$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft File: OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft (raw, json) Hash identifier: TO7/ZBabX0CuIjJlCHz9KhljmlKlVYHevvF/wbGXDZY= Subject key identifier: B7:FF:B0:44:61:8C:64:D7:88:EA:59:33:7A:CC:02:D5:33:1C:39:EA Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 019D33756AB2B4AD3EC6CE2BBBF22136060D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft Manifest number: 189D Signing time: Sat 28 Mar 2026 08:00:26 +0000 Manifest this update: Sat 28 Mar 2026 08:00:26 +0000 Manifest next update: Sun 29 Mar 2026 08:00:26 +0000 Files and hashes: 1: 1wr8QIeSM3CIv5J7uap933hLaGs.roa (hash: Y6lFO4ooFEDBG8EOKNjhhaIJIuCCzVgscAraR7wX8B4=) 2: 4nJ0h3kxVoLTGLl-KMMdIGNO3U4.roa (hash: yXSTzPv+VSMPQEsmFJQmVgwkS8AYD6u5M83BtbV+VIE=) 3: 5h7nMBydUVPaOlFP-jldFT3enCQ.roa (hash: +rXXd2KMjjrhcbSdyv1pypNJANUYaaOEd90M4umJew8=) 4: EdrkWbcqLRMSNrh6Sa5x5mnTLPc.roa (hash: Fk5tDegQkNWmVnCc3SYJvszlVAARBSOO/qIaE+GvEdY=) 5: FOt64C6RCxN5JGIdYYt0-jp9RJQ.roa (hash: tamHBKuLjpWpXY8LQK286Mn5I3Q0OVkX8D4lvECCpD8=) 6: LTj2PGdyu1TZVch3WwkoLN3benA.roa (hash: 0uIInrnjr5BRMLrYPZ3TlKAb12B+T0z8Pu5nxkwhOwA=) 7: OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl (hash: rnQVe2lxamJT4Nw2EkwZ+uKPbK00i3Vj/0yiEj+EY9I=) 8: OR9wB6bWiqsZvjqNRRbC11UhrBA.roa (hash: BLhfuTsmrrfMXC8Lx4hjGsCFS5Q2HKcD1UJlTtem6+U=) 9: UJVwk9mntlMFjdR5x6Gz4DwAego.roa (hash: Y9Qzk1ZJNkQeeN5SL4rk7tJNNAoeHg7LXp+c5rv1kJY=) 10: XIxZD227ioGX0cqqVFAINXLyX6Q.roa (hash: sDleWGEf+rrGs4/hbX/4+JTQcRgaaTHiE45KWqHpF+s=) 11: XkdalcQg6hGFzhglm3gQzCnpww4.roa (hash: 8jItQEffXXa+ZvcKZLLyn2RNT/EfLCbVUQe+TOkVNeM=) 12: YWsBcXgsO8gZFuZAgXqc8mQzIPQ.roa (hash: FIq3otCEvunZWYD7V3EpFGXTGzchT90RBkn3PHEPtpE=) 13: fPatpWdNAbZy6ojdptQs2lNi1EE.roa (hash: X9tWk7+bmsyMGDUglxjA0jdRl4uO9c2P7cIjkiKVhfo=) 14: fny2WANL9Kakl_hzClrFytLGIbA.roa (hash: Li0zLoSXMQkOWimSeqYniHU5WmqmT1OGtibQ573h2wE=) 15: lqG4TiS1VcHtRo5hXtYqEofYXQY.roa (hash: lQ0va2Pv+RAccp1R5C/OndWZWgx6m66STBo/DZ6jbSw=) 16: snScws96TnQnAtgCESncYf2cHQI.roa (hash: Rg061AAdsDJTEuVCFaKulmhMa2nYwQQcIJgWuXh/KyU=) 17: zyiTueEsxpcD3PrX5wVtwGJMZ_Y.roa (hash: 7R1f/73J/Qx3gYsQEvvU8YVQZND5dDU9/Elan9+1kYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 00:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:33:75:6a:b2:b4:ad:3e:c6:ce:2b:bb:f2:21:36:06:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: Mar 28 08:00:26 2026 GMT Not After : Mar 29 08:00:26 2026 GMT Subject: CN=b7ffb044618c64d788ea59337acc02d5331c39ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a9:23:82:f8:79:1b:18:47:d6:71:5b:64:a0: 50:7f:72:e1:3a:22:14:47:cf:94:f5:7c:5a:4c:e9: cb:3d:7e:cf:11:8e:88:58:5f:b7:9c:6f:56:5f:d3: b6:44:f2:90:e7:ef:eb:49:8c:d0:94:80:0c:54:ed: 