$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json) Hash identifier: EtRLCVNzj+yfajyqC5kMDh3jKdf2vN0wopJUjyGF5e0= Subject key identifier: 5B:BC:82:45:41:5D:6E:3F:84:69:4D:FA:D1:B0:68:F0:31:C3:3D:A2 Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 019F9059DCE5E183E7134029D40762004014 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft Manifest number: 18CD Signing time: Thu 23 Jul 2026 19:00:35 +0000 Manifest this update: Thu 23 Jul 2026 19:00:35 +0000 Manifest next update: Fri 24 Jul 2026 19:00:35 +0000 Files and hashes: 1: KQgcPbLRBBc_xsh51xPt4IehnO4.roa (hash: pCfM4q8twqlvRaHLGHOBBp4aKXHoEg09la6QGcZB7h0=) 2: MCBZ2CxaM7LC481GLSYWHeppO5E.roa (hash: 02Ro7KtAxSGq3svayvXMnjLyQYv+fnx2uhv691O7tMc=) 3: OJxTLDXJ9pqUGXVl4-ml1R-2R0g.roa (hash: /fFWCePAVkjb5ODL9wnIO10abW6/OG68dBuoesYNJwY=) 4: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: Joi9owtJxhU5NCxdBf/qEWp5KbkrWwSJmC+/+bPXj3I=) 5: UNEG0RbhpGfDIQfxZ4i2ieICO9g.roa (hash: kKbhwxHzyZ1nQMHyypRvyIhRmV3QS30VEm56g35Omd4=) 6: Vg59mkjZjPChn5V72yQkRuYsw5w.roa (hash: ZT1vWv2NLvyggQYSfbG/ST95n5y42mBT1SrPiyV/11c=) 7: dnVcuIVq43rB8PBNyYX_JeEUFJ0.roa (hash: Ff78hIKwiWd51/Bth5HBmfNxfzKtqYOa3kRFT0AYoJo=) 8: rjNblK4bxhZyMeZC4OHShSQ8Jlc.roa (hash: yvBwo79kSdn4a3N6pjUOiYNe2QQKF2EmdQtpBeT8m8w=) 9: ui12U8ehqDuyNEV4dxeMmGkBpyU.roa (hash: yINc/cfZuw+HDq9yk/ySvw+zjfDYf1qaipCTcvu1wXg=) 10: ybxPsztAzlmVPObK0OoBTddoDSQ.roa (hash: d3b9yiAURGnHAdeyevteUI2cI7ETobUn55NXVEoQFao=) 11: znRtvDjx6p6QKqOpN-UH1Bqd7ao.roa (hash: +4jJSJNUJ8eFyd4hEIFej6uo6SX/BvFj2H5hv/FUtHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:59:dc:e5:e1:83:e7:13:40:29:d4:07:62:00:40:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: Jul 23 19:00:35 2026 GMT Not After : Jul 24 19:00:35 2026 GMT Subject: CN=5bbc8245415d6e3f84694dfad1b068f031c33da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c2:87:38:8c:83:3c:82:50:1f:47:3f:14:04: 98:4a:f4:b0:d1:d5:95:a3:a2:20:77:aa:df:00:54: f6:c4:ad:b2:fb:bb:57:54:17:e5:57:6e:c0:2d:d9: 89:2d:82:ac:e8:dc:cf:f5:a8:a1:85:d8:66:35:04: ed:f9:ca:3d:69:f7:4e:74:b3:cf:17:f6:91:cd:47: ea:95:d4:ba:73:dc:01:35:a8:52:85:3a:4f:66:88: fd:c6:d5:d9:0e:b3:9c:de:7d:8f:43:6b:06:ba:fe: 81:01:e0:be:29:09:df:c4:8d:78:ec:8a:bc:1f:fc: f6:e4:49:a5:29:2a:7b:41:ab:e1:fb:db:0a:d7:f0: e0:e0:be:e5:b2:f7:bd:bc:32:98:f5:f7:cb:c5:65: 61:84:43:4b:b9:ed:80:e9:1d:d2:db:12:a6:a7:bd: 63:fb:30:f7:ec:bc:ff:94:d2:02:85:81:8b:6d:85: ff:f2:29:e7:ea:22:93:3f:c8:ca:21:e2:c6:43:6d: aa:ec:b9:39:6b:8f:f0:38:a1:18:62:bc:7b:86:e8: 89:b4:9a:cf:02:5d:60:37:ba:9f:22:05:0d:09:f2: 6e:0f:b1:ec:0a:c6:77:c7:d5:db:3c:2e:32:85:4f: ab:27:74:c0:de:78:4d:55:55:9e:a5:c9:ca:f0:6c: 57:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BC:82:45:41:5D:6E:3F:84:69:4D:FA:D1:B0:68:F0:31:C3:3D:A2 X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:22:68:8d:d0:33:9a:d0:22:e0:d2:11:c4:41:6f:4e:6e:3a: 75:9e:df:ae:e0:26:43:fb:80:29:e6:be:0e:ef:38:a5:3b:dc: d7:1d:18:e7:08:5d:37:7e:96:a6:26:94:bd:90:5c:5a:92:11: ca:68:1e:f0:cd:9f:ef:29:89:bc:86:ab:45:3a:20:61:2d:2b: 5e:65:61:01:30:06:91:ad:04:cd:2c:5c:89:4c:9b:00:26:7c: a0:33:d1:ec:3a:05:d6:c7:e0:bb:87:23:33:6e:8f:6a:79:ce: 2e:60:53:25:9c:e3:02:aa:40:a1:21:8b:0c:da:51:f9:82:d0: 9c:21:f7:50:30:93:8e:b3:b4:43:c8:e0:5b:a0:69:e9:9c:26: a6:95:5b:40:33:e4:3e:26:fc:ec:d3:35:85:39:e4:76:73:15: e2:af:d6:5c:35:5b:04:97:7f:74:a5:c9:c9:fb:e4:49:7b:3c: bb:82:e6:41:68:7c:5c:8b:e1:f0:73:aa:16:db:0d:f2:1a:81: 8e:1d:37:d8:15:52:60:ef:2e:d7:cd:ad:ab:5d:7d:2f:ef:a0: 5f:a0:56:52:9b:c1:6f:c4:7d:ae:c1:c0:9a:e0:fb:63:6b:de: 89:95:38:36:c4:db:82:7a:0b:7c:11:e6:16:4c:b0:c2:3a:9a: a9:e4:27:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QWdzl4YPnE0Ap1AdiAEAUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjYwNzIzMTkwMDM1WhcNMjYwNzI0MTkwMDM1WjAzMTEwLwYDVQQD Eyg1YmJjODI0NTQxNWQ2ZTNmODQ2OTRkZmFkMWIwNjhmMDMxYzMzZGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8KHOIyDPIJQH0c/FASYSvSw0dWV o6Igd6rfAFT2xK2y+7tXVBflV27ALdmJLYKs6NzP9aihhdhmNQTt+co9afdOdLPP F/aRzUfqldS6c9wBNahShTpPZoj9xtXZDrOc3n2PQ2sGuv6BAeC+KQnfxI147Iq8 H/z25EmlKSp7Qavh+9sK1/Dg4L7lsve9vDKY9ffLxWVhhENLue2A6R3S2xKmp71j +zD37Lz/lNIChYGLbYX/8inn6iKTP8jKIeLGQ22q7Lk5a4/wOKEYYrx7huiJtJrP Al1gN7qfIgUNCfJuD7HsCsZ3x9XbPC4yhU+rJ3TA3nhNVVWepcnK8GxXDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFu8gkVBXW4/hGlN+tGwaPAxwz2iMB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGyJojdAz mtAi4NIRxEFvTm46dZ7fruAmQ/uAKea+Du84pTvc1x0Y5whdN36WpiaUvZBcWpIR ymge8M2f7ymJvIarRTogYS0rXmVhATAGka0EzSxciUybACZ8oDPR7DoF1sfgu4cj M26PannOLmBTJZzjAqpAoSGLDNpR+YLQnCH3UDCTjrO0Q8jgW6Bp6ZwmppVbQDPk Pib87NM1hTnkdnMV4q/WXDVbBJd/dKXJyfvkSXs8u4LmQWh8XIvh8HOqFtsN8hqB jh032BVSYO8u182tq119L++gX6BWUpvBb8R9rsHAmuD7Y2veiZU4NsTbgnoLfBHm FkywwjqaqeQnwg== -----END CERTIFICATE-----Generated at Fri Jul 24 05:21:42 2026 by rpki-client