$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft File: OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft (raw, json) Hash identifier: RbUsIYXEVm7U4V4dMpJIvZSBzD8TufTJm9Uu/Iq0lLU= Subject key identifier: 80:78:BA:CF:6D:82:9E:4E:79:9E:01:BE:EE:40:D3:7B:DF:73:DE:37 Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984 Certificate serial: 019F1DFCAD500E387ACCB5368CC0F8810026 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft Manifest number: 16CA Signing time: Wed 01 Jul 2026 14:02:06 +0000 Manifest this update: Wed 01 Jul 2026 14:02:06 +0000 Manifest next update: Thu 02 Jul 2026 14:02:06 +0000 Files and hashes: 1: FaALcy5Rtdmr2uieYxRcTmINxY0.roa (hash: o5V0XpUincjUZD8yuz4NaYPFOSAiOXTebna/NUT2JTM=) 2: GIHrVIViJFcoMcRYSuQORanWhE0.roa (hash: Xw1YJyhBQX1BH/gd6wFdXzyzKUO+qJJ2rPYoYPjD3gc=) 3: GoQ2pW0J_933ITOYr6rqq9EIbrQ.roa (hash: tKfgDPMmtVyaPODH9xVO5b6jSIkFqfcU29cf6LiBAWM=) 4: MxSN252Rt46daJzmFnKjpDWsGI4.roa (hash: UgheYX57caiwV4IurgnGNzd/ol6yl6jaHGlsEwq1YIg=) 5: OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl (hash: Vl7RDH5F4HmiAiaBrvy4w+KwIn/EchnNTJ38TP4XMfE=) 6: aXaCU83J-_jJ_EnlqZRgN5SQBBk.roa (hash: Vz1lenxM6E43wZsZKYeL1SXodzdNb6RvRRHtozOm9sQ=) 7: cuzZQDYRmdoOYAwAqrA09B4nCAY.roa (hash: 1hhTZq7Tio3QN3NZHMlqIBNsnPCPxg5AP94bS0dr2eU=) 8: lnbRQm2gHQjzkC4Pljc7ywe1fzc.roa (hash: hyi2L8VUzd790YBk5rv5fMvAHFOMrgEkftZ2exdk9ZU=) 9: n-nFKLKkH_a8UIkmjAG8WheeMkQ.roa (hash: 4lMwGlH5lrGUibaDmIf2SptMviWc/ApHUJVaOyRTYKs=) 10: raiLbBG1CMRiAfKyRkS-YiJSo9g.roa (hash: 8FLAxtrWMI4dbICfx4l/Gu56C8DGN6sem1ZiAu15jqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 02 Jul 2026 14:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:1d:fc:ad:50:0e:38:7a:cc:b5:36:8c:c0:f8:81:00:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984 Validity Not Before: Jul 1 14:02:06 2026 GMT Not After : Jul 2 14:02:06 2026 GMT Subject: CN=8078bacf6d829e4e799e01beee40d37bdf73de37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8d:a5:3c:0d:50:4b:4c:23:04:63:42:ea:de: 6b:d6:9e:0c:a9:e8:33:25:d9:fb:79:0d:b6:4f:b0: d0:0c:ae:f1:e5:44:19:e0:c6:b4:64:0d:23:ec:27: 6b:63:00:86:d5:75:ce:88:6b:02:d7:34:20:70:34: 5c:c0:40:e9:cf:86:52:6d:e1:7e:48:2f:cf:62:f4: 77:1d:e6:dd:1e:24:70:7e:37:e2:34:3c:c4:f8:f4: 06:2a:18:5c:2d:a8:1c:2f:bc:37:ea:72:e2:bd:2d: b8:47:25:8b:7d:8e:54:11:0f:6d:16:08:a1:2e:e8: 12:7e:18:97:0e:65:e7:60:7d:c9:e6:42:08:09:eb: 72:82:a2:fe:c5:9f:11:07:be:94:e7:5e:11:67:b7: a0:84:4c:8c:fd:04:fe:8a:97:f7:26:91:40:93:ca: 97:bd:18:1a:4e:21:6b:dd:b6:0c:d8:1e:93:59:b9: 42:48:50:45:2f:2e:a1:d9:bc:88:f3:20:6d:77:9a: ad:b3:78:7d:9f:62:83:9f:f0:38:06:92:41:aa:95: 