$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft File: oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft (raw, json) Hash identifier: j0Dgqa8yIble6EJTn+MiuJ57dQv28q2HGP6qkD3l3Uk= Subject key identifier: 2A:3D:BE:DC:F4:C4:6A:6A:FC:BB:E4:C1:7B:E3:5E:6C:7F:1D:60:79 Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 019D265FD9E5F4550A469017934744F15336 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft Manifest number: 1957 Signing time: Wed 25 Mar 2026 19:01:48 +0000 Manifest this update: Wed 25 Mar 2026 19:01:48 +0000 Manifest next update: Thu 26 Mar 2026 19:01:48 +0000 Files and hashes: 1: 4rH8_KArysg1wV6ciMc3tWxygTg.roa (hash: cq85Psa3QmMqDUVP4F4xb9vfchcL6V84oYNIOe6pTDM=) 2: 5vwpHz3SsOG_BBmCIjDNA6eKdfo.roa (hash: fEgj28VMxOBq530JqkQ4L0AkUDxqsTY2W/2Q3rsmUrA=) 3: COhxtBFve16URB_MEOFhKay9rTs.roa (hash: jOV3WCjtAk4tHvHdqA8saI4UUBzsbtvE9u3e+QDh71M=) 4: Dy12ueox4iemeyny5vY-mZAduiI.roa (hash: TlSFsuGfZ5d+gxSWEzsL9O69Jb3O/hSnK0ssg9X6n9c=) 5: HRFCRunnn9wNoyI6JOFSdOd10yI.roa (hash: yo5Bt9GIUkYOumvikP4co3jOtmyICwQImhbhqVKdEUY=) 6: Ho68QlwWf7XmMGL8gfZuoyvkSbo.roa (hash: AcJGVstbrZSqQf+OL9tIENTQwlR+SF+hfnijkNVA4O4=) 7: K87a3SozjRNM0L2VSDzBQDss-TM.roa (hash: 7X4hOZNngfP2AOympHac08iUZmiyE7LGoxs4Na6L/lk=) 8: NT9woNeJwBeU42rNyb848SmBYlo.roa (hash: DTJNFykP/BFz6g6XPdl3htlBBfn53C8lDXv1eaLG5ok=) 9: NbOdHCLfD_9SA0rN9xVT2s8QdlA.roa (hash: frkQB7jrq/YhMcxvQw0JdD7plHmO9jmXrctMInTruNM=) 10: OLCDzI5xxlDKzka6lWJFVjNvDPw.roa (hash: Qs0OIV8lR1PaADu190zcJgT0XahHOWsjHenFFst/arg=) 11: PGD9MZeytPQjHh3vXGAvYMctnV4.roa (hash: dBNP/wJKl2F50HovgyUiUTR33u+q/5vGeSSba/CKPXU=) 12: PLGWIZgwYkMO77MmlmTCSwUg4MA.roa (hash: BOEZWRA0pYEkUwtQYq1CCUzMVWLzHT9J9Pqd9wJtlvY=) 13: Pvldt4Xm66AODz9ub5YATR61bpg.roa (hash: mhUDlLYy/KUsiqdqJUa31hfGo6XBqGiFyvzRAXoUW/g=) 14: QRe1t4xoC5DfawSBrQHzo3FmhLM.roa (hash: E+vj4zV/6ZJ/k1LOoS20wbJJIbfhjuZ939KrL0GVfx4=) 15: S1jD-5Utb5l_TqOf3xp9hNVbAZM.roa (hash: 4N3FFL4AzILL7Go78JFJIpXyx5xR/Ad8cvO6bVYZZv0=) 16: TBzPDJSD-OPoY5YDRj-GVWldeIo.roa (hash: RtYdqmCGS0/udA9BSM3ibNGPD4ku1WnFAfDRmn6ORBQ=) 17: UGVa8Xyqk4ksPGgnfd31vBitCIY.roa (hash: bZ6endjeA2RujV7R8PyJfRemO9ZBIhAjsInbMMWdh90=) 18: VOyxth9qspwPWVU5GtsemH5xu5Y.roa (hash: /TitFEmWF3mLbju9cYq96a2uGnq7dFetaj8cDGfX6bo=) 19: VptxbwzXKJqQyLjAtX2teZehsqE.roa (hash: DcslDuby0bAKKKb6DpeteuHsFd0PL1RiuU2wjGszdfk=) 20: X-EkV-WP2idrAD8cBtl8naElPoA.roa (hash: dkqiN3zxKk6ENg5SKstGMFmP/TT2YPL3QLMR66r2DQ8=) 21: ZAR3134MSG7c8pQeqt21BjTKzHk.roa (hash: H4qYUBv0F0ZniT9I1OT/UVS7jhOeC3g/GkknK01ImTE=) 22: _YMV-r6YGy_b5YOpBOqF7viPoc8.roa (hash: is3oJp1G8er/OBr6GK6OPtF33YU7blB2hOshyfedxsA=) 23: atxYNSY6Yx-7ElIL_eqsGGTZriY.roa (hash: sK5wSL3tcZLQ9cvUwLxP7MoUiyiicJ+mjfpcgXnlWkc=) 24: bBvGTyS2yQa6YR2RFe61hrCsDgk.roa (hash: +61f6+40PPC+07wtISqHIyXFeS6Le/BLpWRYgptfad4=) 25: oE1O5uGMlt05gWy6EMnmTgraW8k.roa (hash: /DZ/BcePxC8RHCDv/4OF4LqAQV2sdDiRlC/rnovIjbA=) 26: oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl (hash: kOj7DJojvD0tjeMYsUeADCi+MrFUlWSiB9QOCB/NZ68=) 27: oOrJ1mX-eBcznfB-6h_-uiPoUU4.roa (hash: JC0s2WTzEg4/KUWP2gEhCQYV0XyL5LJW76D+euRX/Y8=) 28: r8r911ceJgErmagjccGWtP7JKZM.roa (hash: fqNaDWj1DnYH2erYDtEPh2cuFFkCIyLSyPbWVfnqgxA=) 29: rgE_RHcfNuUFoaKxthVMKKDCw0s.roa (hash: QD1Kf00J2FokHRU/aR51xu7Mw9Z1FH1udsXrO1N5O+s=) 30: tHRvty-RlUw0Falh2OpgwqWerCo.roa (hash: 30HyZEY0OdrKQq3zOLaCSH/elkuCREvNILd0PXgRBSs=) 31: uuRczKZwsSuhCu172Grh6B9knxk.roa (hash: P4PWs2fsYglkv3o2ELArEKxvKuDLCR2pbc5p9qH3He8=) 32: vTyaSOcTKNK7HOEpRoHOTWIFFhs.roa (hash: o99W7jY/Y+nX4RuXt0Qn61sP42zZM8y5fY23/UCcTmM=) 33: w5TIz9UXktiNlyDUD2lDoEdhEQE.roa (hash: ikqIWz4GbbCq/SA0jYO5bGzmtr0yVrKpoGSYDIJCyeY=) 34: xLrDeMIdOHc_uW7MQY4GNPFpZuo.roa (hash: s/x17aNCOaU2UsnCEqFwmKabzlSylan6beu6oAqMMFc=) 35: ykPAskiY2eo6bwenp7rou0Cd4Co.roa (hash: 7MaXibZAcGAVoxSztPs4C8RQcPHCjtKPNjMHd2bXMxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:5f:d9:e5:f4:55:0a:46:90:17:93:47:44:f1:53:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Mar 25 19:01:48 2026 GMT Not After : Mar 26 19:01:48 2026 GMT Subject: CN=2a3dbedcf4c46a6afcbbe4c17be35e6c7f1d6079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c6:ca:8a:3e:49:c8:56:02:af:05:b0:75:79: 81:89:e4:44:12:7b:ee:41:0a:e2:66:05:18:9a:01: 5a:92:69:be:4c:5b:c0:fc:aa:86:17:9c:6b:c6:61: 53:d4:e7:5f:f0:81:e3:84:65:ca:3f:2b:1a:ea:04: 9f:39:90:08:03:ff:96:1f:85:fe:64:08:63:e9:c0: 9a:24:e1:2c:e5:52:56:10:87:d0:f0:4c:1c:15:fc: 15:f3:50:10:e2:df:1c:d8:00:28:0c:7f:3e:d7:e0: fb:14:1f:6c:99:68:b2:0a:ae:c0:eb:4f:57:c9:25: f8:ec:dc:f4:df:55:00:fc:ed:33:ec:f0:cc:90:16: 21:ad:4f:ac:2e:4d:08:72:f7:6c:90:12:ae:38:dd: 13:2a:c9:4d:e4:99:fa:41:77:a6:16:4c:00:55:fa: 3a:72:01:98:cf:a3:99:25:7d:0a:88:b4:f8:82:60: e8:69:33:d5:40:2b:a6:45:a4:5a:ff:f5:06:f3:34: 