$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft File: OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft (raw, json) Hash identifier: 1xdLTMV1P+OMCWXqwPx87TP81vEYcDfP9jNtEWhhQE4= Subject key identifier: 48:24:D8:56:C7:18:3D:74:7E:25:9C:70:A2:FA:1F:2D:79:E1:45:1D Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 019F927F07ADF60037DCAB7F166AFEE9C3F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft Manifest number: 19DA Signing time: Fri 24 Jul 2026 05:00:26 +0000 Manifest this update: Fri 24 Jul 2026 05:00:26 +0000 Manifest next update: Sat 25 Jul 2026 05:00:26 +0000 Files and hashes: 1: 1wr8QIeSM3CIv5J7uap933hLaGs.roa (hash: Y6lFO4ooFEDBG8EOKNjhhaIJIuCCzVgscAraR7wX8B4=) 2: 4nJ0h3kxVoLTGLl-KMMdIGNO3U4.roa (hash: yXSTzPv+VSMPQEsmFJQmVgwkS8AYD6u5M83BtbV+VIE=) 3: EdrkWbcqLRMSNrh6Sa5x5mnTLPc.roa (hash: Fk5tDegQkNWmVnCc3SYJvszlVAARBSOO/qIaE+GvEdY=) 4: FOt64C6RCxN5JGIdYYt0-jp9RJQ.roa (hash: tamHBKuLjpWpXY8LQK286Mn5I3Q0OVkX8D4lvECCpD8=) 5: LTj2PGdyu1TZVch3WwkoLN3benA.roa (hash: 0uIInrnjr5BRMLrYPZ3TlKAb12B+T0z8Pu5nxkwhOwA=) 6: OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl (hash: wPbSZ0tnvDWdJbDJ38vbe6ACUqqoKK12lgMaIJDS90g=) 7: OR9wB6bWiqsZvjqNRRbC11UhrBA.roa (hash: BLhfuTsmrrfMXC8Lx4hjGsCFS5Q2HKcD1UJlTtem6+U=) 8: UJVwk9mntlMFjdR5x6Gz4DwAego.roa (hash: Y9Qzk1ZJNkQeeN5SL4rk7tJNNAoeHg7LXp+c5rv1kJY=) 9: XIxZD227ioGX0cqqVFAINXLyX6Q.roa (hash: sDleWGEf+rrGs4/hbX/4+JTQcRgaaTHiE45KWqHpF+s=) 10: XkdalcQg6hGFzhglm3gQzCnpww4.roa (hash: 8jItQEffXXa+ZvcKZLLyn2RNT/EfLCbVUQe+TOkVNeM=) 11: YWsBcXgsO8gZFuZAgXqc8mQzIPQ.roa (hash: FIq3otCEvunZWYD7V3EpFGXTGzchT90RBkn3PHEPtpE=) 12: cgpmcoUK85pTENssifHpCXJlfPE.roa (hash: JM0iNu1ajeTkqDE4Nqu0ZyqAU2JL5GqcLbiW8nq6Ilc=) 13: eSOXNELPy2P_3h7R8IBwrZVgqTM.roa (hash: r38ULUfgOCtbQfGW33x7ibVGykkgQ5HIh/ZXyBOz91w=) 14: fny2WANL9Kakl_hzClrFytLGIbA.roa (hash: Li0zLoSXMQkOWimSeqYniHU5WmqmT1OGtibQ573h2wE=) 15: hSqKucNYzrS-ITecCZqK51ewyo0.roa (hash: WlW+oWE3pA2mAbzyCA2PCiD4XrqfKT7ZH8dHdqawUFo=) 16: lqG4TiS1VcHtRo5hXtYqEofYXQY.roa (hash: lQ0va2Pv+RAccp1R5C/OndWZWgx6m66STBo/DZ6jbSw=) 17: snScws96TnQnAtgCESncYf2cHQI.roa (hash: Rg061AAdsDJTEuVCFaKulmhMa2nYwQQcIJgWuXh/KyU=) 18: zyiTueEsxpcD3PrX5wVtwGJMZ_Y.roa (hash: 7R1f/73J/Qx3gYsQEvvU8YVQZND5dDU9/Elan9+1kYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:7f:07:ad:f6:00:37:dc:ab:7f:16:6a:fe:e9:c3:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: Jul 24 05:00:26 2026 GMT Not After : Jul 25 05:00:26 2026 GMT Subject: CN=4824d856c7183d747e259c70a2fa1f2d79e1451d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:93:f0:8c:79:8f:f5:c0:28:c1:1e:5f:ee:f0: ff:db:b5:03:a5:f2:a9:ec:a7:84:be:41:b3:51:af: 38:71:e4:9c:19:29:58:8d:c8:8c:94:75:df:a2:a2: 27:4d:74:d7:cc:26:e9:d4:a7:0d:d5:c6:d1:e0:0e: 