$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft File: OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft (raw, json) Hash identifier: tVK4K/RJm4u5TmK+DmBzumVoVW9HtXFgS99/WPKlRSY= Subject key identifier: E2:9B:83:64:37:A6:DB:1D:EB:92:83:75:B8:D2:3A:D8:59:8A:0B:F0 Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 01A06CB8D917A22390107AF92F21439BB5D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft Manifest number: 1A4B Signing time: Fri 04 Sep 2026 14:00:48 +0000 Manifest this update: Fri 04 Sep 2026 14:00:48 +0000 Manifest next update: Sat 05 Sep 2026 14:00:48 +0000 Files and hashes: 1: 1wr8QIeSM3CIv5J7uap933hLaGs.roa (hash: Y6lFO4ooFEDBG8EOKNjhhaIJIuCCzVgscAraR7wX8B4=) 2: 4nJ0h3kxVoLTGLl-KMMdIGNO3U4.roa (hash: yXSTzPv+VSMPQEsmFJQmVgwkS8AYD6u5M83BtbV+VIE=) 3: EdrkWbcqLRMSNrh6Sa5x5mnTLPc.roa (hash: Fk5tDegQkNWmVnCc3SYJvszlVAARBSOO/qIaE+GvEdY=) 4: FOt64C6RCxN5JGIdYYt0-jp9RJQ.roa (hash: tamHBKuLjpWpXY8LQK286Mn5I3Q0OVkX8D4lvECCpD8=) 5: LTj2PGdyu1TZVch3WwkoLN3benA.roa (hash: 0uIInrnjr5BRMLrYPZ3TlKAb12B+T0z8Pu5nxkwhOwA=) 6: OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl (hash: MlNv+x+WRiF99mWpisdenc6a2DJ18PHjVL227DwsjVo=) 7: OR9wB6bWiqsZvjqNRRbC11UhrBA.roa (hash: BLhfuTsmrrfMXC8Lx4hjGsCFS5Q2HKcD1UJlTtem6+U=) 8: UJVwk9mntlMFjdR5x6Gz4DwAego.roa (hash: Y9Qzk1ZJNkQeeN5SL4rk7tJNNAoeHg7LXp+c5rv1kJY=) 9: XIxZD227ioGX0cqqVFAINXLyX6Q.roa (hash: sDleWGEf+rrGs4/hbX/4+JTQcRgaaTHiE45KWqHpF+s=) 10: XkdalcQg6hGFzhglm3gQzCnpww4.roa (hash: 8jItQEffXXa+ZvcKZLLyn2RNT/EfLCbVUQe+TOkVNeM=) 11: YWsBcXgsO8gZFuZAgXqc8mQzIPQ.roa (hash: FIq3otCEvunZWYD7V3EpFGXTGzchT90RBkn3PHEPtpE=) 12: cgpmcoUK85pTENssifHpCXJlfPE.roa (hash: JM0iNu1ajeTkqDE4Nqu0ZyqAU2JL5GqcLbiW8nq6Ilc=) 13: eSOXNELPy2P_3h7R8IBwrZVgqTM.roa (hash: r38ULUfgOCtbQfGW33x7ibVGykkgQ5HIh/ZXyBOz91w=) 14: fny2WANL9Kakl_hzClrFytLGIbA.roa (hash: Li0zLoSXMQkOWimSeqYniHU5WmqmT1OGtibQ573h2wE=) 15: hSqKucNYzrS-ITecCZqK51ewyo0.roa (hash: WlW+oWE3pA2mAbzyCA2PCiD4XrqfKT7ZH8dHdqawUFo=) 16: lqG4TiS1VcHtRo5hXtYqEofYXQY.roa (hash: lQ0va2Pv+RAccp1R5C/OndWZWgx6m66STBo/DZ6jbSw=) 17: snScws96TnQnAtgCESncYf2cHQI.roa (hash: Rg061AAdsDJTEuVCFaKulmhMa2nYwQQcIJgWuXh/KyU=) 18: zyiTueEsxpcD3PrX5wVtwGJMZ_Y.roa (hash: 7R1f/73J/Qx3gYsQEvvU8YVQZND5dDU9/Elan9+1kYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:6c:b8:d9:17:a2:23:90:10:7a:f9:2f:21:43:9b:b5:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: Sep 4 14:00:48 2026 GMT Not After : Sep 5 14:00:48 2026 GMT Subject: CN=e29b836437a6db1deb928375b8d23ad8598a0bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fe:f1:97:79:36:d3:1a:76:ac:ca:a9:80:42: 9d:9b:50:a2:35:86:34:3c:7c:f9:8b:94:ee:de:46: 1a:2a:f2:c0:64:e5:b8:10:6d:01:c6:d8:d1:c6:17: 95:37:9a:01:f8:1b:8f:2f:c1:3a:c2:58:05:3a:fb: 