$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft File: Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json) Hash identifier: jcYadbwLJve+C7WcgbWvJxOJddpFF/MMSnS7nv4v2Sg= Subject key identifier: 5A:C0:B9:97:88:F2:41:4F:3D:E3:C6:96:6C:25:D6:6B:15:00:F7:CE Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 019CF873EF5DF2A09CFFA675F2F8177190D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft Manifest number: 188F Signing time: Mon 16 Mar 2026 21:01:13 +0000 Manifest this update: Mon 16 Mar 2026 21:01:13 +0000 Manifest next update: Tue 17 Mar 2026 21:01:13 +0000 Files and hashes: 1: 6PKIKUxySdUwZYjBpQdap24rMCA.roa (hash: Q+sfZpJT+al0TFOwIddw17g5+KoGJur9NLjQbu4nLpM=) 2: 8V2NwbvFlQZYvhmUrca34kxhXa0.roa (hash: DM0RB7X2NkgoMommIXHbEaH33Jj0bMo7E0xn5ejVedM=) 3: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: Kd0hwWahhWfX8xzUkIXCi0b5xwSou78f7HTME3lKULs=) 4: QawDO3nriy0Ac_BTEa82vA_nGDI.roa (hash: ONoC4PBmZZaC9uv6W2VVUcFA7b/wums0wl8fDhnZ7Gg=) 5: ZUtFH_qhx3L4PEjgB3q82Pko9A8.roa (hash: cpl/eTn6qz8+2/3oyMQl/oJw6IV6mFmSjoin/h1krGs=) 6: f8crMnaCvVJR24y4HZK4aF4ON_Y.roa (hash: a4LuuWR1pCU4Uin5c2uaOnWKPPk90YN8aUWR2m/vZDQ=) 7: kO9WlUparYb6jLj3Al1HAfYWyc4.roa (hash: uf/Ee/JGBTSZ54j7ty6QwzOZpLC0w43Jza7tQwup4Iw=) 8: oeb6m3It37B8PGE2O7TDai_TrWY.roa (hash: AfKJo3qTL26v5E6lQbsmszspXYIo4b8KBBv1yOMp4wQ=) 9: u5pqVXheduvSRyevzvk3F281Pv8.roa (hash: 99RNfzNuS1w8/5besxPZV13SYkOzDoP6UORAhIYy5ic=) 10: vjnnj3G5SebpeaPAIXJb8Tt62MQ.roa (hash: BmcmdODjCytMNk+M3oaKSDAoiHNkc3B1YVmJUX1D3tg=) 11: w8agfRL1GVHiUSL4QR-4AfJIyKQ.roa (hash: hBE3KCvCu5YG/sDO5HAFViDYI0rH255FlChKrGnbX6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Mar 2026 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:f8:73:ef:5d:f2:a0:9c:ff:a6:75:f2:f8:17:71:90:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Mar 16 21:01:13 2026 GMT Not After : Mar 17 21:01:13 2026 GMT Subject: CN=5ac0b99788f2414f3de3c6966c25d66b1500f7ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:01:9a:f8:aa:8d:f0:8f:f8:53:4c:fc:e6:14: 1b:7f:0f:0e:8d:73:1f:55:05:46:a7:d5:38:1f:84: fb:d6:4c:e2:e9:4c:21:9f:67:4d:05:ef:6a:4a:b8: d7:ff:77:07:3a:ee:bb:3d:96:42:61:f5:9e:b8:9b: 28:6c:54:a4:10:56:1c:e0:59:54:f3:68:e2:75:4a: 51:1e:04:04:dd:b8:82:dd:57:f2:94:3d:9c:28:4f: 21:c7:12:4e:dd:00:f3:e2:73:0d:a6:b3:5b:ca:68: 85:3b:89:9e:68:a9:93:d1:c8:91:b8:a8:4f:39:f8: 49:89:ff:a7:d2:e0:5b:21:5c:3d:60:4a:92:7a:d7: c1:db:85:20:0c:78:70:d4:7b:4f:a7:98:cc:f5:d0: 