$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json) Hash identifier: /Vma0CTXYE82k1qtGRgItK1O9aVCSbxqaDvZyFBdf1E= Subject key identifier: 83:91:4B:BC:F4:2C:7C:97:E3:E5:F1:03:F9:31:DD:85:53:0C:E0:BD Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 019F924842E018CA10D82E9E437944502AB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft Manifest number: 18CE Signing time: Fri 24 Jul 2026 04:00:36 +0000 Manifest this update: Fri 24 Jul 2026 04:00:36 +0000 Manifest next update: Sat 25 Jul 2026 04:00:36 +0000 Files and hashes: 1: KQgcPbLRBBc_xsh51xPt4IehnO4.roa (hash: pCfM4q8twqlvRaHLGHOBBp4aKXHoEg09la6QGcZB7h0=) 2: MCBZ2CxaM7LC481GLSYWHeppO5E.roa (hash: 02Ro7KtAxSGq3svayvXMnjLyQYv+fnx2uhv691O7tMc=) 3: OJxTLDXJ9pqUGXVl4-ml1R-2R0g.roa (hash: /fFWCePAVkjb5ODL9wnIO10abW6/OG68dBuoesYNJwY=) 4: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: WhG7etmMjlqRltQnUOWZLBwl54mtJYY/QAP9StfZg8M=) 5: UNEG0RbhpGfDIQfxZ4i2ieICO9g.roa (hash: kKbhwxHzyZ1nQMHyypRvyIhRmV3QS30VEm56g35Omd4=) 6: Vg59mkjZjPChn5V72yQkRuYsw5w.roa (hash: ZT1vWv2NLvyggQYSfbG/ST95n5y42mBT1SrPiyV/11c=) 7: dnVcuIVq43rB8PBNyYX_JeEUFJ0.roa (hash: Ff78hIKwiWd51/Bth5HBmfNxfzKtqYOa3kRFT0AYoJo=) 8: rjNblK4bxhZyMeZC4OHShSQ8Jlc.roa (hash: yvBwo79kSdn4a3N6pjUOiYNe2QQKF2EmdQtpBeT8m8w=) 9: ui12U8ehqDuyNEV4dxeMmGkBpyU.roa (hash: yINc/cfZuw+HDq9yk/ySvw+zjfDYf1qaipCTcvu1wXg=) 10: ybxPsztAzlmVPObK0OoBTddoDSQ.roa (hash: d3b9yiAURGnHAdeyevteUI2cI7ETobUn55NXVEoQFao=) 11: znRtvDjx6p6QKqOpN-UH1Bqd7ao.roa (hash: +4jJSJNUJ8eFyd4hEIFej6uo6SX/BvFj2H5hv/FUtHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:48:42:e0:18:ca:10:d8:2e:9e:43:79:44:50:2a:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: Jul 24 04:00:36 2026 GMT Not After : Jul 25 04:00:36 2026 GMT Subject: CN=83914bbcf42c7c97e3e5f103f931dd85530ce0bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:25:c2:f2:48:42:b9:19:8d:14:0c:30:dc:e2: d7:00:f8:d1:c5:0f:e5:35:48:13:c7:89:4f:7d:41: 66:a6:3e:1c:c5:b8:88:af:7c:fc:c8:43:e4:b9:6a: 79:3a:f4:c0:8c:0b:bd:21:f3:25:5e:50:dc:b6:0b: 7d:6e:25:9b:08:c0:85:09:e8:15:fd:c5:00:23:c1: 9a:8b:18:fe:95:43:76:cb:28:04:84:15:a2:0f:89: 35:6a:0b:1a:1d:80:5b:58:42:72:44:d3:c2:7f:1d: 10:2c:97:c1:20:b3:13:e7:77:ca:93:68:db:ce:09: 56:5e:f8:3c:75:4a:75:17:d2:84:11:75:65:28:f1: d2:4c:a7:b7:f4:23:3c:a5:18:05:36:e1:d7:3d:fa: ff:f5:52:21:69:e2:6b:d3:29:7e:78:9a:85:fc:c6: d2:bd:4e:6c:45:b4:a5:c9:ac:f4:0b:64:13:41:cc: 