$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft File: Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json) Hash identifier: rNRSFTDHRdYqw9r6e8pzaIQ9RJvTYrsxMTViZLuAe0I= Subject key identifier: 24:41:1E:D4:97:71:4B:DF:A3:0C:0C:B5:5E:83:0B:38:B0:53:C2:A8 Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 019D270492F6DC0B0414C9CC8D5CD50251EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft Manifest number: 18A8 Signing time: Wed 25 Mar 2026 22:01:44 +0000 Manifest this update: Wed 25 Mar 2026 22:01:44 +0000 Manifest next update: Thu 26 Mar 2026 22:01:44 +0000 Files and hashes: 1: 6PKIKUxySdUwZYjBpQdap24rMCA.roa (hash: Q+sfZpJT+al0TFOwIddw17g5+KoGJur9NLjQbu4nLpM=) 2: 8V2NwbvFlQZYvhmUrca34kxhXa0.roa (hash: DM0RB7X2NkgoMommIXHbEaH33Jj0bMo7E0xn5ejVedM=) 3: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: /bQidoVMI0v0+/6YqnhU7amwKQkjCwk6sAb27etNbKk=) 4: QawDO3nriy0Ac_BTEa82vA_nGDI.roa (hash: ONoC4PBmZZaC9uv6W2VVUcFA7b/wums0wl8fDhnZ7Gg=) 5: XJ2jXlF2Mo_xE-IDDytKM0CTO3E.roa (hash: HVJb11Pj3eJSoRHZP1XpkyINHh78VkvQ2O0d3UKBEjc=) 6: ZUtFH_qhx3L4PEjgB3q82Pko9A8.roa (hash: cpl/eTn6qz8+2/3oyMQl/oJw6IV6mFmSjoin/h1krGs=) 7: f8crMnaCvVJR24y4HZK4aF4ON_Y.roa (hash: a4LuuWR1pCU4Uin5c2uaOnWKPPk90YN8aUWR2m/vZDQ=) 8: hTSJfxOcDimDlYTfQcRbvzQKHsc.roa (hash: wKx5VDHNAbIU3w07fQ2WEFRFq5VMfAKh3nrE2+cguJU=) 9: kO9WlUparYb6jLj3Al1HAfYWyc4.roa (hash: uf/Ee/JGBTSZ54j7ty6QwzOZpLC0w43Jza7tQwup4Iw=) 10: oeb6m3It37B8PGE2O7TDai_TrWY.roa (hash: AfKJo3qTL26v5E6lQbsmszspXYIo4b8KBBv1yOMp4wQ=) 11: u5pqVXheduvSRyevzvk3F281Pv8.roa (hash: 99RNfzNuS1w8/5besxPZV13SYkOzDoP6UORAhIYy5ic=) 12: w8agfRL1GVHiUSL4QR-4AfJIyKQ.roa (hash: hBE3KCvCu5YG/sDO5HAFViDYI0rH255FlChKrGnbX6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 22:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:04:92:f6:dc:0b:04:14:c9:cc:8d:5c:d5:02:51:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Mar 25 22:01:44 2026 GMT Not After : Mar 26 22:01:44 2026 GMT Subject: CN=24411ed497714bdfa30c0cb55e830b38b053c2a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3f:22:49:ed:d8:d2:d3:c3:68:1a:49:04:9d: 1c:cd:28:ab:c4:df:94:f9:83:02:55:8e:62:6c:e5: 30:b6:7f:e3:be:13:f5:0d:e3:fb:e3:2c:7b:b0:c1: 1a:95:fb:17:f0:95:4f:dc:2b:97:84:de:8b:2c:3d: 24:76:9c:1b:ac:00:6d:1c:19:86:dd:21:92:b8:e1: f7:81:60:e5:d6:7f:da:08:23:8b:e9:84:26:6c:75: 7a:c4:b5:b7:fb:de:f5:81:1a:87:b1:20:e6:8f:33: e6:c8:f6:89:7e:f5:9e:8d:82:e5:81:c5:d3:5c:fb: 3b:77:bb:6a:55:b2:3a:f6:f0:3e:7a:26:fd:71:71: 3e:21:66:bd:f7:14:54:29:02:7f:a8:5f:b6:4e:74: 