$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json) Hash identifier: F/Q9aLFkzpJixii4WVzCfbgBYnOlQ+0PxhGBnSvDwoc= Subject key identifier: B0:02:26:3C:EA:AE:85:2C:EE:36:90:7A:CA:36:D5:F4:DA:83:C7:52 Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 019DCB98EA08FBF9E109DC261DA0D087137B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft Manifest number: 17DE Signing time: Sun 26 Apr 2026 21:01:29 +0000 Manifest this update: Sun 26 Apr 2026 21:01:29 +0000 Manifest next update: Mon 27 Apr 2026 21:01:29 +0000 Files and hashes: 1: FGiko7dGfaIB7oR3Xi7Mm0g0B5A.roa (hash: scq4CicoT05WIHFHPE3BCJO1Q1h5wfjqMz4jQNxHqFE=) 2: KQgcPbLRBBc_xsh51xPt4IehnO4.roa (hash: pCfM4q8twqlvRaHLGHOBBp4aKXHoEg09la6QGcZB7h0=) 3: MCBZ2CxaM7LC481GLSYWHeppO5E.roa (hash: 02Ro7KtAxSGq3svayvXMnjLyQYv+fnx2uhv691O7tMc=) 4: OJxTLDXJ9pqUGXVl4-ml1R-2R0g.roa (hash: /fFWCePAVkjb5ODL9wnIO10abW6/OG68dBuoesYNJwY=) 5: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: 8CJMx5PX+gFGcKY+ajaUaH/HklPNK8t6GvWIbxJBs7k=) 6: P2rUWmGQtbBmqctNiSQO8OXzg4I.roa (hash: bkGnGwFiN2vuWeWrlQUo7BY3bYxabah/LiMHvh76HzA=) 7: dnVcuIVq43rB8PBNyYX_JeEUFJ0.roa (hash: Ff78hIKwiWd51/Bth5HBmfNxfzKtqYOa3kRFT0AYoJo=) 8: qMp9a9fZ12e7dbvzcdMaCDW60vw.roa (hash: o7dkvXGE+57eQ04kql8R9kA6Rq92Dubxz9WCs56/6I0=) 9: rjNblK4bxhZyMeZC4OHShSQ8Jlc.roa (hash: yvBwo79kSdn4a3N6pjUOiYNe2QQKF2EmdQtpBeT8m8w=) 10: ui12U8ehqDuyNEV4dxeMmGkBpyU.roa (hash: yINc/cfZuw+HDq9yk/ySvw+zjfDYf1qaipCTcvu1wXg=) 11: yPa3IsW1LrF4FBqa6S6lkA7l0yg.roa (hash: axDlKBJFR60teKJKWRG+25tdp59Gp45JEAqx4Nz1QQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 21:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cb:98:ea:08:fb:f9:e1:09:dc:26:1d:a0:d0:87:13:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: Apr 26 21:01:29 2026 GMT Not After : Apr 27 21:01:29 2026 GMT Subject: CN=b002263ceaae852cee36907aca36d5f4da83c752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0b:aa:67:6d:f0:e8:6e:86:35:2a:3d:e5:01: b1:a6:1b:70:93:be:67:11:f6:ed:d9:34:a5:ec:55: f2:0d:d4:74:86:a0:d7:12:06:9b:fc:18:d6:9b:20: 06:1e:a0:8a:69:cf:3d:46:9c:74:e2:51:f6:f0:38: c2:03:e1:8a:14:5d:40:54:82:88:ac:78:cf:f1:41: b3:0f:24:be:ac:29:29:78:cd:61:a3:93:fc:ed:d5: 4e:3d:85:b6:b1:04:1e:fa:40:8f:42:56:69:7e:f3: 13:a3:68:77:ef:fe:4f:1a:11:af:b9:6f:e0:64:8f: 58:f3:d8:8f:26:02:1a:68:9a:3c:77:09:77:f2:84: 72:39:61:ea:ec:89:c1:8a:b7:09:c9:ff:c3:df:40: a0:a5:24:05:bf:56:4b:17:77:f4:9d:69:53:55:77: 