57:d8:a7:7d:5b:7c:9e:2c:80:b5:ca:7b:ed:a0:56: dc:dc:94:e7:31:b3:f5:1d:84:06:f6:62:9e:84:5a: 13:ed:99:45:07:1a:58:04:2e:04:28:c1:2f:d4:a3: fc:a7:8a:28:3e:1f:bb:fc:4b:51:64:8d:77:8b:25: f8:9c:25:6c:f2:82:5d:87:38:ed:bd:66:99:62:7a: 71:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:91:4B:BC:F4:2C:7C:97:E3:E5:F1:03:F9:31:DD:85:53:0C:E0:BD X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:78:54:bd:ae:08:a9:2d:08:17:32:aa:cb:97:8d:5c:00:d7: 6d:22:2d:47:ac:61:a8:53:10:18:64:1f:39:e4:19:68:87:e0: 10:1d:ff:49:8b:0d:6b:84:6f:cf:cb:77:19:1a:70:d5:bd:d1: 64:79:5a:47:de:0c:15:d5:37:cb:7f:0a:1f:99:17:c1:3c:3e: a9:a8:78:50:e0:65:27:49:5c:99:62:06:f5:33:3b:df:89:77: 9e:d7:e4:30:a2:3e:37:e2:72:52:d4:70:84:28:4b:45:b4:16: 9f:39:45:0a:de:f8:8a:1a:d7:11:dd:9d:2c:58:fa:73:45:4b: 02:2d:a6:7b:6c:4d:e1:47:03:2b:f7:06:e3:66:22:da:e4:d3: a3:6e:0c:de:69:99:d9:af:ce:cb:98:8f:4c:f2:c8:cf:c4:d4: 98:5e:72:e0:d0:b4:be:da:1d:ef:99:a5:9d:05:46:5b:62:93: 2e:81:03:72:05:2f:bf:f8:ec:3a:a6:61:14:fc:84:b8:fc:ac: ef:0c:1d:df:28:de:8c:33:91:e8:10:9d:f0:bf:6e:d8:3a:10: 5c:1a:ca:0f:13:03:31:56:0c:68:19:9e:90:a9:f3:0f:16:b7: 3c:bb:94:32:22:48:a5:80:71:55:1b:35:4a:21:08:75:55:d3: 4a:b8:c3:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+SSELgGMoQ2C6eQ3lEUCq3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjYwNzI0MDQwMDM2WhcNMjYwNzI1MDQwMDM2WjAzMTEwLwYDVQQD Eyg4MzkxNGJiY2Y0MmM3Yzk3ZTNlNWYxMDNmOTMxZGQ4NTUzMGNlMGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSXC8khCuRmNFAww3OLXAPjRxQ/l NUgTx4lPfUFmpj4cxbiIr3z8yEPkuWp5OvTAjAu9IfMlXlDctgt9biWbCMCFCegV /cUAI8Gaixj+lUN2yygEhBWiD4k1agsaHYBbWEJyRNPCfx0QLJfBILMT53fKk2jb zglWXvg8dUp1F9KEEXVlKPHSTKe39CM8pRgFNuHXPfr/9VIhaeJr0yl+eJqF/MbS vU5sRbSlyaz0C2QTQcxX2Kd9W3yeLIC1ynvtoFbc3JTnMbP1HYQG9mKehFoT7ZlF BxpYBC4EKMEv1KP8p4ooPh+7/EtRZI13iyX4nCVs8oJdhzjtvWaZYnpxhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIORS7z0LHyX4+XxA/kx3YVTDOC9MB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXhUva4I qS0IFzKqy5eNXADXbSItR6xhqFMQGGQfOeQZaIfgEB3/SYsNa4Rvz8t3GRpw1b3R ZHlaR94MFdU3y38KH5kXwTw+qah4UOBlJ0lcmWIG9TM734l3ntfkMKI+N+JyUtRw hChLRbQWnzlFCt74ihrXEd2dLFj6c0VLAi2me2xN4UcDK/cG42Yi2uTTo24M3mmZ 2a/Oy5iPTPLIz8TUmF5y4NC0vtod75mlnQVGW2KTLoEDcgUvv/jsOqZhFPyEuPys 7wwd3yjejDOR6BCd8L9u2DoQXBrKDxMDMVYMaBmekKnzDxa3PLuUMiJIpYBxVRs1 SiEIdVXTSrjDkg== -----END CERTIFICATE-----Generated at Fri Jul 24 06:41:16 2026 by rpki-client