
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
File: Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json)
Hash identifier: 0Y/0md/ueT1nCtp7MfG26tpqNezZAt8WR6x4xA0oFuI=
Subject key identifier: 80:50:6E:11:C8:10:D2:E0:D9:E1:52:EA:4D:AE:DB:33:97:9B:EB:E6
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 019FA907379471D3E1CE12CADAA699AF6035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
Manifest number: 19F7
Signing time: Tue 28 Jul 2026 14:00:50 +0000
Manifest this update: Tue 28 Jul 2026 14:00:50 +0000
Manifest next update: Wed 29 Jul 2026 14:00:50 +0000
Files and hashes: 1: 6PKIKUxySdUwZYjBpQdap24rMCA.roa (hash: Q+sfZpJT+al0TFOwIddw17g5+KoGJur9NLjQbu4nLpM=)
2: 9OWOKSpLigen3wmL7mhYnOHGp20.roa (hash: RW363Lgc9ijutZ++Br9twiDa8reB4RMvt+oPMke+fMw=)
3: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: 8afzBl2ZfrsCHZQSieLUcSFqhSeqMdGvlZedpKHoXGY=)
4: ZUtFH_qhx3L4PEjgB3q82Pko9A8.roa (hash: cpl/eTn6qz8+2/3oyMQl/oJw6IV6mFmSjoin/h1krGs=)
5: f8crMnaCvVJR24y4HZK4aF4ON_Y.roa (hash: a4LuuWR1pCU4Uin5c2uaOnWKPPk90YN8aUWR2m/vZDQ=)
6: gcbYT709f0hgiLNirRCxsCWINg0.roa (hash: GvONaLOScpTddKmNp/ohtdFC7YpVWBMSGSchqA80EtE=)
7: oeb6m3It37B8PGE2O7TDai_TrWY.roa (hash: AfKJo3qTL26v5E6lQbsmszspXYIo4b8KBBv1yOMp4wQ=)
8: qQh8Ea6WfJPSa--99ZPG599-K5o.roa (hash: lcYkdnY9FrHkVWlxdS8gfgs1tGrcmc2midRbLooz/Uc=)
9: u5pqVXheduvSRyevzvk3F281Pv8.roa (hash: 99RNfzNuS1w8/5besxPZV13SYkOzDoP6UORAhIYy5ic=)
10: w8agfRL1GVHiUSL4QR-4AfJIyKQ.roa (hash: hBE3KCvCu5YG/sDO5HAFViDYI0rH255FlChKrGnbX6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:37:94:71:d3:e1:ce:12:ca:da:a6:99:af:60:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Jul 28 14:00:50 2026 GMT
Not After : Jul 29 14:00:50 2026 GMT
Subject: CN=80506e11c810d2e0d9e152ea4daedb33979bebe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:28:76:10:2b:1e:cd:78:9b:11:9f:9c:71:b4:
e5:1e:b2:19:02:3f:be:cf:fa:54:cd:ba:84:f9:50:
7f:aa:0b:5d:e9:3d:de:50:41:5c:a0:96:15:9e:ac:
19:53:b3:6d:50:15:8d:53:56:7c:bd:b7:95:77:e9:
0c:96:51:bc:b1:9d:b0:21:7c:95:69:53:5e:14:3e:
55:bc:b6:6d:a0:fc:90:e1:78:16:12:8b:3c:35:46:
2f:d0:42:8d:27:90:10:5d:1b:fb:27:2a:98:69:7b:
d0:c3:e7:d9:3f:f2:e7:6e:3f:9d:de:76:ac:fa:b1:
35:22:1b:66:17:7f:79:66:c1:3b:b7:c3:a8:62:da:
a5:b8:52:41:24:43:dd:2d:66:6a:e5:0e:ff:e5:6d:
df:41:53:55:c7:0e:d5:b9:d5:e4:87:ce:c6:74:34:
1b:ec:91:ef:26:6f:fa:7b:e5:ba:c2:42:4c:ec:93:
be:b5:09:6e:da:bb:42:e6:6a:d6:d5:86:4b:1a:50:
ed:7d:f2:9c:c7:91:f8:94:54:29:f6:c9:df:d5:07:
c3:71:c9:14:66:3e:78:33:27:13:00:49:55:57:16:
6e:11:c0:c7:ee:ce:10:74:f1:29:19:7f:bc:88:41:
42:4a:38:ad:39:41:0c:5e:4e:a2:26:8d:2b:7d:36:
fd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:50:6E:11:C8:10:D2:E0:D9:E1:52:EA:4D:AE:DB:33:97:9B:EB:E6
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a4:5c:3c:61:8f:ef:0b:4f:c1:a1:02:74:0e:74:b9:22:68:
d5:94:be:a1:a9:85:ac:32:96:45:24:00:9e:e7:96:32:39:d2:
1f:9a:ad:bf:17:67:a2:74:3a:5f:de:f8:3c:4c:5a:d9:cd:93:
68:68:4f:f3:f6:53:5f:89:aa:aa:4f:99:1b:ac:04:37:3d:fc:
74:b9:97:d7:32:dd:d5:1d:08:4e:34:fe:0a:c0:f7:8b:63:73:
00:50:a3:64:14:10:34:26:61:38:ce:56:28:0e:5c:65:72:0c:
c0:02:db:4f:fe:b6:8f:b7:77:bd:57:39:8c:11:f2:1c:e0:ae:
8f:a6:a2:c9:f6:36:64:c0:49:3b:da:b4:10:c3:c8:bc:77:af:
9c:f6:c3:bd:49:05:be:d8:e4:71:2b:f7:01:38:67:06:bf:8a:
aa:9a:ef:61:47:4f:ac:f5:ea:57:fe:83:5d:1b:69:04:2a:6b:
86:e0:e2:ca:a0:4c:f7:15:35:8b:3e:f6:81:b1:50:a9:2e:1f:
dc:b5:18:4b:74:6b:ec:31:8c:47:e0:7c:fb:ad:0b:b4:d3:e9:
81:20:cc:a6:ac:4f:91:88:07:45:f6:4b:c7:3a:59:59:c2:e6:
8f:2a:c1:37:52:33:80:fd:9b:df:a1:82:68:2d:24:a7:b0:a3:
5d:10:e9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:09:45 2026 by rpki-client