$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft File: olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json) Hash identifier: OTgDJ0qAqmVZCqSmGZVELHNelBOfGtJzdagRnccsTg4= Subject key identifier: 4D:5C:35:9D:7D:E7:F0:4E:2F:0A:9C:99:96:6B:90:3B:BA:FE:96:F8 Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 01A0B42CC8819EFA0FB0F87B5A9DBF5B1F50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft Manifest number: 1A98 Signing time: Fri 18 Sep 2026 11:00:28 +0000 Manifest this update: Fri 18 Sep 2026 11:00:28 +0000 Manifest next update: Sat 19 Sep 2026 11:00:28 +0000 Files and hashes: 1: 0dbyZwebQgTGMD5-wPhJH6_Pd5I.roa (hash: rG5nZgpv1Ah9jz+mC9094dW59+5lFAhfWaH5ssnQtAk=) 2: 1-SQFDfpp9D_i817zUQFbntY0dRQ.roa (hash: biSe4GCFtSwazcB9PCCa1NKBDVP5/i0SLuwOHponshU=) 3: 2frKTWb3ttQDpCXNMXbTSXrlIqI.roa (hash: obnt34G7IEsjg6vdddM8muzJwshLaBlLPb65paOFsfE=) 4: 3lYygY9QSAAHtzgINKWVRrbCp_4.roa (hash: xTlxdsrlszD3wQ8XFzdmUFKsu5SMwqAldL5Rb7oJqzA=) 5: 4WijXRQsTuAJtSd_hSZYlUqj8lA.roa (hash: cDODijNSh6xud6bY86CXr7OdBhes8GnABNkzt2sQT9E=) 6: 5KqisG8I4aftfbpV-Wm5RoZOAu4.roa (hash: aWHlE7ObMJmJWXU63vmIza0enQBptwax9xe4eo6h4LY=) 7: 7zTwSbIrIN1tbHKaAerBGKh4H_4.roa (hash: Uj+d0N/fp4CQPw2Wdyt0B7bkrgBCMNOKaEUgThPZLo4=) 8: BiFlBqm3KUzEVOiMzYhT_EVILsg.roa (hash: fPfSMKmz3G9txaE/xrCmq0xkzT0anA6fzG93SYzo/Cs=) 9: Gv1ql7t0nNON87AJIldQVqDpbaw.roa (hash: Afsi36EyWB2mwsT0UzfNkOmYYiw9CwLh31zU2SIsaxk=) 10: I2KpdLXbpYuKcc5P2UrERlbUmQI.roa (hash: QwjjNYoou+Yqw7bbIshNHDY3CQQBCro8tQly5UuqIPQ=) 11: K6IIfeYnJcau7XFah26WtRrWoX4.roa (hash: kAmjx0E3nDeIJhDMXwZG/0loikW8ryL2ZHfuoiau2sI=) 12: KfKdKGXKrJVAyc679p1xVdKcOuU.roa (hash: MZjQw9I7nKK82B9sKr7/qbtBGaD/PhRCNNoKDtPpSRQ=) 13: Nn2M0QjFRAa_T2cmYDVUHTJ5GXs.roa (hash: ROtPVP9nVJ4sSu+guXDuQ34VOIJfTdPXZnYgNbsVTRc=) 14: PT0OVKn7DoYDkXnLiYT9h8XOQSo.roa (hash: P3oRTt1oGGLmL6K2JdXvl8dIu0LI9RbrIcGwZo70+dU=) 15: Ss_HAbXwrBgTnN9olUTWyjQFCB4.roa (hash: nrNxrT3l4poCRT7QhHB8p4Y5AUqyWOUsBfKv8pVp0tQ=) 16: TUHp0yldZUy2noEeejLALiKlsOA.roa (hash: hJdNCDGT+WfObUpSa1plMcdJasirz1T8A6b/aK4MsFo=) 17: Urxc-_3dN2rsdSn-CFXZaM1OMmE.roa (hash: KTdVek6dN9t33L+6LCMmAcoph/JKLQZZF3RFY22Laag=) 18: aFybrbDshxtrknuOyM8RFxRBKs0.roa (hash: RQU0CLTgvLglUS45QfR69+raL0+alWumuh4CDPItdCA=) 19: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: /6eLs4z8wpUQQ6IXZrkfnr/s+/7uDGeF/3HLnbqA/30=) 20: rZIzlxjNqrmdhiYj8eZcD_DAyYQ.roa (hash: HtYYyQJMTgOPk/TpOD1+JZFhzQ3pNzbNJ5gyclYza/w=) 21: thqMO7NSQ4YZbOJpf7E5T4h4Qx4.roa (hash: CSkwEjedoekw5JE8fDs8zoEDa+VA8TtlPZQTJSLtR3Q=) 22: xqLMI4n3mv1T0FOyglej7wVFdYE.roa (hash: BA8dbC4wqu6gr5aHMdPy/PzpkFFbaeIFkYk6ddxpagE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 08:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:b4:2c:c8:81:9e:fa:0f:b0:f8:7b:5a:9d:bf:5b:1f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Sep 18 11:00:28 2026 GMT Not After : Sep 19 11:00:28 2026 GMT Subject: CN=4d5c359d7de7f04e2f0a9c99966b903bbafe96f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fe:a8:7d:75:47:6c:71:9a:cb:45:cb:13:3a: 