0f:8c:cc:9e:29:47:54:d1:e0:1c:ac:bd:4d:9b:57: 73:ba:17:03:9a:75:79:9e:e9:50:7b:13:f2:56:de: fc:63:bd:72:ff:05:b6:3d:27:4b:e2:91:40:b3:4f: 5a:57:65:37:c6:f6:16:5c:86:dd:7c:b8:a3:dd:25: 05:14:f8:99:ad:29:8f:e5:54:e6:51:fb:9a:d6:7f: a4:b3:19:8e:7a:ab:33:0c:3d:1c:19:2c:d9:cc:04: ed:ff:af:40:23:1a:06:f2:23:a2:a9:39:58:d3:f9: 27:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C0:B9:97:88:F2:41:4F:3D:E3:C6:96:6C:25:D6:6B:15:00:F7:CE X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:a4:48:e9:21:7e:66:31:93:e0:0d:3f:f1:f1:89:5c:3b:6c: e8:38:d8:5b:bb:b9:90:c7:a9:b6:2b:a8:cf:bb:ae:9b:5c:28: f9:31:d6:ba:af:21:6f:ca:67:db:7b:e8:1f:be:2e:bc:c7:ac: 77:00:86:8d:3d:9f:b9:5b:ca:22:25:4a:96:28:cf:1f:b8:ad: fb:54:11:1b:a3:7d:4a:78:04:4e:0e:0a:cc:02:9d:a3:06:0d: 79:f0:4b:54:a4:31:d5:f6:9d:07:6f:1b:2c:e1:bd:61:f8:60: a3:3e:1c:19:63:36:6d:42:75:5c:44:a5:a3:b2:a6:46:97:f8: 63:27:b2:78:65:0e:4a:32:b4:c8:1a:2d:c7:29:b8:d9:c5:25: c6:d2:ac:5f:cd:5f:57:66:8a:cc:18:5d:56:20:ea:9b:36:c3: c8:04:9b:60:48:30:31:a8:93:fd:dd:55:f6:b4:4b:52:82:de: e5:73:51:af:8f:55:c2:ac:32:89:8e:42:66:8b:ae:b1:84:94: 17:93:b8:64:2c:f9:67:6b:f7:0c:6d:10:67:ef:6e:b7:b8:c0: f2:43:e1:7a:af:aa:e2:e7:82:37:b1:37:57:19:b5:c1:13:a0: b4:d2:34:76:8d:56:f4:90:42:1b:28:e8:85:66:5c:67:ef:04: 4f:84:19:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZz4c+9d8qCc/6Z18vgXcZDYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjYwMzE2MjEwMTEzWhcNMjYwMzE3MjEwMTEzWjAzMTEwLwYDVQQD Eyg1YWMwYjk5Nzg4ZjI0MTRmM2RlM2M2OTY2YzI1ZDY2YjE1MDBmN2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQGa+KqN8I/4U0z85hQbfw8OjXMf VQVGp9U4H4T71kzi6Uwhn2dNBe9qSrjX/3cHOu67PZZCYfWeuJsobFSkEFYc4FlU 82jidUpRHgQE3biC3VfylD2cKE8hxxJO3QDz4nMNprNbymiFO4meaKmT0ciRuKhP OfhJif+n0uBbIVw9YEqSetfB24UgDHhw1HtPp5jM9dAPjMyeKUdU0eAcrL1Nm1dz uhcDmnV5nulQexPyVt78Y71y/wW2PSdL4pFAs09aV2U3xvYWXIbdfLij3SUFFPiZ rSmP5VTmUfua1n+ksxmOeqszDD0cGSzZzATt/69AIxoG8iOiqTlY0/knHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrAuZeI8kFPPePGlmwl1msVAPfOMB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqRI6SF+ ZjGT4A0/8fGJXDts6DjYW7u5kMeptiuoz7uum1wo+THWuq8hb8pn23voH74uvMes dwCGjT2fuVvKIiVKlijPH7it+1QRG6N9SngETg4KzAKdowYNefBLVKQx1fadB28b LOG9Yfhgoz4cGWM2bUJ1XESlo7KmRpf4YyeyeGUOSjK0yBotxym42cUlxtKsX81f V2aKzBhdViDqmzbDyASbYEgwMaiT/d1V9rRLUoLe5XNRr49VwqwyiY5CZouusYSU F5O4ZCz5Z2v3DG0QZ+9ut7jA8kPheq+q4ueCN7E3Vxm1wROgtNI0do1W9JBCGyjo hWZcZ+8ET4QZ4A== -----END CERTIFICATE-----Generated at Tue Mar 17 05:57:17 2026 by rpki-client