$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft File: OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft (raw, json) Hash identifier: /fPBR1p9AIgRYCqfP1gsYsCDb5aTeZdZXm33TV27/4w= Subject key identifier: D3:19:62:46:6E:22:8F:21:28:CA:13:65:91:D6:4E:1B:D7:E4:21:B5 Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 019E1D59D4B41425A6DF645DBEB84738C734 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft Manifest number: 1917 Signing time: Tue 12 May 2026 18:01:26 +0000 Manifest this update: Tue 12 May 2026 18:01:26 +0000 Manifest next update: Wed 13 May 2026 18:01:26 +0000 Files and hashes: 1: 1wr8QIeSM3CIv5J7uap933hLaGs.roa (hash: Y6lFO4ooFEDBG8EOKNjhhaIJIuCCzVgscAraR7wX8B4=) 2: 4nJ0h3kxVoLTGLl-KMMdIGNO3U4.roa (hash: yXSTzPv+VSMPQEsmFJQmVgwkS8AYD6u5M83BtbV+VIE=) 3: 5h7nMBydUVPaOlFP-jldFT3enCQ.roa (hash: +rXXd2KMjjrhcbSdyv1pypNJANUYaaOEd90M4umJew8=) 4: EdrkWbcqLRMSNrh6Sa5x5mnTLPc.roa (hash: Fk5tDegQkNWmVnCc3SYJvszlVAARBSOO/qIaE+GvEdY=) 5: FOt64C6RCxN5JGIdYYt0-jp9RJQ.roa (hash: tamHBKuLjpWpXY8LQK286Mn5I3Q0OVkX8D4lvECCpD8=) 6: LTj2PGdyu1TZVch3WwkoLN3benA.roa (hash: 0uIInrnjr5BRMLrYPZ3TlKAb12B+T0z8Pu5nxkwhOwA=) 7: OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl (hash: KmkHuDW6QoHC9Ra8QV/4Qcr5wRcZ0Ff5cjAhbaBjIiY=) 8: OR9wB6bWiqsZvjqNRRbC11UhrBA.roa (hash: BLhfuTsmrrfMXC8Lx4hjGsCFS5Q2HKcD1UJlTtem6+U=) 9: UJVwk9mntlMFjdR5x6Gz4DwAego.roa (hash: Y9Qzk1ZJNkQeeN5SL4rk7tJNNAoeHg7LXp+c5rv1kJY=) 10: XIxZD227ioGX0cqqVFAINXLyX6Q.roa (hash: sDleWGEf+rrGs4/hbX/4+JTQcRgaaTHiE45KWqHpF+s=) 11: XkdalcQg6hGFzhglm3gQzCnpww4.roa (hash: 8jItQEffXXa+ZvcKZLLyn2RNT/EfLCbVUQe+TOkVNeM=) 12: YWsBcXgsO8gZFuZAgXqc8mQzIPQ.roa (hash: FIq3otCEvunZWYD7V3EpFGXTGzchT90RBkn3PHEPtpE=) 13: eSOXNELPy2P_3h7R8IBwrZVgqTM.roa (hash: r38ULUfgOCtbQfGW33x7ibVGykkgQ5HIh/ZXyBOz91w=) 14: fPatpWdNAbZy6ojdptQs2lNi1EE.roa (hash: X9tWk7+bmsyMGDUglxjA0jdRl4uO9c2P7cIjkiKVhfo=) 15: fny2WANL9Kakl_hzClrFytLGIbA.roa (hash: Li0zLoSXMQkOWimSeqYniHU5WmqmT1OGtibQ573h2wE=) 16: lqG4TiS1VcHtRo5hXtYqEofYXQY.roa (hash: lQ0va2Pv+RAccp1R5C/OndWZWgx6m66STBo/DZ6jbSw=) 17: snScws96TnQnAtgCESncYf2cHQI.roa (hash: Rg061AAdsDJTEuVCFaKulmhMa2nYwQQcIJgWuXh/KyU=) 18: zyiTueEsxpcD3PrX5wVtwGJMZ_Y.roa (hash: 7R1f/73J/Qx3gYsQEvvU8YVQZND5dDU9/Elan9+1kYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 18:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:59:d4:b4:14:25:a6:df:64:5d:be:b8:47:38:c7:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: May 12 18:01:26 2026 GMT Not After : May 13 18:01:26 2026 GMT Subject: CN=d31962466e228f2128ca136591d64e1bd7e421b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a5:d3:9a:a5:9a:da:bf:02:1d:24:ed:dd:e9: 06:df:3e:23:85:e2:6b:ff:9e:1e:91:94:2b:ae:d6: f1:5b:13:26:e3:c0:80:c7:35:9a:fe:c2:08:6c:c1: