$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json) Hash identifier: z+zOAjbP2vCOppOFOzIwneNReLrSGP1itwA5Ov5R9lQ= Subject key identifier: A6:79:D2:9A:F5:01:8A:53:2A:60:B3:F4:96:5D:DE:BD:04:0E:E9:4E Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 019CDDA12213B16ABB0836A238F2A30578EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft Manifest number: 1762 Signing time: Wed 11 Mar 2026 16:00:50 +0000 Manifest this update: Wed 11 Mar 2026 16:00:50 +0000 Manifest next update: Thu 12 Mar 2026 16:00:50 +0000 Files and hashes: 1: FGiko7dGfaIB7oR3Xi7Mm0g0B5A.roa (hash: scq4CicoT05WIHFHPE3BCJO1Q1h5wfjqMz4jQNxHqFE=) 2: KQgcPbLRBBc_xsh51xPt4IehnO4.roa (hash: pCfM4q8twqlvRaHLGHOBBp4aKXHoEg09la6QGcZB7h0=) 3: OJxTLDXJ9pqUGXVl4-ml1R-2R0g.roa (hash: /fFWCePAVkjb5ODL9wnIO10abW6/OG68dBuoesYNJwY=) 4: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: 6Z5anbyoa4ukbSBwUypaGawM6zlvfoZpFgUWfmMD83I=) 5: P2rUWmGQtbBmqctNiSQO8OXzg4I.roa (hash: bkGnGwFiN2vuWeWrlQUo7BY3bYxabah/LiMHvh76HzA=) 6: RzegIjPR1QzKh4a_hxBHbhA-B7Q.roa (hash: X0vld209GqgyvupdPCzCZcV5LdmNngCSYRQVBP6Po68=) 7: dnVcuIVq43rB8PBNyYX_JeEUFJ0.roa (hash: Ff78hIKwiWd51/Bth5HBmfNxfzKtqYOa3kRFT0AYoJo=) 8: iT_vYQVHuMA40jiF0Cyjlq3oV5Q.roa (hash: uoXIHy7+H0DFX9JCkb/wj88eqL9rtsamz/egtPFv+L4=) 9: qMp9a9fZ12e7dbvzcdMaCDW60vw.roa (hash: o7dkvXGE+57eQ04kql8R9kA6Rq92Dubxz9WCs56/6I0=) 10: rjNblK4bxhZyMeZC4OHShSQ8Jlc.roa (hash: yvBwo79kSdn4a3N6pjUOiYNe2QQKF2EmdQtpBeT8m8w=) 11: ui12U8ehqDuyNEV4dxeMmGkBpyU.roa (hash: yINc/cfZuw+HDq9yk/ySvw+zjfDYf1qaipCTcvu1wXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Mar 2026 15:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:dd:a1:22:13:b1:6a:bb:08:36:a2:38:f2:a3:05:78:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: Mar 11 16:00:50 2026 GMT Not After : Mar 12 16:00:50 2026 GMT Subject: CN=a679d29af5018a532a60b3f4965ddebd040ee94e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:50:ec:2f:19:70:8c:73:11:96:54:ba:54:52: 38:7b:13:47:47:37:c1:1d:72:29:3f:f1:65:47:0d: b3:76:2d:ec:c9:72:77:49:cc:d5:6c:b4:c2:d7:d1: 5d:59:ca:47:80:30:6a:42:8d:a0:6c:ce:a9:be:1c: 11:87:2b:1e:09:68:15:26:74:f1:c8:42:35:33:c9: ba:dd:45:e4:c7:8a:fb:43:5e:4d:e2:0e:15:bf:52: b7:97:a5:6f:b8:1f:06:a2:a5:80:dc:ff:53:43:18: 4c:1d:d3:3d:26:d2:c4:1e:ca:e7:a7:4d:95:d9:49: 74:ad:57:06:cb:53:ef:e4:de:f9:64:fa:3b:ba:bf: 18:fd:c3:3a:a9:a4:00:af:9f:95:1e:10:7f:f5:08: 41:9d:b5:84:f9:43:c9:5c:9e:94:64:e7:0a:d7:b2: 