
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json)
Hash identifier: Qjm7dLkgn0pVjMUsGdMkr9PotzNjEbQrcEhwt6nRxvA=
Subject key identifier: 6F:D6:81:A0:8D:E1:A3:2A:4B:40:52:C0:F9:D4:55:3D:00:DA:23:AA
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial: 01A08979D0847519ED121D828A7941165E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
Manifest number: 194E
Signing time: Thu 10 Sep 2026 04:00:56 +0000
Manifest this update: Thu 10 Sep 2026 04:00:56 +0000
Manifest next update: Fri 11 Sep 2026 04:00:56 +0000
Files and hashes: 1: KQgcPbLRBBc_xsh51xPt4IehnO4.roa (hash: pCfM4q8twqlvRaHLGHOBBp4aKXHoEg09la6QGcZB7h0=)
2: MCBZ2CxaM7LC481GLSYWHeppO5E.roa (hash: 02Ro7KtAxSGq3svayvXMnjLyQYv+fnx2uhv691O7tMc=)
3: OJxTLDXJ9pqUGXVl4-ml1R-2R0g.roa (hash: /fFWCePAVkjb5ODL9wnIO10abW6/OG68dBuoesYNJwY=)
4: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: oqCUPmN/OjpA9g/olsVGgCc6pQhgbhtzIxEPtpKHWtU=)
5: UNEG0RbhpGfDIQfxZ4i2ieICO9g.roa (hash: kKbhwxHzyZ1nQMHyypRvyIhRmV3QS30VEm56g35Omd4=)
6: Vg59mkjZjPChn5V72yQkRuYsw5w.roa (hash: ZT1vWv2NLvyggQYSfbG/ST95n5y42mBT1SrPiyV/11c=)
7: dnVcuIVq43rB8PBNyYX_JeEUFJ0.roa (hash: Ff78hIKwiWd51/Bth5HBmfNxfzKtqYOa3kRFT0AYoJo=)
8: rjNblK4bxhZyMeZC4OHShSQ8Jlc.roa (hash: yvBwo79kSdn4a3N6pjUOiYNe2QQKF2EmdQtpBeT8m8w=)
9: ui12U8ehqDuyNEV4dxeMmGkBpyU.roa (hash: yINc/cfZuw+HDq9yk/ySvw+zjfDYf1qaipCTcvu1wXg=)
10: ybxPsztAzlmVPObK0OoBTddoDSQ.roa (hash: d3b9yiAURGnHAdeyevteUI2cI7ETobUn55NXVEoQFao=)
11: znRtvDjx6p6QKqOpN-UH1Bqd7ao.roa (hash: +4jJSJNUJ8eFyd4hEIFej6uo6SX/BvFj2H5hv/FUtHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:79:d0:84:75:19:ed:12:1d:82:8a:79:41:16:5e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
Validity
Not Before: Sep 10 04:00:56 2026 GMT
Not After : Sep 11 04:00:56 2026 GMT
Subject: CN=6fd681a08de1a32a4b4052c0f9d4553d00da23aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c5:f3:c3:c8:17:ed:2b:56:b6:0b:33:93:6b:
ff:d2:f3:0a:89:d6:9c:c1:9c:58:30:e7:95:87:c2:
00:b1:1c:24:10:6e:a1:74:2b:ca:c5:db:51:55:88:
8c:db:3c:5b:9b:20:48:6d:3b:05:76:1b:19:6a:11:
60:9a:3d:fb:41:b9:08:af:53:73:f6:6b:44:30:82:
64:83:ea:cd:05:49:0a:52:ea:f6:94:9d:75:86:f1:
7f:80:c9:bd:df:9b:a9:70:b5:f8:a5:1a:c6:39:ef:
88:16:bb:1b:fd:cf:25:86:4f:2e:e0:65:ae:88:80:
cf:7b:6f:c6:a5:f8:f4:67:e4:ee:12:67:5f:e1:1a:
c9:07:3c:ed:3c:3b:ae:0c:a6:d1:98:18:74:89:0d:
1c:65:b1:d5:c0:f1:19:d1:eb:a2:ba:df:aa:c0:b1:
f9:d2:98:5a:73:e7:65:c1:bb:41:02:e9:08:32:6b:
68:57:de:0f:46:f2:01:23:bb:7f:9d:ed:c4:3a:b7:
34:8c:02:f9:fd:de:8b:e1:ee:81:02:4c:5e:d0:ad:
8f:ef:f5:eb:7a:91:e0:e1:16:c5:e3:ed:cd:61:52:
8a:0e:41:37:50:ac:25:81:53:c4:05:7f:b0:44:d9:
82:92:7c:e0:9e:0e:7a:ce:09:c4:08:d7:f8:39:1c:
d9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D6:81:A0:8D:E1:A3:2A:4B:40:52:C0:F9:D4:55:3D:00:DA:23:AA
X509v3 Authority Key Identifier:
keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:78:57:2a:80:43:99:cb:77:1e:38:b2:35:c4:c2:f0:a1:e7:
f6:db:c4:1c:20:bc:05:d8:42:80:ea:e8:e5:b8:d5:37:aa:10:
6b:de:69:64:8d:a8:a7:2b:11:7c:ec:3b:4c:35:ac:81:94:62:
bc:52:ea:fb:7a:c9:22:50:18:ec:df:aa:04:2b:8b:f6:88:44:
54:b3:da:aa:2d:3b:5f:df:0e:51:a9:76:a7:23:b4:df:d3:86:
1b:fa:9f:dc:46:ff:ba:89:6d:82:3e:f9:c5:90:43:57:57:43:
30:58:ef:ef:93:f5:df:d5:5f:41:62:63:c2:20:b3:29:f0:84:
eb:36:f5:bf:05:53:ef:29:83:cb:f7:ba:da:ab:b0:48:3e:c3:
94:ab:fa:64:aa:f6:73:b1:85:c9:8b:85:e7:ae:1a:b7:c2:a1:
1d:27:dc:34:d9:b6:34:62:62:87:4b:db:24:a0:9b:90:46:25:
42:84:81:77:51:6e:5d:ac:e2:6c:48:37:4b:c8:33:29:70:84:
4c:ee:b5:2a:62:17:48:ad:4f:04:94:6a:d8:bb:a4:10:45:02:
80:89:9b:e9:65:2b:61:76:93:f8:6d:7e:08:79:98:51:d0:f9:
1c:8f:0f:6e:97:f7:24:d7:8b:68:eb:32:1c:59:b4:ee:55:ea:
ec:cf:2a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:44:03 2026 by rpki-client