$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json) Hash identifier: WmzuQRNvoKBEvninocIyp8h59yrddttYifu0O4Q2HXQ= Subject key identifier: 2D:88:0A:63:09:DD:EE:74:69:E1:32:C4:63:82:8C:0A:CD:A6:7F:02 Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 01A0D2DF073BEEF6DD2CE1E8564D50814743 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft Manifest number: 1974 Signing time: Thu 24 Sep 2026 10:03:46 +0000 Manifest this update: Thu 24 Sep 2026 10:03:46 +0000 Manifest next update: Fri 25 Sep 2026 10:03:46 +0000 Files and hashes: 1: KQgcPbLRBBc_xsh51xPt4IehnO4.roa (hash: pCfM4q8twqlvRaHLGHOBBp4aKXHoEg09la6QGcZB7h0=) 2: MCBZ2CxaM7LC481GLSYWHeppO5E.roa (hash: 02Ro7KtAxSGq3svayvXMnjLyQYv+fnx2uhv691O7tMc=) 3: OJxTLDXJ9pqUGXVl4-ml1R-2R0g.roa (hash: /fFWCePAVkjb5ODL9wnIO10abW6/OG68dBuoesYNJwY=) 4: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: lOEV6Xh4inoydDrTrg7NDTOdsj/0zLsSelGW3YnAAQY=) 5: UNEG0RbhpGfDIQfxZ4i2ieICO9g.roa (hash: kKbhwxHzyZ1nQMHyypRvyIhRmV3QS30VEm56g35Omd4=) 6: Vg59mkjZjPChn5V72yQkRuYsw5w.roa (hash: ZT1vWv2NLvyggQYSfbG/ST95n5y42mBT1SrPiyV/11c=) 7: dnVcuIVq43rB8PBNyYX_JeEUFJ0.roa (hash: Ff78hIKwiWd51/Bth5HBmfNxfzKtqYOa3kRFT0AYoJo=) 8: rjNblK4bxhZyMeZC4OHShSQ8Jlc.roa (hash: yvBwo79kSdn4a3N6pjUOiYNe2QQKF2EmdQtpBeT8m8w=) 9: ui12U8ehqDuyNEV4dxeMmGkBpyU.roa (hash: yINc/cfZuw+HDq9yk/ySvw+zjfDYf1qaipCTcvu1wXg=) 10: ybxPsztAzlmVPObK0OoBTddoDSQ.roa (hash: d3b9yiAURGnHAdeyevteUI2cI7ETobUn55NXVEoQFao=) 11: znRtvDjx6p6QKqOpN-UH1Bqd7ao.roa (hash: +4jJSJNUJ8eFyd4hEIFej6uo6SX/BvFj2H5hv/FUtHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 10:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d2:df:07:3b:ee:f6:dd:2c:e1:e8:56:4d:50:81:47:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: Sep 24 10:03:46 2026 GMT Not After : Sep 25 10:03:46 2026 GMT Subject: CN=2d880a6309ddee7469e132c463828c0acda67f02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c6:41:f7:a4:c8:4b:74:fd:b4:4b:34:8b:2d: e1:93:b0:02:6e:3d:e6:ae:af:20:89:3e:2d:1e:90: a2:a1:ec:c6:0f:3c:87:d7:46:20:af:f5:8c:84:44: 8f:d2:31:9d:0d:f4:8b:94:68:e9:a3:42:b9:36:78: 70:a6:c7:66:3b:08:50:fa:25:11:d3:24:04:e0:3b: 46:eb:f7:de:f4:a1:36:72:68:ae:57:14:cc:f4:f3: 44:30:47:bd:7f:a4:a7:2f:a0:47:6c:f8:51:ee:62: 99:80:8b:17:e8:e6:34:10:c7:30:f9:0b:74:58:a0: f5:85:df:bd:f7:a5:6f:77:8b:bb:49:b3:ad:22:76: ae:7e:b8:bb:61:fc:ed:ee:b9:42:16:42:02:81:a7: 18:3e:53:a1:90:db:21:5b:a7:5b:10:94:68:2c:36: 