85:8f:c8:93:dc:64:5a:19:51:3e:ae:cf:1c:6d:f8: 91:82:ea:e4:5b:17:b7:4c:d9:55:a2:8f:13:ac:66: dd:53:24:25:30:5b:6e:84:fb:1b:24:59:4a:6f:18: df:01:75:7c:d3:a7:7d:64:0a:80:0d:f4:dd:ab:c0: 71:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3D:BE:DC:F4:C4:6A:6A:FC:BB:E4:C1:7B:E3:5E:6C:7F:1D:60:79 X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:94:18:cc:c3:82:50:dd:09:95:e3:ac:c1:a5:3e:b7:12:d7: e8:9e:a5:f1:41:36:fb:c8:38:74:7e:26:bd:2d:cb:d4:3f:bc: 7f:7f:1b:3b:6f:73:33:51:05:c1:04:f3:a2:49:f6:a6:6d:3b: d7:9c:8c:01:76:8a:39:12:91:09:97:04:e0:e1:67:bf:fd:ec: b9:1d:f6:5b:f1:f0:2d:2d:59:ed:9c:0c:e6:e3:78:9d:0b:93: 47:0f:b0:4d:4e:34:7a:10:7b:ae:bc:df:51:6e:c7:e7:91:9d: f9:82:eb:c7:c8:2b:81:e4:4c:b8:f4:98:d6:70:29:64:af:c2: 90:e8:ef:e8:2a:d0:46:ba:e9:b7:77:20:47:66:08:e9:64:78: d4:15:82:ea:81:33:d6:3b:af:46:49:7e:e6:10:02:e5:0f:7d: 12:f3:cd:5e:e6:ac:36:64:a4:80:68:cf:11:94:87:9a:67:1a: 99:f1:2f:2e:54:01:be:1d:b0:9a:0b:21:60:90:55:3b:46:f0: e9:ef:66:17:a9:3c:d2:9d:75:6d:de:ab:4d:be:e5:48:b0:ee: 1f:e1:64:f9:62:de:7f:aa:bf:16:83:92:cb:d0:c9:24:d9:2e: b9:9d:54:87:33:91:97:9c:f0:b4:1c:4e:a3:bc:bd:e7:cb:26: 00:79:70:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mX9nl9FUKRpAXk0dE8VM2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjYwMzI1MTkwMTQ4WhcNMjYwMzI2MTkwMTQ4WjAzMTEwLwYDVQQD EygyYTNkYmVkY2Y0YzQ2YTZhZmNiYmU0YzE3YmUzNWU2YzdmMWQ2MDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8bKij5JyFYCrwWwdXmBieREEnvu QQriZgUYmgFakmm+TFvA/KqGF5xrxmFT1Odf8IHjhGXKPysa6gSfOZAIA/+WH4X+ ZAhj6cCaJOEs5VJWEIfQ8EwcFfwV81AQ4t8c2AAoDH8+1+D7FB9smWiyCq7A609X ySX47Nz031UA/O0z7PDMkBYhrU+sLk0IcvdskBKuON0TKslN5Jn6QXemFkwAVfo6 cgGYz6OZJX0KiLT4gmDoaTPVQCumRaRa//UG8zSFj8iT3GRaGVE+rs8cbfiRgurk Wxe3TNlVoo8TrGbdUyQlMFtuhPsbJFlKbxjfAXV806d9ZAqADfTdq8BxHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCo9vtz0xGpq/LvkwXvjXmx/HWB5MB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpQYzMOC UN0JleOswaU+txLX6J6l8UE2+8g4dH4mvS3L1D+8f38bO29zM1EFwQTzokn2pm07 15yMAXaKORKRCZcE4OFnv/3suR32W/HwLS1Z7ZwM5uN4nQuTRw+wTU40ehB7rrzf UW7H55Gd+YLrx8grgeRMuPSY1nApZK/CkOjv6CrQRrrpt3cgR2YI6WR41BWC6oEz 1juvRkl+5hAC5Q99EvPNXuasNmSkgGjPEZSHmmcamfEvLlQBvh2wmgshYJBVO0bw 6e9mF6k80p11bd6rTb7lSLDuH+Fk+WLef6q/FoOSy9DJJNkuuZ1UhzORl5zwtBxO o7y958smAHlwcw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:22:02 2026 by rpki-client