76:b5:af:05:1c:c2:18:24:19:e4:e2:7c:18:05:b7: 76:76:e1:28:b2:f4:10:7b:6e:78:47:c4:c6:8b:ed: 46:de:18:13:8e:cb:7c:68:9a:4c:aa:48:59:e8:84: 43:ff:c9:c7:0c:70:c0:50:d5:61:34:f5:d8:8a:70: e4:b9:7b:90:f0:8a:fc:cf:04:87:83:60:7e:62:3f: de:31:e1:25:fa:8a:34:fb:9e:73:09:b6:bb:e6:2d: 32:b6:2d:5d:cc:a6:07:a7:53:24:4c:4d:35:fa:58: d1:65:61:07:19:38:b3:5e:81:38:d1:f9:06:cb:2b: 60:5c:f8:55:2d:34:b2:f0:60:c2:bb:17:ec:2e:39: 24:a8:d5:7b:4b:72:a2:96:c7:ab:e7:11:e4:c0:45: bf:c8:fa:b3:e1:ff:e0:93:ea:2c:25:3e:15:8e:ef: e6:4d:6b:b1:73:4d:3e:c4:9d:1d:c2:6a:5d:e8:a5: 69:b7:07:ac:79:e8:4c:de:9e:13:17:c3:74:e4:39: c4:96:99:65:35:41:aa:e8:d7:f6:20:96:99:92:87: e6:df:79:94:ba:bc:5f:01:a9:41:6b:a7:c6:e9:07: 55:0b:4d:a8:68:6d:a0:da:fb:45:fc:b8:09:53:2d: ea:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5C:35:9D:7D:E7:F0:4E:2F:0A:9C:99:96:6B:90:3B:BA:FE:96:F8 X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:68:dd:4b:f7:b1:0e:7d:bc:8a:8e:fa:c5:f8:ce:a9:6e:25: 4f:7a:2c:52:58:2b:6b:9e:69:4a:cf:e3:a7:c7:8b:4b:63:da: 23:47:ab:cf:fc:a4:0c:34:c1:4b:e8:2a:4f:cc:56:ee:43:67: 15:34:31:3c:38:82:60:0b:e7:c0:55:18:fa:6b:4f:37:88:e7: 73:48:19:24:36:03:b9:90:0d:74:46:0f:7b:1c:4c:ae:19:15: f0:43:de:5e:77:0d:e1:d1:b6:17:ee:d2:c5:bc:87:1c:ae:66: 58:a2:8c:44:e3:3b:9d:dc:6c:6d:17:f0:b4:86:2c:12:2e:c8: 67:a7:05:ec:bb:08:9d:52:df:a6:ca:40:05:ee:48:ce:a4:5d: eb:89:22:09:24:dc:4a:ea:39:f8:7e:5b:3b:8d:ae:e8:b9:6b: 7c:0c:69:2a:89:8a:76:23:38:f0:fa:c9:d8:ac:e2:e6:1b:45: 5b:c2:ff:60:22:74:49:e4:93:b7:95:e1:15:6d:84:eb:d9:43: 2b:21:56:af:d0:45:4f:48:1f:8e:fe:ca:bc:e2:cb:d5:4e:ad: 23:67:36:11:9e:f8:4d:74:89:df:81:a7:64:28:bb:2c:72:35: 34:1e:46:35:8a:3f:27:e3:54:d2:12:91:86:7f:31:44:80:d2: 99:2d:e3:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC0LMiBnvoPsPh7Wp2/Wx9QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjYwOTE4MTEwMDI4WhcNMjYwOTE5MTEwMDI4WjAzMTEwLwYDVQQD Eyg0ZDVjMzU5ZDdkZTdmMDRlMmYwYTljOTk5NjZiOTAzYmJhZmU5NmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP6ofXVHbHGay0XLEzp2ta8FHMIY JBnk4nwYBbd2duEosvQQe254R8TGi+1G3hgTjst8aJpMqkhZ6IRD/8nHDHDAUNVh NPXYinDkuXuQ8Ir8zwSHg2B+Yj/eMeEl+oo0+55zCba75i0yti1dzKYHp1MkTE01 +ljRZWEHGTizXoE40fkGyytgXPhVLTSy8GDCuxfsLjkkqNV7S3Kilser5xHkwEW/ yPqz4f/gk+osJT4Vju/mTWuxc00+xJ0dwmpd6KVptweseehM3p4TF8N05DnElpll NUGq6Nf2IJaZkofm33mUurxfAalBa6fG6QdVC02oaG2g2vtF/LgJUy3qTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1cNZ195/BOLwqcmZZrkDu6/pb4MB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2jdS/ex Dn28io76xfjOqW4lT3osUlgra55pSs/jp8eLS2PaI0erz/ykDDTBS+gqT8xW7kNn FTQxPDiCYAvnwFUY+mtPN4jnc0gZJDYDuZANdEYPexxMrhkV8EPeXncN4dG2F+7S xbyHHK5mWKKMROM7ndxsbRfwtIYsEi7IZ6cF7LsInVLfpspABe5IzqRd64kiCSTc Suo5+H5bO42u6LlrfAxpKomKdiM48PrJ2Kzi5htFW8L/YCJ0SeSTt5XhFW2E69lD KyFWr9BFT0gfjv7KvOLL1U6tI2c2EZ74TXSJ34GnZCi7LHI1NB5GNYo/J+NU0hKR hn8xRIDSmS3jdQ== -----END CERTIFICATE-----Generated at Fri Sep 18 17:07:31 2026 by rpki-client