$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft File: OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json) Hash identifier: TfsOjHPhh5dcz1zJXZKhvQBMSUKcR40DSAWUmwNMFn0= Subject key identifier: 29:6D:F4:62:77:1A:E0:47:9E:06:D6:FE:38:92:B0:60:6E:3B:65:62 Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b Certificate serial: 019FA184BAEEA39E8BD9E44BF259B90A33CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft Manifest number: 19E1 Signing time: Mon 27 Jul 2026 03:00:58 +0000 Manifest this update: Mon 27 Jul 2026 03:00:58 +0000 Manifest next update: Tue 28 Jul 2026 03:00:58 +0000 Files and hashes: 1: 0Bk51Mjn6qErtAhOivvm_I8c0aE.roa (hash: aq3ZMEYBOh/rpC3SYBAxrvfX3FzvIksQARIozff4ffc=) 2: 3l3JwyRn9LUMsz8MYG14zOnBHdc.roa (hash: 2A1HY2h9Phgu+RFmc7588XfC02kPw7N3ZbQ8wc/kW84=) 3: 8bVGqU-tjWPnIG8sBYrZvrrahKI.roa (hash: IFFyNQvZAT+Bna1YbPC14TW6c3lxt7eZvL1L0yVl4NA=) 4: 8cAZRJhTLPqKsm4TAUR87r4-9JA.roa (hash: sx3g13vfM7xaU8g2AQwyXKrMTuN6j6YaMqFMPUpyTc0=) 5: CQTXAg4uTXvVTudN5hFeeXkNvkQ.roa (hash: MvXWyNfB+L1JsnBDH+iw0vhodg+qR3E3YtxwCLlLcLM=) 6: H_ZqL6RkECdFkORWPkQHZkQLmTw.roa (hash: iJ7KZIZmr4InzppQ2C7K5GIf14/i+7a4DnEB+2Vcn7s=) 7: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: OuElBrcXlznnAosSOI0TvVIwxxnT8BnPf1NQGOVl56w=) 8: PZJni5TxpYn092_2LgQ4TzNg1Vk.roa (hash: KAnI/w7Z4z73b7zbsNexFN30a6Ok+1UWHYIM1LyRw7A=) 9: TZUj41Zk_a4ctgh6bkXXZRSBnwo.roa (hash: SlDdEwpdjEtSII8TXEBDIBic9lrt5T7OD2GqENaMep4=) 10: dc8BS5CRu-zycD-wNYY8YKfw4Cw.roa (hash: 2OEK8MCyAYfbPpIXmNvUjGE5NLgSoSESlZhOHxxGtOM=) 11: g96pKLe6ZF1dh195VH6q_6jtDKE.roa (hash: GXl5Z35Jg4C6xTmicgl5RWGF0PIPfwr7nEkhMgfzcrU=) 12: iKkbPcQ4WIJAurPfzrtorCYjeJc.roa (hash: t+1uw36Adk7Pip1XNPSev194m4wMZgCV8f3gz9/3gjg=) 13: jT0g8lVx3dcAMaKxYxMOa3DkEIY.roa (hash: m3BcVFDXlnD1YdMRwzlLYT9pFM0ZGvuCdz2ltBkF8AA=) 14: n-mejQ3q29BELhma3oWoUOm-iuQ.roa (hash: NGJx12o2aUAcKnv8G9XcrR/xbQgpGxsRftcm0M1WRmc=) 15: oQGGdDTaNSA17PKm44IDHYFop2E.roa (hash: zwBhRxHLQ9o3LHpah+oy4Xr0d2WLdIvePEERXND5wzs=) 16: xXkiOHP5GPVKZFmsEyZEMy5ArTU.roa (hash: xeH/fFNJIFUXQ3IjYea8XVk8nJ8Z09onGn+NwK+Mb24=) 17: yVcflys92CzAxU-EuN_3N-w3nlE.roa (hash: zUTtMpuZxFGygRwVxvfWbYqYKDMVT6hU9O37iMaFGcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a1:84:ba:ee:a3:9e:8b:d9:e4:4b:f2:59:b9:0a:33:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b Validity Not Before: Jul 27 03:00:58 2026 GMT Not After : Jul 28 03:00:58 2026 GMT Subject: CN=296df462771ae0479e06d6fe3892b0606e3b6562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:19:5b:bf:f7:e0:9a:8e:20:e6:f7:f8:78:95: 8b:40:67:53:86:bd:ba:91:72:16:e9:2a:f3:d3:09: 9d:f9:0e:7c:1c:67:24:88:0a:97:dc:c8:71:39:3f: e0:c6:91:77:96:55:aa:2e:95:02:51:07:fa:23:c3: 11:71:b6:c5:fa:e2:7f:32:31:b7:ce:ae:e4:cb:d9: 9d:b8:77:aa:69:fa:07:b2:82:89:5c:5b:11:08:22: 