$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft File: OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft (raw, json) Hash identifier: teSazdMfGRA7LkV8fY3gFHUE4dr30VyHIhWHz7TSup8= Subject key identifier: 70:DD:01:28:C7:B1:49:D0:85:31:13:2B:41:95:7B:F2:84:06:E4:D0 Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984 Certificate serial: 019D29CE03B22E5083D48871B7AEE00AC696 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft Manifest number: 15C7 Signing time: Thu 26 Mar 2026 11:01:00 +0000 Manifest this update: Thu 26 Mar 2026 11:01:00 +0000 Manifest next update: Fri 27 Mar 2026 11:01:00 +0000 Files and hashes: 1: FaALcy5Rtdmr2uieYxRcTmINxY0.roa (hash: o5V0XpUincjUZD8yuz4NaYPFOSAiOXTebna/NUT2JTM=) 2: GIHrVIViJFcoMcRYSuQORanWhE0.roa (hash: Xw1YJyhBQX1BH/gd6wFdXzyzKUO+qJJ2rPYoYPjD3gc=) 3: GoQ2pW0J_933ITOYr6rqq9EIbrQ.roa (hash: tKfgDPMmtVyaPODH9xVO5b6jSIkFqfcU29cf6LiBAWM=) 4: MxSN252Rt46daJzmFnKjpDWsGI4.roa (hash: UgheYX57caiwV4IurgnGNzd/ol6yl6jaHGlsEwq1YIg=) 5: OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl (hash: fEZ/Q8DQZH67nhUAQ7317LafKweUi1MpGy55SPKz1fE=) 6: aXaCU83J-_jJ_EnlqZRgN5SQBBk.roa (hash: Vz1lenxM6E43wZsZKYeL1SXodzdNb6RvRRHtozOm9sQ=) 7: cuzZQDYRmdoOYAwAqrA09B4nCAY.roa (hash: 1hhTZq7Tio3QN3NZHMlqIBNsnPCPxg5AP94bS0dr2eU=) 8: lnbRQm2gHQjzkC4Pljc7ywe1fzc.roa (hash: hyi2L8VUzd790YBk5rv5fMvAHFOMrgEkftZ2exdk9ZU=) 9: n-nFKLKkH_a8UIkmjAG8WheeMkQ.roa (hash: 4lMwGlH5lrGUibaDmIf2SptMviWc/ApHUJVaOyRTYKs=) 10: raiLbBG1CMRiAfKyRkS-YiJSo9g.roa (hash: 8FLAxtrWMI4dbICfx4l/Gu56C8DGN6sem1ZiAu15jqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:29:ce:03:b2:2e:50:83:d4:88:71:b7:ae:e0:0a:c6:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984 Validity Not Before: Mar 26 11:01:00 2026 GMT Not After : Mar 27 11:01:00 2026 GMT Subject: CN=70dd0128c7b149d08531132b41957bf28406e4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:eb:af:98:1b:86:7e:cb:63:d2:11:e3:87:b8: 49:b0:08:1d:d0:bb:ac:58:65:b5:2f:99:ba:be:69: 8e:8d:ce:39:86:f7:f6:c7:11:f3:4b:17:dc:41:14: 84:4c:3e:5b:ac:fd:ed:52:34:cf:77:6a:40:22:6e: f8:c1:f1:47:a2:bf:a5:ce:67:fe:61:8f:ed:20:f0: 13:8f:f0:f8:67:b8:55:0e:43:cd:cc:75:60:e4:e0: 15:a7:9a:7b:88:0f:f5:0d:6b:7b:31:2a:ee:a8:9d: 41:0e:b1:61:1c:43:33:36:85:36:9e:fe:34:6c:75: 62:dc:26:d2:38:cf:bc:86:93:d3:90:7e:98:d7:3c: 89:29:99:56:f6:77:be:59:ee:c9:e7:02:d0:fa:e8: 90:46:d4:b0:3d:71:cb:95:53:2a:1a:49:c2:28:a1: 3f:cf:69:e9:cf:a2:2a:6d:c5:ff:62:7d:85:43:94: b6:3a:41:2d:e0:74:f4:91:39:7a:db:9a:b8:a1:6a: c3:16:b9:70:ad:ee:d5:4a:4a:22:98:38:bd:be:52: 