$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft File: OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json) Hash identifier: djdYHltsnYno50j1fMVNy9wD3G11jrhNSy1TzQvFQKs= Subject key identifier: 24:DD:42:7E:38:AE:DD:44:94:A5:03:6E:06:97:84:80:94:06:41:6A Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b Certificate serial: 019D32D0CBC48252BB276F6458B0096870C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft Manifest number: 189E Signing time: Sat 28 Mar 2026 05:00:37 +0000 Manifest this update: Sat 28 Mar 2026 05:00:37 +0000 Manifest next update: Sun 29 Mar 2026 05:00:37 +0000 Files and hashes: 1: 0Bk51Mjn6qErtAhOivvm_I8c0aE.roa (hash: aq3ZMEYBOh/rpC3SYBAxrvfX3FzvIksQARIozff4ffc=) 2: 3l3JwyRn9LUMsz8MYG14zOnBHdc.roa (hash: 2A1HY2h9Phgu+RFmc7588XfC02kPw7N3ZbQ8wc/kW84=) 3: 8bVGqU-tjWPnIG8sBYrZvrrahKI.roa (hash: IFFyNQvZAT+Bna1YbPC14TW6c3lxt7eZvL1L0yVl4NA=) 4: 8cAZRJhTLPqKsm4TAUR87r4-9JA.roa (hash: sx3g13vfM7xaU8g2AQwyXKrMTuN6j6YaMqFMPUpyTc0=) 5: CQTXAg4uTXvVTudN5hFeeXkNvkQ.roa (hash: MvXWyNfB+L1JsnBDH+iw0vhodg+qR3E3YtxwCLlLcLM=) 6: H_ZqL6RkECdFkORWPkQHZkQLmTw.roa (hash: iJ7KZIZmr4InzppQ2C7K5GIf14/i+7a4DnEB+2Vcn7s=) 7: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: JUk3Liei9xARlwz6nJNTnHqgWXZIdzB5nBEAsy7wb1M=) 8: PZJni5TxpYn092_2LgQ4TzNg1Vk.roa (hash: KAnI/w7Z4z73b7zbsNexFN30a6Ok+1UWHYIM1LyRw7A=) 9: TZUj41Zk_a4ctgh6bkXXZRSBnwo.roa (hash: SlDdEwpdjEtSII8TXEBDIBic9lrt5T7OD2GqENaMep4=) 10: dc8BS5CRu-zycD-wNYY8YKfw4Cw.roa (hash: 2OEK8MCyAYfbPpIXmNvUjGE5NLgSoSESlZhOHxxGtOM=) 11: g96pKLe6ZF1dh195VH6q_6jtDKE.roa (hash: GXl5Z35Jg4C6xTmicgl5RWGF0PIPfwr7nEkhMgfzcrU=) 12: iKkbPcQ4WIJAurPfzrtorCYjeJc.roa (hash: t+1uw36Adk7Pip1XNPSev194m4wMZgCV8f3gz9/3gjg=) 13: jT0g8lVx3dcAMaKxYxMOa3DkEIY.roa (hash: m3BcVFDXlnD1YdMRwzlLYT9pFM0ZGvuCdz2ltBkF8AA=) 14: n-mejQ3q29BELhma3oWoUOm-iuQ.roa (hash: NGJx12o2aUAcKnv8G9XcrR/xbQgpGxsRftcm0M1WRmc=) 15: oQGGdDTaNSA17PKm44IDHYFop2E.roa (hash: zwBhRxHLQ9o3LHpah+oy4Xr0d2WLdIvePEERXND5wzs=) 16: tklVWYVDGXe5URD0QFeTFCI-yOg.roa (hash: gNNzPMTDn7JasW09Gz6g9NSXq8GJJJOIAedRgSZzHrE=) 17: xXkiOHP5GPVKZFmsEyZEMy5ArTU.roa (hash: xeH/fFNJIFUXQ3IjYea8XVk8nJ8Z09onGn+NwK+Mb24=) 18: yVcflys92CzAxU-EuN_3N-w3nlE.roa (hash: zUTtMpuZxFGygRwVxvfWbYqYKDMVT6hU9O37iMaFGcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 00:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:32:d0:cb:c4:82:52:bb:27:6f:64:58:b0:09:68:70:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b Validity Not Before: Mar 28 05:00:37 2026 GMT Not After : Mar 29 05:00:37 2026 GMT Subject: CN=24dd427e38aedd4494a5036e069784809406416a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f7:16:d1:93:45:67:1c:64:3b:8a:3b:f6:18: a2:7d:18:7c:37:75:5c:e0:5b:53:fb:30:44:5d:bd: e4:56:1a:68:ef:50:8c:c2:1a:e6:89:c9:8c:19:94: 15:26:c7:60:b7:09:e4:19:a3:56:13:c5:1c:ad:28: d7:81:63:03:00:f4:57:e1:eb:9d:b3:17:21:1d:cd: 