$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft File: olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json) Hash identifier: yqWkF1cR/JA3Y8evcVb8n5BugFtfgALeJqXmb3R3mDo= Subject key identifier: 99:6D:48:A3:DA:80:E1:BE:06:F4:57:57:1F:BD:E0:34:1B:5C:BD:F6 Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 019D265FE7D534347AE2802493ADEED702EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft Manifest number: 18BC Signing time: Wed 25 Mar 2026 19:01:52 +0000 Manifest this update: Wed 25 Mar 2026 19:01:52 +0000 Manifest next update: Thu 26 Mar 2026 19:01:52 +0000 Files and hashes: 1: 0dbyZwebQgTGMD5-wPhJH6_Pd5I.roa (hash: rG5nZgpv1Ah9jz+mC9094dW59+5lFAhfWaH5ssnQtAk=) 2: 1-SQFDfpp9D_i817zUQFbntY0dRQ.roa (hash: biSe4GCFtSwazcB9PCCa1NKBDVP5/i0SLuwOHponshU=) 3: 2frKTWb3ttQDpCXNMXbTSXrlIqI.roa (hash: obnt34G7IEsjg6vdddM8muzJwshLaBlLPb65paOFsfE=) 4: 3lYygY9QSAAHtzgINKWVRrbCp_4.roa (hash: xTlxdsrlszD3wQ8XFzdmUFKsu5SMwqAldL5Rb7oJqzA=) 5: 4WijXRQsTuAJtSd_hSZYlUqj8lA.roa (hash: cDODijNSh6xud6bY86CXr7OdBhes8GnABNkzt2sQT9E=) 6: 7zTwSbIrIN1tbHKaAerBGKh4H_4.roa (hash: Uj+d0N/fp4CQPw2Wdyt0B7bkrgBCMNOKaEUgThPZLo4=) 7: Gv1ql7t0nNON87AJIldQVqDpbaw.roa (hash: Afsi36EyWB2mwsT0UzfNkOmYYiw9CwLh31zU2SIsaxk=) 8: I2KpdLXbpYuKcc5P2UrERlbUmQI.roa (hash: QwjjNYoou+Yqw7bbIshNHDY3CQQBCro8tQly5UuqIPQ=) 9: K6IIfeYnJcau7XFah26WtRrWoX4.roa (hash: kAmjx0E3nDeIJhDMXwZG/0loikW8ryL2ZHfuoiau2sI=) 10: KfKdKGXKrJVAyc679p1xVdKcOuU.roa (hash: MZjQw9I7nKK82B9sKr7/qbtBGaD/PhRCNNoKDtPpSRQ=) 11: KhnFPatizLYzbuYdUdtwNlimK_A.roa (hash: p+Mj3EP56tIkokr0WqjKkNv7zw4zz51aSvtLv2wkCDw=) 12: Nn2M0QjFRAa_T2cmYDVUHTJ5GXs.roa (hash: ROtPVP9nVJ4sSu+guXDuQ34VOIJfTdPXZnYgNbsVTRc=) 13: PT0OVKn7DoYDkXnLiYT9h8XOQSo.roa (hash: P3oRTt1oGGLmL6K2JdXvl8dIu0LI9RbrIcGwZo70+dU=) 14: T-Tc8u-y-A23bEMCsm71F_7_jTg.roa (hash: uvA7IEtWcoBgqQxL/f1PptXnW15RVEqbUY2vsk5myZQ=) 15: TUHp0yldZUy2noEeejLALiKlsOA.roa (hash: hJdNCDGT+WfObUpSa1plMcdJasirz1T8A6b/aK4MsFo=) 16: TgBpdGwKgCYXVi-ZeVCMbfdynwQ.roa (hash: WSlOfiJJGk4JzRn+dJ1iw8VYAl7aA0mI15CFDBrgID0=) 17: Urxc-_3dN2rsdSn-CFXZaM1OMmE.roa (hash: KTdVek6dN9t33L+6LCMmAcoph/JKLQZZF3RFY22Laag=) 18: aFybrbDshxtrknuOyM8RFxRBKs0.roa (hash: RQU0CLTgvLglUS45QfR69+raL0+alWumuh4CDPItdCA=) 19: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: +lOwMowCVyGICRY5XruqNiUQP7nvJVN5skc3o83DGCA=) 20: rZIzlxjNqrmdhiYj8eZcD_DAyYQ.roa (hash: HtYYyQJMTgOPk/TpOD1+JZFhzQ3pNzbNJ5gyclYza/w=) 21: thqMO7NSQ4YZbOJpf7E5T4h4Qx4.roa (hash: CSkwEjedoekw5JE8fDs8zoEDa+VA8TtlPZQTJSLtR3Q=) 22: xqLMI4n3mv1T0FOyglej7wVFdYE.roa (hash: BA8dbC4wqu6gr5aHMdPy/PzpkFFbaeIFkYk6ddxpagE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:5f:e7:d5:34:34:7a:e2:80:24:93:ad:ee:d7:02:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Mar 25 19:01:52 2026 GMT Not After : Mar 26 19:01:52 2026 GMT Subject: CN=996d48a3da80e1be06f457571fbde0341b5cbdf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:49:6a:22:f4:0a:74:7a:cf:97:ac:7c:1d:db: b4:35:ce:2c:48:1a:39:e2:84:a6:a1:9a:7a:61:f6: 96:3d:1c:76:af:2d:fb:36:80:ee:d4:5c:5f:19:56: 69:ff:a2:3c:4d:21:54:15:3e:31:5f:ea:9a:b2:bb: a7:e1:29:7e:15:ab:89:08:49:5c:85:30:21:d3:2c: cb:cb:4d:77:bd:a7:d4:2a:2c:78:3d:86:1c:97:da: cf:95:54:f3:87:8e:0c:5b:e2:42:dc:eb:7c:a0:07: 4c:f7:4e:1c:2c:93:82:85:59:cd:3a:3c:48:9d:49: ca:17:a5:57:fe:c5:59:51:cf:b4:f0:0d:0f:1c:0a: 66:90:2d:6b:3f:5f:11:0e:fb:9d:ce:8c:d9:30:d4: b6:df:15:c2:f6:1d:82:26:c7:d3:be:38:82:f0:1d: 7f:bf:c8:2d:f3:41:67:63:60:fd:95:3d:10:54:5d: bb:28:50:4b:b4:8f:0e:e9:30:6e:1f:8e:72:50:db: a2:fd:27:0d:81:d9:10:f3:ff:2b:4b:ec:47:f1:93: 6e:b6:04:3a:f0:b6:ba:7b:24:ca:b0:2d:d4:fc:59: 31:d4:52:4e:e3:25:ec:7e:3f:a4:3d:d0:6f:64:b2: 5f:c4:b1:86:9b:f0:5b:9b:88:85:c1:b3:d8:2e:61: 9f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6D:48:A3:DA:80:E1:BE:06:F4:57:57:1F:BD:E0:34:1B:5C:BD:F6 X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:74:b6:27:30:83:1b:f2:23:c7:48:18:b8:95:9a:d0:6c:30: c3:1a:55:67:7c:00:4d:43:6a:d6:42:85:4c:2c:3a:b7:4a:9f: d8:c9:b7:10:b6:e6:14:68:ed:2f:86:e8:da:ba:91:80:3b:49: f6:63:c7:43:33:ff:13:ab:a1:41:91:40:48:ef:0f:6d:e9:dc: 08:a0:65:b8:14:80:98:78:7a:24:ce:3f:57:52:92:fe:46:01: 32:eb:65:f0:d9:8d:87:a0:86:df:23:20:c6:b2:6b:7f:3b:7b: 6c:a5:a3:27:fa:e2:71:2c:23:0e:4e:e3:9d:0e:4e:90:ab:4d: 6e:88:91:29:02:d3:bc:79:95:d2:09:f0:de:39:a7:1c:0d:e0: 2f:ec:4a:5f:32:71:2e:94:f4:d1:11:e8:1a:23:0b:25:cf:8a: f6:5c:42:5a:8d:08:f6:0f:8c:03:a9:3d:93:9c:96:be:c3:7a: 2e:04:b9:97:08:59:2b:d0:19:bb:74:5a:b9:19:78:01:8a:02: da:3a:a6:65:1b:7c:07:70:d3:2c:4b:be:a0:99:20:01:1a:8b: 19:7f:62:ff:24:1d:c2:cf:97:99:40:09:35:5a:d3:24:41:90: 3a:36:80:3c:51:de:25:93:44:e6:48:57:70:9c:97:43:71:fa: c7:fd:70:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mX+fVNDR64oAkk63u1wLqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjYwMzI1MTkwMTUyWhcNMjYwMzI2MTkwMTUyWjAzMTEwLwYDVQQD Eyg5OTZkNDhhM2RhODBlMWJlMDZmNDU3NTcxZmJkZTAzNDFiNWNiZGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0lqIvQKdHrPl6x8Hdu0Nc4sSBo5 4oSmoZp6YfaWPRx2ry37NoDu1FxfGVZp/6I8TSFUFT4xX+qasrun4Sl+FauJCElc hTAh0yzLy013vafUKix4PYYcl9rPlVTzh44MW+JC3Ot8oAdM904cLJOChVnNOjxI nUnKF6VX/sVZUc+08A0PHApmkC1rP18RDvudzozZMNS23xXC9h2CJsfTvjiC8B1/ v8gt80FnY2D9lT0QVF27KFBLtI8O6TBuH45yUNui/ScNgdkQ8/8rS+xH8ZNutgQ6 8La6eyTKsC3U/Fkx1FJO4yXsfj+kPdBvZLJfxLGGm/Bbm4iFwbPYLmGfZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJltSKPagOG+BvRXVx+94DQbXL32MB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXS2JzCD G/Ijx0gYuJWa0GwwwxpVZ3wATUNq1kKFTCw6t0qf2Mm3ELbmFGjtL4bo2rqRgDtJ 9mPHQzP/E6uhQZFASO8PbencCKBluBSAmHh6JM4/V1KS/kYBMutl8NmNh6CG3yMg xrJrfzt7bKWjJ/ricSwjDk7jnQ5OkKtNboiRKQLTvHmV0gnw3jmnHA3gL+xKXzJx LpT00RHoGiMLJc+K9lxCWo0I9g+MA6k9k5yWvsN6LgS5lwhZK9AZu3RauRl4AYoC 2jqmZRt8B3DTLEu+oJkgARqLGX9i/yQdws+XmUAJNVrTJEGQOjaAPFHeJZNE5khX cJyXQ3H6x/1w9g== -----END CERTIFICATE-----Generated at Thu Mar 26 00:35:58 2026 by rpki-client