$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft File: OroRckcuqAJl0SmCln3gqLC8WQE.mft (raw, json) Hash identifier: 7wKGoPdFnxQylZqAUAX1F6iJQ7o3nT1IUIxdXaTjN/4= Subject key identifier: E0:D8:74:FF:90:29:D0:FF:DB:04:EB:7B:59:C0:AC:34:BB:F0:25:A0 Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901 Certificate serial: 019D2A3C86FF574255C5A02F160899DE871B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft Manifest number: 18BA Signing time: Thu 26 Mar 2026 13:01:42 +0000 Manifest this update: Thu 26 Mar 2026 13:01:42 +0000 Manifest next update: Fri 27 Mar 2026 13:01:42 +0000 Files and hashes: 1: 1--uZd9q-jqlCwf4KSHTkKxdp1P0.roa (hash: yJgoBtaw97/X+Yl828Ilk6xaEg2wiibhZ1X313r+u+s=) 2: 1k6LBboYndm8KPxxnHHSfyA330M.roa (hash: X46ysx2IUyKm6jXZ7VDJJwqGgs4SwZUKvqkP6KVxSfQ=) 3: 6iaqLomTHcn35nOgS7u2_TW-xhs.roa (hash: Mi7/BGP/3N9pUm1kAumWXNagsUDM+4h/oInYolOAkPE=) 4: 8BEgv2DgNKbNbNuzLHl3VGFIGL8.roa (hash: SQFbOHpDcvay1MqsdXqe1YtJV1othwB2O5ZriM/HbH0=) 5: DcqHCtebdDgiEuSQXxi6ig8mM8o.roa (hash: cRfNZKkpr+LQ6VmzZJFfJ/S+gQUsEnhyoZIF9XUOHHw=) 6: Jbj7ynIvhap5I_QFhGzfNQth1KM.roa (hash: Z7XUHDDtftkWoWOYjRWVurOY4SlFKKJE535VEXNm4iU=) 7: LmZ65ahj31rbnRy9vWbROzqmhcU.roa (hash: SvoOUMNxC/Ob/2VuP/7YeBr/5a0sbiKFw1vWGYN+3kw=) 8: OroRckcuqAJl0SmCln3gqLC8WQE.crl (hash: swyAMhrgGYXdvV3o/YzuHTG+2OrGCeymId/3HM5fMms=) 9: Rfztg_t5JVeMZSj2mDqPGyp9q44.roa (hash: /89m2QYUYW/bhcHvnKgQT+IpW6Y9wQwv8T9fEb+5DrQ=) 10: TB2uobnUVymGTH4RA03gIOhAZRg.roa (hash: 6oz05ThoSNjSotd8Y3/7ZJcBXHZDvJhujoU9Z+4I/C0=) 11: ZuhzTaDClxjmQVXxvnkYsTWFFGQ.roa (hash: sV8EfVihdKiLsfcrDwHQZu5bOJ9OiQzvEOBbJ1cZbxk=) 12: _Z7JEWza1bSPD-7PWbG0vX89s3o.roa (hash: OZMVtPUDYR+RELQo2A6anCLj+47zVFIRgvSkDtlYuQw=) 13: g3dNjS4XgY8klkPhCyZdKToAlGM.roa (hash: peZC7FKDdVQt9t0rZ2GL+oL22WvV/nKBVc+dvOTk7TE=) 14: gB_s-WdUnxEPR2XESWswld-SB24.roa (hash: qRp5667FdJ5J3f1BulVc/pqFyv4XSQMc14cF/bbrQac=) 15: h2z5PFUk9kCOYl2Qfq1nfpB1Cow.roa (hash: bmKxTPlO70DQG41qe3REDk+7OXfpbhyEVC0cTa4zyE0=) 16: iCDLvxYdAykrIxvCC48ohuJmwcs.roa (hash: Ume17i9/BCAtK0RFxYp+aFptPOFLeGk5A4An1t7V2u4=) 17: ixvTApwJ0LOFuR5J5-NGSIKMqNk.roa (hash: BDKxCeeuSykbUbxzQ/ZPnLJUCKHXvds6WrwRPz6ZbCc=) 18: kLMCAdWt-C1DGHHOXeLpbWBGn-8.roa (hash: 6/BkbF3Xl0wXeX45+UDxiyzqx4P3HQHvsaM0t24sFCU=) 19: nZX_nzH3JzTrJeZ8L9ZU0lIyk-4.roa (hash: BdZa7hgF5JlHhd3QhsJDvnmYPHKo0HSuto3Mzwo2NpU=) 20: pO0qGsq_BKRgOQ_8WYJpqKXk4C0.roa (hash: P0kO1Oni6LjDeROb0o6wKxl0oRXYlJoyDIs7yU4qHZQ=) 21: pxwmw3bWAUG0G2zeWP6wAlWdZpo.roa (hash: TGTRkz6GAsY4o7A1nVyZO49OKe6IHq8N/DzCAZl1Ss0=) 22: u8wDHAu62fejNzSsl66nMVncyJ8.roa (hash: DS9lRY1FbYp3Sl7zQdRRW/sRlCsiVp9bm3HNS4WoCpo=) 23: vDtti9xnyakhZ1WWiOjhX42Cz4E.roa (hash: C355/1wMzaPIkZLvnFKM+IMHqthGrw6arcc7tCzyvb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2a:3c:86:ff:57:42:55:c5:a0:2f:16:08:99:de:87:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Validity Not Before: Mar 26 13:01:42 2026 GMT Not After : Mar 27 13:01:42 2026 GMT Subject: CN=e0d874ff9029d0ffdb04eb7b59c0ac34bbf025a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:48:04:da:8c:3e:24:45:97:ed:94:e7:94:e7: dc:39:6e:8f:e7:ab:21:ec:dc:ec:ce:96:aa:fe:98: bc:cb:2a:f2:46:3a:71:3e:82:c8:30:ed:3b:e9:82: e4:e8:a6:4d:03:87:1e:68:6e:1a:db:34:5d:d9:17: 3e:40:c3:3b:c8:cd:52:b8:e7:74:5a:a3:5b:97:06: d5:38:9a:d9:a6:ab:33:2d:17:6b:f4:2c:13:c5:20: bb:3c:c5:fe:ba:7b:73:0d:c4:ff:1e:1f:df:23:07: f2:3a:b0:d6:ff:6a:4f:e6:0c:7c:34:03:d0:37:df: cf:a9:c5:a9:a4:c8:df:4a:1e:f8:36:27:c7:f4:4e: 43:1e:0d:47:80:10:da:8d:89:5b:13:16:24:fb:23: 45:2c:32:89:87:ce:10:af:be:4c:4e:66:98:b6:e5: 38:d3:52:d3:3a:1b:7a:d1:ae:7b:91:ef:c3:90:37: 77:e2:a0:9e:3f:aa:c0:6a:50:d2:97:6b:85:82:8a: 58:13:4f:d5:11:4c:8b:23:d7:5f:14:3d:5e:39:b9: d0:33:05:8b:1d:ed:0d:5a:08:29:8f:09:0e:f2:24: 99:ba:19:3a:60:22:58:52:3c:74:38:76:21:c5:19: df:b5:7b:22:cd:f0:c7:a9:be:a3:db:d0:c1:fc:3e: cf:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D8:74:FF:90:29:D0:FF:DB:04:EB:7B:59:C0:AC:34:BB:F0:25:A0 X509v3 Authority Key Identifier: keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:1c:fa:34:8c:53:fc:4f:20:8d:0e:00:d7:12:a5:2d:90:83: 2f:6e:78:e0:dd:5d:78:d6:70:ae:65:40:b5:a1:e4:41:97:8b: 57:1e:9d:ed:79:12:27:a4:c1:37:70:2b:f6:78:3f:e2:b6:19: 24:c6:ca:38:ba:cc:7e:13:8a:b6:1e:f6:7f:ce:47:3c:a2:32: ac:7e:1f:a2:b3:6f:d6:b5:5f:99:1f:29:71:49:f1:45:c4:a5: c7:8b:fd:ac:d5:c8:d1:63:62:d6:b0:94:55:e0:e5:df:77:3d: cd:98:ea:42:4f:aa:88:f6:d3:d4:74:e0:a8:29:54:f7:a3:b1: 75:04:14:75:d7:58:23:a4:ed:6c:4c:f0:d9:24:e0:37:98:b9: d8:fc:8f:33:d1:7f:8c:90:fd:9d:57:f2:42:fd:d8:2f:33:ff: 6c:0d:e7:12:46:ac:12:c6:6e:f7:20:d0:1c:7e:ff:05:cb:84: ae:ab:4a:21:fa:8f:82:10:86:85:bb:11:e7:d5:d3:89:ed:e1: ee:8c:cb:1b:ba:8c:08:96:b4:9e:d0:03:62:10:f5:99:07:25: 57:27:43:f6:81:ca:7f:1e:82:46:f8:4d:84:20:c0:59:93:f6: 95:d0:12:77:a4:54:0e:4e:3e:df:12:16:40:f6:bf:0b:f5:b3: 8a:5d:a1:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0qPIb/V0JVxaAvFgiZ3ocbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi YzU5MDEwHhcNMjYwMzI2MTMwMTQyWhcNMjYwMzI3MTMwMTQyWjAzMTEwLwYDVQQD EyhlMGQ4NzRmZjkwMjlkMGZmZGIwNGViN2I1OWMwYWMzNGJiZjAyNWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EgE2ow+JEWX7ZTnlOfcOW6P56sh 7Nzszpaq/pi8yyryRjpxPoLIMO076YLk6KZNA4ceaG4a2zRd2Rc+QMM7yM1SuOd0 WqNblwbVOJrZpqszLRdr9CwTxSC7PMX+untzDcT/Hh/fIwfyOrDW/2pP5gx8NAPQ N9/PqcWppMjfSh74NifH9E5DHg1HgBDajYlbExYk+yNFLDKJh84Qr75MTmaYtuU4 01LTOht60a57ke/DkDd34qCeP6rAalDSl2uFgopYE0/VEUyLI9dfFD1eObnQMwWL He0NWggpjwkO8iSZuhk6YCJYUjx0OHYhxRnftXsizfDHqb6j29DB/D7PywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODYdP+QKdD/2wTre1nArDS78CWgMB8GA1UdIwQY MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt NGRkMDQzNDZhYmMzLzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfhz6NIxT /E8gjQ4A1xKlLZCDL2544N1deNZwrmVAtaHkQZeLVx6d7XkSJ6TBN3Ar9ng/4rYZ JMbKOLrMfhOKth72f85HPKIyrH4forNv1rVfmR8pcUnxRcSlx4v9rNXI0WNi1rCU VeDl33c9zZjqQk+qiPbT1HTgqClU96OxdQQUdddYI6TtbEzw2STgN5i52PyPM9F/ jJD9nVfyQv3YLzP/bA3nEkasEsZu9yDQHH7/BcuErqtKIfqPghCGhbsR59XTie3h 7ozLG7qMCJa0ntADYhD1mQclVydD9oHKfx6CRvhNhCDAWZP2ldASd6RUDk4+3xIW QPa/C/Wzil2hLg== -----END CERTIFICATE-----Generated at Thu Mar 26 16:42:59 2026 by rpki-client