63:f2:99:ed:54:8e:a1:81:99:80:17:b4:f2:97:3a: 26:1b:e1:bf:6b:fd:81:a6:b4:a7:b2:eb:a9:cd:70: 81:9a:58:49:a2:8a:6f:bc:7b:fc:30:41:bd:4f:64: 02:1b:bc:3b:c0:02:0a:44:fd:08:b4:e0:e1:b3:13: 77:21:09:43:d5:4b:67:55:1f:63:50:d8:f5:52:1c: ce:e1:a3:4e:20:8d:ff:84:21:c5:a8:9c:3b:15:70: 5a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:02:26:3C:EA:AE:85:2C:EE:36:90:7A:CA:36:D5:F4:DA:83:C7:52 X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:aa:0a:88:26:39:85:b5:aa:94:24:70:1d:22:ad:92:85:0d: 6f:81:9a:c7:1b:ce:bb:56:46:bb:d0:64:ed:c1:d6:34:db:bd: d9:89:c7:6a:5f:2e:ec:0a:96:fe:ae:0e:26:d7:83:b3:ad:48: ad:82:df:d3:b4:bd:0e:38:fe:90:67:7a:89:a7:da:74:f1:51: 0d:a7:29:69:5d:8e:15:58:8f:22:22:a9:8a:09:aa:d4:b0:39: be:8a:f9:b5:71:cf:3c:a2:e6:27:c0:8d:2b:6b:b7:a4:11:80: 9e:5f:c5:bb:43:8f:43:b9:d3:e2:1e:a2:49:fd:64:a7:2b:88: 46:09:50:94:18:d6:9c:d4:e6:a3:03:ee:f6:57:82:d5:45:ee: 14:31:91:10:d5:d9:e4:30:bd:4b:7e:73:17:8d:1b:b7:f8:6c: 31:70:82:e5:29:6a:9a:19:b4:9e:59:ed:f0:2b:d8:17:ab:46: bb:be:bb:7c:0c:d2:07:4b:b0:c8:62:f8:d1:7a:63:f8:85:b5: 8f:dc:73:05:68:c4:45:4a:5c:9e:0e:15:66:28:46:a5:50:e8: 9a:2a:9c:b7:92:b2:86:3c:8a:4c:c9:ba:53:18:53:bf:52:da: 60:b2:ad:cb:57:7f:e1:0a:35:3c:8a:80:b3:93:7f:6b:23:b1: f7:f7:5b:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3LmOoI+/nhCdwmHaDQhxN7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjYwNDI2MjEwMTI5WhcNMjYwNDI3MjEwMTI5WjAzMTEwLwYDVQQD EyhiMDAyMjYzY2VhYWU4NTJjZWUzNjkwN2FjYTM2ZDVmNGRhODNjNzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuguqZ23w6G6GNSo95QGxphtwk75n Efbt2TSl7FXyDdR0hqDXEgab/BjWmyAGHqCKac89Rpx04lH28DjCA+GKFF1AVIKI rHjP8UGzDyS+rCkpeM1ho5P87dVOPYW2sQQe+kCPQlZpfvMTo2h37/5PGhGvuW/g ZI9Y89iPJgIaaJo8dwl38oRyOWHq7InBircJyf/D30CgpSQFv1ZLF3f0nWlTVXdj 8pntVI6hgZmAF7TylzomG+G/a/2BprSnsuupzXCBmlhJoopvvHv8MEG9T2QCG7w7 wAIKRP0ItODhsxN3IQlD1UtnVR9jUNj1UhzO4aNOII3/hCHFqJw7FXBaKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLACJjzqroUs7jaQeso21fTag8dSMB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKoKiCY5 hbWqlCRwHSKtkoUNb4GaxxvOu1ZGu9Bk7cHWNNu92YnHal8u7AqW/q4OJteDs61I rYLf07S9Djj+kGd6iafadPFRDacpaV2OFViPIiKpigmq1LA5vor5tXHPPKLmJ8CN K2u3pBGAnl/Fu0OPQ7nT4h6iSf1kpyuIRglQlBjWnNTmowPu9leC1UXuFDGRENXZ 5DC9S35zF40bt/hsMXCC5Slqmhm0nlnt8CvYF6tGu767fAzSB0uwyGL40Xpj+IW1 j9xzBWjERUpcng4VZihGpVDomiqct5KyhjyKTMm6UxhTv1LaYLKty1d/4Qo1PIqA s5N/ayOx9/dbag== -----END CERTIFICATE-----Generated at Mon Apr 27 07:15:02 2026 by rpki-client