$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft File: OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft (raw, json) Hash identifier: ZtzZsYZEE0/MPCSWhgBHWFl719+fHDk7+A6BVcqdm6c= Subject key identifier: 54:AA:B1:A1:70:1E:EF:85:CA:4C:80:2E:C4:87:7C:1C:3E:5D:B5:18 Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 01A0CF35CB345D14BB7B41E1C51A0FDD4867 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft Manifest number: 1A7E Signing time: Wed 23 Sep 2026 17:00:04 +0000 Manifest this update: Wed 23 Sep 2026 17:00:04 +0000 Manifest next update: Thu 24 Sep 2026 17:00:04 +0000 Files and hashes: 1: 1wr8QIeSM3CIv5J7uap933hLaGs.roa (hash: Y6lFO4ooFEDBG8EOKNjhhaIJIuCCzVgscAraR7wX8B4=) 2: 4nJ0h3kxVoLTGLl-KMMdIGNO3U4.roa (hash: yXSTzPv+VSMPQEsmFJQmVgwkS8AYD6u5M83BtbV+VIE=) 3: EdrkWbcqLRMSNrh6Sa5x5mnTLPc.roa (hash: Fk5tDegQkNWmVnCc3SYJvszlVAARBSOO/qIaE+GvEdY=) 4: FOt64C6RCxN5JGIdYYt0-jp9RJQ.roa (hash: tamHBKuLjpWpXY8LQK286Mn5I3Q0OVkX8D4lvECCpD8=) 5: LTj2PGdyu1TZVch3WwkoLN3benA.roa (hash: 0uIInrnjr5BRMLrYPZ3TlKAb12B+T0z8Pu5nxkwhOwA=) 6: OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl (hash: xuWScftkKsjh+raV5xlq61NnV41hJVvCFHKwY47uJG8=) 7: OR9wB6bWiqsZvjqNRRbC11UhrBA.roa (hash: BLhfuTsmrrfMXC8Lx4hjGsCFS5Q2HKcD1UJlTtem6+U=) 8: UJVwk9mntlMFjdR5x6Gz4DwAego.roa (hash: Y9Qzk1ZJNkQeeN5SL4rk7tJNNAoeHg7LXp+c5rv1kJY=) 9: XIxZD227ioGX0cqqVFAINXLyX6Q.roa (hash: sDleWGEf+rrGs4/hbX/4+JTQcRgaaTHiE45KWqHpF+s=) 10: XkdalcQg6hGFzhglm3gQzCnpww4.roa (hash: 8jItQEffXXa+ZvcKZLLyn2RNT/EfLCbVUQe+TOkVNeM=) 11: YWsBcXgsO8gZFuZAgXqc8mQzIPQ.roa (hash: FIq3otCEvunZWYD7V3EpFGXTGzchT90RBkn3PHEPtpE=) 12: cgpmcoUK85pTENssifHpCXJlfPE.roa (hash: JM0iNu1ajeTkqDE4Nqu0ZyqAU2JL5GqcLbiW8nq6Ilc=) 13: eSOXNELPy2P_3h7R8IBwrZVgqTM.roa (hash: r38ULUfgOCtbQfGW33x7ibVGykkgQ5HIh/ZXyBOz91w=) 14: fny2WANL9Kakl_hzClrFytLGIbA.roa (hash: Li0zLoSXMQkOWimSeqYniHU5WmqmT1OGtibQ573h2wE=) 15: hSqKucNYzrS-ITecCZqK51ewyo0.roa (hash: WlW+oWE3pA2mAbzyCA2PCiD4XrqfKT7ZH8dHdqawUFo=) 16: lqG4TiS1VcHtRo5hXtYqEofYXQY.roa (hash: lQ0va2Pv+RAccp1R5C/OndWZWgx6m66STBo/DZ6jbSw=) 17: snScws96TnQnAtgCESncYf2cHQI.roa (hash: Rg061AAdsDJTEuVCFaKulmhMa2nYwQQcIJgWuXh/KyU=) 18: zyiTueEsxpcD3PrX5wVtwGJMZ_Y.roa (hash: 7R1f/73J/Qx3gYsQEvvU8YVQZND5dDU9/Elan9+1kYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 17:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cf:35:cb:34:5d:14:bb:7b:41:e1:c5:1a:0f:dd:48:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: Sep 23 17:00:04 2026 GMT Not After : Sep 24 17:00:04 2026 GMT Subject: CN=54aab1a1701eef85ca4c802ec4877c1c3e5db518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:55:db:7e:01:28:88:d6:5a:dc:77:54:9e:34: 00:bf:6e:d6:29:a6:71:fa:97:0a:46:03:28:07:68: 4b:2c:bd:f3:42:51:ff:ea:39:11:35:5d:92:51:fb: fd:7c:66:d3:eb:80:68:96:e9:20:25:47:50:f2:23: ed:a3:3b:27:36:fd:1a:ea:c1:f0:a9:cc:7f:03:0d: f9:8b:51:1f:8f:77:ed:2b:6a:5c:78:ed:d9:e9:0d: 72:1d:c5:de:5e:2d:f5:e6:05:61:ae:82:0f:3a:a2: bf:0d:3d:3a:16:85:54:77:d1:be:90:2d:af:da:9b: 14:f3:4e:4f:1b:37:de:9a:3f:fe:d2:63:51:ee:81: e9:b5:e2:0d:37:99:0b:d6:d8:3c:7f:bf:72:7b:72: ca:8c:21:73:5a:3f:77:1e:23:33:ef:04:da:64:0e: 90:dc:72:9d:95:bb:9e:dd:91:e5:53:1a:f2:ac:58: ec:27:34:e3:2d:c7:c1:84:c9:4c:23:de:a1:55:74: 9e:e1:72:07:46:f1:4c:a9:37:29:89:0e:03:67:7b: b1:1a:39:99:61:ab:0f:0f:1a:92:9e:79:66:16:08: ed:80:5c:91:f9:2c:46:e1:25:15:2d:3b:29:67:1e: 46:2c:a4:4c:3c:ef:07:f0:3f:aa:1b:8f:2c:70:35: 60:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AA:B1:A1:70:1E:EF:85:CA:4C:80:2E:C4:87:7C:1C:3E:5D:B5:18 X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:d6:db:5b:74:c4:d4:0e:ce:fc:fa:e2:9a:72:96:4f:08:d6: 2c:2a:ed:2f:76:4b:53:03:36:51:87:46:ba:d7:77:8c:39:41: 86:7d:00:46:60:73:95:d9:e4:ab:89:d6:26:de:0e:d6:72:b6: b4:db:8e:c7:38:33:d2:79:61:f9:99:29:b3:40:3f:89:29:5a: 2f:fa:50:56:87:6f:04:4f:05:48:bc:63:fd:44:f0:31:c1:ff: 63:73:9e:ef:e0:a1:be:e4:54:f2:4c:46:b1:4d:6b:f9:5f:e3: e8:14:1f:3d:c3:4b:a3:1b:85:08:97:a8:f6:b8:16:8e:45:db: 3c:1b:4d:e7:01:b4:a8:fc:cf:53:b7:46:4c:f7:94:27:a3:ee: 29:24:fa:bf:8a:6b:65:18:4f:a9:a0:1b:a6:d0:84:39:f6:c6: 3b:73:f9:5b:2c:eb:18:ac:31:80:c8:ba:0d:24:33:b5:dd:b5: ab:bc:49:f4:54:e9:87:d6:aa:02:ba:01:b2:9c:5e:2c:62:97: 37:35:46:bb:a8:86:dd:98:7a:0b:be:71:e1:e1:57:2e:c3:c5: 84:44:49:d8:99:c0:9d:d3:02:ab:26:d9:ea:eb:cb:f5:c2:61: 98:52:2c:f0:53:f3:10:08:57:58:68:21:e4:79:ba:4c:fd:6b: 3d:0e:59:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDPNcs0XRS7e0HhxRoP3UhnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjYwOTIzMTcwMDA0WhcNMjYwOTI0MTcwMDA0WjAzMTEwLwYDVQQD Eyg1NGFhYjFhMTcwMWVlZjg1Y2E0YzgwMmVjNDg3N2MxYzNlNWRiNTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lXbfgEoiNZa3HdUnjQAv27WKaZx +pcKRgMoB2hLLL3zQlH/6jkRNV2SUfv9fGbT64BolukgJUdQ8iPtozsnNv0a6sHw qcx/Aw35i1Efj3ftK2pceO3Z6Q1yHcXeXi315gVhroIPOqK/DT06FoVUd9G+kC2v 2psU805PGzfemj/+0mNR7oHpteINN5kL1tg8f79ye3LKjCFzWj93HiMz7wTaZA6Q 3HKdlbue3ZHlUxryrFjsJzTjLcfBhMlMI96hVXSe4XIHRvFMqTcpiQ4DZ3uxGjmZ YasPDxqSnnlmFgjtgFyR+SxG4SUVLTspZx5GLKRMPO8H8D+qG48scDVgdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSqsaFwHu+FykyALsSHfBw+XbUYMB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAstbbW3TE 1A7O/PrimnKWTwjWLCrtL3ZLUwM2UYdGutd3jDlBhn0ARmBzldnkq4nWJt4O1nK2 tNuOxzgz0nlh+Zkps0A/iSlaL/pQVodvBE8FSLxj/UTwMcH/Y3Oe7+ChvuRU8kxG sU1r+V/j6BQfPcNLoxuFCJeo9rgWjkXbPBtN5wG0qPzPU7dGTPeUJ6PuKST6v4pr ZRhPqaAbptCEOfbGO3P5WyzrGKwxgMi6DSQztd21q7xJ9FTph9aqAroBspxeLGKX NzVGu6iG3Zh6C75x4eFXLsPFhERJ2JnAndMCqybZ6uvL9cJhmFIs8FPzEAhXWGgh 5Hm6TP1rPQ5ZVg== -----END CERTIFICATE-----Generated at Thu Sep 24 03:40:51 2026 by rpki-client