$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft File: Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json) Hash identifier: YVYW+n3o1miWSKCcs9hoRpM/9m4AP0vI/VSCQx2oiwg= Subject key identifier: 1B:FC:DE:F1:BC:0E:04:E7:6E:38:8F:21:69:63:A1:B8:06:89:5E:59 Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 019DD0F573B7D389C024FB970156A17C8A77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft Manifest number: 1900 Signing time: Mon 27 Apr 2026 22:00:39 +0000 Manifest this update: Mon 27 Apr 2026 22:00:39 +0000 Manifest next update: Tue 28 Apr 2026 22:00:39 +0000 Files and hashes: 1: 6PKIKUxySdUwZYjBpQdap24rMCA.roa (hash: Q+sfZpJT+al0TFOwIddw17g5+KoGJur9NLjQbu4nLpM=) 2: 8V2NwbvFlQZYvhmUrca34kxhXa0.roa (hash: DM0RB7X2NkgoMommIXHbEaH33Jj0bMo7E0xn5ejVedM=) 3: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: w2y/qAGDpDzVGveIphD23+80GT5Ucoc3Qzzp8jL+e50=) 4: QawDO3nriy0Ac_BTEa82vA_nGDI.roa (hash: ONoC4PBmZZaC9uv6W2VVUcFA7b/wums0wl8fDhnZ7Gg=) 5: XJ2jXlF2Mo_xE-IDDytKM0CTO3E.roa (hash: HVJb11Pj3eJSoRHZP1XpkyINHh78VkvQ2O0d3UKBEjc=) 6: ZUtFH_qhx3L4PEjgB3q82Pko9A8.roa (hash: cpl/eTn6qz8+2/3oyMQl/oJw6IV6mFmSjoin/h1krGs=) 7: f8crMnaCvVJR24y4HZK4aF4ON_Y.roa (hash: a4LuuWR1pCU4Uin5c2uaOnWKPPk90YN8aUWR2m/vZDQ=) 8: hTSJfxOcDimDlYTfQcRbvzQKHsc.roa (hash: wKx5VDHNAbIU3w07fQ2WEFRFq5VMfAKh3nrE2+cguJU=) 9: kO9WlUparYb6jLj3Al1HAfYWyc4.roa (hash: uf/Ee/JGBTSZ54j7ty6QwzOZpLC0w43Jza7tQwup4Iw=) 10: oeb6m3It37B8PGE2O7TDai_TrWY.roa (hash: AfKJo3qTL26v5E6lQbsmszspXYIo4b8KBBv1yOMp4wQ=) 11: u5pqVXheduvSRyevzvk3F281Pv8.roa (hash: 99RNfzNuS1w8/5besxPZV13SYkOzDoP6UORAhIYy5ic=) 12: w8agfRL1GVHiUSL4QR-4AfJIyKQ.roa (hash: hBE3KCvCu5YG/sDO5HAFViDYI0rH255FlChKrGnbX6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 22:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:d0:f5:73:b7:d3:89:c0:24:fb:97:01:56:a1:7c:8a:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Apr 27 22:00:39 2026 GMT Not After : Apr 28 22:00:39 2026 GMT Subject: CN=1bfcdef1bc0e04e76e388f216963a1b806895e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c3:13:7a:95:5e:5d:c8:7f:a0:ee:97:f6:df: 77:dd:f6:1a:e6:23:4b:ef:24:2d:54:7a:c6:80:9c: 63:75:b3:af:9d:8c:4a:ca:c7:bc:42:5d:85:42:ed: 28:03:3c:e9:43:0e:12:92:cf:5a:d2:50:50:b5:5e: 2e:3b:70:6f:99:be:cd:b8:ba:83:b9:13:17:91:7f: 84:d6:19:fa:b9:b0:7c:0c:fd:a9:e6:7d:a8:cd:38: 35:a8:9a:6a:91:6f:d8:c6:85:03:13:e5:fc:ab:5c: 3f:cb:e6:78:67:a4:4e:63:56:da:a0:23:74:a6:24: 60:88:5a:1b:e2:5f:96:3c:cb:fb:9c:5a:30:48:1f: aa:04:02:e2:27:fc:06:01:8b:67:2b:4c:49:c4:0e: df:29:b8:44:61:bb:d2:9b:03:04:83:46:95:dd:48: a4:2e:da:33:b2:f8:55:6e:70:41:26:36:de:ed:3a: 28:f3:7e:84:bc:41:45:5b:a4:9c:5d:55:00:18:c8: 87:d5:2b:81:48:c6:e2:22:34:ee:de:87:eb:55:4b: 57:a4:6d:2f:0c:0d:d2:06:ef:7c:5d:3f:a6:da:15: 82:73:02:f5:0f:0d:8b:55:8e:ca:33:45:89:ff:5e: c5:73:88:c2:87:09:f5:4e:f7:19:2c:4b:fe:63:0a: 38:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:FC:DE:F1:BC:0E:04:E7:6E:38:8F:21:69:63:A1:B8:06:89:5E:59 X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e6:09:6f:38:35:83:de:62:60:96:e4:8f:f4:33:a0:53:25: 92:69:0b:b0:ae:b8:58:7b:8b:36:56:85:ff:3a:20:05:1f:d2: 1c:02:ef:99:e1:27:9a:e4:a1:01:df:07:10:e8:8d:3b:55:d2: c5:74:f8:54:4a:d8:5b:5f:a5:0d:28:ac:45:71:d9:7f:15:40: f4:69:40:e4:eb:6b:39:91:d9:d1:05:63:cb:69:01:1c:33:5e: 07:92:b1:5c:0e:dd:fe:37:c2:69:90:82:bc:8b:0d:14:b7:d7: 1b:e5:72:03:a5:0e:43:fa:56:2e:b2:d2:48:f6:ee:ad:07:57: 40:f3:26:ea:88:5c:42:d6:35:a5:a9:ff:d1:b1:a4:07:67:00: 79:b6:65:3e:54:32:8b:b6:2f:df:a6:f9:4d:8a:ba:a2:e3:d7: 7a:36:14:eb:8b:2d:ea:85:f8:11:3a:ad:aa:c9:9e:40:1f:17: ad:64:9c:87:9b:63:92:4f:00:db:16:29:46:16:84:c4:25:dd: 36:f2:fa:a0:a9:e2:0f:86:48:89:93:50:39:8a:f9:17:4e:48: f3:94:bc:d1:72:16:48:63:26:33:a4:f1:2c:ab:c3:45:fe:ef: f1:c6:05:27:2e:b1:ce:5b:4a:9c:2b:3d:a0:bc:6a:34:a2:77: 58:ab:38:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3Q9XO304nAJPuXAVahfIp3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjYwNDI3MjIwMDM5WhcNMjYwNDI4MjIwMDM5WjAzMTEwLwYDVQQD EygxYmZjZGVmMWJjMGUwNGU3NmUzODhmMjE2OTYzYTFiODA2ODk1ZTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08MTepVeXch/oO6X9t933fYa5iNL 7yQtVHrGgJxjdbOvnYxKyse8Ql2FQu0oAzzpQw4Sks9a0lBQtV4uO3Bvmb7NuLqD uRMXkX+E1hn6ubB8DP2p5n2ozTg1qJpqkW/YxoUDE+X8q1w/y+Z4Z6ROY1baoCN0 piRgiFob4l+WPMv7nFowSB+qBALiJ/wGAYtnK0xJxA7fKbhEYbvSmwMEg0aV3Uik LtozsvhVbnBBJjbe7Too836EvEFFW6ScXVUAGMiH1SuBSMbiIjTu3ofrVUtXpG0v DA3SBu98XT+m2hWCcwL1Dw2LVY7KM0WJ/17Fc4jChwn1TvcZLEv+Ywo4XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBv83vG8DgTnbjiPIWljobgGiV5ZMB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKuYJbzg1 g95iYJbkj/QzoFMlkmkLsK64WHuLNlaF/zogBR/SHALvmeEnmuShAd8HEOiNO1XS xXT4VErYW1+lDSisRXHZfxVA9GlA5OtrOZHZ0QVjy2kBHDNeB5KxXA7d/jfCaZCC vIsNFLfXG+VyA6UOQ/pWLrLSSPburQdXQPMm6ohcQtY1pan/0bGkB2cAebZlPlQy i7Yv36b5TYq6ouPXejYU64st6oX4ETqtqsmeQB8XrWSch5tjkk8A2xYpRhaExCXd NvL6oKniD4ZIiZNQOYr5F05I85S80XIWSGMmM6TxLKvDRf7v8cYFJy6xzltKnCs9 oLxqNKJ3WKs4mg== -----END CERTIFICATE-----Generated at Tue Apr 28 05:10:27 2026 by rpki-client