93:2e:a9:ee:c1:eb:45:a4:b0:40:1a:63:e7:dd:b9: fe:4e:30:78:26:d1:67:a0:f6:88:6b:c4:76:5c:f1: 6e:be:24:28:30:a5:d4:b9:f0:ba:a8:b1:fd:68:b2: 08:f7:08:f9:cc:f1:61:ca:5c:32:b1:35:2c:a4:30: 3e:29:1d:4d:52:27:7c:b1:e8:50:92:77:13:2a:8e: 2f:16:95:be:10:4f:3a:45:2d:26:f4:21:3f:24:fe: 73:8b:28:3c:17:c2:b9:b3:2d:af:e1:f6:aa:0d:8c: 5e:fa:8b:d5:f2:4a:fd:af:0e:e2:aa:b0:47:54:50: c9:15:96:0e:ed:c6:ed:89:6d:6e:d8:f0:07:19:46: ff:05:70:98:e1:27:dd:b6:dc:54:9e:dd:8d:dc:3a: 7a:37:e6:d0:ff:ea:a8:14:c5:af:61:f2:38:fa:ba: ee:fa:dd:31:22:bc:10:d9:a9:84:3e:f5:a9:5f:dc: cb:ac:fb:5f:70:4f:2a:cb:36:94:b2:7e:f5:bd:e3: 5c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:24:D8:56:C7:18:3D:74:7E:25:9C:70:A2:FA:1F:2D:79:E1:45:1D X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:7d:90:9d:99:41:78:46:f2:f4:40:3b:c5:a6:74:d9:31:c3: a1:43:e4:a9:68:4f:77:97:71:e0:68:3f:3c:43:b5:2f:0d:ff: 7f:74:5e:c4:ec:fd:68:dc:9d:bb:18:26:0d:f2:54:ef:a5:6d: a6:8d:cf:2b:8c:bb:d2:14:3c:09:3c:d9:47:04:a7:63:09:6c: 15:8c:52:cc:e2:9d:65:d6:43:23:91:ee:11:0f:3c:81:cb:b3: ec:89:84:f6:18:f0:30:04:f0:07:8d:56:be:bd:3b:99:bf:85: 5e:df:99:b7:9f:36:e7:48:f6:e9:3e:55:f3:7f:a7:74:ef:03: f2:72:2a:bc:53:ea:9b:6d:c0:05:fb:db:44:67:68:3d:a0:37: ec:57:ee:2a:10:58:d2:34:7e:8f:4f:26:e6:37:49:b6:98:6c: 3d:4d:86:5e:70:ad:9a:17:b9:22:63:3a:45:d5:9c:9d:e1:a6: 42:67:aa:2f:95:ae:b4:61:dc:82:5f:87:01:11:5f:6b:c6:5b: e2:86:f8:02:42:e5:80:35:38:d7:0b:0a:fa:8c:cf:58:10:03: d8:3b:0c:15:e5:60:d4:d5:11:56:05:23:74:7d:d1:c0:1a:19: db:f3:10:c2:9b:37:8d:5b:3e:98:1d:84:14:55:35:eb:88:c1: 61:9c:48:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Sfwet9gA33Kt/Fmr+6cPxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjYwNzI0MDUwMDI2WhcNMjYwNzI1MDUwMDI2WjAzMTEwLwYDVQQD Eyg0ODI0ZDg1NmM3MTgzZDc0N2UyNTljNzBhMmZhMWYyZDc5ZTE0NTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpPwjHmP9cAowR5f7vD/27UDpfKp 7KeEvkGzUa84ceScGSlYjciMlHXfoqInTXTXzCbp1KcN1cbR4A6TLqnuwetFpLBA GmPn3bn+TjB4JtFnoPaIa8R2XPFuviQoMKXUufC6qLH9aLII9wj5zPFhylwysTUs pDA+KR1NUid8sehQkncTKo4vFpW+EE86RS0m9CE/JP5ziyg8F8K5sy2v4faqDYxe +ovV8kr9rw7iqrBHVFDJFZYO7cbtiW1u2PAHGUb/BXCY4SfdttxUnt2N3Dp6N+bQ /+qoFMWvYfI4+rru+t0xIrwQ2amEPvWpX9zLrPtfcE8qyzaUsn71veNc+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgk2FbHGD10fiWccKL6Hy154UUdMB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfH2QnZlB eEby9EA7xaZ02THDoUPkqWhPd5dx4Gg/PEO1Lw3/f3RexOz9aNyduxgmDfJU76Vt po3PK4y70hQ8CTzZRwSnYwlsFYxSzOKdZdZDI5HuEQ88gcuz7ImE9hjwMATwB41W vr07mb+FXt+Zt58250j26T5V83+ndO8D8nIqvFPqm23ABfvbRGdoPaA37FfuKhBY 0jR+j08m5jdJtphsPU2GXnCtmhe5ImM6RdWcneGmQmeqL5WutGHcgl+HARFfa8Zb 4ob4AkLlgDU41wsK+ozPWBAD2DsMFeVg1NURVgUjdH3RwBoZ2/MQwps3jVs+mB2E FFU164jBYZxIWA== -----END CERTIFICATE-----Generated at Fri Jul 24 07:39:04 2026 by rpki-client