
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
File: OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft (raw, json)
Hash identifier: dwWUhObJ268XWMuUSdA/Pb1DKt143rw2L4NvpRBtNL0=
Subject key identifier: 50:F3:14:DF:AC:E9:E9:D5:4C:CD:F7:50:1C:55:18:F5:02:1F:81:9F
Authority key identifier: 3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B
Certificate issuer: /CN=3ada5baa058c409565ff2ac876a22ee6377b503b
Certificate serial: 01A0BEB0CF3218E1DE8D6A9E7415442D65F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
Manifest number: 054E
Signing time: Sun 20 Sep 2026 12:00:53 +0000
Manifest this update: Sun 20 Sep 2026 12:00:53 +0000
Manifest next update: Mon 21 Sep 2026 12:00:53 +0000
Files and hashes: 1: 3UWcD1LMIzFnlu2Nzvr1pXyRxDA.asa (hash: c+GWfBySdUHjP1N0XQlOWJ+9CuL+3XmkhX0WfJTaLgQ=)
2: 7583rAn8JHQAFLDKZll5jTa6nAI.asa (hash: 5a2+tUeRJO0EYIQT28GL2rb5YGySJT3+niyV5yoL27Y=)
3: Er__-mawdWtfJYo27OSwzFEKh4I.roa (hash: 3+hqNrIKDCMKOTErNC2JHDYWjmcm2NO8EQA4bB+7LrY=)
4: G5P0rN_MZ73QVvQp9yafBswPv8g.asa (hash: r3hOx6KqoS3yDnzfWxZjdgh23pBk9NSVrFQi8cRcaDM=)
5: OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl (hash: TxQQTxPmqZGHP3iO7xlGOS3Pp8b9GWeQyh3WIKB01Ng=)
6: WVTec6WdlinW2NDLGRvaP7XGcrE.roa (hash: AVgu0/9AF/Q2loFPcgeDLiO4K7I+K+GfkMpa0wfObDM=)
7: kM7kkRJAnyhiR2AyP4z2W0PrTko.roa (hash: edUHC8QdgxZgr0+NMK6wBUM4b3MOnD79gO72E96zVk0=)
8: odsQiZOXYj_F9oNoMb6A0AGq048.asa (hash: 8OPemY1bZIMyIL57ZUkk5TFMu0/aBndhntpHmOiR06g=)
9: vfVAst8rcB_TCAmUKkdXRd4SWfw.roa (hash: kGKOlSX3d0jID8SNKR1LemW4+qLswKQk5EqhjFVffJI=)
10: yX3wAN1wIzQ2Y-D4_o6oQEwjSWQ.roa (hash: zg1nFXz2K6MLvC6tO47y2mLPnAjg1lqDj/t7V26NM2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:cf:32:18:e1:de:8d:6a:9e:74:15:44:2d:65:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ada5baa058c409565ff2ac876a22ee6377b503b
Validity
Not Before: Sep 20 12:00:53 2026 GMT
Not After : Sep 21 12:00:53 2026 GMT
Subject: CN=50f314dface9e9d54ccdf7501c5518f5021f819f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d7:01:2e:b7:25:78:ce:74:a4:5d:55:85:5f:
7c:69:06:eb:c3:42:af:17:33:83:5b:d9:49:6c:9b:
8a:58:6b:45:a3:53:07:39:20:45:5c:88:11:f7:4b:
69:2d:4b:57:5e:3c:6d:4e:b5:9d:d1:4a:b8:26:e4:
48:32:ac:3f:70:fe:e4:61:15:7c:5e:9f:98:86:d4:
7e:9d:9d:19:e0:47:45:d7:2b:c0:98:44:16:7f:41:
55:33:e3:92:0d:ef:ee:9a:1a:f3:9a:9b:23:12:d4:
b3:d8:0a:95:98:38:7a:e7:78:8c:ce:7d:b1:ad:24:
90:5d:8a:3c:33:f5:cd:7b:a3:11:f8:ba:d7:3f:24:
6e:dc:44:0c:62:4b:7a:70:04:1f:78:a6:58:15:ff:
99:56:ce:34:fc:c3:2e:a2:01:4a:3f:f5:7e:30:b9:
1e:5a:b1:d1:87:e2:0d:39:04:e8:49:5a:c0:ea:42:
04:a7:4c:1f:99:79:c0:5e:6f:be:7b:3e:71:49:26:
05:bc:b3:cf:8b:7c:8b:e5:ad:19:80:a4:79:45:65:
eb:a4:28:63:63:3f:84:79:22:17:f7:e0:05:71:ce:
b5:5c:44:a2:00:94:a1:3f:bd:51:a0:aa:ae:35:6a:
