$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json) Hash identifier: 6d1WGCWYUIUrbkv4NEqIewSaEhLWakHJvH1snOvV6Cc= Subject key identifier: 60:1E:54:A2:F9:ED:97:EE:ED:A2:EB:0E:00:55:2E:89:BB:77:88:BB Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 019E1D22CFDC6ACE411C86B7D60A8D573F71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft Manifest number: 1809 Signing time: Tue 12 May 2026 17:01:21 +0000 Manifest this update: Tue 12 May 2026 17:01:21 +0000 Manifest next update: Wed 13 May 2026 17:01:21 +0000 Files and hashes: 1: FGiko7dGfaIB7oR3Xi7Mm0g0B5A.roa (hash: scq4CicoT05WIHFHPE3BCJO1Q1h5wfjqMz4jQNxHqFE=) 2: KQgcPbLRBBc_xsh51xPt4IehnO4.roa (hash: pCfM4q8twqlvRaHLGHOBBp4aKXHoEg09la6QGcZB7h0=) 3: MCBZ2CxaM7LC481GLSYWHeppO5E.roa (hash: 02Ro7KtAxSGq3svayvXMnjLyQYv+fnx2uhv691O7tMc=) 4: OJxTLDXJ9pqUGXVl4-ml1R-2R0g.roa (hash: /fFWCePAVkjb5ODL9wnIO10abW6/OG68dBuoesYNJwY=) 5: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: 26z7PJhs+BTp29ssyjo3yxuQAjPciFsKefApOaCdGw0=) 6: P2rUWmGQtbBmqctNiSQO8OXzg4I.roa (hash: bkGnGwFiN2vuWeWrlQUo7BY3bYxabah/LiMHvh76HzA=) 7: dnVcuIVq43rB8PBNyYX_JeEUFJ0.roa (hash: Ff78hIKwiWd51/Bth5HBmfNxfzKtqYOa3kRFT0AYoJo=) 8: qMp9a9fZ12e7dbvzcdMaCDW60vw.roa (hash: o7dkvXGE+57eQ04kql8R9kA6Rq92Dubxz9WCs56/6I0=) 9: rjNblK4bxhZyMeZC4OHShSQ8Jlc.roa (hash: yvBwo79kSdn4a3N6pjUOiYNe2QQKF2EmdQtpBeT8m8w=) 10: ui12U8ehqDuyNEV4dxeMmGkBpyU.roa (hash: yINc/cfZuw+HDq9yk/ySvw+zjfDYf1qaipCTcvu1wXg=) 11: znRtvDjx6p6QKqOpN-UH1Bqd7ao.roa (hash: +4jJSJNUJ8eFyd4hEIFej6uo6SX/BvFj2H5hv/FUtHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:22:cf:dc:6a:ce:41:1c:86:b7:d6:0a:8d:57:3f:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: May 12 17:01:21 2026 GMT Not After : May 13 17:01:21 2026 GMT Subject: CN=601e54a2f9ed97eeeda2eb0e00552e89bb7788bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:d7:dc:e5:ff:6c:b4:ba:08:55:e6:a9:89:e1: 0b:7a:bc:2d:1d:c0:37:af:cf:de:50:1c:c9:73:8d: 22:1a:a4:ea:a1:ac:3a:74:42:83:10:b2:dd:0f:9e: e4:1a:f1:bc:99:b5:ef:02:64:1c:cf:1e:7c:97:fc: 30:81:76:e1:97:a1:04:8f:a8:eb:d5:6e:84:ee:ea: bc:d9:c8:0f:b4:bd:d7:b6:31:50:a7:26:cf:a5:fa: ba:4e:8d:bc:0d:b7:b1:bb:82:bf:00:8d:04:c0:1c: 25:56:c5:ef:a4:74:85:d7:e0:4b:b1:6b:dc:f1:c6: e3:a8:df:c7:67:4f:6f:fe:f9:17:2f:e3:2e:0b:4b: 95:ec:fa:3b:e4:17:c6:90:a7:f3:df:f2:40:d6:1a: 21:9b:9d:79:12:46:a6:27:88:80:40:81:85:9c:5f: 6b:57:06:5b:bf:54:39:66:31:06:75:3f:18:d6:5f: 