$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft File: OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft (raw, json) Hash identifier: hd8hR1CM7P3EQMfUF4D0WAxv1wfa0YMJXDUpnY2XqOE= Subject key identifier: 02:F0:99:F6:D3:A8:BD:39:1C:78:10:35:B3:9C:D3:3C:A8:21:4F:84 Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984 Certificate serial: 019E2C96311C08F267CBD750B081CA03798C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft Manifest number: 164D Signing time: Fri 15 May 2026 17:01:40 +0000 Manifest this update: Fri 15 May 2026 17:01:40 +0000 Manifest next update: Sat 16 May 2026 17:01:40 +0000 Files and hashes: 1: FaALcy5Rtdmr2uieYxRcTmINxY0.roa (hash: o5V0XpUincjUZD8yuz4NaYPFOSAiOXTebna/NUT2JTM=) 2: GIHrVIViJFcoMcRYSuQORanWhE0.roa (hash: Xw1YJyhBQX1BH/gd6wFdXzyzKUO+qJJ2rPYoYPjD3gc=) 3: GoQ2pW0J_933ITOYr6rqq9EIbrQ.roa (hash: tKfgDPMmtVyaPODH9xVO5b6jSIkFqfcU29cf6LiBAWM=) 4: MxSN252Rt46daJzmFnKjpDWsGI4.roa (hash: UgheYX57caiwV4IurgnGNzd/ol6yl6jaHGlsEwq1YIg=) 5: OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl (hash: EC/6dYkppZ/BN5tHQjOjAiTmitgSsMRLJPxrWGyBcxM=) 6: aXaCU83J-_jJ_EnlqZRgN5SQBBk.roa (hash: Vz1lenxM6E43wZsZKYeL1SXodzdNb6RvRRHtozOm9sQ=) 7: cuzZQDYRmdoOYAwAqrA09B4nCAY.roa (hash: 1hhTZq7Tio3QN3NZHMlqIBNsnPCPxg5AP94bS0dr2eU=) 8: lnbRQm2gHQjzkC4Pljc7ywe1fzc.roa (hash: hyi2L8VUzd790YBk5rv5fMvAHFOMrgEkftZ2exdk9ZU=) 9: n-nFKLKkH_a8UIkmjAG8WheeMkQ.roa (hash: 4lMwGlH5lrGUibaDmIf2SptMviWc/ApHUJVaOyRTYKs=) 10: raiLbBG1CMRiAfKyRkS-YiJSo9g.roa (hash: 8FLAxtrWMI4dbICfx4l/Gu56C8DGN6sem1ZiAu15jqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 16 May 2026 11:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:2c:96:31:1c:08:f2:67:cb:d7:50:b0:81:ca:03:79:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984 Validity Not Before: May 15 17:01:40 2026 GMT Not After : May 16 17:01:40 2026 GMT Subject: CN=02f099f6d3a8bd391c781035b39cd33ca8214f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3a:b1:2f:76:80:fa:79:88:6c:3e:f9:b5:c5: 99:c5:34:fe:89:42:03:b2:e0:8a:04:63:2f:1b:f5: b4:fa:82:af:b4:69:40:44:21:59:b3:f7:7e:d6:ed: 21:22:0b:e5:5e:a2:76:8d:af:05:1b:1f:84:1a:e9: 34:46:d3:10:f0:38:a2:27:41:9b:cb:55:4e:fb:ef: 70:d8:c6:19:68:97:2a:a6:04:74:60:b3:a8:ef:66: 44:54:5d:e2:39:e9:7f:2f:0c:3e:f6:b4:43:0b:3b: 78:dc:d1:64:4b:83:da:77:b5:0e:c6:30:81:68:7e: 3e:39:03:93:be:c9:81:6a:c0:25:dc:a9:d3:11:19: 45:c6:8f:bc:7c:63:30:76:3f:5d:78:98:83:a2:90: 41:ef:6e:ad:42:e3:d2:6b:d7:fe:36:8d:22:d3:ff: ca:b3:d0:e3:7e:7b:04:67:89:0c:c8:ba:c1:c8:d0: d9:4f:16:78:2f:2a:bf:ba:0d:ce:16:ac:6c:26:c2: e1:b0:95:9a:13:10:d4:73:74:5c:16:d1:23:65:33: c8:db:5f:f6:c3:1d:1d:3f:7a:21:0b:69:89:85:09: 1b:39:7e:46:9d:0c:40:d6:b4:0d:e4:43:42:16:12: 24:b9:cc:70:6f:59:59:68:e6:d8:67:32:2f:dc:db: d4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F0:99:F6:D3:A8:BD:39:1C:78:10:35:B3:9C:D3:3C:A8:21:4F:84 X509v3 Authority Key Identifier: keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:ed:33:59:72:a9:55:60:57:92:01:fe:49:4a:81:22:2d:ba: ad:10:eb:2c:28:5d:c2:a5:f0:fd:be:86:c0:17:ae:38:f9:26: 47:02:ea:05:fd:c4:54:f1:49:dd:89:9e:c0:8f:20:bc:e5:2e: bf:06:31:c1:b5:c5:62:b6:67:a4:a0:24:89:1d:f9:63:c6:00: 4a:8c:86:13:8c:9c:17:20:fd:34:60:77:83:1f:cc:a6:a2:c2: af:5b:77:52:96:50:6a:e5:47:59:26:27:55:9f:7f:48:a1:7d: a3:04:8f:6c:3c:e8:29:62:cb:f5:df:b6:4c:34:b5:eb:75:35: 10:17:f1:47:97:ec:da:62:15:a5:df:a8:c9:aa:76:b4:7d:40: 19:26:1a:6c:a2:ba:0e:4c:37:7b:be:88:ce:5c:b9:48:cd:23: 44:55:1e:97:fb:6b:c1:3b:48:38:02:78:f0:d1:ae:c9:c4:a2: aa:d5:1d:3d:d4:67:7a:72:c4:00:36:cc:64:5b:38:ad:f2:ff: a7:4c:e6:a5:82:97:c6:cc:35:1a:0a:1b:cc:87:ff:d9:52:ec: 93:b6:f7:a8:c9:f1:17:46:31:4b:00:96:95:11:5c:d0:2e:62: 2e:d2:36:cf:24:6e:dc:e3:67:ed:03:3b:c7:7a:d8:9c:76:2d: b6:f5:21:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4sljEcCPJny9dQsIHKA3mMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjAzNDYzZWI5NDRiMjVjNjUxMzVjYTQ3YmRiZGFiNjQ2 ZjM5ODQwHhcNMjYwNTE1MTcwMTQwWhcNMjYwNTE2MTcwMTQwWjAzMTEwLwYDVQQD EygwMmYwOTlmNmQzYThiZDM5MWM3ODEwMzViMzljZDMzY2E4MjE0Zjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjqxL3aA+nmIbD75tcWZxTT+iUID suCKBGMvG/W0+oKvtGlARCFZs/d+1u0hIgvlXqJ2ja8FGx+EGuk0RtMQ8DiiJ0Gb y1VO++9w2MYZaJcqpgR0YLOo72ZEVF3iOel/Lww+9rRDCzt43NFkS4Pad7UOxjCB aH4+OQOTvsmBasAl3KnTERlFxo+8fGMwdj9deJiDopBB726tQuPSa9f+No0i0//K s9DjfnsEZ4kMyLrByNDZTxZ4Lyq/ug3OFqxsJsLhsJWaExDUc3RcFtEjZTPI21/2 wx0dP3ohC2mJhQkbOX5GnQxA1rQN5ENCFhIkucxwb1lZaObYZzIv3NvUDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALwmfbTqL05HHgQNbOc0zyoIU+EMB8GA1UdIwQY MBaAFDggNGPrlEslxlE1yke9vatkbzmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1Nzgt NTg5MzUxNzliOTg1LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1NzgtNTg5MzUxNzliOTg1 LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAe0zWXKp VWBXkgH+SUqBIi26rRDrLChdwqXw/b6GwBeuOPkmRwLqBf3EVPFJ3YmewI8gvOUu vwYxwbXFYrZnpKAkiR35Y8YASoyGE4ycFyD9NGB3gx/MpqLCr1t3UpZQauVHWSYn VZ9/SKF9owSPbDzoKWLL9d+2TDS163U1EBfxR5fs2mIVpd+oyap2tH1AGSYabKK6 Dkw3e76Izly5SM0jRFUel/trwTtIOAJ48NGuycSiqtUdPdRnenLEADbMZFs4rfL/ p0zmpYKXxsw1GgobzIf/2VLsk7b3qMnxF0YxSwCWlRFc0C5iLtI2zyRu3ONn7QM7 x3rYnHYttvUhUg== -----END CERTIFICATE-----Generated at Fri May 15 20:46:37 2026 by rpki-client