1a:09:dc:59:31:21:cf:69:48:7e:c6:ff:c7:27:60: 21:a7:e1:0f:ef:83:ac:f0:74:3c:12:ad:46:6c:e1: 12:88:57:90:01:20:a7:cc:a7:23:84:ea:a4:5f:23: 8d:b0:38:f9:42:98:8d:05:80:6e:06:de:ed:67:d1: d4:70:61:dc:56:bb:31:9a:3a:ad:fa:ea:97:88:b2: 3e:34:6d:3a:d1:e1:2c:ab:59:d2:aa:e8:d1:75:6c: a8:a5:95:fb:d5:d9:82:80:3e:eb:7e:3f:9a:cc:8e: 11:02:f1:bb:65:3d:87:d8:70:88:62:d6:31:22:22: 3a:92:ba:c1:4f:61:43:1c:20:25:7f:d2:78:1f:a0: 50:3d:8e:36:5c:b1:18:83:e2:c0:98:ef:13:e2:1f: 2e:bb:9c:58:56:ee:bc:a9:1f:00:21:e4:96:4c:2b: 28:b8:9e:bb:19:41:f2:fc:c9:36:60:7f:c2:2e:2c: 69:0b:ca:04:d4:51:3e:b1:a4:83:93:ed:ff:43:02: 74:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9B:83:64:37:A6:DB:1D:EB:92:83:75:B8:D2:3A:D8:59:8A:0B:F0 X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:80:33:bf:50:c2:21:32:47:28:de:ee:56:04:39:e0:67:6d: 90:15:ff:d1:06:84:88:8e:dc:1d:d3:a8:e7:e5:94:98:01:39: 5d:b4:e3:86:e5:ca:00:92:37:f0:17:6f:56:7f:f9:33:de:4e: e8:a1:f1:31:5f:11:63:e0:62:c2:f7:2f:c4:77:7c:ff:da:6c: 61:2c:13:a6:b8:9f:fb:41:11:ca:c8:45:30:42:26:60:2c:b0: 1e:8b:61:77:33:64:49:1f:53:0e:c4:81:f0:ed:11:50:ab:26: fe:b1:5a:19:bd:86:55:01:8a:e7:55:73:47:54:6a:42:0e:1c: cb:49:89:1a:c2:11:14:f7:02:89:d7:24:d4:31:c0:60:7a:2a: 0b:a7:f5:d9:1c:5c:04:9b:18:7f:57:73:25:fd:b3:a1:72:e8: 2b:3e:bf:2b:ef:5e:d5:b3:2c:15:6d:ba:e0:7d:85:9d:80:75: 5c:bf:21:12:75:fd:22:fb:ec:9b:91:4a:e1:b4:3d:a8:fa:cd: 08:79:b9:bd:a9:57:06:09:9c:2e:01:0b:8f:07:45:b7:a5:93: 5e:5c:5f:ee:7a:12:2d:b1:3d:68:e8:d6:57:3e:1d:a7:05:db: 0c:24:80:51:10:15:d8:1a:a6:a0:1f:f6:78:29:0d:61:1d:96: ae:16:d7:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBsuNkXoiOQEHr5LyFDm7XTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjYwOTA0MTQwMDQ4WhcNMjYwOTA1MTQwMDQ4WjAzMTEwLwYDVQQD EyhlMjliODM2NDM3YTZkYjFkZWI5MjgzNzViOGQyM2FkODU5OGEwYmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP7xl3k20xp2rMqpgEKdm1CiNYY0 PHz5i5Tu3kYaKvLAZOW4EG0BxtjRxheVN5oB+BuPL8E6wlgFOvsaCdxZMSHPaUh+ xv/HJ2Ahp+EP74Os8HQ8Eq1GbOESiFeQASCnzKcjhOqkXyONsDj5QpiNBYBuBt7t Z9HUcGHcVrsxmjqt+uqXiLI+NG060eEsq1nSqujRdWyopZX71dmCgD7rfj+azI4R AvG7ZT2H2HCIYtYxIiI6krrBT2FDHCAlf9J4H6BQPY42XLEYg+LAmO8T4h8uu5xY Vu68qR8AIeSWTCsouJ67GUHy/Mk2YH/CLixpC8oE1FE+saSDk+3/QwJ0+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKbg2Q3ptsd65KDdbjSOthZigvwMB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYAzv1DC ITJHKN7uVgQ54GdtkBX/0QaEiI7cHdOo5+WUmAE5XbTjhuXKAJI38BdvVn/5M95O 6KHxMV8RY+BiwvcvxHd8/9psYSwTprif+0ERyshFMEImYCywHothdzNkSR9TDsSB 8O0RUKsm/rFaGb2GVQGK51VzR1RqQg4cy0mJGsIRFPcCidck1DHAYHoqC6f12Rxc BJsYf1dzJf2zoXLoKz6/K+9e1bMsFW264H2FnYB1XL8hEnX9Ivvsm5FK4bQ9qPrN CHm5valXBgmcLgELjwdFt6WTXlxf7noSLbE9aOjWVz4dpwXbDCSAURAV2BqmoB/2 eCkNYR2WrhbXXg== -----END CERTIFICATE-----Generated at Fri Sep 4 23:00:15 2026 by rpki-client