06:e0:e8:2e:54:b9:93:e7:80:22:4e:80:5e:34:5f: 33:21:4f:3a:83:2b:bd:d1:5d:cc:90:9a:a8:c1:53: 64:f4:0f:d4:63:7b:77:59:fe:de:28:1c:b1:61:e7: 43:9c:74:07:13:81:4c:0a:7b:38:f3:15:ca:9b:cf: 67:03:e6:47:91:af:30:03:3e:a0:98:17:48:e0:a3: cc:aa:92:2b:5f:10:62:e9:1f:6b:08:77:4e:46:20: e8:15:0e:b6:ea:22:9d:f5:dd:52:18:2b:24:8f:a5: 54:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:41:1E:D4:97:71:4B:DF:A3:0C:0C:B5:5E:83:0B:38:B0:53:C2:A8 X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:8f:33:7f:60:9a:b7:75:34:49:a9:b5:40:90:64:63:37:1f: b5:8d:83:46:a9:f9:7e:8e:24:c5:b5:ce:f8:f8:0d:03:81:cb: 5b:9c:05:04:1d:97:de:cd:05:5d:23:95:a1:54:be:e6:b5:b1: ad:dc:ec:e5:eb:5d:0c:96:44:b6:34:2c:9a:ae:63:44:1e:e1: e4:82:c9:1e:28:ab:13:65:a5:3a:73:ef:fe:74:ce:fc:eb:a0: 08:31:53:17:03:98:5d:b6:ba:7a:96:e1:76:f6:df:fd:d0:31: ab:ec:8d:6d:67:5e:2e:f9:1a:7e:8b:21:27:f9:a9:20:3e:33: 85:a9:55:c5:25:35:40:78:76:73:6a:83:ba:8a:c7:c1:d7:c9: e4:a3:24:33:d4:57:32:86:a7:7c:ff:36:80:77:18:93:24:0e: 90:69:0c:29:9e:95:8c:63:07:a2:42:b9:f5:bd:84:2b:ba:30: 0c:13:de:ac:e6:91:c6:09:d8:ec:f1:5a:8a:69:f9:ce:7b:51: 24:75:68:4b:f5:0e:c6:6a:5d:ec:41:f9:8b:a7:c6:66:54:a6: 5e:d7:73:36:ea:a3:a4:69:da:9a:26:9e:5f:b7:2a:45:7d:95: 86:10:29:94:e6:53:58:45:f6:3e:b8:0e:a4:95:0f:77:85:d2: a6:77:fd:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nBJL23AsEFMnMjVzVAlHqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjYwMzI1MjIwMTQ0WhcNMjYwMzI2MjIwMTQ0WjAzMTEwLwYDVQQD EygyNDQxMWVkNDk3NzE0YmRmYTMwYzBjYjU1ZTgzMGIzOGIwNTNjMmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4D8iSe3Y0tPDaBpJBJ0czSirxN+U +YMCVY5ibOUwtn/jvhP1DeP74yx7sMEalfsX8JVP3CuXhN6LLD0kdpwbrABtHBmG 3SGSuOH3gWDl1n/aCCOL6YQmbHV6xLW3+971gRqHsSDmjzPmyPaJfvWejYLlgcXT XPs7d7tqVbI69vA+eib9cXE+IWa99xRUKQJ/qF+2TnQG4OguVLmT54AiToBeNF8z IU86gyu90V3MkJqowVNk9A/UY3t3Wf7eKByxYedDnHQHE4FMCns48xXKm89nA+ZH ka8wAz6gmBdI4KPMqpIrXxBi6R9rCHdORiDoFQ626iKd9d1SGCskj6VUpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRBHtSXcUvfowwMtV6DCziwU8KoMB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASY8zf2Ca t3U0Sam1QJBkYzcftY2DRqn5fo4kxbXO+PgNA4HLW5wFBB2X3s0FXSOVoVS+5rWx rdzs5etdDJZEtjQsmq5jRB7h5ILJHiirE2WlOnPv/nTO/OugCDFTFwOYXba6epbh dvbf/dAxq+yNbWdeLvkafoshJ/mpID4zhalVxSU1QHh2c2qDuorHwdfJ5KMkM9RX MoanfP82gHcYkyQOkGkMKZ6VjGMHokK59b2EK7owDBPerOaRxgnY7PFaimn5zntR JHVoS/UOxmpd7EH5i6fGZlSmXtdzNuqjpGnamiaeX7cqRX2VhhAplOZTWEX2PrgO pJUPd4XSpnf9Dg== -----END CERTIFICATE-----Generated at Thu Mar 26 06:13:52 2026 by rpki-client