$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft File: OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft (raw, json) Hash identifier: 670hytZGyJe9Tag/+8G5zWeEEGDjW8m/7wILdg6irpQ= Subject key identifier: A4:F8:1F:61:87:CB:0F:E4:61:0C:01:82:40:D7:F9:F5:67:71:7A:A9 Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984 Certificate serial: 01A1103BABD90043BDC016226611D5D74187 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft Manifest number: 17CC Signing time: Tue 06 Oct 2026 08:01:48 +0000 Manifest this update: Tue 06 Oct 2026 08:01:48 +0000 Manifest next update: Wed 07 Oct 2026 08:01:48 +0000 Files and hashes: 1: FaALcy5Rtdmr2uieYxRcTmINxY0.roa (hash: o5V0XpUincjUZD8yuz4NaYPFOSAiOXTebna/NUT2JTM=) 2: GIHrVIViJFcoMcRYSuQORanWhE0.roa (hash: Xw1YJyhBQX1BH/gd6wFdXzyzKUO+qJJ2rPYoYPjD3gc=) 3: GoQ2pW0J_933ITOYr6rqq9EIbrQ.roa (hash: tKfgDPMmtVyaPODH9xVO5b6jSIkFqfcU29cf6LiBAWM=) 4: MxSN252Rt46daJzmFnKjpDWsGI4.roa (hash: UgheYX57caiwV4IurgnGNzd/ol6yl6jaHGlsEwq1YIg=) 5: OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl (hash: omk+OwqtS1yNO0u0qcC/yYdleSccg9/j0sHY2qXVMd0=) 6: aXaCU83J-_jJ_EnlqZRgN5SQBBk.roa (hash: Vz1lenxM6E43wZsZKYeL1SXodzdNb6RvRRHtozOm9sQ=) 7: cuzZQDYRmdoOYAwAqrA09B4nCAY.roa (hash: 1hhTZq7Tio3QN3NZHMlqIBNsnPCPxg5AP94bS0dr2eU=) 8: lnbRQm2gHQjzkC4Pljc7ywe1fzc.roa (hash: hyi2L8VUzd790YBk5rv5fMvAHFOMrgEkftZ2exdk9ZU=) 9: n-nFKLKkH_a8UIkmjAG8WheeMkQ.roa (hash: 4lMwGlH5lrGUibaDmIf2SptMviWc/ApHUJVaOyRTYKs=) 10: raiLbBG1CMRiAfKyRkS-YiJSo9g.roa (hash: 8FLAxtrWMI4dbICfx4l/Gu56C8DGN6sem1ZiAu15jqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Oct 2026 08:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:10:3b:ab:d9:00:43:bd:c0:16:22:66:11:d5:d7:41:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984 Validity Not Before: Oct 6 08:01:48 2026 GMT Not After : Oct 7 08:01:48 2026 GMT Subject: CN=a4f81f6187cb0fe4610c018240d7f9f567717aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a9:7a:3b:1b:be:dd:75:71:8e:7f:db:e5:fd: dd:81:35:b6:3f:d0:80:5c:6c:e4:f1:fa:f9:09:c3: 83:8d:d2:5f:05:63:1a:b1:87:16:e9:bb:a8:6c:b3: 12:a5:ed:45:58:14:a5:1c:f7:7d:38:c6:c2:df:5a: 70:f1:ec:63:f0:db:1b:85:f0:8b:f7:61:26:6e:47: f6:57:13:c6:f4:43:9b:5c:34:2f:46:54:e2:36:01: dc:c8:7d:4c:18:65:35:e2:29:cc:59:3e:6f:66:d5: 56:73:1f:e1:e1:2e:5c:39:af:8d:c7:23:29:7f:20: 19:ea:1e:14:83:be:ab:74:ca:22:8d:a1:b7:d1:45: 23:85:fc:19:c2:02:8e:a0:fd:b9:41:03:08:39:fb: df:c4:1a:4d:83:35:6b:78:8c:d5:4d:45:45:7f:8a: f0:a2:19:0d:83:67:03:a8:c1:72:34:91:a2:6c:b7: d2:d9:02:25:d8:3c:ee:4f:15:08:bc:f8:61:08:c3: 3d:45:d4:fc:e9:1d:0b:15:d5:44:82:00:ae:96:a5: ff:97:a1:12:77:3a:04:5e:ea:be:5b:69:45:80:cf: e1:1a:fb:55:a7:ec:1c:18:4c:35:48:25:4e:3f:60: 0d:c3:cd:ea:09:23:5f:0b:bf:50:64:ad:29:a8:0e: c3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F8:1F:61:87:CB:0F:E4:61:0C:01:82:40:D7:F9:F5:67:71:7A:A9 X509v3 Authority Key Identifier: keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:56:95:fc:eb:eb:b3:e2:16:4e:af:b7:2c:f8:9a:a1:c4:28: 8c:43:70:f8:25:80:c6:ce:fd:63:06:90:7f:9d:f7:a4:e4:4e: 3c:87:38:7e:a8:f0:4b:0d:f4:80:12:a0:7a:ab:cc:7a:bb:9f: 11:00:98:37:b7:ea:2a:46:00:00:9e:78:28:0c:30:59:cb:72: 3f:df:43:3e:a8:f0:73:36:df:f3:8b:0f:f6:75:01:bc:bf:dd: 84:e7:3e:fd:9c:0f:7a:84:ee:74:b8:ed:ae:49:93:00:13:18: 7b:d1:1f:5f:11:52:55:38:97:4a:6b:50:1e:7c:78:50:f1:0d: 18:fd:61:37:f8:46:11:96:6f:ca:32:da:cd:d9:f0:3a:02:e3: c6:bb:b5:6b:e6:f5:ad:be:d5:58:17:fd:0c:6c:14:9a:8c:b7: bc:45:63:da:a7:28:03:0e:a5:cc:4b:96:17:cf:64:33:27:05: 31:b4:5d:2a:8c:aa:82:85:67:fc:80:78:46:46:5d:83:52:3b: 5b:dc:23:6e:1b:72:1b:14:aa:db:52:eb:f8:3d:2c:08:db:ab: bb:77:87:75:57:f3:17:98:17:89:ad:8d:3c:4a:f3:ca:78:20: c6:91:61:4d:49:42:73:d7:35:08:96:97:ae:ce:d8:24:da:18: d5:d5:09:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEQO6vZAEO9wBYiZhHV10GHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjAzNDYzZWI5NDRiMjVjNjUxMzVjYTQ3YmRiZGFiNjQ2 ZjM5ODQwHhcNMjYxMDA2MDgwMTQ4WhcNMjYxMDA3MDgwMTQ4WjAzMTEwLwYDVQQD EyhhNGY4MWY2MTg3Y2IwZmU0NjEwYzAxODI0MGQ3ZjlmNTY3NzE3YWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKl6Oxu+3XVxjn/b5f3dgTW2P9CA XGzk8fr5CcODjdJfBWMasYcW6buobLMSpe1FWBSlHPd9OMbC31pw8exj8NsbhfCL 92Embkf2VxPG9EObXDQvRlTiNgHcyH1MGGU14inMWT5vZtVWcx/h4S5cOa+NxyMp fyAZ6h4Ug76rdMoijaG30UUjhfwZwgKOoP25QQMIOfvfxBpNgzVreIzVTUVFf4rw ohkNg2cDqMFyNJGibLfS2QIl2DzuTxUIvPhhCMM9RdT86R0LFdVEggCulqX/l6ES dzoEXuq+W2lFgM/hGvtVp+wcGEw1SCVOP2ANw83qCSNfC79QZK0pqA7D5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKT4H2GHyw/kYQwBgkDX+fVncXqpMB8GA1UdIwQY MBaAFDggNGPrlEslxlE1yke9vatkbzmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1Nzgt NTg5MzUxNzliOTg1LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1NzgtNTg5MzUxNzliOTg1 LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVaV/Ovr s+IWTq+3LPiaocQojENw+CWAxs79YwaQf533pOROPIc4fqjwSw30gBKgeqvMeruf EQCYN7fqKkYAAJ54KAwwWctyP99DPqjwczbf84sP9nUBvL/dhOc+/ZwPeoTudLjt rkmTABMYe9EfXxFSVTiXSmtQHnx4UPENGP1hN/hGEZZvyjLazdnwOgLjxru1a+b1 rb7VWBf9DGwUmoy3vEVj2qcoAw6lzEuWF89kMycFMbRdKoyqgoVn/IB4RkZdg1I7 W9wjbhtyGxSq21Lr+D0sCNuru3eHdVfzF5gXia2NPErzynggxpFhTUlCc9c1CJaX rs7YJNoY1dUJvQ== -----END CERTIFICATE-----Generated at Tue Oct 6 13:55:48 2026 by rpki-client