$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft File: Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json) Hash identifier: pndJVTp+GxEHzKGayGPfuPSR/CIGm9yd0XJ7L88aio0= Subject key identifier: 1C:72:E3:6F:EA:82:3F:4C:EC:20:E5:E6:4B:1C:72:C2:90:CC:1E:5E Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 019CE712207CA6181E3C049AB3151BC6EAFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft Manifest number: 1886 Signing time: Fri 13 Mar 2026 12:00:50 +0000 Manifest this update: Fri 13 Mar 2026 12:00:50 +0000 Manifest next update: Sat 14 Mar 2026 12:00:50 +0000 Files and hashes: 1: 6PKIKUxySdUwZYjBpQdap24rMCA.roa (hash: Q+sfZpJT+al0TFOwIddw17g5+KoGJur9NLjQbu4nLpM=) 2: 8V2NwbvFlQZYvhmUrca34kxhXa0.roa (hash: DM0RB7X2NkgoMommIXHbEaH33Jj0bMo7E0xn5ejVedM=) 3: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: bv6T+nR/2gjIIdTG3TJqgAnZYdn10WpupRioWTu9/uM=) 4: QawDO3nriy0Ac_BTEa82vA_nGDI.roa (hash: ONoC4PBmZZaC9uv6W2VVUcFA7b/wums0wl8fDhnZ7Gg=) 5: ZUtFH_qhx3L4PEjgB3q82Pko9A8.roa (hash: cpl/eTn6qz8+2/3oyMQl/oJw6IV6mFmSjoin/h1krGs=) 6: f8crMnaCvVJR24y4HZK4aF4ON_Y.roa (hash: a4LuuWR1pCU4Uin5c2uaOnWKPPk90YN8aUWR2m/vZDQ=) 7: kO9WlUparYb6jLj3Al1HAfYWyc4.roa (hash: uf/Ee/JGBTSZ54j7ty6QwzOZpLC0w43Jza7tQwup4Iw=) 8: oeb6m3It37B8PGE2O7TDai_TrWY.roa (hash: AfKJo3qTL26v5E6lQbsmszspXYIo4b8KBBv1yOMp4wQ=) 9: u5pqVXheduvSRyevzvk3F281Pv8.roa (hash: 99RNfzNuS1w8/5besxPZV13SYkOzDoP6UORAhIYy5ic=) 10: vjnnj3G5SebpeaPAIXJb8Tt62MQ.roa (hash: BmcmdODjCytMNk+M3oaKSDAoiHNkc3B1YVmJUX1D3tg=) 11: w8agfRL1GVHiUSL4QR-4AfJIyKQ.roa (hash: hBE3KCvCu5YG/sDO5HAFViDYI0rH255FlChKrGnbX6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 09:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e7:12:20:7c:a6:18:1e:3c:04:9a:b3:15:1b:c6:ea:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Mar 13 12:00:50 2026 GMT Not After : Mar 14 12:00:50 2026 GMT Subject: CN=1c72e36fea823f4cec20e5e64b1c72c290cc1e5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1d:b8:0d:48:c5:88:b8:a1:69:7b:71:f4:3a: 3a:7d:49:ff:54:93:a3:89:f2:b8:1f:ca:bf:06:7c: aa:77:80:98:23:9e:c9:28:52:87:a6:23:09:8d:1c: 5b:a7:19:e4:67:3b:37:d9:11:d5:e8:b7:b5:5f:37: 78:6b:34:89:0d:40:10:09:5b:fc:a5:0b:0b:12:38: c1:05:b8:3a:a1:a8:79:86:12:32:64:32:59:8f:57: 39:97:e1:0b:77:49:d7:59:63:1d:4c:0c:fc:ab:b9: 43:61:e7:d5:97:2e:20:d4:ce:2f:0f:e8:e3:6d:e3: b2:ca:07:61:53:0b:61:0d:c6:05:70:c5:8d:c1:7f: de:df:d2:aa:53:42:f9:da:1f:0a:6e:21:64:00:d6: 6b:47:c6:d5:ff:a0:ea:eb:97:07:28:8e:a4:ce:74: d2:e7:a5:21:14:99:59:14:71:60:a0:21:fd:a6:33: 2a:cb:4b:30:3a:53:07:91:6e:1e:18:74:20:79:33: cf:76:b9:64:91:db:34:3e:43:78:5e:00:55:d4:e5: 2f:13:b0:93:b1:ec:ea:d2:f3:fb:25:04:7b:a1:90: bf:8a:d0:ca:cc:3f:44:03:7d:1d:d7:e3:90:d6:31: 59:d6:48:22:ee:32:c5:ae:85:7c:40:9e:37:91:3c: c4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:72:E3:6F:EA:82:3F:4C:EC:20:E5:E6:4B:1C:72:C2:90:CC:1E:5E X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:38:1a:a5:ec:83:97:52:4a:3d:45:70:ff:81:d2:2b:85:98: 57:4d:d0:f5:5a:47:cd:7d:36:fc:57:28:67:ff:79:69:59:7c: aa:91:7e:a4:ae:5b:1f:0f:c4:ee:10:e6:2a:ba:44:bd:6a:4e: 32:33:29:cc:3b:b3:ee:d7:0a:06:a4:7a:62:ca:a4:17:c9:8e: 8e:da:35:ca:6c:a2:6e:68:7a:f9:da:7e:6c:5d:ff:f4:8c:c6: 22:bb:84:a7:54:5c:cf:52:41:02:54:f0:a2:48:03:47:d0:ef: aa:03:69:e6:eb:ca:6b:f6:7f:cd:04:bd:9c:17:5c:f1:85:b2: b5:3e:56:d7:47:f2:15:5d:be:2d:bc:7b:ee:ab:99:07:34:3e: 24:89:47:1a:32:9c:3b:47:e7:a4:c4:42:32:ce:29:8f:e2:30: 10:e4:99:ef:11:a1:a8:30:1c:8d:3c:1c:9f:b4:b6:c7:77:84: 07:26:23:e8:35:30:1f:1d:f3:b6:99:77:98:a8:2d:aa:44:87: d2:46:b7:26:2e:11:6b:7d:ec:0d:1e:38:bd:88:63:4f:55:96: 97:4d:2b:74:9b:40:18:e3:07:59:69:41:07:54:43:41:00:d8: 34:e3:3d:0d:f1:d4:c3:ea:7d:24:16:91:38:66:1c:ec:44:a8: 25:12:85:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZznEiB8phgePASasxUbxur6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjYwMzEzMTIwMDUwWhcNMjYwMzE0MTIwMDUwWjAzMTEwLwYDVQQD EygxYzcyZTM2ZmVhODIzZjRjZWMyMGU1ZTY0YjFjNzJjMjkwY2MxZTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjB24DUjFiLihaXtx9Do6fUn/VJOj ifK4H8q/Bnyqd4CYI57JKFKHpiMJjRxbpxnkZzs32RHV6Le1Xzd4azSJDUAQCVv8 pQsLEjjBBbg6oah5hhIyZDJZj1c5l+ELd0nXWWMdTAz8q7lDYefVly4g1M4vD+jj beOyygdhUwthDcYFcMWNwX/e39KqU0L52h8KbiFkANZrR8bV/6Dq65cHKI6kznTS 56UhFJlZFHFgoCH9pjMqy0swOlMHkW4eGHQgeTPPdrlkkds0PkN4XgBV1OUvE7CT sezq0vP7JQR7oZC/itDKzD9EA30d1+OQ1jFZ1kgi7jLFroV8QJ43kTzEWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxy42/qgj9M7CDl5ksccsKQzB5eMB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjgapeyD l1JKPUVw/4HSK4WYV03Q9VpHzX02/FcoZ/95aVl8qpF+pK5bHw/E7hDmKrpEvWpO MjMpzDuz7tcKBqR6YsqkF8mOjto1ymyibmh6+dp+bF3/9IzGIruEp1Rcz1JBAlTw okgDR9DvqgNp5uvKa/Z/zQS9nBdc8YWytT5W10fyFV2+Lbx77quZBzQ+JIlHGjKc O0fnpMRCMs4pj+IwEOSZ7xGhqDAcjTwcn7S2x3eEByYj6DUwHx3ztpl3mKgtqkSH 0ka3Ji4Ra33sDR44vYhjT1WWl00rdJtAGOMHWWlBB1RDQQDYNOM9DfHUw+p9JBaR OGYc7ESoJRKF6Q== -----END CERTIFICATE-----Generated at Fri Mar 13 18:16:27 2026 by rpki-client