$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft File: OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft (raw, json) Hash identifier: lPd7jrNEsuVNvE4jSh7DE4MrUeWBLRaIdQqfWI8YeBs= Subject key identifier: 8D:4B:CA:9F:23:C4:EE:2B:E6:F1:D7:B6:81:94:7C:8F:51:87:C6:74 Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 01A1DB386FE87672FD863A049DB82A4E4A9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft Manifest number: 1B09 Signing time: Sat 14 Nov 2026 18:01:11 +0000 Manifest this update: Sat 14 Nov 2026 18:01:11 +0000 Manifest next update: Sun 15 Nov 2026 18:01:11 +0000 Files and hashes: 1: 1wr8QIeSM3CIv5J7uap933hLaGs.roa (hash: Y6lFO4ooFEDBG8EOKNjhhaIJIuCCzVgscAraR7wX8B4=) 2: 4nJ0h3kxVoLTGLl-KMMdIGNO3U4.roa (hash: yXSTzPv+VSMPQEsmFJQmVgwkS8AYD6u5M83BtbV+VIE=) 3: 8G2-MZzV3XiVkM0Zb_K5F9ikvXw.roa (hash: MHZg5lePPMnrya/XfvQlJN3yfGVFc35lSGTNc281uNo=) 4: EdrkWbcqLRMSNrh6Sa5x5mnTLPc.roa (hash: Fk5tDegQkNWmVnCc3SYJvszlVAARBSOO/qIaE+GvEdY=) 5: FOt64C6RCxN5JGIdYYt0-jp9RJQ.roa (hash: tamHBKuLjpWpXY8LQK286Mn5I3Q0OVkX8D4lvECCpD8=) 6: LTj2PGdyu1TZVch3WwkoLN3benA.roa (hash: 0uIInrnjr5BRMLrYPZ3TlKAb12B+T0z8Pu5nxkwhOwA=) 7: OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl (hash: nA6d9jzBPutb5ulDIFu0Ik2F1u/0fbPe4jtg8UEbvFg=) 8: OR9wB6bWiqsZvjqNRRbC11UhrBA.roa (hash: BLhfuTsmrrfMXC8Lx4hjGsCFS5Q2HKcD1UJlTtem6+U=) 9: UJVwk9mntlMFjdR5x6Gz4DwAego.roa (hash: Y9Qzk1ZJNkQeeN5SL4rk7tJNNAoeHg7LXp+c5rv1kJY=) 10: XIxZD227ioGX0cqqVFAINXLyX6Q.roa (hash: sDleWGEf+rrGs4/hbX/4+JTQcRgaaTHiE45KWqHpF+s=) 11: XkdalcQg6hGFzhglm3gQzCnpww4.roa (hash: 8jItQEffXXa+ZvcKZLLyn2RNT/EfLCbVUQe+TOkVNeM=) 12: YWsBcXgsO8gZFuZAgXqc8mQzIPQ.roa (hash: FIq3otCEvunZWYD7V3EpFGXTGzchT90RBkn3PHEPtpE=) 13: cgpmcoUK85pTENssifHpCXJlfPE.roa (hash: JM0iNu1ajeTkqDE4Nqu0ZyqAU2JL5GqcLbiW8nq6Ilc=) 14: eSOXNELPy2P_3h7R8IBwrZVgqTM.roa (hash: r38ULUfgOCtbQfGW33x7ibVGykkgQ5HIh/ZXyBOz91w=) 15: fny2WANL9Kakl_hzClrFytLGIbA.roa (hash: Li0zLoSXMQkOWimSeqYniHU5WmqmT1OGtibQ573h2wE=) 16: hSqKucNYzrS-ITecCZqK51ewyo0.roa (hash: WlW+oWE3pA2mAbzyCA2PCiD4XrqfKT7ZH8dHdqawUFo=) 17: lqG4TiS1VcHtRo5hXtYqEofYXQY.roa (hash: lQ0va2Pv+RAccp1R5C/OndWZWgx6m66STBo/DZ6jbSw=) 18: zyiTueEsxpcD3PrX5wVtwGJMZ_Y.roa (hash: 7R1f/73J/Qx3gYsQEvvU8YVQZND5dDU9/Elan9+1kYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 18:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:db:38:6f:e8:76:72:fd:86:3a:04:9d:b8:2a:4e:4a:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: Nov 14 18:01:11 2026 GMT Not After : Nov 15 18:01:11 2026 GMT Subject: CN=8d4bca9f23c4ee2be6f1d7b681947c8f5187c674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a7:73:00:ff:c6:4a:f8:2d:43:6a:ca:7b:cd: 91:74:bd:db:c0:3c:72:95:b7:5a:15:f5:44:30:59: 9c:b3:8e:c3:5b:68:71:e8:07:9a:e2:f0:6b:53:a4: 