$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft File: OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft (raw, json) Hash identifier: RWup4lXfgzaGL/k7OeHYewpSZC/J3YOZtR35BjX31jc= Subject key identifier: 0F:A7:00:68:27:C5:4F:D8:C4:AC:75:68:2F:8D:E6:3E:98:F9:12:13 Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984 Certificate serial: 019E1F10DB9F4DCFEDDDB445D355E20CACAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft Manifest number: 1646 Signing time: Wed 13 May 2026 02:00:58 +0000 Manifest this update: Wed 13 May 2026 02:00:58 +0000 Manifest next update: Thu 14 May 2026 02:00:58 +0000 Files and hashes: 1: FaALcy5Rtdmr2uieYxRcTmINxY0.roa (hash: o5V0XpUincjUZD8yuz4NaYPFOSAiOXTebna/NUT2JTM=) 2: GIHrVIViJFcoMcRYSuQORanWhE0.roa (hash: Xw1YJyhBQX1BH/gd6wFdXzyzKUO+qJJ2rPYoYPjD3gc=) 3: GoQ2pW0J_933ITOYr6rqq9EIbrQ.roa (hash: tKfgDPMmtVyaPODH9xVO5b6jSIkFqfcU29cf6LiBAWM=) 4: MxSN252Rt46daJzmFnKjpDWsGI4.roa (hash: UgheYX57caiwV4IurgnGNzd/ol6yl6jaHGlsEwq1YIg=) 5: OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl (hash: 3NGhENuF8M4oF/3MuPph7aY2p0ZYZw8XqVTb/MMSlj0=) 6: aXaCU83J-_jJ_EnlqZRgN5SQBBk.roa (hash: Vz1lenxM6E43wZsZKYeL1SXodzdNb6RvRRHtozOm9sQ=) 7: cuzZQDYRmdoOYAwAqrA09B4nCAY.roa (hash: 1hhTZq7Tio3QN3NZHMlqIBNsnPCPxg5AP94bS0dr2eU=) 8: lnbRQm2gHQjzkC4Pljc7ywe1fzc.roa (hash: hyi2L8VUzd790YBk5rv5fMvAHFOMrgEkftZ2exdk9ZU=) 9: n-nFKLKkH_a8UIkmjAG8WheeMkQ.roa (hash: 4lMwGlH5lrGUibaDmIf2SptMviWc/ApHUJVaOyRTYKs=) 10: raiLbBG1CMRiAfKyRkS-YiJSo9g.roa (hash: 8FLAxtrWMI4dbICfx4l/Gu56C8DGN6sem1ZiAu15jqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 02:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1f:10:db:9f:4d:cf:ed:dd:b4:45:d3:55:e2:0c:ac:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984 Validity Not Before: May 13 02:00:58 2026 GMT Not After : May 14 02:00:58 2026 GMT Subject: CN=0fa7006827c54fd8c4ac75682f8de63e98f91213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:7c:8c:1b:ea:c2:a3:13:6f:1c:80:c2:a2:9f: 37:82:61:d2:4e:9e:6e:c3:84:56:9b:0e:30:9d:f1: 19:ea:43:8a:27:c3:3a:f9:f8:41:ed:78:41:01:d8: 14:ee:61:89:d9:f1:59:19:82:12:31:f7:de:6b:bc: 5d:ac:05:0a:d4:8d:79:73:ee:cd:60:27:c9:6c:87: af:17:4f:ef:f3:27:a2:71:04:4d:76:c3:1e:aa:8f: 91:be:93:52:9d:c2:d9:2c:fe:34:f5:22:7a:42:02: 05:bc:36:ee:de:d5:55:92:d7:db:0b:6b:d4:bc:e3: fe:ca:c9:c0:7b:81:27:b6:f0:24:f4:5c:35:a9:2e: d7:98:45:07:90:43:24:e3:1f:10:12:5e:15:79:12: ef:de:45:31:2a:58:b8:ac:06:63:c9:b8:77:ad:86: 92:2c:45:09:6a:40:14:76:e5:2e:7d:34:a8:3f:6e: d6:4c:c3:fb:eb:1f:cd:91:88:8e:32:b8:b2:2a:1d: 5f:aa:f8:50:bb:52:70:b8:fd:24:a1:b7:9e:3c:2a: d9:09:7d:2c:be:f0:b5:7a:9c:3f:a8:b9:92:fe:83: 03:18:8f:d8:06:26:b9:0d:8f:e5:19:3f:69:c9:8b: 07:50:30:d7:ef:e0:b8:d2:25:40:5f:a7:09:c3:3f: 45:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A7:00:68:27:C5:4F:D8:C4:AC:75:68:2F:8D:E6:3E:98:F9:12:13 X509v3 Authority Key Identifier: keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:3f:89:91:fc:91:25:88:c1:4f:cf:9d:31:76:b5:86:84:7a: 7d:78:48:e1:87:eb:ee:78:47:85:42:34:01:25:54:16:70:f0: 21:6f:9f:85:1c:bc:11:c9:0d:78:58:4d:24:cb:f6:30:08:5e: 9d:d7:77:58:db:1c:cf:e7:1b:1d:8f:16:aa:3c:49:65:2b:4a: e1:1e:75:58:29:ac:9f:2b:6e:e3:5f:41:b2:11:26:f1:73:a4: 72:66:36:76:34:a0:b7:0a:3f:ac:59:ed:e1:b5:b3:00:b1:ab: 18:79:b7:1d:b2:4e:6a:43:3d:a4:62:da:e0:ad:60:b4:56:e2: 74:44:85:b5:4a:15:f9:21:da:8d:52:aa:0e:9a:b4:d0:fb:35: a6:44:0f:ae:ab:04:da:f2:44:4e:03:05:4c:0a:ce:9e:ad:2d: ae:31:b8:58:0a:46:59:ac:a4:ef:2f:66:32:f2:89:4d:5b:e9: 48:1d:3f:09:c1:0c:0a:19:38:53:2f:7c:9d:95:25:6c:f9:7f: 04:0f:ae:e4:91:b1:a9:d6:27:7f:3d:e4:b2:0f:64:18:49:3c: ac:a8:4b:24:40:33:e6:16:b4:63:33:76:36:da:ab:88:21:14: 68:61:8e:62:8a:c8:57:a8:3e:21:9b:12:68:85:7c:3f:0a:f4: 73:07:a0:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4fENufTc/t3bRF01XiDKysMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjAzNDYzZWI5NDRiMjVjNjUxMzVjYTQ3YmRiZGFiNjQ2 ZjM5ODQwHhcNMjYwNTEzMDIwMDU4WhcNMjYwNTE0MDIwMDU4WjAzMTEwLwYDVQQD EygwZmE3MDA2ODI3YzU0ZmQ4YzRhYzc1NjgyZjhkZTYzZTk4ZjkxMjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8nyMG+rCoxNvHIDCop83gmHSTp5u w4RWmw4wnfEZ6kOKJ8M6+fhB7XhBAdgU7mGJ2fFZGYISMffea7xdrAUK1I15c+7N YCfJbIevF0/v8yeicQRNdsMeqo+RvpNSncLZLP409SJ6QgIFvDbu3tVVktfbC2vU vOP+ysnAe4EntvAk9Fw1qS7XmEUHkEMk4x8QEl4VeRLv3kUxKli4rAZjybh3rYaS LEUJakAUduUufTSoP27WTMP76x/NkYiOMriyKh1fqvhQu1JwuP0kobeePCrZCX0s vvC1epw/qLmS/oMDGI/YBia5DY/lGT9pyYsHUDDX7+C40iVAX6cJwz9FtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+nAGgnxU/YxKx1aC+N5j6Y+RITMB8GA1UdIwQY MBaAFDggNGPrlEslxlE1yke9vatkbzmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1Nzgt NTg5MzUxNzliOTg1LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1NzgtNTg5MzUxNzliOTg1 LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQD+JkfyR JYjBT8+dMXa1hoR6fXhI4Yfr7nhHhUI0ASVUFnDwIW+fhRy8EckNeFhNJMv2MAhe ndd3WNscz+cbHY8WqjxJZStK4R51WCmsnytu419BshEm8XOkcmY2djSgtwo/rFnt 4bWzALGrGHm3HbJOakM9pGLa4K1gtFbidESFtUoV+SHajVKqDpq00Ps1pkQPrqsE 2vJETgMFTArOnq0trjG4WApGWayk7y9mMvKJTVvpSB0/CcEMChk4Uy98nZUlbPl/ BA+u5JGxqdYnfz3ksg9kGEk8rKhLJEAz5ha0YzN2NtqriCEUaGGOYorIV6g+IZsS aIV8Pwr0cwegJQ== -----END CERTIFICATE-----Generated at Wed May 13 12:47:43 2026 by rpki-client