$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft File: OroRckcuqAJl0SmCln3gqLC8WQE.mft (raw, json) Hash identifier: GwPIPy+MYc98p6cQC3YBGaAjhFeTyiC/4AbOcONsoiw= Subject key identifier: 64:87:C9:1A:B2:7E:3C:72:5C:C8:77:9D:DA:A5:FD:A7:C0:67:1F:DA Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901 Certificate serial: 019DCCAB149274235E9D3AC0DBD46E3D0187 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft Manifest number: 1910 Signing time: Mon 27 Apr 2026 02:00:57 +0000 Manifest this update: Mon 27 Apr 2026 02:00:57 +0000 Manifest next update: Tue 28 Apr 2026 02:00:57 +0000 Files and hashes: 1: 1--uZd9q-jqlCwf4KSHTkKxdp1P0.roa (hash: yJgoBtaw97/X+Yl828Ilk6xaEg2wiibhZ1X313r+u+s=) 2: 6iaqLomTHcn35nOgS7u2_TW-xhs.roa (hash: Mi7/BGP/3N9pUm1kAumWXNagsUDM+4h/oInYolOAkPE=) 3: 8BEgv2DgNKbNbNuzLHl3VGFIGL8.roa (hash: SQFbOHpDcvay1MqsdXqe1YtJV1othwB2O5ZriM/HbH0=) 4: DVctQHuUFs5Ww1nxg7BOkHHIxmA.roa (hash: NAYQAcei8ET2orLJQeLFFdmfCZY62HVhsb/rGilJLnI=) 5: DcqHCtebdDgiEuSQXxi6ig8mM8o.roa (hash: cRfNZKkpr+LQ6VmzZJFfJ/S+gQUsEnhyoZIF9XUOHHw=) 6: Jbj7ynIvhap5I_QFhGzfNQth1KM.roa (hash: Z7XUHDDtftkWoWOYjRWVurOY4SlFKKJE535VEXNm4iU=) 7: LmZ65ahj31rbnRy9vWbROzqmhcU.roa (hash: SvoOUMNxC/Ob/2VuP/7YeBr/5a0sbiKFw1vWGYN+3kw=) 8: OroRckcuqAJl0SmCln3gqLC8WQE.crl (hash: qxmvHW9p2qj+U6tNq/eiss4FX4wEHSQzFkxwFVjzhpI=) 9: Rfztg_t5JVeMZSj2mDqPGyp9q44.roa (hash: /89m2QYUYW/bhcHvnKgQT+IpW6Y9wQwv8T9fEb+5DrQ=) 10: TB2uobnUVymGTH4RA03gIOhAZRg.roa (hash: 6oz05ThoSNjSotd8Y3/7ZJcBXHZDvJhujoU9Z+4I/C0=) 11: ZuhzTaDClxjmQVXxvnkYsTWFFGQ.roa (hash: sV8EfVihdKiLsfcrDwHQZu5bOJ9OiQzvEOBbJ1cZbxk=) 12: _Z7JEWza1bSPD-7PWbG0vX89s3o.roa (hash: OZMVtPUDYR+RELQo2A6anCLj+47zVFIRgvSkDtlYuQw=) 13: aaE0S3Um5Vi6BhDQqr6tOzK4JaE.roa (hash: I/6hh1gjRcNeCWSUlY12OXaqWDkdOdsjtuMQtrQZ6bs=) 14: g3dNjS4XgY8klkPhCyZdKToAlGM.roa (hash: peZC7FKDdVQt9t0rZ2GL+oL22WvV/nKBVc+dvOTk7TE=) 15: gB_s-WdUnxEPR2XESWswld-SB24.roa (hash: qRp5667FdJ5J3f1BulVc/pqFyv4XSQMc14cF/bbrQac=) 16: h2z5PFUk9kCOYl2Qfq1nfpB1Cow.roa (hash: bmKxTPlO70DQG41qe3REDk+7OXfpbhyEVC0cTa4zyE0=) 17: iCDLvxYdAykrIxvCC48ohuJmwcs.roa (hash: Ume17i9/BCAtK0RFxYp+aFptPOFLeGk5A4An1t7V2u4=) 18: ixvTApwJ0LOFuR5J5-NGSIKMqNk.roa (hash: BDKxCeeuSykbUbxzQ/ZPnLJUCKHXvds6WrwRPz6ZbCc=) 19: nZX_nzH3JzTrJeZ8L9ZU0lIyk-4.roa (hash: BdZa7hgF5JlHhd3QhsJDvnmYPHKo0HSuto3Mzwo2NpU=) 20: pO0qGsq_BKRgOQ_8WYJpqKXk4C0.roa (hash: P0kO1Oni6LjDeROb0o6wKxl0oRXYlJoyDIs7yU4qHZQ=) 21: pxwmw3bWAUG0G2zeWP6wAlWdZpo.roa (hash: TGTRkz6GAsY4o7A1nVyZO49OKe6IHq8N/DzCAZl1Ss0=) 22: u8wDHAu62fejNzSsl66nMVncyJ8.roa (hash: DS9lRY1FbYp3Sl7zQdRRW/sRlCsiVp9bm3HNS4WoCpo=) 23: vDtti9xnyakhZ1WWiOjhX42Cz4E.roa (hash: C355/1wMzaPIkZLvnFKM+IMHqthGrw6arcc7tCzyvb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 02:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cc:ab:14:92:74:23:5e:9d:3a:c0:db:d4:6e:3d:01:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Validity Not Before: Apr 27 02:00:57 2026 GMT Not After : Apr 28 02:00:57 2026 GMT Subject: CN=6487c91ab27e3c725cc8779ddaa5fda7c0671fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3a:c1:6f:d1:14:a8:a9:a7:49:df:13:91:5b: 