:5a:17:0a:7a:93:30:c6:7e:1d:1e:
c6:43:6b:8a:cf:40:01:a9:25:af:89:88:e4:25:ba:bb:5e:1a:
e0:4d:1a:97:4e:35:54:a7:d7:f1:5e:fe:7b:d4:a4:04:b1:97:
c4:61:c8:4c:a5:2f:9b:ca:84:1e:4e:ed:21:65:81:2e:9a:9c:
97:59:5f:b0:ec:78:f1:e0:98:ca:6e:80:d3:4c:4d:d8:4e:7e:
f4:2f:e3:25:50:82:77:58:0b:96:52:e3:32:8d:fb:7b:d5:c0:
d6:91:34:13:e2:e3:f5:5e:26:aa:9d:4c:d6:ce:6d:5e:5e:b1:
6c:05:f1:c3:eb:e2:4c:a9:f9:44:bf:ba:43:d1:dc:cf:4f:95:
16:71:cc:f5:ad:35:76:c3:dc:46:c2:c2:4e:37:4d:0d:75:25:
47:a7:e5:3a:f2:84:46:84:86:1f:82:a7:95:a0:40:11:0c:52:
ce:85:bb:ed:30:58:01:b9:6e:82:24:95:90:64:30:4a:9d:5f:
99:5f:4e:39:b5:02:aa:09:fc:44:15:54:4d:0e:aa:d9:85:8e:
0d:82:65:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0PMhiYpLKntmALVPi3czEIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz
MGVhMTAwHhcNMjYwMzIxMDcwMDM0WhcNMjYwMzIyMDcwMDM0WjAzMTEwLwYDVQQD
Eyg5MDlmNjg2Zjk1NDVmZTdjYTRhNzY0MjIxZjAzMjFkYmJmZGZmM2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAtatubTNiXCtY9fZ/apVakbMy7e
U4K7JpOKliO5+nJ8cWWRFLaEhBe9OL0WxtkcUlpMYYGnpvoQyAkmIEYjioWXGqro
4xP47XqzY90v4ZIgpDAJfW0LNZbtdzg1v1OCvwlss2GpkisqrwNmruvBrun6ZEzA
STUik0Ku+gu4Z7aqBIsCP3r/sS63tME76PItZGcsihvVM3V7tGhJhzKdtB1ufiTP
KqYSDcmMTjSkNMaskLC/brS3Ix7Dl2T5ofK/tDvWyqb78ni9CFnlVYdjtAhZCYXH
EkN/PRbVTz9J+lUtnQqkjtVVICEKiwdINH8grjIiBAu8EFKTSzfG+6RhwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCfaG+VRf58pKdkIh8DIdu/3/OiMB8GA1UdIwQY
MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt
YWRkZjBlMTg0OWViLzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi
LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLJp0Eci
x7TX2BNU5MIgJnW3tX9zX62OVagtQQQ2+IJKrriletUlT0vrzC1aFwp6kzDGfh0e
xkNris9AAaklr4mI5CW6u14a4E0al041VKfX8V7+e9SkBLGXxGHITKUvm8qEHk7t
IWWBLpqcl1lfsOx48eCYym6A00xN2E5+9C/jJVCCd1gLllLjMo37e9XA1pE0E+Lj
9V4mqp1M1s5tXl6xbAXxw+viTKn5RL+6Q9Hcz0+VFnHM9a01dsPcRsLCTjdNDXUl
R6flOvKERoSGH4KnlaBAEQxSzoW77TBYAblugiSVkGQwSp1fmV9OObUCqgn8RBVU
TQ6q2YWODYJlpw==
-----END CERTIFICATE-----
Generated at Sat Mar 21 09:23:52 2026 by rpki-client