$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft File: Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json) Hash identifier: L8LSOZpWabOSh3p1xXnPyvS9fRCrFs5aXnwmnToyRXo= Subject key identifier: 82:F1:25:C3:69:62:EE:EF:D9:A1:56:6E:0C:BA:F7:33:E7:46:08:F8 Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 019EB8B451E4BFF220D014578A4A3EBB2E20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft Manifest number: 1978 Signing time: Thu 11 Jun 2026 22:01:25 +0000 Manifest this update: Thu 11 Jun 2026 22:01:25 +0000 Manifest next update: Fri 12 Jun 2026 22:01:25 +0000 Files and hashes: 1: 6PKIKUxySdUwZYjBpQdap24rMCA.roa (hash: Q+sfZpJT+al0TFOwIddw17g5+KoGJur9NLjQbu4nLpM=) 2: 8V2NwbvFlQZYvhmUrca34kxhXa0.roa (hash: DM0RB7X2NkgoMommIXHbEaH33Jj0bMo7E0xn5ejVedM=) 3: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: pVi6C1Ls/G1PS0Y+epRD8RkN9B7LPqZYDTiqn6ZDlnA=) 4: QawDO3nriy0Ac_BTEa82vA_nGDI.roa (hash: ONoC4PBmZZaC9uv6W2VVUcFA7b/wums0wl8fDhnZ7Gg=) 5: XJ2jXlF2Mo_xE-IDDytKM0CTO3E.roa (hash: HVJb11Pj3eJSoRHZP1XpkyINHh78VkvQ2O0d3UKBEjc=) 6: ZUtFH_qhx3L4PEjgB3q82Pko9A8.roa (hash: cpl/eTn6qz8+2/3oyMQl/oJw6IV6mFmSjoin/h1krGs=) 7: f8crMnaCvVJR24y4HZK4aF4ON_Y.roa (hash: a4LuuWR1pCU4Uin5c2uaOnWKPPk90YN8aUWR2m/vZDQ=) 8: hTSJfxOcDimDlYTfQcRbvzQKHsc.roa (hash: wKx5VDHNAbIU3w07fQ2WEFRFq5VMfAKh3nrE2+cguJU=) 9: kO9WlUparYb6jLj3Al1HAfYWyc4.roa (hash: uf/Ee/JGBTSZ54j7ty6QwzOZpLC0w43Jza7tQwup4Iw=) 10: oeb6m3It37B8PGE2O7TDai_TrWY.roa (hash: AfKJo3qTL26v5E6lQbsmszspXYIo4b8KBBv1yOMp4wQ=) 11: u5pqVXheduvSRyevzvk3F281Pv8.roa (hash: 99RNfzNuS1w8/5besxPZV13SYkOzDoP6UORAhIYy5ic=) 12: w8agfRL1GVHiUSL4QR-4AfJIyKQ.roa (hash: hBE3KCvCu5YG/sDO5HAFViDYI0rH255FlChKrGnbX6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 22:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b8:b4:51:e4:bf:f2:20:d0:14:57:8a:4a:3e:bb:2e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Jun 11 22:01:25 2026 GMT Not After : Jun 12 22:01:25 2026 GMT Subject: CN=82f125c36962eeefd9a1566e0cbaf733e74608f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ea:e0:e5:77:e4:c5:a4:e1:0e:fb:3f:09:51: e2:00:64:81:cb:c6:f5:bb:10:c5:2f:36:66:ce:c1: 24:e0:33:4e:b0:14:19:7e:08:42:29:ae:26:2d:0a: d3:74:6c:42:a4:44:07:5b:ae:67:3f:bb:b3:ab:e6: 84:7b:05:b8:cf:8f:a7:b5:24:bf:1a:6e:6a:d9:7a: 52:61:28:4d:e0:fd:39:f4:df:b2:68:8c:12:b5:30: 60:12:84:e1:ec:d9:04:10:fd:46:d2:e4:11:6f:84: 18:9d:38:33:af:96:85:4a:9b:4f:6a:ee:78:5a:9c: a3:2b:4e:4d:cd:e7:db:12:60:54:15:96:30:8c:34: 8f:54:89:86:30:b0:5a:98:7a:c0:cc:84:f5:13:71: c0:ce:17:fd:78:2d:32:95:03:18:22:b7:b0:48:1f: e3:d7:47:45:1a:2e:a5:f7:24:72:25:1e:d5:b0:34: 8c:78:26:95:6c:8a:49:99:3b:7a:db:cf:c0:09:3e: 3c:a5:bc:7b:2b:39:8e:24:11:f4:7a:f9:45:07:22: 6f:f9:84:37:6d:35:32:5e:91:8d:5c:3a:4a:e8:1b: df:d5:1f:43:24:d5:c0:db:81:a0:b2:8b:e3:66:47: eb:30:15:dd:ef:47:59:49:53:12:4e:03:dd:fb:4e: 2d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F1:25:C3:69:62:EE:EF:D9:A1:56:6E:0C:BA:F7:33:E7:46:08:F8 X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:3b:ee:3c:65:96:1c:89:f4:2e:7b:a6:af:1d:5d:2f:a3:17: 4b:be:65:8d:ae:99:d8:2f:9d:75:66:6c:fd:7b:76:a1:56:d1: 51:ae:97:4c:b0:d1:5d:d2:41:c6:57:c5:a6:14:45:89:0e:7a: ab:00:e6:64:ee:40:d0:0f:c2:6e:61:71:98:60:7f:dd:a9:a1: e8:24:6d:d0:a6:8a:a9:96:90:c3:d5:f7:b7:7e:24:30:f7:39: b9:69:c7:a2:e2:f2:d5:ac:21:3b:0b:d0:22:8a:42:80:20:cb: 18:bc:82:1b:ad:cd:05:b4:54:01:88:cb:83:ba:bb:7b:f6:79: 1f:e7:d1:64:79:31:78:9e:32:69:70:0a:d9:ea:f8:e1:ac:2e: ce:68:18:12:40:4d:80:98:da:17:94:ac:e2:9b:b2:98:0f:d8: 28:dc:08:97:17:8f:23:e5:82:ea:95:90:5c:42:88:dc:7f:26: 1b:a3:d9:a0:4d:1d:58:77:a7:9d:9d:d6:34:5d:ad:0c:c1:41: fe:a6:a1:bd:d0:36:47:01:d7:9a:03:ee:e5:a9:44:6f:b3:00: a6:ed:e1:bd:7f:18:05:1c:ff:cb:b3:c4:12:92:ac:64:e3:49: ae:12:16:15:7b:5c:4b:90:de:9c:85:fd:8d:12:25:bb:46:50: a9:b7:da:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ64tFHkv/Ig0BRXiko+uy4gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjYwNjExMjIwMTI1WhcNMjYwNjEyMjIwMTI1WjAzMTEwLwYDVQQD Eyg4MmYxMjVjMzY5NjJlZWVmZDlhMTU2NmUwY2JhZjczM2U3NDYwOGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOrg5XfkxaThDvs/CVHiAGSBy8b1 uxDFLzZmzsEk4DNOsBQZfghCKa4mLQrTdGxCpEQHW65nP7uzq+aEewW4z4+ntSS/ Gm5q2XpSYShN4P059N+yaIwStTBgEoTh7NkEEP1G0uQRb4QYnTgzr5aFSptPau54 WpyjK05NzefbEmBUFZYwjDSPVImGMLBamHrAzIT1E3HAzhf9eC0ylQMYIrewSB/j 10dFGi6l9yRyJR7VsDSMeCaVbIpJmTt628/ACT48pbx7KzmOJBH0evlFByJv+YQ3 bTUyXpGNXDpK6Bvf1R9DJNXA24GgsovjZkfrMBXd70dZSVMSTgPd+04t9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILxJcNpYu7v2aFWbgy69zPnRgj4MB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnTvuPGWW HIn0Lnumrx1dL6MXS75lja6Z2C+ddWZs/Xt2oVbRUa6XTLDRXdJBxlfFphRFiQ56 qwDmZO5A0A/CbmFxmGB/3amh6CRt0KaKqZaQw9X3t34kMPc5uWnHouLy1awhOwvQ IopCgCDLGLyCG63NBbRUAYjLg7q7e/Z5H+fRZHkxeJ4yaXAK2er44awuzmgYEkBN gJjaF5Ss4puymA/YKNwIlxePI+WC6pWQXEKI3H8mG6PZoE0dWHennZ3WNF2tDMFB /qahvdA2RwHXmgPu5alEb7MApu3hvX8YBRz/y7PEEpKsZONJrhIWFXtcS5DenIX9 jRIlu0ZQqbfaDA== -----END CERTIFICATE-----Generated at Fri Jun 12 07:29:23 2026 by rpki-client