3d:a2:64:bb:45:90:77:77:f4:27:0b:2a:3e:40:6b: 99:c6:fa:ce:6e:cb:63:64:04:ff:b2:58:4e:a6:ec: 4c:07:2a:cd:c6:09:98:d0:21:38:7d:46:ab:33:ee: e6:53:08:ac:2d:4d:e2:01:2c:52:3a:69:fe:bc:de: 53:2a:2a:69:52:50:99:5d:54:2f:64:87:93:7b:99: 08:71:cd:28:6e:e3:76:f0:80:1d:c4:d8:b5:f9:7e: 03:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:88:0A:63:09:DD:EE:74:69:E1:32:C4:63:82:8C:0A:CD:A6:7F:02 X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:cb:ce:dc:9e:a3:d0:c4:70:53:e7:fe:27:33:ee:93:4e:d3: f9:db:f3:54:fe:a0:d6:b2:ca:6a:1c:c5:ac:80:95:4d:af:8a: 1c:da:ba:f9:5c:35:aa:97:00:b6:75:15:c9:c8:78:4c:a2:e9: a2:b3:7a:31:44:60:c3:58:51:f8:20:ac:f2:86:c3:66:b4:d7: e6:e5:37:f2:2a:0f:94:9d:e1:68:ca:76:b8:7a:c3:3d:86:a3: c0:ec:0a:ed:88:92:86:8d:20:c0:8a:20:32:40:b8:ae:c3:66: 7d:59:38:a2:cf:ce:b0:5f:10:9f:55:4e:a1:cb:ae:b4:67:0b: 97:c7:59:20:19:fb:19:eb:a3:3b:85:1a:25:66:68:1d:76:e6: 3f:0d:98:e1:30:f8:2c:9a:db:9c:f8:6c:86:61:e9:e9:59:e2: 26:5f:db:c3:9b:21:9a:4f:f6:53:82:dc:ef:c6:b9:b1:54:94: 04:fc:0d:91:79:43:9d:ed:ec:00:7a:b0:7e:3c:c4:6a:53:a9: dd:6e:d2:d7:15:56:b6:da:47:dd:eb:d3:5a:5f:a0:ab:d0:61: 1a:d6:cd:38:e1:fc:42:3d:b4:ce:0a:e5:c1:fe:87:11:c4:22: 9d:51:81:32:c3:17:da:9f:09:97:7f:a5:d3:90:25:f6:eb:59: f2:0f:4b:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDS3wc77vbdLOHoVk1QgUdDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjYwOTI0MTAwMzQ2WhcNMjYwOTI1MTAwMzQ2WjAzMTEwLwYDVQQD EygyZDg4MGE2MzA5ZGRlZTc0NjllMTMyYzQ2MzgyOGMwYWNkYTY3ZjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsZB96TIS3T9tEs0iy3hk7ACbj3m rq8giT4tHpCioezGDzyH10Ygr/WMhESP0jGdDfSLlGjpo0K5NnhwpsdmOwhQ+iUR 0yQE4DtG6/fe9KE2cmiuVxTM9PNEMEe9f6SnL6BHbPhR7mKZgIsX6OY0EMcw+Qt0 WKD1hd+996Vvd4u7SbOtInaufri7Yfzt7rlCFkICgacYPlOhkNshW6dbEJRoLDY9 omS7RZB3d/QnCyo+QGuZxvrObstjZAT/slhOpuxMByrNxgmY0CE4fUarM+7mUwis LU3iASxSOmn+vN5TKippUlCZXVQvZIeTe5kIcc0obuN28IAdxNi1+X4DZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2ICmMJ3e50aeEyxGOCjArNpn8CMB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsvO3J6j 0MRwU+f+JzPuk07T+dvzVP6g1rLKahzFrICVTa+KHNq6+Vw1qpcAtnUVych4TKLp orN6MURgw1hR+CCs8obDZrTX5uU38ioPlJ3haMp2uHrDPYajwOwK7YiSho0gwIog MkC4rsNmfVk4os/OsF8Qn1VOocuutGcLl8dZIBn7GeujO4UaJWZoHXbmPw2Y4TD4 LJrbnPhshmHp6VniJl/bw5shmk/2U4Lc78a5sVSUBPwNkXlDne3sAHqwfjzEalOp 3W7S1xVWttpH3evTWl+gq9BhGtbNOOH8Qj20zgrlwf6HEcQinVGBMsMX2p8Jl3+l 05Al9utZ8g9LZA== -----END CERTIFICATE-----Generated at Thu Sep 24 17:02:12 2026 by rpki-client