$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft File: dOPDNpcglLGowT1BgWhX0Zejquk.mft (raw, json) Hash identifier: VZN6fHlXcZxR2py2T4HvnKpnfCXd6POJQHdSrN/ljdM= Subject key identifier: 31:DA:9B:6E:30:0D:A6:8F:34:DD:3F:75:B4:38:1B:CE:B3:BF:D9:F8 Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9 Certificate serial: 019E1DFEA6A0151F78A70AA392569DB66910 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft Manifest number: 162B Signing time: Tue 12 May 2026 21:01:28 +0000 Manifest this update: Tue 12 May 2026 21:01:28 +0000 Manifest next update: Wed 13 May 2026 21:01:28 +0000 Files and hashes: 1: 1vjKgLyMbmbnD9BN-ENq6mCvpdQ.roa (hash: j6oOw0mW9VGeX6HTh7Pt8Y8xHM75I2sfi2YWe7POauE=) 2: 65FnmspDUVJ9_6QxvLd4l0NA4FE.roa (hash: lgYYkTyMefTXhDS2aNN91oiVE93MHjvbMsoRpFVLAkk=) 3: 6USIsr77ojsfaUkK7p_9yPX50RE.roa (hash: bxePdusDHlOz01oH/vysD1HExvewxm7Ub84+S8jsj6E=) 4: Bh0VhXCtnVTu6NYuZ4a0xAtyxnA.roa (hash: HBYP5wsCK4dtPnx1EHAW2IQhQMnr5dUB/nJJqTK+1C4=) 5: EnU8KLDk0MRS40FVtDjms_Soitw.roa (hash: rcy33n4rwkCj0xCW3i6XJv7RosymyzbT1+UqsgkLw0Q=) 6: Fe1_O6lqpZ4wU51PSyJRl5pRxgs.roa (hash: 3NI8C19YgNRWzyzmt0xuFsZNQ7eEnAdbBiag8O0XRuA=) 7: LcVUnzg476sY0cRj19anqQVr9co.roa (hash: CgyZ8RxzuluDb45z3tYn/fize5wHrZwU9v+utbAlRwk=) 8: QtjndSCGblrfab-ioVOroaNfPN4.roa (hash: 4OpyhaYwVmjq3TRkCJRrHAwNHbosmRoeTn4+UUJfDU8=) 9: dOPDNpcglLGowT1BgWhX0Zejquk.crl (hash: HP0EZOtuhdhnM7VZfhFpe8lTUQUQdoAdE1h8hWGKJq8=) 10: lC8mVQtZgzYCvFwXFlGkBqCpw84.roa (hash: SarrKRsARvJpAVux4A8mAEIosBVax08KS/WsVU5r/mE=) 11: ooTDK5wBI-XJq8zfv_YSdFU-vlo.roa (hash: xJD4AS2qcydvJ4nIFIToFd7KJeX/bcKOS0Cq1Ky05fE=) 12: sOU9sf_TLtLowD_NZ2t2Nk3oMWk.roa (hash: A6LA4etDI922EmA77PSJlPQnzxugY9xfCjTlpLtEMx0=) 13: usyF6cqpiTZ36Hi-zUV3iBaL6mI.roa (hash: MwwYW4a1c7XEGwwS8SXJYUUEBBLKVu6KJRZWVoJlLQo=) 14: v4wBo_Qz0X5zJTIwb0QZQ9GFZms.roa (hash: IlvU1dySJCzAWqUq3ax3NvMIRPVQQDJqs9utM98mnVw=) 15: y8jNpNhJhN8HEtdIA-w7AJf_i5Q.roa (hash: 8sIOOrWgw4Q4JWzlfJJ/cqOkQmwBNx1SNCCheRpOVMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:fe:a6:a0:15:1f:78:a7:0a:a3:92:56:9d:b6:69:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9 Validity Not Before: May 12 21:01:28 2026 GMT Not After : May 13 21:01:28 2026 GMT Subject: CN=31da9b6e300da68f34dd3f75b4381bceb3bfd9f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d2:c1:8a:46:e2:55:28:76:f5:cd:97:b5:4c: 23:cc:81:9c:ba:82:3c:2a:f4:e7:0c:1e:90:fa:bb: f8:c7:fe:e1:26:7e:c8:dc:21:9d:1e:e9:48:dd:27: 37:32:23:34:c4:07:05:4a:39:76:79:6c:83:fa:12: 65:9c:38:80:b1:13:c2:90:27:7c:42:70:15:62:00: ec:63:dd:91:6b:0d:e6:c8:14:f5:69:5e:00:d0:29: 87:0c:66:a4:c9:b8:22:b9:96:d5:aa:8f:b8:08:0f: fc:ad:0e:7c:62:16:99:ca:cc:f3:65:ad:5c:14:38: 8d:86:8a:ae:18:c7:ef:9d:4e:58:92:15:bc:b9:e5: b6:7d:9d:74:c1:fa:28:ad:98:ab:8a:4b:c1:83:eb: c0:45:4a:6b:96:b9:f0:a6:1a:09:0e:2a:bd:8b:a6: 15:c5:ec:54:6c:6c:7d:ff:2d:f7:cb:01:c6:89:25: 7a:e6:18:1a:12:28:25:01:4a:90:73:a5:88:d3:64: 29:eb:f2:43:e6:02:ab:91:e0:21:66:c0:00:83:8d: 14:02:f4:35:3a:81:d2:11:71:ae:8e:c9:e8:9f:13: 17:eb:0d:af:47:db:a3:7e:fc:0d:1f:99:90:27:61: 97:b1:67:31:fe:b0:54:d6:64:91:65:de:a2:cf:4d: bf:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DA:9B:6E:30:0D:A6:8F:34:DD:3F:75:B4:38:1B:CE:B3:BF:D9:F8 X509v3 Authority Key Identifier: keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:7a:aa:f3:07:13:e2:f8:75:b0:9f:a0:43:a8:01:60:94:2e: d2:2a:74:a6:1d:ec:98:f5:a0:14:1f:c0:78:c8:2a:6a:20:98: f8:e3:19:a4:ee:0a:e0:5f:b9:9c:40:23:d3:43:15:dd:17:87: 38:d3:09:b8:ed:fc:40:16:b6:46:73:d0:32:22:46:81:42:c3: c4:29:8a:98:d4:d3:b0:8b:ca:bf:f7:39:19:1e:eb:76:0c:19: a8:65:ae:f9:83:63:84:30:8c:a0:93:2b:72:8a:14:96:0b:bd: 90:58:56:3e:32:fa:87:85:69:61:f9:00:5b:94:e7:00:64:00: b8:71:83:64:93:13:ea:26:e3:c5:09:15:48:b8:ab:73:ea:f2: c2:a9:5a:ac:3e:61:3c:9e:51:c8:8d:cf:96:a6:8f:9a:75:68: 0b:77:52:b2:76:ce:59:41:58:6c:df:fe:e2:c6:36:72:46:73: 7d:68:40:af:4f:fa:48:68:6a:f4:74:6b:0e:96:2c:4c:f5:e7: 62:a7:a6:ab:9a:a3:ad:39:59:d4:e3:e1:f2:55:db:96:87:b4: 75:63:d1:81:59:58:ff:a3:28:35:f5:3d:4a:51:63:8b:bf:64: 23:11:5b:e4:97:7f:d6:8d:84:ea:89:62:c5:7b:1f:35:7f:16: 7f:28:18:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4d/qagFR94pwqjkladtmkQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh M2FhZTkwHhcNMjYwNTEyMjEwMTI4WhcNMjYwNTEzMjEwMTI4WjAzMTEwLwYDVQQD EygzMWRhOWI2ZTMwMGRhNjhmMzRkZDNmNzViNDM4MWJjZWIzYmZkOWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdLBikbiVSh29c2XtUwjzIGcuoI8 KvTnDB6Q+rv4x/7hJn7I3CGdHulI3Sc3MiM0xAcFSjl2eWyD+hJlnDiAsRPCkCd8 QnAVYgDsY92Raw3myBT1aV4A0CmHDGakybgiuZbVqo+4CA/8rQ58YhaZyszzZa1c FDiNhoquGMfvnU5YkhW8ueW2fZ10wfoorZirikvBg+vARUprlrnwphoJDiq9i6YV xexUbGx9/y33ywHGiSV65hgaEiglAUqQc6WI02Qp6/JD5gKrkeAhZsAAg40UAvQ1 OoHSEXGujsnonxMX6w2vR9ujfvwNH5mQJ2GXsWcx/rBU1mSRZd6iz02/WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHam24wDaaPNN0/dbQ4G86zv9n4MB8GA1UdIwQY MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt YTZjNDllYjI4Mjg3LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3 LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnqq8wcT 4vh1sJ+gQ6gBYJQu0ip0ph3smPWgFB/AeMgqaiCY+OMZpO4K4F+5nEAj00MV3ReH ONMJuO38QBa2RnPQMiJGgULDxCmKmNTTsIvKv/c5GR7rdgwZqGWu+YNjhDCMoJMr cooUlgu9kFhWPjL6h4VpYfkAW5TnAGQAuHGDZJMT6ibjxQkVSLirc+rywqlarD5h PJ5RyI3PlqaPmnVoC3dSsnbOWUFYbN/+4sY2ckZzfWhAr0/6SGhq9HRrDpYsTPXn Yqemq5qjrTlZ1OPh8lXbloe0dWPRgVlY/6MoNfU9SlFji79kIxFb5Jd/1o2E6oli xXsfNX8WfygYJg== -----END CERTIFICATE-----Generated at Wed May 13 03:39:32 2026 by rpki-client