$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json) Hash identifier: +VHcvvJahbnIZ0WfTRratEBm/UH/b6qgwwwurYW+cUU= Subject key identifier: 45:8C:EE:0F:21:F0:CD:9B:BB:F9:E1:12:26:F8:8A:A6:85:E0:25:27 Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 019EB80F638AA4D7699F2A1D9D4E2804B3AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft Manifest number: 185D Signing time: Thu 11 Jun 2026 19:01:16 +0000 Manifest this update: Thu 11 Jun 2026 19:01:16 +0000 Manifest next update: Fri 12 Jun 2026 19:01:16 +0000 Files and hashes: 1: KQgcPbLRBBc_xsh51xPt4IehnO4.roa (hash: pCfM4q8twqlvRaHLGHOBBp4aKXHoEg09la6QGcZB7h0=) 2: MCBZ2CxaM7LC481GLSYWHeppO5E.roa (hash: 02Ro7KtAxSGq3svayvXMnjLyQYv+fnx2uhv691O7tMc=) 3: OJxTLDXJ9pqUGXVl4-ml1R-2R0g.roa (hash: /fFWCePAVkjb5ODL9wnIO10abW6/OG68dBuoesYNJwY=) 4: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: iJFe7F24Pls5wJZsfGbbtLZBMo7iG2pleTNNtu7Lzyw=) 5: UNEG0RbhpGfDIQfxZ4i2ieICO9g.roa (hash: kKbhwxHzyZ1nQMHyypRvyIhRmV3QS30VEm56g35Omd4=) 6: Vg59mkjZjPChn5V72yQkRuYsw5w.roa (hash: ZT1vWv2NLvyggQYSfbG/ST95n5y42mBT1SrPiyV/11c=) 7: dnVcuIVq43rB8PBNyYX_JeEUFJ0.roa (hash: Ff78hIKwiWd51/Bth5HBmfNxfzKtqYOa3kRFT0AYoJo=) 8: rjNblK4bxhZyMeZC4OHShSQ8Jlc.roa (hash: yvBwo79kSdn4a3N6pjUOiYNe2QQKF2EmdQtpBeT8m8w=) 9: ui12U8ehqDuyNEV4dxeMmGkBpyU.roa (hash: yINc/cfZuw+HDq9yk/ySvw+zjfDYf1qaipCTcvu1wXg=) 10: ybxPsztAzlmVPObK0OoBTddoDSQ.roa (hash: d3b9yiAURGnHAdeyevteUI2cI7ETobUn55NXVEoQFao=) 11: znRtvDjx6p6QKqOpN-UH1Bqd7ao.roa (hash: +4jJSJNUJ8eFyd4hEIFej6uo6SX/BvFj2H5hv/FUtHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b8:0f:63:8a:a4:d7:69:9f:2a:1d:9d:4e:28:04:b3:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: Jun 11 19:01:16 2026 GMT Not After : Jun 12 19:01:16 2026 GMT Subject: CN=458cee0f21f0cd9bbbf9e11226f88aa685e02527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1d:e2:4e:3b:b2:47:a0:1b:e9:47:70:ef:65: 46:d9:d2:a8:fd:b2:69:2d:a3:4d:24:1c:4f:ff:72: a9:35:24:f5:ca:54:e5:19:54:db:69:3d:98:30:8f: e6:ba:7f:b5:25:82:53:c0:55:11:82:8e:ca:4c:a5: 15:b3:b5:55:ff:23:14:68:c3:50:e4:26:f3:e1:91: e9:55:11:48:41:69:06:d4:47:e9:9a:fb:63:41:8a: 2e:86:fd:2a:06:d7:1d:56:39:69:da:a1:da:5f:ed: 03:01:e5:17:a1:96:06:ed:9f:cb:51:ed:46:0d:91: ad:ba:60:ab:83:53:73:cd:e8:01:67:31:05:3e:ec: 85:51:95:c7:fc:be:ac:d5:d7:61:a0:b6:da:06:f3: f8:56:6c:1d:02:7e:2d:09:27:56:ba:ef:a8:bf:f3: 66:3e:de:5a:6f:8f:58:18:7e:b9:31:41:9b:02:55: