$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft File: olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json) Hash identifier: tp8oXy6EiUpF/Yp072z4w2d7QmeoCZEC7SQCfCnlmsw= Subject key identifier: 9D:C3:CD:41:B8:7C:1C:9B:53:EC:4D:F2:FF:37:B8:BA:8F:C6:91:1B Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 019FCA817F9A7F0F8E9A5DB748220737A966 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft Manifest number: 1A1F Signing time: Tue 04 Aug 2026 02:01:51 +0000 Manifest this update: Tue 04 Aug 2026 02:01:51 +0000 Manifest next update: Wed 05 Aug 2026 02:01:51 +0000 Files and hashes: 1: 0dbyZwebQgTGMD5-wPhJH6_Pd5I.roa (hash: rG5nZgpv1Ah9jz+mC9094dW59+5lFAhfWaH5ssnQtAk=) 2: 1-SQFDfpp9D_i817zUQFbntY0dRQ.roa (hash: biSe4GCFtSwazcB9PCCa1NKBDVP5/i0SLuwOHponshU=) 3: 2frKTWb3ttQDpCXNMXbTSXrlIqI.roa (hash: obnt34G7IEsjg6vdddM8muzJwshLaBlLPb65paOFsfE=) 4: 3lYygY9QSAAHtzgINKWVRrbCp_4.roa (hash: xTlxdsrlszD3wQ8XFzdmUFKsu5SMwqAldL5Rb7oJqzA=) 5: 4WijXRQsTuAJtSd_hSZYlUqj8lA.roa (hash: cDODijNSh6xud6bY86CXr7OdBhes8GnABNkzt2sQT9E=) 6: 5KqisG8I4aftfbpV-Wm5RoZOAu4.roa (hash: aWHlE7ObMJmJWXU63vmIza0enQBptwax9xe4eo6h4LY=) 7: 7zTwSbIrIN1tbHKaAerBGKh4H_4.roa (hash: Uj+d0N/fp4CQPw2Wdyt0B7bkrgBCMNOKaEUgThPZLo4=) 8: BiFlBqm3KUzEVOiMzYhT_EVILsg.roa (hash: fPfSMKmz3G9txaE/xrCmq0xkzT0anA6fzG93SYzo/Cs=) 9: Gv1ql7t0nNON87AJIldQVqDpbaw.roa (hash: Afsi36EyWB2mwsT0UzfNkOmYYiw9CwLh31zU2SIsaxk=) 10: I2KpdLXbpYuKcc5P2UrERlbUmQI.roa (hash: QwjjNYoou+Yqw7bbIshNHDY3CQQBCro8tQly5UuqIPQ=) 11: K6IIfeYnJcau7XFah26WtRrWoX4.roa (hash: kAmjx0E3nDeIJhDMXwZG/0loikW8ryL2ZHfuoiau2sI=) 12: KfKdKGXKrJVAyc679p1xVdKcOuU.roa (hash: MZjQw9I7nKK82B9sKr7/qbtBGaD/PhRCNNoKDtPpSRQ=) 13: Nn2M0QjFRAa_T2cmYDVUHTJ5GXs.roa (hash: ROtPVP9nVJ4sSu+guXDuQ34VOIJfTdPXZnYgNbsVTRc=) 14: PT0OVKn7DoYDkXnLiYT9h8XOQSo.roa (hash: P3oRTt1oGGLmL6K2JdXvl8dIu0LI9RbrIcGwZo70+dU=) 15: Ss_HAbXwrBgTnN9olUTWyjQFCB4.roa (hash: nrNxrT3l4poCRT7QhHB8p4Y5AUqyWOUsBfKv8pVp0tQ=) 16: TUHp0yldZUy2noEeejLALiKlsOA.roa (hash: hJdNCDGT+WfObUpSa1plMcdJasirz1T8A6b/aK4MsFo=) 17: Urxc-_3dN2rsdSn-CFXZaM1OMmE.roa (hash: KTdVek6dN9t33L+6LCMmAcoph/JKLQZZF3RFY22Laag=) 18: aFybrbDshxtrknuOyM8RFxRBKs0.roa (hash: RQU0CLTgvLglUS45QfR69+raL0+alWumuh4CDPItdCA=) 19: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: jSlHSCQp8ggFC8QN2S1ZiT8xZHoibtRclj1LRz70mJ4=) 20: rZIzlxjNqrmdhiYj8eZcD_DAyYQ.roa (hash: HtYYyQJMTgOPk/TpOD1+JZFhzQ3pNzbNJ5gyclYza/w=) 21: thqMO7NSQ4YZbOJpf7E5T4h4Qx4.roa (hash: CSkwEjedoekw5JE8fDs8zoEDa+VA8TtlPZQTJSLtR3Q=) 22: xqLMI4n3mv1T0FOyglej7wVFdYE.roa (hash: BA8dbC4wqu6gr5aHMdPy/PzpkFFbaeIFkYk6ddxpagE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 04 Aug 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ca:81:7f:9a:7f:0f:8e:9a:5d:b7:48:22:07:37:a9:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Aug 4 02:01:51 2026 GMT Not After : Aug 5 02:01:51 2026 GMT Subject: CN=9dc3cd41b87c1c9b53ec4df2ff37b8ba8fc6911b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d1:f0:8d:d1:23:3f:1b:16:ca:56:96:2f:12: a5:57:bd:95:7a:85:7b:89:ee:7b:9f:f2:c5:03:df: 93:bc:be:e1:58:c5:c6:90:e1:6e:b9:48:07:7a:5d: db:17:6e:61:8e:53:c4:5c:83:17:0b:c2:a1:10:34: 10:6a:10:54:2e:af:cd:cb:da:5b:f6:7f:b0:48:16: 8b:3c:5a:76:49:55:7f:76:cf:57:73:22:70:51:f4: fc:c6:aa:e4:e4:a9:5d:96:9b:3e:57:08:31:12:5a: fe:92:ef:e3:4c:16:26:c4:08:fa:5f:99:af:99:96: 4b:c3:a4:b8:66:92:89:70:a0:5b:9f:ba:8c:12:32: ae:ba:f5:44:e3:19:7e:25:dd:ac:2a:32:e1:d9:3c: fc:7f:20:01:76:76:c3:5b:32:d5:5f:f3:6c:20:65: 72:27:8c:cf:10:75:55:7b:3a:03:9a:de:b1:64:04: 6f:52:cd:f4:38:fc:58:c6:65:f8:5f:2a:8f:aa:07: 6d:81:ab:15:4b:a8:0a:40:7c:ac:a9:d9:a6:e6:6d: ae:53:cd:8f:33:dc:0d:ee:f9:67:cb:9f:ac:34:aa: a2:3b:12:84:5d:17:84:dd:04:e9:df:ff:51:13:98: d4:c9:5c:9d:aa:a5:33:78:9f:13:7c:7f:79:8c:32: ff:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C3:CD:41:B8:7C:1C:9B:53:EC:4D:F2:FF:37:B8:BA:8F:C6:91:1B X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:b8:57:34:23:b9:6a:4b:9d:8d:f1:db:28:c9:4d:04:ba:96: 6a:0f:6e:f2:85:98:af:18:cd:80:59:59:7e:27:cb:ba:68:bb: c5:69:b7:29:40:11:a4:bf:12:49:15:69:79:26:ab:9d:d5:1e: 6c:dd:73:62:b1:14:99:ac:d1:f8:b3:98:3c:eb:7a:90:3a:f0: 0e:e3:3e:3a:71:1f:7e:0f:10:18:c3:29:27:6c:19:ab:34:1f: 90:e0:da:e0:30:5e:a1:22:85:15:ee:26:b6:00:5b:7d:65:c1: 70:e6:44:c6:6e:ab:b5:3a:33:f5:c9:18:57:de:92:1b:f8:9f: 50:1d:b9:96:fb:7a:ed:a1:2f:5f:50:1f:08:30:6e:7e:e6:6e: d6:87:3a:d6:39:58:0f:f4:fb:35:4b:c8:74:58:79:a4:c8:57: 77:40:70:5f:4e:46:03:b5:78:44:f4:20:33:b1:e6:a7:e6:f8: 89:64:86:40:0a:ce:8f:ea:b1:76:6e:3f:f8:d1:25:7e:e1:ec: cb:96:c5:22:df:7c:73:68:4c:d4:99:a8:ac:4a:b1:13:4c:73: 64:fa:b9:a0:af:4a:30:df:29:ed:21:c2:d2:b0:6c:11:66:55: 52:8e:4a:7d:88:68:15:f6:19:8e:be:a0:04:c4:02:2c:db:e9: 43:d4:b1:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/KgX+afw+Oml23SCIHN6lmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjYwODA0MDIwMTUxWhcNMjYwODA1MDIwMTUxWjAzMTEwLwYDVQQD Eyg5ZGMzY2Q0MWI4N2MxYzliNTNlYzRkZjJmZjM3YjhiYThmYzY5MTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdHwjdEjPxsWylaWLxKlV72VeoV7 ie57n/LFA9+TvL7hWMXGkOFuuUgHel3bF25hjlPEXIMXC8KhEDQQahBULq/Ny9pb 9n+wSBaLPFp2SVV/ds9XcyJwUfT8xqrk5Kldlps+VwgxElr+ku/jTBYmxAj6X5mv mZZLw6S4ZpKJcKBbn7qMEjKuuvVE4xl+Jd2sKjLh2Tz8fyABdnbDWzLVX/NsIGVy J4zPEHVVezoDmt6xZARvUs30OPxYxmX4XyqPqgdtgasVS6gKQHysqdmm5m2uU82P M9wN7vlny5+sNKqiOxKEXReE3QTp3/9RE5jUyVydqqUzeJ8TfH95jDL/SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3DzUG4fBybU+xN8v83uLqPxpEbMB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkLhXNCO5 akudjfHbKMlNBLqWag9u8oWYrxjNgFlZfifLumi7xWm3KUARpL8SSRVpeSarndUe bN1zYrEUmazR+LOYPOt6kDrwDuM+OnEffg8QGMMpJ2wZqzQfkODa4DBeoSKFFe4m tgBbfWXBcOZExm6rtToz9ckYV96SG/ifUB25lvt67aEvX1AfCDBufuZu1oc61jlY D/T7NUvIdFh5pMhXd0BwX05GA7V4RPQgM7Hmp+b4iWSGQArOj+qxdm4/+NElfuHs y5bFIt98c2hM1JmorEqxE0xzZPq5oK9KMN8p7SHC0rBsEWZVUo5KfYhoFfYZjr6g BMQCLNvpQ9SxqQ== -----END CERTIFICATE-----Generated at Tue Aug 4 08:47:45 2026 by rpki-client