$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json) Hash identifier: +r3Ao22Zgcv+whtMqb1ZmDjYu8fHH22eqHQHfNup7k0= Subject key identifier: 28:80:BE:68:6E:19:80:26:06:1B:9B:AC:5C:EB:55:E4:E2:4A:18:C2 Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 019D2960B296DBB4C7A5C9A078F6F5869909 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft Manifest number: 178A Signing time: Thu 26 Mar 2026 09:01:36 +0000 Manifest this update: Thu 26 Mar 2026 09:01:36 +0000 Manifest next update: Fri 27 Mar 2026 09:01:36 +0000 Files and hashes: 1: FGiko7dGfaIB7oR3Xi7Mm0g0B5A.roa (hash: scq4CicoT05WIHFHPE3BCJO1Q1h5wfjqMz4jQNxHqFE=) 2: KQgcPbLRBBc_xsh51xPt4IehnO4.roa (hash: pCfM4q8twqlvRaHLGHOBBp4aKXHoEg09la6QGcZB7h0=) 3: MCBZ2CxaM7LC481GLSYWHeppO5E.roa (hash: 02Ro7KtAxSGq3svayvXMnjLyQYv+fnx2uhv691O7tMc=) 4: OJxTLDXJ9pqUGXVl4-ml1R-2R0g.roa (hash: /fFWCePAVkjb5ODL9wnIO10abW6/OG68dBuoesYNJwY=) 5: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: 2RlN6yOC92vlqnBgrlSrqjgtuBNUxUVcJDuUJB4iPkI=) 6: P2rUWmGQtbBmqctNiSQO8OXzg4I.roa (hash: bkGnGwFiN2vuWeWrlQUo7BY3bYxabah/LiMHvh76HzA=) 7: dnVcuIVq43rB8PBNyYX_JeEUFJ0.roa (hash: Ff78hIKwiWd51/Bth5HBmfNxfzKtqYOa3kRFT0AYoJo=) 8: qMp9a9fZ12e7dbvzcdMaCDW60vw.roa (hash: o7dkvXGE+57eQ04kql8R9kA6Rq92Dubxz9WCs56/6I0=) 9: rjNblK4bxhZyMeZC4OHShSQ8Jlc.roa (hash: yvBwo79kSdn4a3N6pjUOiYNe2QQKF2EmdQtpBeT8m8w=) 10: ui12U8ehqDuyNEV4dxeMmGkBpyU.roa (hash: yINc/cfZuw+HDq9yk/ySvw+zjfDYf1qaipCTcvu1wXg=) 11: yPa3IsW1LrF4FBqa6S6lkA7l0yg.roa (hash: axDlKBJFR60teKJKWRG+25tdp59Gp45JEAqx4Nz1QQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:29:60:b2:96:db:b4:c7:a5:c9:a0:78:f6:f5:86:99:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: Mar 26 09:01:36 2026 GMT Not After : Mar 27 09:01:36 2026 GMT Subject: CN=2880be686e198026061b9bac5ceb55e4e24a18c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c8:df:c9:91:2a:9e:17:e3:1a:15:dd:4e:49: a0:35:d2:41:0b:f3:4c:e2:e7:f0:4f:69:1d:fb:26: a3:f0:37:69:5a:e3:c6:d4:06:72:19:0d:c7:74:7f: 25:d4:9e:c9:07:9e:3e:d2:41:96:76:b5:9d:17:4a: 1c:03:96:3d:4a:50:82:cf:4b:75:00:00:e0:bd:77: 53:0b:5a:f8:0e:1e:e3:de:4d:ae:ff:e5:18:af:a9: 24:46:3c:bd:fe:d5:57:be:c4:9b:d2:13:df:93:11: a2:9f:7b:e0:0f:81:93:80:dc:ee:6e:cf:eb:31:6d: 4b:cd:48:dd:51:3f:5b:80:ee:27:da:da:a9:ad:e8: 51:49:13:50:7b:99:d9:98:6e:1f:fe:5c:00:98:1e: 0e:4c:a6:42:8b:10:a0:85:51:d8:6a:1c:c1:cd:32: 5c:e9:d0:44:73:48:69:92:ce:60:bf:4f:e6:ac:a8: 