7a:ab:fd:ff:b0:ac:aa:bd:41:5a:b1:7c:74:b2:3a: 90:04:eb:69:b6:d5:56:ca:c4:00:5f:8f:9a:72:8e: 75:1a:ac:71:18:24:42:68:eb:ed:58:a6:e5:2e:43: 48:d4:ee:e1:95:15:0b:6b:71:e2:06:6f:e2:b2:4b: 47:56:3d:f0:78:fe:ac:5d:be:fa:1a:bd:06:b9:5b: 91:bb:d3:79:fd:4d:fb:7e:33:2e:da:18:c7:03:a4: 22:73:98:3e:34:28:47:5e:83:61:25:17:45:0e:5a: 91:2d:cc:b3:6d:b3:d3:d9:57:0d:2d:e1:71:d7:6e: 5c:35:f6:65:aa:26:7d:16:33:4d:2f:98:25:12:0d: 9e:c1:c1:a6:44:0d:2f:77:56:45:b6:06:d8:87:c1: a6:eb:4f:eb:e4:0e:0c:7a:5d:c7:7b:28:91:ef:45: d4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6D:F4:62:77:1A:E0:47:9E:06:D6:FE:38:92:B0:60:6E:3B:65:62 X509v3 Authority Key Identifier: keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:24:fc:e2:5b:f7:ab:e0:d6:33:a4:16:9a:d8:96:7f:55:ba: bd:39:a3:f2:18:9a:5f:86:de:0a:33:45:f2:8d:83:75:d2:d7: 05:72:ab:cf:49:4a:b5:6a:74:b9:39:3c:3a:a2:82:e8:37:16: 03:d2:ef:11:2b:58:ee:66:89:18:b5:cb:3e:bf:8e:84:30:69: a7:59:2e:a1:07:a0:69:8d:92:ff:e6:47:6f:b9:7d:66:d2:80: 60:9f:21:08:96:54:8c:87:c3:1a:e4:fc:98:75:b3:bd:4d:69: 8b:cf:02:8e:e3:e4:03:15:21:f5:65:85:e1:d2:07:13:68:9c: 0d:aa:28:2a:83:aa:f8:48:64:7c:ec:ad:ef:cd:a7:b4:af:b7: 9b:f2:a1:1c:fe:07:c7:af:cc:ef:5a:0f:c3:85:7f:a6:5d:68: b5:79:50:9f:2e:00:b5:2e:aa:5d:2c:84:09:26:0f:ab:46:fc: 35:f1:8f:a5:d8:8f:89:39:d0:76:e7:68:b3:11:9e:bb:d7:41: ce:55:fa:a1:2d:e6:ab:f1:e3:2d:8b:f3:89:3f:14:97:1c:89: d2:6c:8f:75:21:04:ba:a9:85:db:e8:68:df:fc:01:d6:68:e8: 05:0a:46:49:a1:ba:5c:8a:3a:b5:a2:78:91:77:e4:89:b8:6a: da:c6:b7:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+hhLruo56L2eRL8lm5CjPNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1 N2E0OGIwHhcNMjYwNzI3MDMwMDU4WhcNMjYwNzI4MDMwMDU4WjAzMTEwLwYDVQQD EygyOTZkZjQ2Mjc3MWFlMDQ3OWUwNmQ2ZmUzODkyYjA2MDZlM2I2NTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhlbv/fgmo4g5vf4eJWLQGdThr26 kXIW6Srz0wmd+Q58HGckiAqX3MhxOT/gxpF3llWqLpUCUQf6I8MRcbbF+uJ/MjG3 zq7ky9mduHeqafoHsoKJXFsRCCJ6q/3/sKyqvUFasXx0sjqQBOtpttVWysQAX4+a co51GqxxGCRCaOvtWKblLkNI1O7hlRULa3HiBm/isktHVj3weP6sXb76Gr0GuVuR u9N5/U37fjMu2hjHA6Qic5g+NChHXoNhJRdFDlqRLcyzbbPT2VcNLeFx125cNfZl qiZ9FjNNL5glEg2ewcGmRA0vd1ZFtgbYh8Gm60/r5A4Mel3HeyiR70XUUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClt9GJ3GuBHngbW/jiSsGBuO2ViMB8GA1UdIwQY MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt YjIwZTI4ZjUxODhmLzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoyT84lv3 q+DWM6QWmtiWf1W6vTmj8hiaX4beCjNF8o2DddLXBXKrz0lKtWp0uTk8OqKC6DcW A9LvEStY7maJGLXLPr+OhDBpp1kuoQegaY2S/+ZHb7l9ZtKAYJ8hCJZUjIfDGuT8 mHWzvU1pi88CjuPkAxUh9WWF4dIHE2icDaooKoOq+EhkfOyt782ntK+3m/KhHP4H x6/M71oPw4V/pl1otXlQny4AtS6qXSyECSYPq0b8NfGPpdiPiTnQdudosxGeu9dB zlX6oS3mq/HjLYvziT8UlxyJ0myPdSEEuqmF2+ho3/wB1mjoBQpGSaG6XIo6taJ4 kXfkibhq2sa3eA== -----END CERTIFICATE-----Generated at Mon Jul 27 06:48:19 2026 by rpki-client