67:9c:3d:24:64:a3:16:dd:47:21:a1:a4:ab:2b:62: 4a:da:0a:1d:de:2b:76:69:9d:44:be:c4:f9:86:1b: f5:ce:0a:81:5c:b5:9d:02:70:ed:94:b9:6b:5a:f3: fe:a2:6a:d1:19:73:33:6d:e0:9b:38:98:ef:57:1d: 92:02:c8:ce:00:66:6b:6f:c5:8d:12:6c:62:42:c2: 72:28:83:e9:8b:ab:72:6f:bc:92:dd:df:e9:8f:07: 6d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:79:D2:9A:F5:01:8A:53:2A:60:B3:F4:96:5D:DE:BD:04:0E:E9:4E X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:4e:40:72:24:8b:3c:8c:64:c4:b3:2a:e4:4c:a0:a4:31:e1: 1d:05:8d:fe:51:b6:ed:2b:a6:d9:61:2f:29:ec:dc:11:2f:60: 33:09:e2:d7:54:bb:8f:a9:3f:15:26:f5:c7:05:fe:98:0e:f4: 8b:f2:00:c9:2e:68:ec:02:6b:3d:3f:c1:18:34:a0:d3:ed:b9: d9:03:8a:8c:65:53:44:63:b8:f0:df:e9:b9:dc:24:17:8d:6b: f5:5d:d2:1a:dd:f8:89:7f:b8:12:88:a6:c6:31:54:6b:2a:c1: 58:64:6b:a9:c0:fc:7a:d1:66:33:8a:03:da:54:4d:1c:fd:a7: 18:c4:a3:0f:48:f0:67:cc:cb:37:ee:e0:9a:52:fa:62:43:2f: 90:6f:86:cd:9b:9a:67:5a:22:45:b0:d0:78:14:8a:8d:92:b3: e0:af:9e:14:41:84:81:49:5e:eb:e0:2b:c8:7a:e4:a1:9b:04: d1:33:65:21:52:bb:52:fe:10:8c:0f:ac:fb:fb:bf:95:24:c1: 44:b6:e6:7b:5d:86:06:ea:b3:6d:fb:61:c5:d7:58:65:d8:6f: ff:d4:58:9c:60:f2:c6:58:d5:ec:24:00:6f:7b:16:47:c4:ff: e0:e2:b7:c2:4f:73:e8:43:e7:fd:8c:5d:af:11:50:a1:ae:08: ce:4e:d9:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzdoSITsWq7CDaiOPKjBXjqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjYwMzExMTYwMDUwWhcNMjYwMzEyMTYwMDUwWjAzMTEwLwYDVQQD EyhhNjc5ZDI5YWY1MDE4YTUzMmE2MGIzZjQ5NjVkZGViZDA0MGVlOTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlDsLxlwjHMRllS6VFI4exNHRzfB HXIpP/FlRw2zdi3syXJ3SczVbLTC19FdWcpHgDBqQo2gbM6pvhwRhyseCWgVJnTx yEI1M8m63UXkx4r7Q15N4g4Vv1K3l6VvuB8GoqWA3P9TQxhMHdM9JtLEHsrnp02V 2Ul0rVcGy1Pv5N75ZPo7ur8Y/cM6qaQAr5+VHhB/9QhBnbWE+UPJXJ6UZOcK17Jn nD0kZKMW3UchoaSrK2JK2god3it2aZ1EvsT5hhv1zgqBXLWdAnDtlLlrWvP+omrR GXMzbeCbOJjvVx2SAsjOAGZrb8WNEmxiQsJyKIPpi6tyb7yS3d/pjwdtwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZ50pr1AYpTKmCz9JZd3r0EDulOMB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYk5AciSL PIxkxLMq5EygpDHhHQWN/lG27Sum2WEvKezcES9gMwni11S7j6k/FSb1xwX+mA70 i/IAyS5o7AJrPT/BGDSg0+252QOKjGVTRGO48N/pudwkF41r9V3SGt34iX+4Eoim xjFUayrBWGRrqcD8etFmM4oD2lRNHP2nGMSjD0jwZ8zLN+7gmlL6YkMvkG+GzZua Z1oiRbDQeBSKjZKz4K+eFEGEgUle6+AryHrkoZsE0TNlIVK7Uv4QjA+s+/u/lSTB RLbme12GBuqzbfthxddYZdhv/9RYnGDyxljV7CQAb3sWR8T/4OK3wk9z6EPn/Yxd rxFQoa4Izk7Zrw== -----END CERTIFICATE-----Generated at Wed Mar 11 21:34:00 2026 by rpki-client