ea:88:65:77:fd:f4:3f:0e:6c:8b:7f:c6:a7:a5:d7: d8:86:a5:99:ae:63:e0:02:10:29:b9:cd:85:1c:85: 9b:24:23:a4:d0:96:b1:a6:82:a2:73:5e:38:1d:9d: 74:34:7f:67:50:5f:c5:83:2e:8c:87:fa:79:a6:c8: 5c:a8:12:2c:d1:ec:d1:63:e8:a7:7f:bb:6f:74:a0: 38:01:34:12:cf:ec:29:85:52:c9:0c:aa:ad:1f:73: 21:0a:7e:b2:61:85:0c:db:48:7d:45:1f:af:c8:67: f8:85:32:cb:c6:6c:ff:5b:5a:a0:c1:c9:9a:dc:56: 0d:72:50:ef:de:7a:8c:73:4f:f5:2e:ad:21:29:a3: 54:f4:11:4a:4e:6b:db:ac:77:94:49:c1:97:8f:e6: 9c:c6:87:c3:9b:e2:be:c2:ad:87:e8:ca:8c:21:2c: 1a:39:a6:83:2f:50:9f:cc:be:59:b2:aa:4a:69:8b: be:d5:df:d5:ac:16:e3:ef:d5:e0:e1:f1:26:f1:d9: f7:d3:00:71:d3:2d:c0:37:03:99:f0:4a:60:da:1c: 6f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:19:62:46:6E:22:8F:21:28:CA:13:65:91:D6:4E:1B:D7:E4:21:B5 X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:54:0c:80:9d:19:db:2e:18:79:fa:4b:0e:91:f8:20:dd:88: e4:18:72:43:05:44:04:93:3e:66:3d:34:c8:a0:82:25:d0:e4: b6:8e:c1:22:52:9a:3a:05:71:4f:b1:db:86:3e:7d:61:c1:32: 6d:a4:13:3a:8f:20:ee:9c:fa:75:2c:20:02:6a:4d:fb:79:28: 79:8b:80:7c:b4:09:e2:7f:3b:99:71:2f:c7:71:f6:6b:1c:b3: 34:3f:5b:64:80:60:f6:db:24:5e:3f:76:46:f3:5a:00:3e:08: 36:13:24:7b:57:74:7e:bb:cb:15:44:0e:d6:2a:71:fd:31:bf: 44:e4:5b:5f:8f:e0:48:5b:b1:8c:e2:8d:e6:7d:80:ac:4f:92: ed:8f:a0:af:80:4c:18:a2:6d:f4:15:50:48:7d:99:4a:82:71: ce:8b:56:84:17:48:30:84:72:d5:32:c3:6a:c8:24:ad:ba:96: 4a:37:30:0c:d0:40:cb:e6:f1:de:a1:4d:4c:05:6c:27:b5:fb: fd:d8:1e:79:ea:f6:70:81:10:8d:9e:44:b1:26:c3:d7:88:7f: a7:68:66:16:5c:d2:8d:36:9e:fa:a8:f3:84:56:9c:98:6c:d5: 30:ed:ac:88:92:c7:79:80:aa:5a:ea:b1:43:b9:f7:4c:ce:1b: ab:e3:17:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dWdS0FCWm32RdvrhHOMc0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjYwNTEyMTgwMTI2WhcNMjYwNTEzMTgwMTI2WjAzMTEwLwYDVQQD EyhkMzE5NjI0NjZlMjI4ZjIxMjhjYTEzNjU5MWQ2NGUxYmQ3ZTQyMWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6XTmqWa2r8CHSTt3ekG3z4jheJr /54ekZQrrtbxWxMm48CAxzWa/sIIbMHqiGV3/fQ/DmyLf8anpdfYhqWZrmPgAhAp uc2FHIWbJCOk0JaxpoKic144HZ10NH9nUF/Fgy6Mh/p5pshcqBIs0ezRY+inf7tv dKA4ATQSz+wphVLJDKqtH3MhCn6yYYUM20h9RR+vyGf4hTLLxmz/W1qgwcma3FYN clDv3nqMc0/1Lq0hKaNU9BFKTmvbrHeUScGXj+acxofDm+K+wq2H6MqMISwaOaaD L1CfzL5ZsqpKaYu+1d/VrBbj79Xg4fEm8dn30wBx0y3ANwOZ8Epg2hxvVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMZYkZuIo8hKMoTZZHWThvX5CG1MB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGFQMgJ0Z 2y4YefpLDpH4IN2I5BhyQwVEBJM+Zj00yKCCJdDkto7BIlKaOgVxT7Hbhj59YcEy baQTOo8g7pz6dSwgAmpN+3koeYuAfLQJ4n87mXEvx3H2axyzND9bZIBg9tskXj92 RvNaAD4INhMke1d0frvLFUQO1ipx/TG/RORbX4/gSFuxjOKN5n2ArE+S7Y+gr4BM GKJt9BVQSH2ZSoJxzotWhBdIMIRy1TLDasgkrbqWSjcwDNBAy+bx3qFNTAVsJ7X7 /dgeeer2cIEQjZ5EsSbD14h/p2hmFlzSjTae+qjzhFacmGzVMO2siJLHeYCqWuqx Q7n3TM4bq+MXBw== -----END CERTIFICATE-----Generated at Wed May 13 03:10:19 2026 by rpki-client