19:07:58:0e:bc:b8:f9:61:bd:30:30:4d:6c:98:a0: 6d:f3:7b:35:58:06:6e:0f:2c:2c:77:80:12:28:2e: 94:c0:c2:4f:bf:88:62:96:c3:94:22:47:64:7d:c7: a7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DD:01:28:C7:B1:49:D0:85:31:13:2B:41:95:7B:F2:84:06:E4:D0 X509v3 Authority Key Identifier: keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:73:08:7c:04:7e:96:74:fb:68:d0:89:0e:4c:3f:88:05:a0: ef:a6:34:75:b6:d8:85:bf:84:91:33:50:fd:54:70:32:7d:e1: e0:8d:34:72:27:85:7c:da:c8:21:e7:0e:d3:0f:8f:be:47:45: 72:d5:d5:1e:7c:08:4c:ce:a6:06:26:39:86:a8:f9:2f:5c:a6: 7b:99:dc:32:64:8c:66:16:9f:4f:13:7d:dd:38:4c:bb:97:64: 06:05:bc:00:7a:df:f7:d7:a2:c9:d2:3d:51:1e:17:6a:1a:a7: 85:ba:12:41:9c:2d:a3:2f:dc:b9:ef:85:d5:85:1d:b0:cd:5a: e1:97:49:c9:84:c5:d5:cd:6b:68:44:dc:fc:5d:f6:0f:6b:5a: b8:6c:69:d6:3d:35:44:04:5a:d6:1c:e7:43:0b:5e:f6:76:0a: 6d:90:25:46:77:5b:82:d2:56:ac:88:4b:1b:4b:a1:87:43:25: 87:24:af:5d:8c:29:44:fa:27:63:40:12:a5:ed:7f:76:6e:46: d8:37:75:25:f2:3a:e3:54:d1:e1:6f:7d:fe:ca:0c:b3:ff:81: d2:48:15:e5:44:62:1d:71:87:93:19:87:2f:d0:aa:64:3f:be: 36:e2:7c:c6:f5:57:44:bb:40:53:bf:00:9b:b0:5f:21:08:5c: 93:86:e4:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0pzgOyLlCD1Ihxt67gCsaWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjAzNDYzZWI5NDRiMjVjNjUxMzVjYTQ3YmRiZGFiNjQ2 ZjM5ODQwHhcNMjYwMzI2MTEwMTAwWhcNMjYwMzI3MTEwMTAwWjAzMTEwLwYDVQQD Eyg3MGRkMDEyOGM3YjE0OWQwODUzMTEzMmI0MTk1N2JmMjg0MDZlNGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseuvmBuGfstj0hHjh7hJsAgd0Lus WGW1L5m6vmmOjc45hvf2xxHzSxfcQRSETD5brP3tUjTPd2pAIm74wfFHor+lzmf+ YY/tIPATj/D4Z7hVDkPNzHVg5OAVp5p7iA/1DWt7MSruqJ1BDrFhHEMzNoU2nv40 bHVi3CbSOM+8hpPTkH6Y1zyJKZlW9ne+We7J5wLQ+uiQRtSwPXHLlVMqGknCKKE/ z2npz6IqbcX/Yn2FQ5S2OkEt4HT0kTl625q4oWrDFrlwre7VSkoimDi9vlIZB1gO vLj5Yb0wME1smKBt83s1WAZuDywsd4ASKC6UwMJPv4hilsOUIkdkfcenrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDdASjHsUnQhTETK0GVe/KEBuTQMB8GA1UdIwQY MBaAFDggNGPrlEslxlE1yke9vatkbzmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1Nzgt NTg5MzUxNzliOTg1LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1NzgtNTg5MzUxNzliOTg1 LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXMIfAR+ lnT7aNCJDkw/iAWg76Y0dbbYhb+EkTNQ/VRwMn3h4I00cieFfNrIIecO0w+PvkdF ctXVHnwITM6mBiY5hqj5L1yme5ncMmSMZhafTxN93ThMu5dkBgW8AHrf99eiydI9 UR4XahqnhboSQZwtoy/cue+F1YUdsM1a4ZdJyYTF1c1raETc/F32D2tauGxp1j01 RARa1hznQwte9nYKbZAlRndbgtJWrIhLG0uhh0MlhySvXYwpRPonY0ASpe1/dm5G 2Dd1JfI641TR4W99/soMs/+B0kgV5URiHXGHkxmHL9CqZD++NuJ8xvVXRLtAU78A m7BfIQhck4bkQg== -----END CERTIFICATE-----Generated at Thu Mar 26 16:27:06 2026 by rpki-client