47:a7:cd:02:2b:96:2d:0b:c8:b9:52:48:a6:7a:b3: 68:89:e2:84:f3:48:2e:46:4d:9f:e3:e7:76:19:82: 75:59:58:26:1f:85:6b:83:a8:83:30:34:ca:5d:28: 71:f6:d6:d0:f3:37:36:65:ee:ad:14:92:5e:d7:05: da:1e:35:46:94:e0:57:fd:b9:86:68:67:4c:85:c3: 87:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:80:BE:68:6E:19:80:26:06:1B:9B:AC:5C:EB:55:E4:E2:4A:18:C2 X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:41:24:14:d5:42:39:40:6e:c1:50:af:e3:50:39:22:42:da: a8:61:27:09:a7:2b:f4:3a:fe:15:f6:03:e7:14:b1:29:f4:30: 97:c3:4a:20:b6:08:f5:6b:66:52:90:dd:3c:1f:95:d0:b1:45: 92:87:8d:90:af:27:9a:4b:1f:44:31:5a:6e:4f:e0:9e:12:49: 0e:6d:39:f5:af:f7:51:ac:4d:9b:27:01:c7:32:80:00:49:3c: 30:b7:45:8c:b8:6e:07:90:08:f3:6f:dc:16:24:5c:fb:b1:ba: 78:ee:49:69:51:50:28:96:65:0f:c6:b0:4e:98:d8:ac:3d:aa: 25:b8:be:a3:eb:5e:9d:86:fd:e6:a9:a1:35:fc:82:b3:14:0f: a3:24:fd:d1:73:7b:ae:fe:c8:3f:41:66:ca:a6:85:9e:4d:f3: b2:fd:5d:96:07:1f:74:5d:09:ef:df:ea:61:bc:90:e9:6e:ca: c5:86:83:4d:ac:7d:56:d4:8a:db:ff:b3:87:1c:c2:a9:86:01: 10:30:dd:b5:f6:6d:cf:6f:b6:da:02:3f:62:6c:42:c4:9d:9f: e5:2d:95:67:a5:66:4c:d5:af:9a:59:03:f3:10:ca:ac:e5:72: 10:a5:ab:be:02:64:67:87:05:d5:3c:64:69:76:5a:4d:99:ab: 06:20:fb:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0pYLKW27THpcmgePb1hpkJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjYwMzI2MDkwMTM2WhcNMjYwMzI3MDkwMTM2WjAzMTEwLwYDVQQD EygyODgwYmU2ODZlMTk4MDI2MDYxYjliYWM1Y2ViNTVlNGUyNGExOGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08jfyZEqnhfjGhXdTkmgNdJBC/NM 4ufwT2kd+yaj8DdpWuPG1AZyGQ3HdH8l1J7JB54+0kGWdrWdF0ocA5Y9SlCCz0t1 AADgvXdTC1r4Dh7j3k2u/+UYr6kkRjy9/tVXvsSb0hPfkxGin3vgD4GTgNzubs/r MW1LzUjdUT9bgO4n2tqprehRSRNQe5nZmG4f/lwAmB4OTKZCixCghVHYahzBzTJc 6dBEc0hpks5gv0/mrKhHp80CK5YtC8i5UkimerNoieKE80guRk2f4+d2GYJ1WVgm H4Vrg6iDMDTKXShx9tbQ8zc2Ze6tFJJe1wXaHjVGlOBX/bmGaGdMhcOHgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCiAvmhuGYAmBhubrFzrVeTiShjCMB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUEkFNVC OUBuwVCv41A5IkLaqGEnCacr9Dr+FfYD5xSxKfQwl8NKILYI9WtmUpDdPB+V0LFF koeNkK8nmksfRDFabk/gnhJJDm059a/3UaxNmycBxzKAAEk8MLdFjLhuB5AI82/c FiRc+7G6eO5JaVFQKJZlD8awTpjYrD2qJbi+o+tenYb95qmhNfyCsxQPoyT90XN7 rv7IP0FmyqaFnk3zsv1dlgcfdF0J79/qYbyQ6W7KxYaDTax9VtSK2/+zhxzCqYYB EDDdtfZtz2+22gI/YmxCxJ2f5S2VZ6VmTNWvmlkD8xDKrOVyEKWrvgJkZ4cF1Txk aXZaTZmrBiD7Rw== -----END CERTIFICATE-----Generated at Thu Mar 26 16:35:06 2026 by rpki-client