
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
File: OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json)
Hash identifier: tTnawttV0UUU0PbztzBEcX9GClstNeJkIti/GOK2cLY=
Subject key identifier: 6C:AE:AE:9F:D6:F9:D0:4A:4E:F8:00:C4:C2:F5:BF:02:55:FC:CC:D6
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 01A0BD672DD4C9A01AF7D5AAB2499934D53F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
Manifest number: 1A74
Signing time: Sun 20 Sep 2026 06:00:50 +0000
Manifest this update: Sun 20 Sep 2026 06:00:50 +0000
Manifest next update: Mon 21 Sep 2026 06:00:50 +0000
Files and hashes: 1: 0Bk51Mjn6qErtAhOivvm_I8c0aE.roa (hash: aq3ZMEYBOh/rpC3SYBAxrvfX3FzvIksQARIozff4ffc=)
2: 3l3JwyRn9LUMsz8MYG14zOnBHdc.roa (hash: 2A1HY2h9Phgu+RFmc7588XfC02kPw7N3ZbQ8wc/kW84=)
3: 8bVGqU-tjWPnIG8sBYrZvrrahKI.roa (hash: IFFyNQvZAT+Bna1YbPC14TW6c3lxt7eZvL1L0yVl4NA=)
4: 8cAZRJhTLPqKsm4TAUR87r4-9JA.roa (hash: sx3g13vfM7xaU8g2AQwyXKrMTuN6j6YaMqFMPUpyTc0=)
5: CQTXAg4uTXvVTudN5hFeeXkNvkQ.roa (hash: MvXWyNfB+L1JsnBDH+iw0vhodg+qR3E3YtxwCLlLcLM=)
6: H_ZqL6RkECdFkORWPkQHZkQLmTw.roa (hash: iJ7KZIZmr4InzppQ2C7K5GIf14/i+7a4DnEB+2Vcn7s=)
7: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: W/P1XHNllC4bd96npRx1gzQVyAt6qEC+KUbFN+xpNXA=)
8: PZJni5TxpYn092_2LgQ4TzNg1Vk.roa (hash: KAnI/w7Z4z73b7zbsNexFN30a6Ok+1UWHYIM1LyRw7A=)
9: TZUj41Zk_a4ctgh6bkXXZRSBnwo.roa (hash: SlDdEwpdjEtSII8TXEBDIBic9lrt5T7OD2GqENaMep4=)
10: dc8BS5CRu-zycD-wNYY8YKfw4Cw.roa (hash: 2OEK8MCyAYfbPpIXmNvUjGE5NLgSoSESlZhOHxxGtOM=)
11: g96pKLe6ZF1dh195VH6q_6jtDKE.roa (hash: GXl5Z35Jg4C6xTmicgl5RWGF0PIPfwr7nEkhMgfzcrU=)
12: iKkbPcQ4WIJAurPfzrtorCYjeJc.roa (hash: t+1uw36Adk7Pip1XNPSev194m4wMZgCV8f3gz9/3gjg=)
13: jT0g8lVx3dcAMaKxYxMOa3DkEIY.roa (hash: m3BcVFDXlnD1YdMRwzlLYT9pFM0ZGvuCdz2ltBkF8AA=)
14: n-mejQ3q29BELhma3oWoUOm-iuQ.roa (hash: NGJx12o2aUAcKnv8G9XcrR/xbQgpGxsRftcm0M1WRmc=)
15: oQGGdDTaNSA17PKm44IDHYFop2E.roa (hash: zwBhRxHLQ9o3LHpah+oy4Xr0d2WLdIvePEERXND5wzs=)
16: xXkiOHP5GPVKZFmsEyZEMy5ArTU.roa (hash: xeH/fFNJIFUXQ3IjYea8XVk8nJ8Z09onGn+NwK+Mb24=)
