$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft File: OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json) Hash identifier: zAB16OUYlKoIsQ4WA2CRNS2YVT7UmEMthujx8fziFmo= Subject key identifier: 06:44:DB:F4:6D:40:F7:9E:F4:4A:2A:46:FC:63:A6:E6:9B:71:00:53 Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b Certificate serial: 019DCF3E6D7E2112FBD1070FF8EC5CCE46D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft Manifest number: 18EF Signing time: Mon 27 Apr 2026 14:01:08 +0000 Manifest this update: Mon 27 Apr 2026 14:01:08 +0000 Manifest next update: Tue 28 Apr 2026 14:01:08 +0000 Files and hashes: 1: 0Bk51Mjn6qErtAhOivvm_I8c0aE.roa (hash: aq3ZMEYBOh/rpC3SYBAxrvfX3FzvIksQARIozff4ffc=) 2: 3l3JwyRn9LUMsz8MYG14zOnBHdc.roa (hash: 2A1HY2h9Phgu+RFmc7588XfC02kPw7N3ZbQ8wc/kW84=) 3: 8bVGqU-tjWPnIG8sBYrZvrrahKI.roa (hash: IFFyNQvZAT+Bna1YbPC14TW6c3lxt7eZvL1L0yVl4NA=) 4: 8cAZRJhTLPqKsm4TAUR87r4-9JA.roa (hash: sx3g13vfM7xaU8g2AQwyXKrMTuN6j6YaMqFMPUpyTc0=) 5: CQTXAg4uTXvVTudN5hFeeXkNvkQ.roa (hash: MvXWyNfB+L1JsnBDH+iw0vhodg+qR3E3YtxwCLlLcLM=) 6: H_ZqL6RkECdFkORWPkQHZkQLmTw.roa (hash: iJ7KZIZmr4InzppQ2C7K5GIf14/i+7a4DnEB+2Vcn7s=) 7: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: lmM8vYdGqrO6L7xlvLBKx+iZC5crrxTpxk6TVbFrxgE=) 8: PZJni5TxpYn092_2LgQ4TzNg1Vk.roa (hash: KAnI/w7Z4z73b7zbsNexFN30a6Ok+1UWHYIM1LyRw7A=) 9: TZUj41Zk_a4ctgh6bkXXZRSBnwo.roa (hash: SlDdEwpdjEtSII8TXEBDIBic9lrt5T7OD2GqENaMep4=) 10: dc8BS5CRu-zycD-wNYY8YKfw4Cw.roa (hash: 2OEK8MCyAYfbPpIXmNvUjGE5NLgSoSESlZhOHxxGtOM=) 11: g96pKLe6ZF1dh195VH6q_6jtDKE.roa (hash: GXl5Z35Jg4C6xTmicgl5RWGF0PIPfwr7nEkhMgfzcrU=) 12: iKkbPcQ4WIJAurPfzrtorCYjeJc.roa (hash: t+1uw36Adk7Pip1XNPSev194m4wMZgCV8f3gz9/3gjg=) 13: jT0g8lVx3dcAMaKxYxMOa3DkEIY.roa (hash: m3BcVFDXlnD1YdMRwzlLYT9pFM0ZGvuCdz2ltBkF8AA=) 14: n-mejQ3q29BELhma3oWoUOm-iuQ.roa (hash: NGJx12o2aUAcKnv8G9XcrR/xbQgpGxsRftcm0M1WRmc=) 15: oQGGdDTaNSA17PKm44IDHYFop2E.roa (hash: zwBhRxHLQ9o3LHpah+oy4Xr0d2WLdIvePEERXND5wzs=) 16: tklVWYVDGXe5URD0QFeTFCI-yOg.roa (hash: gNNzPMTDn7JasW09Gz6g9NSXq8GJJJOIAedRgSZzHrE=) 17: xXkiOHP5GPVKZFmsEyZEMy5ArTU.roa (hash: xeH/fFNJIFUXQ3IjYea8XVk8nJ8Z09onGn+NwK+Mb24=) 18: yVcflys92CzAxU-EuN_3N-w3nlE.roa (hash: zUTtMpuZxFGygRwVxvfWbYqYKDMVT6hU9O37iMaFGcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 14:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cf:3e:6d:7e:21:12:fb:d1:07:0f:f8:ec:5c:ce:46:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b Validity Not Before: Apr 27 14:01:08 2026 GMT Not After : Apr 28 14:01:08 2026 GMT Subject: CN=0644dbf46d40f79ef44a2a46fc63a6e69b710053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c1:09:ba:36:43:61:b8:39:db:de:41:95:20: 2f:c2:84:ef:39:2e:8d:d5:37:10:87:32:c1:0a:a5: fc:af:8d:b9:a0:6e:5c:58:90:40:72:ab:c0:b3:8a: 35:6a:81:57:56:a0:66:7d:48:70:26:46:35:5a:6d: b7:de:d6:9b:d1:ee:9a:a0:10:ab:17:b5:0d:74:db: bf:c8:ee:a4:8c:5d:2a:39:fd:f4:bc:c9:11:b0:ec: 3b:d1:01:18:10:82:6c:28:dd:9f:fb:d0:d4:65:26: 9b:b3:47:be:eb:7c:35:83:db:8a:d4:6a:b4:45:4e: 4e:89:db:6f:1d:79:45:21:10:24:25:d9:a0:52:cd: 98:7b:1d:3b:1d:69:57:5c:e6:0d:37:4c:60:a6:87: 34:f1:1f:da:e4:54:67:38:b5:41:5c:77:f5:45:0d: a5:5f:fe:fa:74:0d:c7:19:b2:b2:b6:02:88:9d:1f: f4:62:aa:a2:fa:ee:d7:a1:ab:05:30:ee:ca:ed:dc: 9c:30:76:dd:c2:7d:0b:51:8c:e7:6b:27:9b:62:16: 22:c0:1f:01:43:8c:04:57:bf:72:a5:2c:a7:53:c1: a9:6b:ec:74:c6:7e:c5:56:48:50:58:3f:20:e9:9f: a7:6c:f2:da:5b:5a:e8:df:47:05:1f:d9:e2:a0:a0: 0f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:44:DB:F4:6D:40:F7:9E:F4:4A:2A:46:FC:63:A6:E6:9B:71:00:53 X509v3 Authority Key Identifier: keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:3c:16:86:5f:54:c0:57:23:25:57:65:4d:c1:b8:0f:95:88: b1:b5:a2:b9:81:5c:c8:c5:60:d3:24:3e:1f:81:c5:93:99:c6: 98:c7:e6:3c:b2:a5:c6:ff:9d:e7:dc:75:15:a7:46:8f:6c:dd: 97:76:e5:99:3c:2a:8d:41:39:03:6b:90:9d:29:78:7d:56:07: 23:ed:ab:f3:3d:64:92:0a:19:1f:ce:2f:17:9f:31:9a:21:bf: 31:82:57:10:ab:40:95:93:af:36:63:5f:56:14:08:94:30:02: 52:da:45:3a:c6:79:e6:95:e7:84:78:03:c7:c3:ad:2f:30:57: f2:cd:92:4f:99:80:7a:5b:8e:a0:f6:dd:04:c2:58:4e:e0:70: 0c:37:4e:1b:19:64:fb:c3:6d:25:a3:19:e9:b2:bc:14:0f:a4: bc:e5:aa:76:0f:a4:32:cd:ab:40:a4:74:de:0a:64:8d:3d:1b: 2e:b2:ec:30:8b:18:37:95:d6:58:f6:0d:71:3e:a8:9f:48:be: 97:03:89:c1:a6:16:26:27:56:0b:37:83:ac:6b:1f:fb:8f:3e: 65:d3:85:27:bd:ee:b1:02:21:32:32:bf:ba:58:a7:85:2c:8b: 7b:7e:c4:ec:c3:34:ae:96:b6:d9:b3:70:d6:1c:6e:fd:fb:68: 98:51:8e:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3PPm1+IRL70QcP+OxczkbUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1 N2E0OGIwHhcNMjYwNDI3MTQwMTA4WhcNMjYwNDI4MTQwMTA4WjAzMTEwLwYDVQQD EygwNjQ0ZGJmNDZkNDBmNzllZjQ0YTJhNDZmYzYzYTZlNjliNzEwMDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68EJujZDYbg5295BlSAvwoTvOS6N 1TcQhzLBCqX8r425oG5cWJBAcqvAs4o1aoFXVqBmfUhwJkY1Wm233tab0e6aoBCr F7UNdNu/yO6kjF0qOf30vMkRsOw70QEYEIJsKN2f+9DUZSabs0e+63w1g9uK1Gq0 RU5OidtvHXlFIRAkJdmgUs2Yex07HWlXXOYNN0xgpoc08R/a5FRnOLVBXHf1RQ2l X/76dA3HGbKytgKInR/0Yqqi+u7XoasFMO7K7dycMHbdwn0LUYznayebYhYiwB8B Q4wEV79ypSynU8Gpa+x0xn7FVkhQWD8g6Z+nbPLaW1ro30cFH9nioKAPrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZE2/RtQPee9EoqRvxjpuabcQBTMB8GA1UdIwQY MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt YjIwZTI4ZjUxODhmLzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjwWhl9U wFcjJVdlTcG4D5WIsbWiuYFcyMVg0yQ+H4HFk5nGmMfmPLKlxv+d59x1FadGj2zd l3blmTwqjUE5A2uQnSl4fVYHI+2r8z1kkgoZH84vF58xmiG/MYJXEKtAlZOvNmNf VhQIlDACUtpFOsZ55pXnhHgDx8OtLzBX8s2ST5mAeluOoPbdBMJYTuBwDDdOGxlk +8NtJaMZ6bK8FA+kvOWqdg+kMs2rQKR03gpkjT0bLrLsMIsYN5XWWPYNcT6on0i+ lwOJwaYWJidWCzeDrGsf+48+ZdOFJ73usQIhMjK/ulinhSyLe37E7MM0rpa22bNw 1hxu/ftomFGOXg== -----END CERTIFICATE-----Generated at Mon Apr 27 19:07:04 2026 by rpki-client