3d:a2:d7:a5:de:41:3c:d8:47:11:1a:33:b8:49:c6: 71:f8:32:32:ea:f4:a8:a5:83:32:d5:14:38:3b:03: 27:8f:ef:35:3a:42:5f:04:a4:d0:58:f7:fb:ee:2f: 42:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:78:BA:CF:6D:82:9E:4E:79:9E:01:BE:EE:40:D3:7B:DF:73:DE:37 X509v3 Authority Key Identifier: keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f2:da:9c:e5:94:ca:1a:cf:70:56:d3:70:14:25:b6:1b:b6: 52:53:d7:46:1c:87:fd:95:05:61:ae:5f:02:74:98:a3:ad:5f: 8a:2f:7f:7b:be:6d:84:8e:63:c1:73:59:0d:ec:99:24:24:7e: 7f:0a:08:e8:0a:bc:13:02:43:22:04:40:4d:f2:23:04:7d:c1: 0d:17:9c:78:02:9d:c3:da:5e:35:1e:2c:ed:b8:66:83:48:a4: 4e:ec:ab:49:8f:7c:c9:de:db:d0:5c:d3:c8:9e:da:c8:d5:d2: 18:9e:d0:61:bd:94:f6:d6:72:22:63:b1:ad:d7:ca:a8:f7:11: eb:30:93:d1:f4:39:73:92:73:f7:9b:a4:8b:dd:01:2f:27:48: ea:c8:68:e3:1b:4f:75:f0:7c:fa:ec:ef:47:0d:0b:60:40:bb: f4:b8:1a:73:75:41:c4:70:1a:be:f7:01:31:b0:4f:96:36:ff: 28:c1:ce:e6:cc:06:8b:3b:c9:86:d2:01:73:80:da:f5:20:e9: 75:29:2b:63:6d:2b:e0:a7:38:60:a6:01:20:0d:41:4d:ea:c5: f0:b1:cc:a2:57:64:12:53:de:f6:24:7d:07:2f:00:50:5d:d3: 38:e2:5d:62:9c:64:1f:60:5e:83:e3:55:6e:a2:5e:01:2d:3b: 41:eb:8e:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8d/K1QDjh6zLU2jMD4gQAmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjAzNDYzZWI5NDRiMjVjNjUxMzVjYTQ3YmRiZGFiNjQ2 ZjM5ODQwHhcNMjYwNzAxMTQwMjA2WhcNMjYwNzAyMTQwMjA2WjAzMTEwLwYDVQQD Eyg4MDc4YmFjZjZkODI5ZTRlNzk5ZTAxYmVlZTQwZDM3YmRmNzNkZTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo2lPA1QS0wjBGNC6t5r1p4Mqegz Jdn7eQ22T7DQDK7x5UQZ4Ma0ZA0j7CdrYwCG1XXOiGsC1zQgcDRcwEDpz4ZSbeF+ SC/PYvR3HebdHiRwfjfiNDzE+PQGKhhcLagcL7w36nLivS24RyWLfY5UEQ9tFgih LugSfhiXDmXnYH3J5kIICetygqL+xZ8RB76U514RZ7eghEyM/QT+ipf3JpFAk8qX vRgaTiFr3bYM2B6TWblCSFBFLy6h2byI8yBtd5qts3h9n2KDn/A4BpJBqpU9otel 3kE82EcRGjO4ScZx+DIy6vSopYMy1RQ4OwMnj+81OkJfBKTQWPf77i9CDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIB4us9tgp5OeZ4Bvu5A03vfc943MB8GA1UdIwQY MBaAFDggNGPrlEslxlE1yke9vatkbzmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1Nzgt NTg5MzUxNzliOTg1LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1NzgtNTg5MzUxNzliOTg1 LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhvLanOWU yhrPcFbTcBQlthu2UlPXRhyH/ZUFYa5fAnSYo61fii9/e75thI5jwXNZDeyZJCR+ fwoI6Aq8EwJDIgRATfIjBH3BDReceAKdw9peNR4s7bhmg0ikTuyrSY98yd7b0FzT yJ7ayNXSGJ7QYb2U9tZyImOxrdfKqPcR6zCT0fQ5c5Jz95uki90BLydI6sho4xtP dfB8+uzvRw0LYEC79Lgac3VBxHAavvcBMbBPljb/KMHO5swGizvJhtIBc4Da9SDp dSkrY20r4Kc4YKYBIA1BTerF8LHMoldkElPe9iR9By8AUF3TOOJdYpxkH2Beg+NV bqJeAS07QeuOlA== -----END CERTIFICATE-----Generated at Wed Jul 1 19:51:20 2026 by rpki-client