42:25:9b:4a:e6:80:ed:64:d7:f0:fb:5c:62:f4:54: 47:e4:7c:74:2d:6d:3e:29:e8:2a:b0:e2:04:5d:a3: 65:ea:3d:17:73:26:72:19:5b:7f:75:2d:a2:72:93: 27:de:21:81:a4:e7:27:76:1a:ab:ca:23:d7:ea:f8: 34:45:33:56:c5:9e:5e:80:32:39:cc:a9:4c:89:5d: b7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1E:54:A2:F9:ED:97:EE:ED:A2:EB:0E:00:55:2E:89:BB:77:88:BB X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:38:56:fa:e3:ab:42:9b:c2:07:31:ec:47:c9:78:6c:5e:a8: 1e:99:10:f0:e8:d2:dd:b9:ce:93:b8:d1:2a:c8:f1:5e:f8:6c: 8c:12:80:99:99:dc:13:e8:65:d2:8c:00:55:a3:a2:f2:7c:65: 28:fc:36:5d:6d:04:82:22:3a:01:c5:64:f1:fb:26:98:b5:b6: 63:08:30:34:91:20:dd:99:9e:5d:f9:c0:bd:40:77:0b:44:97: 1a:5d:9d:5d:4b:4f:07:56:33:3a:b2:fc:d0:89:a1:f8:43:c3: d3:29:a4:70:fc:62:b5:ac:5b:8e:96:f0:ce:23:6d:6e:6d:ca: 3a:51:88:57:78:fb:47:15:c1:4e:fa:66:fe:63:d5:01:15:fa: f2:70:ee:2c:54:97:8f:6f:72:cb:e3:44:a1:f5:4a:f9:0c:9b: ac:d2:ad:a5:b5:8c:ca:e5:03:0b:20:6b:21:54:a6:be:8b:7d: 85:97:18:b2:0f:6e:95:a0:ba:d7:23:44:be:6c:c5:38:95:df: 80:6a:63:f4:4e:6c:d7:e2:35:9a:09:87:71:53:5e:68:0c:33: 8c:be:31:d4:d1:60:51:a9:6e:29:96:af:0e:29:6d:d6:0a:dc: ca:6a:99:c3:dd:2a:cf:0f:fa:88:0f:fb:46:0f:7c:88:b2:96: f7:db:09:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dIs/cas5BHIa31gqNVz9xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjYwNTEyMTcwMTIxWhcNMjYwNTEzMTcwMTIxWjAzMTEwLwYDVQQD Eyg2MDFlNTRhMmY5ZWQ5N2VlZWRhMmViMGUwMDU1MmU4OWJiNzc4OGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9dfc5f9stLoIVeapieELerwtHcA3 r8/eUBzJc40iGqTqoaw6dEKDELLdD57kGvG8mbXvAmQczx58l/wwgXbhl6EEj6jr 1W6E7uq82cgPtL3XtjFQpybPpfq6To28Dbexu4K/AI0EwBwlVsXvpHSF1+BLsWvc 8cbjqN/HZ09v/vkXL+MuC0uV7Po75BfGkKfz3/JA1hohm515EkamJ4iAQIGFnF9r VwZbv1Q5ZjEGdT8Y1l9CJZtK5oDtZNfw+1xi9FRH5Hx0LW0+KegqsOIEXaNl6j0X cyZyGVt/dS2icpMn3iGBpOcndhqryiPX6vg0RTNWxZ5egDI5zKlMiV23AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGAeVKL57Zfu7aLrDgBVLom7d4i7MB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDhW+uOr QpvCBzHsR8l4bF6oHpkQ8OjS3bnOk7jRKsjxXvhsjBKAmZncE+hl0owAVaOi8nxl KPw2XW0EgiI6AcVk8fsmmLW2YwgwNJEg3ZmeXfnAvUB3C0SXGl2dXUtPB1YzOrL8 0Imh+EPD0ymkcPxitaxbjpbwziNtbm3KOlGIV3j7RxXBTvpm/mPVARX68nDuLFSX j29yy+NEofVK+QybrNKtpbWMyuUDCyBrIVSmvot9hZcYsg9ulaC61yNEvmzFOJXf gGpj9E5s1+I1mgmHcVNeaAwzjL4x1NFgUaluKZavDilt1grcymqZw90qzw/6iA/7 Rg98iLKW99sJVw== -----END CERTIFICATE-----Generated at Wed May 13 00:59:16 2026 by rpki-client