dc:d6:73:0e:62:f3:44:43:b2:88:83:9c:09:6e:cb: c4:a7:f3:99:77:40:dc:f5:be:46:4d:3d:44:43:a2: c5:b8:c6:20:4c:bc:de:c5:ca:7c:a2:1a:2e:52:54: b8:ba:12:00:dc:27:a1:8c:41:cb:dc:58:04:f6:4a: 2f:99:e1:b2:2b:8a:2e:80:5c:39:d7:aa:bf:15:bb: fc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8C:EE:0F:21:F0:CD:9B:BB:F9:E1:12:26:F8:8A:A6:85:E0:25:27 X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ef:ff:d8:2c:4a:69:d9:6c:64:a8:fe:04:27:f1:f3:97:cf: 8a:bb:68:cc:ae:77:ee:32:c7:bd:d0:0b:f7:3c:a5:02:be:3e: 4e:16:99:a6:01:16:c4:d3:ea:db:d8:d8:b1:ee:70:50:d9:47: e1:ad:8a:ab:e6:a1:93:6e:c3:08:fc:44:b1:34:51:5d:83:6b: e6:26:c7:5c:db:38:4b:aa:d1:8d:8e:bf:e2:e6:f3:5a:01:db: ff:d3:9d:c2:dd:34:a8:df:ec:97:be:f1:2a:26:aa:e5:60:4a: 92:86:85:e1:81:0a:92:26:a4:23:bc:ae:46:ce:c6:f6:12:00: 55:bd:4e:b2:66:5b:e2:4a:85:cd:47:20:83:04:1f:ad:94:89: ba:f1:2a:dc:30:3e:07:9d:4a:54:a6:e7:c9:1b:2d:3d:c7:22: 05:d9:77:29:78:78:ed:4d:c2:66:47:b7:bf:c5:fd:73:1e:b9: 1c:bd:42:3d:a1:c4:a6:86:4b:89:46:40:22:63:5d:2b:9f:3c: 8d:8f:ce:92:81:a4:31:ff:da:c2:97:7a:a7:24:b5:99:06:ee: 6c:4d:e2:ed:9b:04:93:8d:c5:a0:21:22:a1:a8:65:eb:89:ba: 6c:d1:03:ea:32:44:40:0b:71:5e:b6:b5:e7:ee:93:a3:64:ba: 55:6f:54:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ64D2OKpNdpnyodnU4oBLOqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjYwNjExMTkwMTE2WhcNMjYwNjEyMTkwMTE2WjAzMTEwLwYDVQQD Eyg0NThjZWUwZjIxZjBjZDliYmJmOWUxMTIyNmY4OGFhNjg1ZTAyNTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB3iTjuyR6Ab6Udw72VG2dKo/bJp LaNNJBxP/3KpNST1ylTlGVTbaT2YMI/mun+1JYJTwFURgo7KTKUVs7VV/yMUaMNQ 5Cbz4ZHpVRFIQWkG1EfpmvtjQYouhv0qBtcdVjlp2qHaX+0DAeUXoZYG7Z/LUe1G DZGtumCrg1NzzegBZzEFPuyFUZXH/L6s1ddhoLbaBvP4VmwdAn4tCSdWuu+ov/Nm Pt5ab49YGH65MUGbAlXc1nMOYvNEQ7KIg5wJbsvEp/OZd0Dc9b5GTT1EQ6LFuMYg TLzexcp8ohouUlS4uhIA3CehjEHL3FgE9kovmeGyK4ougFw516q/Fbv8/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWM7g8h8M2bu/nhEib4iqaF4CUnMB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+//2CxK adlsZKj+BCfx85fPirtozK537jLHvdAL9zylAr4+ThaZpgEWxNPq29jYse5wUNlH 4a2Kq+ahk27DCPxEsTRRXYNr5ibHXNs4S6rRjY6/4ubzWgHb/9Odwt00qN/sl77x Kiaq5WBKkoaF4YEKkiakI7yuRs7G9hIAVb1OsmZb4kqFzUcggwQfrZSJuvEq3DA+ B51KVKbnyRstPcciBdl3KXh47U3CZke3v8X9cx65HL1CPaHEpoZLiUZAImNdK588 jY/OkoGkMf/awpd6pyS1mQbubE3i7ZsEk43FoCEioahl64m6bNED6jJEQAtxXra1 5+6To2S6VW9UnQ== -----END CERTIFICATE-----Generated at Thu Jun 11 21:40:09 2026 by rpki-client