$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json) Hash identifier: ZwiRi70qEDW5XANIm+EBkPfj5LWRnHaqQiuELPXJ4pc= Subject key identifier: D0:F2:32:16:65:07:8D:CB:79:E1:24:CD:23:06:F2:97:68:AE:D7:83 Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 019D2771C8E03AF9FE0B0ED377141A0051E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft Manifest number: 1789 Signing time: Thu 26 Mar 2026 00:01:01 +0000 Manifest this update: Thu 26 Mar 2026 00:01:01 +0000 Manifest next update: Fri 27 Mar 2026 00:01:01 +0000 Files and hashes: 1: FGiko7dGfaIB7oR3Xi7Mm0g0B5A.roa (hash: scq4CicoT05WIHFHPE3BCJO1Q1h5wfjqMz4jQNxHqFE=) 2: KQgcPbLRBBc_xsh51xPt4IehnO4.roa (hash: pCfM4q8twqlvRaHLGHOBBp4aKXHoEg09la6QGcZB7h0=) 3: MCBZ2CxaM7LC481GLSYWHeppO5E.roa (hash: 02Ro7KtAxSGq3svayvXMnjLyQYv+fnx2uhv691O7tMc=) 4: OJxTLDXJ9pqUGXVl4-ml1R-2R0g.roa (hash: /fFWCePAVkjb5ODL9wnIO10abW6/OG68dBuoesYNJwY=) 5: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: JynNCywO8PxZ4d9Mk37zPVRUlGd5+xprvrtjzMisIbA=) 6: P2rUWmGQtbBmqctNiSQO8OXzg4I.roa (hash: bkGnGwFiN2vuWeWrlQUo7BY3bYxabah/LiMHvh76HzA=) 7: dnVcuIVq43rB8PBNyYX_JeEUFJ0.roa (hash: Ff78hIKwiWd51/Bth5HBmfNxfzKtqYOa3kRFT0AYoJo=) 8: qMp9a9fZ12e7dbvzcdMaCDW60vw.roa (hash: o7dkvXGE+57eQ04kql8R9kA6Rq92Dubxz9WCs56/6I0=) 9: rjNblK4bxhZyMeZC4OHShSQ8Jlc.roa (hash: yvBwo79kSdn4a3N6pjUOiYNe2QQKF2EmdQtpBeT8m8w=) 10: ui12U8ehqDuyNEV4dxeMmGkBpyU.roa (hash: yINc/cfZuw+HDq9yk/ySvw+zjfDYf1qaipCTcvu1wXg=) 11: yPa3IsW1LrF4FBqa6S6lkA7l0yg.roa (hash: axDlKBJFR60teKJKWRG+25tdp59Gp45JEAqx4Nz1QQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:71:c8:e0:3a:f9:fe:0b:0e:d3:77:14:1a:00:51:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: Mar 26 00:01:01 2026 GMT Not After : Mar 27 00:01:01 2026 GMT Subject: CN=d0f2321665078dcb79e124cd2306f29768aed783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:44:e6:5b:c0:cd:1a:2d:50:ea:68:08:6f:6d: 55:01:b6:0a:83:fe:76:87:3d:82:3c:c8:8b:04:60: 43:a7:8f:bc:1e:3d:d9:67:46:55:1e:34:4b:d6:58: c9:84:cf:81:a2:26:c4:58:11:80:73:ee:2b:07:61: 30:7a:94:64:7e:2c:33:0f:78:d4:ab:b5:38:c2:63: cb:ea:37:41:f0:5e:10:0c:70:11:03:1d:3b:a3:02: d6:e5:c8:09:e6:5d:27:4b:0b:a7:2a:ca:2f:4a:58: 11:55:6e:00:a8:75:bf:e6:a1:ec:93:84:a2:37:f0: 6a:3a:0a:c0:60:4a:53:de:95:3f:74:64:9a:ab:10: d4:45:eb:7a:2e:70:4f:05:0b:d5:64:fb:e6:eb:63: e8:9f:4f:cd:f3:09:78:b4:82:0d:99:9c:63:fb:bb: a5:df:43:ad:1d:1a:ef:43:c8:4d:0d:f5:da:7a:39: ca:2b:58:a9:df:a2:83:99:91:2f:52:d6:87:e8:f2: 7a:ef:9b:e3:51:5d:76:f8:b5:3d:94:25:0f:fb:9d: e9:ee:02:30:1f:95:ff:09:9c:f4:39:af:c1:2f:0b: 3e:f6:54:57:8c:ec:44:14:22:98:b5:16:4b:59:59: 79:cf:97:b7:41:c4:5c:4d:fd:19:3c:f2:f2:24:27: 81:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F2:32:16:65:07:8D:CB:79:E1:24:CD:23:06:F2:97:68:AE:D7:83 X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:9c:09:4c:db:06:63:79:4b:1f:be:7c:72:31:3a:ef:e3:18: c9:90:68:1f:0b:f2:89:20:90:f0:7a:86:b2:0f:5a:ed:59:ce: f3:bc:3b:27:29:b4:c3:d4:0d:fa:00:01:6a:bd:9f:0d:76:9b: be:13:c0:35:74:16:ea:e9:5d:c9:0a:65:06:7e:ea:87:2f:ff: 03:22:c9:bd:59:7e:f2:ae:c2:c7:53:d2:9b:ea:10:5d:70:86: 2c:9c:24:5c:db:5a:fc:2b:eb:b3:c1:41:1d:1d:8e:ca:d7:b7: cc:6f:1d:42:63:63:fd:fd:a8:0a:da:dd:f6:76:2f:4c:e4:ca: be:98:4d:c4:2f:93:f7:15:b5:1d:7e:57:85:05:d9:7b:19:96: 0f:3e:fc:0e:ea:ac:6a:c5:24:42:49:43:87:41:58:12:14:bb: bf:48:71:dc:fc:f9:64:67:42:ba:c4:14:7c:b0:c3:9e:5d:10: bf:4b:82:93:bd:ec:a7:49:58:c1:cf:eb:c9:2b:90:c7:65:aa: 33:65:7e:d4:38:ec:0c:58:4f:af:6f:30:7f:b9:2f:5f:00:a3: 1e:95:d4:fb:04:8e:fe:5f:db:28:4c:be:ad:a6:9c:c0:7b:31: 6a:5c:6d:da:f6:65:91:9e:8d:8c:32:0f:93:bf:bd:75:be:c0: ba:8b:01:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nccjgOvn+Cw7TdxQaAFHnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjYwMzI2MDAwMTAxWhcNMjYwMzI3MDAwMTAxWjAzMTEwLwYDVQQD EyhkMGYyMzIxNjY1MDc4ZGNiNzllMTI0Y2QyMzA2ZjI5NzY4YWVkNzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0TmW8DNGi1Q6mgIb21VAbYKg/52 hz2CPMiLBGBDp4+8Hj3ZZ0ZVHjRL1ljJhM+BoibEWBGAc+4rB2EwepRkfiwzD3jU q7U4wmPL6jdB8F4QDHARAx07owLW5cgJ5l0nSwunKsovSlgRVW4AqHW/5qHsk4Si N/BqOgrAYEpT3pU/dGSaqxDURet6LnBPBQvVZPvm62Pon0/N8wl4tIINmZxj+7ul 30OtHRrvQ8hNDfXaejnKK1ip36KDmZEvUtaH6PJ675vjUV12+LU9lCUP+53p7gIw H5X/CZz0Oa/BLws+9lRXjOxEFCKYtRZLWVl5z5e3QcRcTf0ZPPLyJCeBLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNDyMhZlB43LeeEkzSMG8pdorteDMB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5wJTNsG Y3lLH758cjE67+MYyZBoHwvyiSCQ8HqGsg9a7VnO87w7Jym0w9QN+gABar2fDXab vhPANXQW6uldyQplBn7qhy//AyLJvVl+8q7Cx1PSm+oQXXCGLJwkXNta/Cvrs8FB HR2Oyte3zG8dQmNj/f2oCtrd9nYvTOTKvphNxC+T9xW1HX5XhQXZexmWDz78Duqs asUkQklDh0FYEhS7v0hx3Pz5ZGdCusQUfLDDnl0Qv0uCk73sp0lYwc/rySuQx2Wq M2V+1DjsDFhPr28wf7kvXwCjHpXU+wSO/l/bKEy+raacwHsxalxt2vZlkZ6NjDIP k7+9db7AuosB3w== -----END CERTIFICATE-----Generated at Thu Mar 26 10:19:02 2026 by rpki-client