7b:e0:83:b5:ce:51:d4:58:c9:09:63:ae:66:ec:f5: c4:4c:b1:1c:e9:b1:bb:a7:6d:43:6e:ea:a5:e8:b2: a3:28:d7:1a:08:2a:67:8c:1b:b3:f7:10:b5:26:a1: ee:06:64:a7:b3:0c:cd:69:05:d1:a0:ec:ee:b2:bd: e0:82:f2:ed:18:57:32:d4:4b:e9:12:d2:6a:36:a2: 6a:8d:13:09:b3:df:e1:70:9e:1a:b0:15:d3:9f:42: c4:7d:cf:53:0b:52:3c:db:85:68:34:10:45:c1:c5: ff:e9:0e:03:ef:f2:b0:23:a6:3a:e1:6e:5e:89:1a: 26:95:8e:b6:10:e0:0b:1b:f8:52:cd:2e:ca:dc:9e: ce:d7:d8:78:14:0f:76:e8:8c:4c:cd:db:4c:8f:5a: 81:4f:91:6c:c0:53:85:e2:e2:5c:c9:40:30:11:21: 37:97:c0:36:ab:22:82:a3:c6:da:dc:2a:d1:f9:1d: 24:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DD:42:7E:38:AE:DD:44:94:A5:03:6E:06:97:84:80:94:06:41:6A X509v3 Authority Key Identifier: keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:00:dd:f4:7d:77:41:64:63:c9:d5:f9:9b:bf:1b:d3:80:2f: a0:bc:be:91:02:75:63:41:54:d2:84:e3:28:cb:f4:33:62:8d: 67:9a:5c:dc:05:59:6a:f8:3d:16:ba:23:92:ae:f9:6a:34:9e: 75:62:bc:0d:0d:83:f3:77:53:e8:db:ea:e9:8d:32:a3:2b:ef: e0:25:33:c0:9a:7a:88:87:78:17:e8:5c:a1:71:a4:67:e5:80: f3:12:a0:ce:e1:44:c6:57:ee:06:a2:2c:68:0c:5a:19:74:f1: 47:a8:c5:92:f4:99:26:35:53:06:d0:e6:77:61:e4:07:92:48: 37:46:62:20:b8:df:39:1a:2f:04:23:ca:cc:7a:78:2c:72:62: e3:e8:1f:e3:c0:08:d2:bc:52:c6:42:ea:ff:4b:a2:95:d6:9a: 63:22:3f:6c:de:86:4a:10:90:dd:bf:0b:f7:03:dc:71:81:b7: f5:0b:4a:cc:ac:1d:31:a1:cf:a4:51:49:da:e3:07:87:11:8d: ff:4c:c1:a5:1c:4e:80:cd:2e:ae:c2:6a:c5:29:d4:ed:4a:e3: bb:db:de:12:34:16:00:33:70:11:b9:ef:10:20:bb:cc:f2:b4: 7a:75:ef:e5:a2:7e:b0:3f:7f:e5:55:4f:ef:cd:6b:36:8d:13: b3:ae:de:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0y0MvEglK7J29kWLAJaHDFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1 N2E0OGIwHhcNMjYwMzI4MDUwMDM3WhcNMjYwMzI5MDUwMDM3WjAzMTEwLwYDVQQD EygyNGRkNDI3ZTM4YWVkZDQ0OTRhNTAzNmUwNjk3ODQ4MDk0MDY0MTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/cW0ZNFZxxkO4o79hiifRh8N3Vc 4FtT+zBEXb3kVhpo71CMwhrmicmMGZQVJsdgtwnkGaNWE8UcrSjXgWMDAPRX4eud sxchHc174IO1zlHUWMkJY65m7PXETLEc6bG7p21Dbuql6LKjKNcaCCpnjBuz9xC1 JqHuBmSnswzNaQXRoOzusr3ggvLtGFcy1EvpEtJqNqJqjRMJs9/hcJ4asBXTn0LE fc9TC1I824VoNBBFwcX/6Q4D7/KwI6Y64W5eiRomlY62EOALG/hSzS7K3J7O19h4 FA926IxMzdtMj1qBT5FswFOF4uJcyUAwESE3l8A2qyKCo8ba3CrR+R0kjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTdQn44rt1ElKUDbgaXhICUBkFqMB8GA1UdIwQY MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt YjIwZTI4ZjUxODhmLzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgDd9H13 QWRjydX5m78b04AvoLy+kQJ1Y0FU0oTjKMv0M2KNZ5pc3AVZavg9Frojkq75ajSe dWK8DQ2D83dT6Nvq6Y0yoyvv4CUzwJp6iId4F+hcoXGkZ+WA8xKgzuFExlfuBqIs aAxaGXTxR6jFkvSZJjVTBtDmd2HkB5JIN0ZiILjfORovBCPKzHp4LHJi4+gf48AI 0rxSxkLq/0uildaaYyI/bN6GShCQ3b8L9wPccYG39QtKzKwdMaHPpFFJ2uMHhxGN /0zBpRxOgM0ursJqxSnU7Urju9veEjQWADNwEbnvECC7zPK0enXv5aJ+sD9/5VVP 781rNo0Ts67eIQ== -----END CERTIFICATE-----Generated at Sat Mar 28 08:44:26 2026 by rpki-client