74:e5:a3:96:63:12:de:94:98:64:f4:ff:8c:5c:e4:
03:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F3:14:DF:AC:E9:E9:D5:4C:CD:F7:50:1C:55:18:F5:02:1F:81:9F
X509v3 Authority Key Identifier:
keyid:3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:bf:ac:2c:b0:02:a3:8e:52:e3:1b:8d:4e:ba:10:ca:44:3b:
64:ff:ca:7a:ef:13:84:0c:8c:26:c9:e8:dd:0a:e1:72:98:32:
77:05:69:bc:7e:3c:a9:46:a9:b5:e5:88:75:a2:57:21:6e:2e:
59:bf:5b:f4:25:58:53:c5:f6:10:43:69:89:1a:9c:09:80:04:
9a:42:0c:ba:1e:d8:dc:c6:68:a4:47:f1:30:d6:15:21:e6:05:
33:56:c3:19:ed:0b:49:b3:e6:ed:b0:fd:3e:4a:ae:0d:47:b9:
06:05:55:72:ba:27:f0:96:91:ac:f6:d8:3d:37:06:28:78:66:
c7:0e:fc:d9:f1:2c:42:43:d0:3f:fa:69:6f:90:a7:dd:92:cf:
b7:ca:9a:02:21:a9:87:fd:b2:48:09:76:cf:38:f5:c7:18:36:
e0:c7:bb:f8:50:a0:59:48:87:6e:c1:72:e3:56:9e:69:93:b1:
70:ae:b3:90:95:f4:18:63:5b:c8:c4:f4:ed:69:d8:9a:d0:48:
10:e4:5c:d1:59:74:20:2a:8c:40:b4:8a:42:ec:4b:25:1b:20:
98:bc:61:19:45:03:32:51:6e:42:f5:93:33:27:fc:97:81:73:
a3:85:d2:5d:88:df:cf:b3:bc:6b:9c:20:99:fe:e0:65:d8:e2:
2b:ba:c2:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+sM8yGOHejWqedBVELWXwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZGE1YmFhMDU4YzQwOTU2NWZmMmFjODc2YTIyZWU2Mzc3
YjUwM2IwHhcNMjYwOTIwMTIwMDUzWhcNMjYwOTIxMTIwMDUzWjAzMTEwLwYDVQQD
Eyg1MGYzMTRkZmFjZTllOWQ1NGNjZGY3NTAxYzU1MThmNTAyMWY4MTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tcBLrcleM50pF1VhV98aQbrw0Kv
FzODW9lJbJuKWGtFo1MHOSBFXIgR90tpLUtXXjxtTrWd0Uq4JuRIMqw/cP7kYRV8
Xp+YhtR+nZ0Z4EdF1yvAmEQWf0FVM+OSDe/umhrzmpsjEtSz2AqVmDh653iMzn2x
rSSQXYo8M/XNe6MR+LrXPyRu3EQMYkt6cAQfeKZYFf+ZVs40/MMuogFKP/V+MLke
WrHRh+INOQToSVrA6kIEp0wfmXnAXm++ez5xSSYFvLPPi3yL5a0ZgKR5RWXrpChj
Yz+EeSIX9+AFcc61XESiAJShP71RoKquNWp05aOWYxLelJhk9P+MXOQDdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDzFN+s6enVTM33UBxVGPUCH4GfMB8GA1UdIwQY
MBaAFDraW6oFjECVZf8qyHaiLuY3e1A7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RwYnFnV01RSlZsX3lySWRxSXU1amQ3VURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lNjYzZGQtM2Y4Zi00ZWFkLWI0Yzkt
OWMxYjJhZDU1OWFiLzEvT3RwYnFnV01RSlZsX3lySWRxSXU1amQ3VURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lNjYzZGQtM2Y4Zi00ZWFkLWI0YzktOWMxYjJhZDU1OWFi
LzEvT3RwYnFnV01RSlZsX3lySWRxSXU1amQ3VURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARb+sLLAC
o45S4xuNTroQykQ7ZP/Keu8ThAyMJsno3QrhcpgydwVpvH48qUapteWIdaJXIW4u
Wb9b9CVYU8X2EENpiRqcCYAEmkIMuh7Y3MZopEfxMNYVIeYFM1bDGe0LSbPm7bD9
PkquDUe5BgVVcron8JaRrPbYPTcGKHhmxw782fEsQkPQP/ppb5Cn3ZLPt8qaAiGp
h/2ySAl2zzj1xxg24Me7+FCgWUiHbsFy41aeaZOxcK6zkJX0GGNbyMT07WnYmtBI
EORc0Vl0ICqMQLSKQuxLJRsgmLxhGUUDMlFuQvWTMyf8l4Fzo4XSXYjfz7O8a5wg
mf7gZdjiK7rCAA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 18:26:25 2026 by rpki-client