33:47:3f:7c:ce:06:b0:52:d9:72:31:84:29:18:79: 08:0e:ba:85:f4:cb:b4:48:82:47:b0:d2:d8:f8:fa: 28:33:20:a5:cd:71:b9:b8:7b:06:52:33:99:96:8b: ed:a9:85:8d:9c:36:d4:f6:d3:fa:39:80:69:f1:cd: 35:29:84:8b:fe:45:15:66:59:88:aa:3d:4d:ec:24: 1f:0e:8e:fd:14:9e:f9:7d:d0:8b:a6:d2:50:a5:91: d0:ae:d9:f7:49:c0:d3:4a:18:a7:1d:ff:82:8d:c9: 30:38:7d:35:dc:2b:2c:14:e8:dd:75:02:68:d4:51: db:06:1a:43:06:5b:30:14:bd:86:ec:40:0a:a9:36: 83:4f:73:4f:ef:aa:74:c1:cc:ce:ef:81:f5:3d:4e: 9b:b7:c6:5c:c6:ff:ee:1c:a1:27:45:77:eb:c3:5c: 97:a3:e9:fc:f2:82:a9:30:47:ba:3c:78:eb:72:a6: 79:e9:e7:6f:2f:4c:19:79:f7:29:17:46:e0:a6:b4: a8:7c:58:95:18:9c:74:d0:3d:4c:66:76:fe:ea:a1: a9:e8:00:e4:5f:99:99:13:30:07:a6:94:4e:3a:59: 30:96:28:33:8a:25:4e:f5:cd:2c:34:f3:88:b0:38: 03:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:87:C9:1A:B2:7E:3C:72:5C:C8:77:9D:DA:A5:FD:A7:C0:67:1F:DA X509v3 Authority Key Identifier: keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:22:37:e6:a4:b2:c7:56:ba:6e:5c:b9:9e:7b:40:68:52:6b: 72:0d:7e:33:b9:ba:d7:38:45:02:9a:2a:08:e0:75:22:61:29: df:25:0a:ab:1e:62:4d:3c:da:8d:55:27:de:79:17:ae:75:27: 82:aa:4a:68:4a:7e:b6:45:5d:af:55:62:b4:d6:ae:00:56:32: 8d:c2:3c:15:a8:07:5a:50:eb:81:1d:01:3e:96:86:b9:f4:c2: 2c:4f:30:c3:48:27:34:07:88:5d:88:b9:21:91:5d:dd:c7:7e: 0d:db:a2:6e:b0:ec:0e:0b:2c:82:75:ae:a4:e7:54:ae:5c:fc: 1c:87:d0:10:78:57:07:bb:f6:e2:fc:32:60:8a:ab:3a:7d:ce: 76:f2:fb:7e:70:2d:9b:3a:8f:09:6b:c6:58:44:6d:41:4e:79: 96:fe:7d:c8:0e:77:fe:64:5d:1f:27:d6:f2:bc:5a:dc:c6:91: f7:7c:e7:3e:dd:b3:5f:5d:13:f5:0f:b3:a5:83:6f:ca:d7:e1: 50:bd:ce:c3:9a:0c:c9:c8:e9:af:fd:88:94:d7:96:c8:52:d3: ea:40:db:b8:c6:f5:87:83:28:ce:8b:7b:a5:ff:13:77:38:d7: 23:6a:62:17:ac:ef:62:42:0e:b8:67:ef:7e:57:dd:5a:f4:16: a7:82:6b:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3MqxSSdCNenTrA29RuPQGHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi YzU5MDEwHhcNMjYwNDI3MDIwMDU3WhcNMjYwNDI4MDIwMDU3WjAzMTEwLwYDVQQD Eyg2NDg3YzkxYWIyN2UzYzcyNWNjODc3OWRkYWE1ZmRhN2MwNjcxZmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTrBb9EUqKmnSd8TkVszRz98zgaw UtlyMYQpGHkIDrqF9Mu0SIJHsNLY+PooMyClzXG5uHsGUjOZlovtqYWNnDbU9tP6 OYBp8c01KYSL/kUVZlmIqj1N7CQfDo79FJ75fdCLptJQpZHQrtn3ScDTShinHf+C jckwOH013CssFOjddQJo1FHbBhpDBlswFL2G7EAKqTaDT3NP76p0wczO74H1PU6b t8Zcxv/uHKEnRXfrw1yXo+n88oKpMEe6PHjrcqZ56edvL0wZefcpF0bgprSofFiV GJx00D1MZnb+6qGp6ADkX5mZEzAHppROOlkwligziiVO9c0sNPOIsDgDwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSHyRqyfjxyXMh3ndql/afAZx/aMB8GA1UdIwQY MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt NGRkMDQzNDZhYmMzLzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASI35qSy x1a6bly5nntAaFJrcg1+M7m61zhFApoqCOB1ImEp3yUKqx5iTTzajVUn3nkXrnUn gqpKaEp+tkVdr1VitNauAFYyjcI8FagHWlDrgR0BPpaGufTCLE8ww0gnNAeIXYi5 IZFd3cd+DduibrDsDgssgnWupOdUrlz8HIfQEHhXB7v24vwyYIqrOn3OdvL7fnAt mzqPCWvGWERtQU55lv59yA53/mRdHyfW8rxa3MaR93znPt2zX10T9Q+zpYNvytfh UL3Ow5oMycjpr/2IlNeWyFLT6kDbuMb1h4Mozot7pf8TdzjXI2piF6zvYkIOuGfv flfdWvQWp4Jrcg== -----END CERTIFICATE-----Generated at Mon Apr 27 12:40:25 2026 by rpki-client