90:72:50:c0:77:36:e2:bc:2d:61:d1:c9:81:0e:75: 2c:5d:c0:87:27:12:b4:40:cf:10:8a:90:f2:68:f7: 0e:4d:b4:99:02:5b:0f:02:52:90:b8:8c:e3:00:4c: 02:2a:60:77:f7:c7:59:8c:d7:8d:e8:49:37:a5:8d: 69:d6:04:54:53:51:c9:6e:e8:3a:59:53:1b:b1:d7: 5f:16:81:fa:05:89:50:bd:f3:70:2f:ba:41:93:4b: a6:aa:9c:4c:fc:bb:e5:3c:db:85:7b:42:a5:04:c8: 0f:5c:83:e8:ca:85:b6:91:24:02:42:2c:cf:8c:87: 71:4e:d4:9c:89:3e:d5:0f:2d:08:c3:84:70:02:19: 4b:e8:30:6b:64:cb:33:25:b0:ff:2e:fc:a0:ad:72: 91:3f:65:fc:9c:37:40:5c:aa:0f:8a:34:97:17:43: 90:fc:a8:3c:2c:04:f0:6f:19:85:e9:8a:da:f0:54: 1d:be:88:ab:90:07:49:23:1c:9a:0f:d9:b8:5d:1e: 00:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FF:B0:44:61:8C:64:D7:88:EA:59:33:7A:CC:02:D5:33:1C:39:EA X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:7c:00:d6:21:f3:88:a5:e0:c7:48:f7:5a:4b:b4:5e:db:bc: d1:e0:97:e5:7a:78:82:9c:14:9d:28:11:8f:39:9b:30:28:33: 44:12:f8:52:7e:06:e9:84:c5:d8:fc:bf:e3:fe:dd:41:d3:45: a4:c9:91:26:b3:cf:e4:42:6c:03:5a:9f:e5:78:82:ef:1a:6c: 50:ca:ed:82:6a:2f:00:ae:80:53:89:ca:f2:8c:07:4b:27:92: 1d:ee:4e:95:86:36:6b:a3:0a:80:1d:51:d5:12:3b:83:a7:46: 5a:61:a4:1f:f3:10:46:45:d6:ae:ee:6a:5c:d7:0b:e3:b2:48: 03:54:e4:18:2c:34:d1:05:1f:50:ff:54:d2:dd:64:c8:cc:ad: 2f:e6:8b:93:c2:22:01:6c:2f:ab:17:61:64:07:e2:0c:24:13: ac:69:93:66:85:80:f0:cf:1e:a2:3a:ad:a9:4c:be:10:8c:84: 53:fb:bc:12:a2:e0:9f:b8:95:23:4b:2e:56:16:48:01:96:30: 20:fb:a5:5f:a3:1c:75:96:9d:56:fe:3b:77:65:44:21:1f:dd: 5e:25:28:81:e4:38:32:ce:d3:0d:6a:7b:51:1c:1d:87:1b:8c: 38:e3:5a:99:fd:bc:55:4b:fa:24:9f:59:1b:20:6d:2a:95:8e: 9f:92:af:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0zdWqytK0+xs4ru/IhNgYNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjYwMzI4MDgwMDI2WhcNMjYwMzI5MDgwMDI2WjAzMTEwLwYDVQQD EyhiN2ZmYjA0NDYxOGM2NGQ3ODhlYTU5MzM3YWNjMDJkNTMzMWMzOWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsakjgvh5GxhH1nFbZKBQf3LhOiIU R8+U9XxaTOnLPX7PEY6IWF+3nG9WX9O2RPKQ5+/rSYzQlIAMVO2QclDAdzbivC1h 0cmBDnUsXcCHJxK0QM8QipDyaPcOTbSZAlsPAlKQuIzjAEwCKmB398dZjNeN6Ek3 pY1p1gRUU1HJbug6WVMbsddfFoH6BYlQvfNwL7pBk0umqpxM/LvlPNuFe0KlBMgP XIPoyoW2kSQCQizPjIdxTtSciT7VDy0Iw4RwAhlL6DBrZMszJbD/LvygrXKRP2X8 nDdAXKoPijSXF0OQ/Kg8LATwbxmF6Yra8FQdvoirkAdJIxyaD9m4XR4AKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLf/sERhjGTXiOpZM3rMAtUzHDnqMB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHwA1iHz iKXgx0j3Wku0Xtu80eCX5Xp4gpwUnSgRjzmbMCgzRBL4Un4G6YTF2Py/4/7dQdNF pMmRJrPP5EJsA1qf5XiC7xpsUMrtgmovAK6AU4nK8owHSyeSHe5OlYY2a6MKgB1R 1RI7g6dGWmGkH/MQRkXWru5qXNcL47JIA1TkGCw00QUfUP9U0t1kyMytL+aLk8Ii AWwvqxdhZAfiDCQTrGmTZoWA8M8eojqtqUy+EIyEU/u8EqLgn7iVI0suVhZIAZYw IPulX6McdZadVv47d2VEIR/dXiUogeQ4Ms7TDWp7URwdhxuMOONamf28VUv6JJ9Z GyBtKpWOn5Kv1Q== -----END CERTIFICATE-----Generated at Sat Mar 28 10:38:45 2026 by rpki-client