17: yVcflys92CzAxU-EuN_3N-w3nlE.roa (hash: zUTtMpuZxFGygRwVxvfWbYqYKDMVT6hU9O37iMaFGcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:67:2d:d4:c9:a0:1a:f7:d5:aa:b2:49:99:34:d5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Sep 20 06:00:50 2026 GMT
Not After : Sep 21 06:00:50 2026 GMT
Subject: CN=6caeae9fd6f9d04a4ef800c4c2f5bf0255fcccd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e5:0d:a6:fc:1c:bb:36:fa:23:48:0e:64:34:
b1:6a:bf:77:84:38:2b:81:0a:24:b2:5b:9f:14:ac:
b4:2b:f5:db:8a:cb:8a:64:2e:7e:1a:b4:47:b3:21:
b7:72:0f:29:65:5e:f9:ed:e5:2e:7b:0e:1b:83:24:
03:d5:e5:e1:60:84:4e:88:94:0f:b4:ed:31:43:88:
aa:04:eb:a1:68:05:82:44:63:93:1f:5b:2c:18:15:
e1:db:2c:13:00:30:d4:4c:e9:d8:03:b8:15:b7:ae:
a7:1a:ee:05:3c:25:ed:1e:04:12:81:dd:b6:ed:23:
55:f1:2b:b8:29:c0:c5:fd:a6:6a:3d:25:88:3f:ad:
3c:15:13:46:59:80:f8:8f:83:7d:fe:dc:46:71:9b:
0a:06:85:9b:0e:80:ad:33:0a:d4:9d:46:19:c7:26:
df:69:03:d5:93:4f:bf:c9:ca:84:fd:84:5e:0f:6b:
86:d0:b6:60:c2:8d:05:8f:48:e1:65:cf:79:63:57:
81:dd:30:d9:5a:18:32:e6:9b:e4:90:45:03:2d:b0:
9c:53:ee:d3:17:5b:f8:ce:2c:88:ff:32:b5:2f:64:
81:6a:19:fd:95:df:f1:2f:52:fb:c6:f9:13:8b:52:
a6:0d:bb:c3:7d:2f:61:70:a4:49:26:4f:c7:37:94:
38:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AE:AE:9F:D6:F9:D0:4A:4E:F8:00:C4:C2:F5:BF:02:55:FC:CC:D6
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7c:7f:e1:2a:a0:d3:d7:3e:57:e0:c6:e9:98:c2:2e:7a:5e:
74:5a:c7:53:3b:a9:ce:66:32:47:d1:c0:48:5e:57:0f:80:9a:
b9:93:0e:fe:9c:b1:35:05:57:f1:12:2e:a2:cb:40:ce:fd:c5:
a8:1c:43:de:23:2b:8d:4c:66:8e:0a:15:64:9b:0e:c4:74:7a:
19:42:90:c7:ce:5a:66:f5:8a:1e:e2:da:f9:f3:25:0c:57:7b:
8c:68:2c:4e:60:57:29:05:b5:ca:b6:0c:92:37:de:4c:3c:19:
ed:3c:04:68:c7:f6:f7:94:cd:80:2b:53:00:e0:9b:34:76:4c:
ed:ba:8f:83:92:b3:5a:0f:fb:53:35:c0:dc:6d:bf:05:0b:ac:
e4:c4:65:dc:e3:fd:44:cd:04:67:18:27:f4:a6:9a:99:83:47:
32:42:3b:d7:9b:db:ec:54:7a:68:86:dd:7a:4a:de:e2:c4:ae:
e3:40:78:f1:90:28:12:9d:5f:26:7c:c0:d7:7b:3c:63:5e:32:
49:ff:85:eb:52:ac:b7:6f:32:1c:8c:ea:3b:ab:21:a5:c6:3a:
63:6a:66:8e:6f:9c:7c:83:1d:93:c0:90:75:47:7c:5e:df:38:
65:1f:21:ab:58:1c:de:d2:54:e4:47:fc:37:2f:38:c9:95:33:
a3:1c:7c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:35:41 2026 by rpki-client