29:74:8f:5b:a7:08:99:eb:ef:ff:da:40:ea:df:91: 6d:1f:02:cf:44:92:05:31:44:89:6c:b4:d8:f9:08: 6e:9c:09:32:82:57:a4:f9:84:50:4f:69:e3:b4:a1: 7f:49:3e:5b:b1:42:c7:80:2d:db:9d:58:ca:ca:b5: 84:7e:01:6a:77:68:69:55:16:75:09:80:76:bc:64: 93:a6:9f:b9:cc:07:0a:58:d8:3e:e0:15:a3:42:02: f8:ce:5b:5e:e3:50:82:c5:5b:19:be:c2:11:32:59: 74:df:b9:30:4d:88:4a:fb:ba:9e:4b:68:35:6d:54: 29:9b:6b:c0:cd:68:55:01:3f:cc:74:80:43:60:73: 49:da:6a:1a:90:20:c8:22:15:c6:85:5a:df:8d:9d: 69:6e:10:c2:7d:63:70:a0:b3:2d:80:b6:2b:81:f6: 38:13:22:cd:59:c2:fc:ee:aa:6a:14:ac:1f:ad:c5: 62:9a:8d:e9:ee:7c:22:f4:53:64:72:02:d2:12:19: 2b:41:2b:f6:49:ce:1a:27:ff:dc:da:27:75:3e:15: aa:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4B:CA:9F:23:C4:EE:2B:E6:F1:D7:B6:81:94:7C:8F:51:87:C6:74 X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:df:35:76:9a:22:26:7d:ab:9a:78:3c:37:22:01:e9:53:04: 1d:99:69:a0:ad:2f:b6:f6:ba:a2:10:85:e3:e5:10:4a:80:23: d4:46:3d:4d:3a:8c:ce:4e:bf:2d:48:f6:fb:7c:69:c4:72:2e: c5:1e:1b:fe:b7:58:90:4c:02:d2:0b:fa:b6:34:83:06:0c:ae: 3a:8e:f2:cf:1f:ba:05:56:c1:c3:a1:d4:e9:d3:ab:42:33:0b: 7c:16:1d:e3:d1:c2:93:8a:da:4d:86:32:83:bd:4d:91:83:87: 90:9f:b5:a5:f7:fb:be:13:54:29:90:fa:52:1d:5d:b8:f2:41: 67:90:d2:45:27:c0:2e:00:70:a3:51:32:93:71:38:68:e7:66: 30:e0:26:bf:d0:a7:c0:79:45:dd:3d:65:9c:9b:41:f5:dc:73: 1f:74:23:83:c7:e1:49:e8:da:a8:d3:d3:a0:1a:68:a3:55:10: bc:9d:0f:52:48:c0:77:1e:94:c5:bc:87:9f:a1:29:a6:20:5a: 33:ab:23:f4:91:5d:c5:d6:aa:31:05:ad:2a:0c:70:da:53:af: 9b:90:58:4e:a3:44:50:28:07:71:32:c0:50:a5:86:02:66:b4: cb:14:98:4f:60:a1:22:da:e5:11:31:32:63:cd:69:de:20:28: ed:69:b1:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHbOG/odnL9hjoEnbgqTkqfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjYxMTE0MTgwMTExWhcNMjYxMTE1MTgwMTExWjAzMTEwLwYDVQQD Eyg4ZDRiY2E5ZjIzYzRlZTJiZTZmMWQ3YjY4MTk0N2M4ZjUxODdjNjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6dzAP/GSvgtQ2rKe82RdL3bwDxy lbdaFfVEMFmcs47DW2hx6Aea4vBrU6QpdI9bpwiZ6+//2kDq35FtHwLPRJIFMUSJ bLTY+QhunAkyglek+YRQT2njtKF/ST5bsULHgC3bnVjKyrWEfgFqd2hpVRZ1CYB2 vGSTpp+5zAcKWNg+4BWjQgL4zlte41CCxVsZvsIRMll037kwTYhK+7qeS2g1bVQp m2vAzWhVAT/MdIBDYHNJ2moakCDIIhXGhVrfjZ1pbhDCfWNwoLMtgLYrgfY4EyLN WcL87qpqFKwfrcVimo3p7nwi9FNkcgLSEhkrQSv2Sc4aJ//c2id1PhWqqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1Lyp8jxO4r5vHXtoGUfI9Rh8Z0MB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATt81dpoi Jn2rmng8NyIB6VMEHZlpoK0vtva6ohCF4+UQSoAj1EY9TTqMzk6/LUj2+3xpxHIu xR4b/rdYkEwC0gv6tjSDBgyuOo7yzx+6BVbBw6HU6dOrQjMLfBYd49HCk4raTYYy g71NkYOHkJ+1pff7vhNUKZD6Uh1duPJBZ5DSRSfALgBwo1Eyk3E4aOdmMOAmv9Cn wHlF3T1lnJtB9dxzH3Qjg8fhSejaqNPToBpoo1UQvJ0PUkjAdx6UxbyHn6EppiBa M6sj9JFdxdaqMQWtKgxw2lOvm5BYTqNEUCgHcTLAUKWGAma0yxSYT2ChItrlETEy Y81p3iAo7Wmx0Q== -----END CERTIFICATE-----Generated at Sun Nov 15 04:32:51 2026 by rpki-client