$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft File: OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft (raw, json) Hash identifier: IYBPZLlk2m9xXKg0Vrndoo96GkGsQZ8FkF/IvWreFdI= Subject key identifier: 3D:B3:38:D2:4B:DE:35:3E:4B:6C:2B:9C:2A:2B:52:3A:BA:03:F7:74 Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984 Certificate serial: 01A1238B49396F08B9E2BBA816A131E6006F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft Manifest number: 17D6 Signing time: Sat 10 Oct 2026 02:01:33 +0000 Manifest this update: Sat 10 Oct 2026 02:01:33 +0000 Manifest next update: Sun 11 Oct 2026 02:01:33 +0000 Files and hashes: 1: FaALcy5Rtdmr2uieYxRcTmINxY0.roa (hash: o5V0XpUincjUZD8yuz4NaYPFOSAiOXTebna/NUT2JTM=) 2: GIHrVIViJFcoMcRYSuQORanWhE0.roa (hash: Xw1YJyhBQX1BH/gd6wFdXzyzKUO+qJJ2rPYoYPjD3gc=) 3: GoQ2pW0J_933ITOYr6rqq9EIbrQ.roa (hash: tKfgDPMmtVyaPODH9xVO5b6jSIkFqfcU29cf6LiBAWM=) 4: MxSN252Rt46daJzmFnKjpDWsGI4.roa (hash: UgheYX57caiwV4IurgnGNzd/ol6yl6jaHGlsEwq1YIg=) 5: OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl (hash: sspK8ZLnN2XXQxAQhjal9UbPALxbccKpUh/wei/qfjs=) 6: aXaCU83J-_jJ_EnlqZRgN5SQBBk.roa (hash: Vz1lenxM6E43wZsZKYeL1SXodzdNb6RvRRHtozOm9sQ=) 7: cuzZQDYRmdoOYAwAqrA09B4nCAY.roa (hash: 1hhTZq7Tio3QN3NZHMlqIBNsnPCPxg5AP94bS0dr2eU=) 8: lnbRQm2gHQjzkC4Pljc7ywe1fzc.roa (hash: hyi2L8VUzd790YBk5rv5fMvAHFOMrgEkftZ2exdk9ZU=) 9: n-nFKLKkH_a8UIkmjAG8WheeMkQ.roa (hash: 4lMwGlH5lrGUibaDmIf2SptMviWc/ApHUJVaOyRTYKs=) 10: raiLbBG1CMRiAfKyRkS-YiJSo9g.roa (hash: 8FLAxtrWMI4dbICfx4l/Gu56C8DGN6sem1ZiAu15jqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Oct 2026 00:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:23:8b:49:39:6f:08:b9:e2:bb:a8:16:a1:31:e6:00:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984 Validity Not Before: Oct 10 02:01:33 2026 GMT Not After : Oct 11 02:01:33 2026 GMT Subject: CN=3db338d24bde353e4b6c2b9c2a2b523aba03f774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fa:cc:6e:bc:61:b0:c1:20:63:59:62:6a:34: 04:0a:5a:e3:9f:f2:75:8e:72:14:e9:89:99:15:f9: b7:10:16:e8:81:de:9c:de:07:76:e1:68:0d:8a:3c: da:7b:77:01:ff:ba:b1:6f:12:57:2d:ee:3a:1a:de: 49:99:57:7c:f3:f6:ac:a0:d3:53:a4:37:08:60:31: 53:fd:2b:1c:d4:16:e3:91:6a:bd:92:26:1e:f1:9b: 7d:1a:e9:f3:a2:10:44:6f:b8:2d:27:33:b7:04:2e: da:57:d8:20:f2:43:aa:6f:af:b9:50:d6:28:94:dd: d8:60:a2:d2:13:3f:a9:6f:64:40:75:ee:c4:2f:60: ec:da:d2:ca:93:63:eb:58:a3:88:82:84:84:0c:66: f8:ea:1b:04:99:a8:9b:1c:3e:31:ea:c4:21:00:77: 88:49:6f:5b:72:31:d0:fc:c3:af:b5:b9:fd:a4:38: 97:09:64:1f:f7:3a:2b:6e:c2:6d:2f:e0:b5:38:6c: 21:2b:e2:77:27:89:2d:c1:dc:57:ac:c1:8b:f5:5b: d6:33:6c:f7:9d:c4:9e:55:59:87:8e:a9:37:72:b2: 4a:ea:9f:7c:a0:bd:83:3c:2c:de:ef:98:0a:bd:5b: 08:eb:9b:a4:23:8d:78:fb:4b:df:f8:54:59:be:16: 0b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B3:38:D2:4B:DE:35:3E:4B:6C:2B:9C:2A:2B:52:3A:BA:03:F7:74 X509v3 Authority Key Identifier: keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:93:4e:23:21:48:17:bd:63:04:da:15:18:a4:c8:49:4b:7b: 3f:da:24:51:6d:6c:cc:a1:88:ab:8f:1d:0d:ef:5c:d3:2f:b4: 70:7d:5a:92:05:6a:2c:1e:0d:a3:0e:4a:f7:f9:33:6b:d4:a8: ce:4f:a6:e8:26:11:06:9b:35:42:46:f2:bc:a2:17:a7:6e:23: 89:05:58:f8:0c:99:9e:b8:65:4f:02:e3:dc:5e:97:93:d3:9b: 41:ec:c6:bf:8c:91:e5:c4:30:45:7c:c3:0f:6f:09:7c:15:34: b9:f1:b4:c5:df:74:a5:82:87:be:ea:4c:fb:8f:6a:96:86:c0: fb:94:e4:7f:be:30:96:be:80:a5:60:9d:2b:a3:48:18:71:84: ca:0c:84:bf:bd:1a:d4:90:bf:0d:44:2a:f3:34:8c:56:a7:7d: 11:53:ee:7b:2c:d5:38:75:51:e6:7d:5a:03:3f:dc:9d:dd:38: 6a:ab:ee:79:d9:98:5b:97:0b:2f:f6:8a:6d:29:df:e0:34:8f: e3:c8:a3:f5:50:15:9b:dd:29:2d:54:4c:02:8f:43:9a:18:92: 00:f3:37:15:c4:48:d6:06:5f:e4:1f:a2:12:c7:93:e8:23:47: 88:03:a4:63:b8:6b:1b:e6:8f:87:09:55:f3:69:c3:e7:36:27: cd:b9:41:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEji0k5bwi54ruoFqEx5gBvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjAzNDYzZWI5NDRiMjVjNjUxMzVjYTQ3YmRiZGFiNjQ2 ZjM5ODQwHhcNMjYxMDEwMDIwMTMzWhcNMjYxMDExMDIwMTMzWjAzMTEwLwYDVQQD EygzZGIzMzhkMjRiZGUzNTNlNGI2YzJiOWMyYTJiNTIzYWJhMDNmNzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPrMbrxhsMEgY1liajQEClrjn/J1 jnIU6YmZFfm3EBbogd6c3gd24WgNijzae3cB/7qxbxJXLe46Gt5JmVd88/asoNNT pDcIYDFT/Ssc1BbjkWq9kiYe8Zt9GunzohBEb7gtJzO3BC7aV9gg8kOqb6+5UNYo lN3YYKLSEz+pb2RAde7EL2Ds2tLKk2PrWKOIgoSEDGb46hsEmaibHD4x6sQhAHeI SW9bcjHQ/MOvtbn9pDiXCWQf9zorbsJtL+C1OGwhK+J3J4ktwdxXrMGL9VvWM2z3 ncSeVVmHjqk3crJK6p98oL2DPCze75gKvVsI65ukI414+0vf+FRZvhYLCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2zONJL3jU+S2wrnCorUjq6A/d0MB8GA1UdIwQY MBaAFDggNGPrlEslxlE1yke9vatkbzmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1Nzgt NTg5MzUxNzliOTg1LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1NzgtNTg5MzUxNzliOTg1 LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZNOIyFI F71jBNoVGKTISUt7P9okUW1szKGIq48dDe9c0y+0cH1akgVqLB4Now5K9/kza9So zk+m6CYRBps1QkbyvKIXp24jiQVY+AyZnrhlTwLj3F6Xk9ObQezGv4yR5cQwRXzD D28JfBU0ufG0xd90pYKHvupM+49qlobA+5Tkf74wlr6ApWCdK6NIGHGEygyEv70a 1JC/DUQq8zSMVqd9EVPueyzVOHVR5n1aAz/cnd04aqvuedmYW5cLL/aKbSnf4DSP 48ij9VAVm90pLVRMAo9DmhiSAPM3FcRI1gZf5B+iEseT6CNHiAOkY7hrG+aPhwlV 82nD5zYnzblBYg== -----END CERTIFICATE-----Generated at Sat Oct 10 10:21:05 2026 by rpki-client