$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft File: olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json) Hash identifier: Myig+dcgPxriA46EHW9rsqyR5p3E64tr3YgQF0vlZjg= Subject key identifier: 90:9F:68:6F:95:45:FE:7C:A4:A7:64:22:1F:03:21:DB:BF:DF:F3:A2 Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 019D0F321898A4B2A7B6600B54F8B7733108 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft Manifest number: 18B0 Signing time: Sat 21 Mar 2026 07:00:34 +0000 Manifest this update: Sat 21 Mar 2026 07:00:34 +0000 Manifest next update: Sun 22 Mar 2026 07:00:34 +0000 Files and hashes: 1: 0dbyZwebQgTGMD5-wPhJH6_Pd5I.roa (hash: rG5nZgpv1Ah9jz+mC9094dW59+5lFAhfWaH5ssnQtAk=) 2: 1-SQFDfpp9D_i817zUQFbntY0dRQ.roa (hash: biSe4GCFtSwazcB9PCCa1NKBDVP5/i0SLuwOHponshU=) 3: 2frKTWb3ttQDpCXNMXbTSXrlIqI.roa (hash: obnt34G7IEsjg6vdddM8muzJwshLaBlLPb65paOFsfE=) 4: 3lYygY9QSAAHtzgINKWVRrbCp_4.roa (hash: xTlxdsrlszD3wQ8XFzdmUFKsu5SMwqAldL5Rb7oJqzA=) 5: 4WijXRQsTuAJtSd_hSZYlUqj8lA.roa (hash: cDODijNSh6xud6bY86CXr7OdBhes8GnABNkzt2sQT9E=) 6: 7zTwSbIrIN1tbHKaAerBGKh4H_4.roa (hash: Uj+d0N/fp4CQPw2Wdyt0B7bkrgBCMNOKaEUgThPZLo4=) 7: Gv1ql7t0nNON87AJIldQVqDpbaw.roa (hash: Afsi36EyWB2mwsT0UzfNkOmYYiw9CwLh31zU2SIsaxk=) 8: I2KpdLXbpYuKcc5P2UrERlbUmQI.roa (hash: QwjjNYoou+Yqw7bbIshNHDY3CQQBCro8tQly5UuqIPQ=) 9: K6IIfeYnJcau7XFah26WtRrWoX4.roa (hash: kAmjx0E3nDeIJhDMXwZG/0loikW8ryL2ZHfuoiau2sI=) 10: KfKdKGXKrJVAyc679p1xVdKcOuU.roa (hash: MZjQw9I7nKK82B9sKr7/qbtBGaD/PhRCNNoKDtPpSRQ=) 11: KhnFPatizLYzbuYdUdtwNlimK_A.roa (hash: p+Mj3EP56tIkokr0WqjKkNv7zw4zz51aSvtLv2wkCDw=) 12: Nn2M0QjFRAa_T2cmYDVUHTJ5GXs.roa (hash: ROtPVP9nVJ4sSu+guXDuQ34VOIJfTdPXZnYgNbsVTRc=) 13: PT0OVKn7DoYDkXnLiYT9h8XOQSo.roa (hash: P3oRTt1oGGLmL6K2JdXvl8dIu0LI9RbrIcGwZo70+dU=) 14: T-Tc8u-y-A23bEMCsm71F_7_jTg.roa (hash: uvA7IEtWcoBgqQxL/f1PptXnW15RVEqbUY2vsk5myZQ=) 15: TUHp0yldZUy2noEeejLALiKlsOA.roa (hash: hJdNCDGT+WfObUpSa1plMcdJasirz1T8A6b/aK4MsFo=) 16: TgBpdGwKgCYXVi-ZeVCMbfdynwQ.roa (hash: WSlOfiJJGk4JzRn+dJ1iw8VYAl7aA0mI15CFDBrgID0=) 17: Urxc-_3dN2rsdSn-CFXZaM1OMmE.roa (hash: KTdVek6dN9t33L+6LCMmAcoph/JKLQZZF3RFY22Laag=) 18: aFybrbDshxtrknuOyM8RFxRBKs0.roa (hash: RQU0CLTgvLglUS45QfR69+raL0+alWumuh4CDPItdCA=) 19: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: VPP2q+zXdI3jS5ENSG/cIlnvGveQBuzAScWQDQAJEYo=) 20: rZIzlxjNqrmdhiYj8eZcD_DAyYQ.roa (hash: HtYYyQJMTgOPk/TpOD1+JZFhzQ3pNzbNJ5gyclYza/w=) 21: thqMO7NSQ4YZbOJpf7E5T4h4Qx4.roa (hash: CSkwEjedoekw5JE8fDs8zoEDa+VA8TtlPZQTJSLtR3Q=) 22: xqLMI4n3mv1T0FOyglej7wVFdYE.roa (hash: BA8dbC4wqu6gr5aHMdPy/PzpkFFbaeIFkYk6ddxpagE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 22 Mar 2026 02:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:0f:32:18:98:a4:b2:a7:b6:60:0b:54:f8:b7:73:31:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Mar 21 07:00:34 2026 GMT Not After : Mar 22 07:00:34 2026 GMT Subject: CN=909f686f9545fe7ca4a764221f0321dbbfdff3a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0b:5a:b6:e6:d3:36:25:c2:b5:8f:5f:67:f6: a9:55:a9:1b:33:2e:de:53:82:bb:26:93:8a:96:23: b9:fa:72:7c:71:65:91:14:b6:84:84:17:bd:38:bd: 16:c6:d9:1c:52:5a:4c:61:81:a7:a6:fa:10:c8:09: 26:20:46:23:8a:85:97:1a:aa:e8:e3:13:f8:ed:7a: b3:63:dd:2f:e1:92:20:a4:30:09:7d:6d:0b:35:96: ed:77:38:35:bf:53:82:bf:09:6c:b3:61:a9:92:2b: 2a:af:03:66:ae:eb:c1:ae:e9:fa:64:4c:c0:49:35: 22:93:42:ae:fa:0b:b8:67:b6:aa:04:8b:02:3f:7a: ff:b1:2e:b7:b4:c1:3b:e8:f2:2d:64:67:2c:8a:1b: d5:33:75:7b:b4:68:49:87:32:9d:b4:1d:6e:7e:24: cf:2a:a6:12:0d:c9:8c:4e:34:a4:34:c6:ac:90:b0: bf:6e:b4:b7:23:1e:c3:97:64:f9:a1:f2:bf:b4:3b: d6:ca:a6:fb:f2:78:bd:08:59:e5:55:87:63:b4:08: 59:09:85:c7:12:43:7f:3d:16:d5:4f:3f:49:fa:55: 2d:9d:0a:a4:8e:d5:55:20:21:0a:8b:07:48:34:7f: 20:ae:32:22:04:0b:bc:10:52:93:4b:37:c6:fb:a4: 61:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9F:68:6F:95:45:FE:7C:A4:A7:64:22:1F:03:21:DB:BF:DF:F3:A2 X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:b2:69:d0:47:22:c7:b4:d7:d8:13:54:e4:c2:20:26:75:b7: b5:7f:73:5f:ad:8e:55:a8:2d:41:04:36:f8:82:4a:ae:b8:a5: 7a:d5:25:4f:4b:eb:cc:2d:5a:17:0a:7a:93:30:c6:7e:1d:1e: c6:43:6b:8a:cf:40:01:a9:25:af:89:88:e4:25:ba:bb:5e:1a: e0:4d:1a:97:4e:35:54:a7:d7:f1:5e:fe:7b:d4:a4:04:b1:97: c4:61:c8:4c:a5:2f:9b:ca:84:1e:4e:ed:21:65:81:2e:9a:9c: 97:59:5f:b0:ec:78:f1:e0:98:ca:6e:80:d3:4c:4d:d8:4e:7e: f4:2f:e3:25:50:82:77:58:0b:96:52:e3:32:8d:fb:7b:d5:c0: d6:91:34:13:e2:e3:f5:5e:26:aa:9d:4c:d6:ce:6d:5e:5e:b1: 6c:05:f1:c3:eb:e2:4c:a9:f9:44:bf:ba:43:d1:dc:cf:4f:95: 16:71:cc:f5:ad:35:76:c3:dc:46:c2:c2:4e:37:4d:0d:75:25: 47:a7:e5:3a:f2:84:46:84:86:1f:82:a7:95:a0:40:11:0c:52: ce:85:bb:ed:30:58:01:b9:6e:82:24:95:90:64:30:4a:9d:5f: 99:5f:4e:39:b5:02:aa:09:fc:44:15:54:4d:0e:aa:d9:85:8e: 0d:82:65:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0PMhiYpLKntmALVPi3czEIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjYwMzIxMDcwMDM0WhcNMjYwMzIyMDcwMDM0WjAzMTEwLwYDVQQD Eyg5MDlmNjg2Zjk1NDVmZTdjYTRhNzY0MjIxZjAzMjFkYmJmZGZmM2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAtatubTNiXCtY9fZ/apVakbMy7e U4K7JpOKliO5+nJ8cWWRFLaEhBe9OL0WxtkcUlpMYYGnpvoQyAkmIEYjioWXGqro 4xP47XqzY90v4ZIgpDAJfW0LNZbtdzg1v1OCvwlss2GpkisqrwNmruvBrun6ZEzA STUik0Ku+gu4Z7aqBIsCP3r/sS63tME76PItZGcsihvVM3V7tGhJhzKdtB1ufiTP KqYSDcmMTjSkNMaskLC/brS3Ix7Dl2T5ofK/tDvWyqb78ni9CFnlVYdjtAhZCYXH EkN/PRbVTz9J+lUtnQqkjtVVICEKiwdINH8grjIiBAu8EFKTSzfG+6RhwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCfaG+VRf58pKdkIh8DIdu/3/OiMB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLJp0Eci x7TX2BNU5MIgJnW3tX9zX62OVagtQQQ2+IJKrriletUlT0vrzC1aFwp6kzDGfh0e xkNris9AAaklr4mI5CW6u14a4E0al041VKfX8V7+e9SkBLGXxGHITKUvm8qEHk7t IWWBLpqcl1lfsOx48eCYym6A00xN2E5+9C/jJVCCd1gLllLjMo37e9XA1pE0E+Lj 9V4mqp1M1s5tXl6xbAXxw+viTKn5RL+6Q9Hcz0+VFnHM9a01dsPcRsLCTjdNDXUl R6flOvKERoSGH4KnlaBAEQxSzoW77TBYAblugiSVkGQwSp1fmV9OObUCqgn8RBVU TQ6q2YWODYJlpw== -----END CERTIFICATE-----Generated at Sat Mar 21 09:23:52 2026 by rpki-client