$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json) Hash identifier: xtkjURm4nz5tFh073bsJKqlVOA8AU7G4Gt8z8rDPAbc= Subject key identifier: 56:3A:21:24:95:52:6C:89:FA:A1:69:85:39:B0:57:7C:20:2A:6C:46 Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 019F9FCD08F82B29F84C4E54D1767375B7C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft Manifest number: 18D5 Signing time: Sun 26 Jul 2026 19:00:42 +0000 Manifest this update: Sun 26 Jul 2026 19:00:42 +0000 Manifest next update: Mon 27 Jul 2026 19:00:42 +0000 Files and hashes: 1: KQgcPbLRBBc_xsh51xPt4IehnO4.roa (hash: pCfM4q8twqlvRaHLGHOBBp4aKXHoEg09la6QGcZB7h0=) 2: MCBZ2CxaM7LC481GLSYWHeppO5E.roa (hash: 02Ro7KtAxSGq3svayvXMnjLyQYv+fnx2uhv691O7tMc=) 3: OJxTLDXJ9pqUGXVl4-ml1R-2R0g.roa (hash: /fFWCePAVkjb5ODL9wnIO10abW6/OG68dBuoesYNJwY=) 4: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: XzkaiNWC5ekYwMce+Xbwt5j0/zq9aSSzksQEW3pw8Q0=) 5: UNEG0RbhpGfDIQfxZ4i2ieICO9g.roa (hash: kKbhwxHzyZ1nQMHyypRvyIhRmV3QS30VEm56g35Omd4=) 6: Vg59mkjZjPChn5V72yQkRuYsw5w.roa (hash: ZT1vWv2NLvyggQYSfbG/ST95n5y42mBT1SrPiyV/11c=) 7: dnVcuIVq43rB8PBNyYX_JeEUFJ0.roa (hash: Ff78hIKwiWd51/Bth5HBmfNxfzKtqYOa3kRFT0AYoJo=) 8: rjNblK4bxhZyMeZC4OHShSQ8Jlc.roa (hash: yvBwo79kSdn4a3N6pjUOiYNe2QQKF2EmdQtpBeT8m8w=) 9: ui12U8ehqDuyNEV4dxeMmGkBpyU.roa (hash: yINc/cfZuw+HDq9yk/ySvw+zjfDYf1qaipCTcvu1wXg=) 10: ybxPsztAzlmVPObK0OoBTddoDSQ.roa (hash: d3b9yiAURGnHAdeyevteUI2cI7ETobUn55NXVEoQFao=) 11: znRtvDjx6p6QKqOpN-UH1Bqd7ao.roa (hash: +4jJSJNUJ8eFyd4hEIFej6uo6SX/BvFj2H5hv/FUtHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 19:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:9f:cd:08:f8:2b:29:f8:4c:4e:54:d1:76:73:75:b7:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: Jul 26 19:00:42 2026 GMT Not After : Jul 27 19:00:42 2026 GMT Subject: CN=563a212495526c89faa1698539b0577c202a6c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:45:c6:ea:45:41:5a:cd:9f:bb:bf:45:83:e2: 8a:f7:50:50:71:2d:d4:15:16:bd:22:2d:0d:90:92: d3:e3:ea:67:47:5e:98:bd:02:a1:35:8b:11:99:fd: f7:24:9d:17:05:a3:07:ff:35:9d:5b:4d:77:b3:1d: e6:a8:c5:93:18:66:1d:82:c8:83:3f:f1:ba:93:fb: 1c:d5:62:0c:8a:f9:91:48:fe:1f:5e:51:b2:44:e3: 06:6d:e4:be:b5:b5:a5:ca:54:9a:c6:e7:e9:41:85: fb:13:67:8e:c3:7c:57:fc:58:f2:da:08:ae:9b:96: 52:ff:a0:57:4c:2b:51:e4:91:73:85:b3:8a:d6:c8: 8c:a3:10:9e:fe:df:17:6e:8e:ed:44:15:66:37:70: b7:26:fc:a7:ab:18:b6:17:fe:8a:ae:cb:98:d0:17: b8:d9:c7:b6:0a:ba:f0:a8:65:e8:9f:f2:6b:de:13: 44:dd:a8:a7:5d:96:fd:1e:50:9c:27:36:f7:66:d1: 48:b2:29:bb:28:cb:05:f8:fc:99:fb:90:9d:25:63: fe:a3:47:e3:66:ae:ef:fe:99:cb:32:aa:f9:5a:e4: c9:9c:f3:ad:39:64:56:eb:83:69:78:df:c8:12:68: a9:42:cd:0e:ac:bf:8f:38:0d:bd:1d:40:b9:5a:37: 92:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3A:21:24:95:52:6C:89:FA:A1:69:85:39:B0:57:7C:20:2A:6C:46 X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e2:00:8c:c2:f6:8d:5f:06:ec:44:6b:d5:ab:1d:91:67:f0: 80:71:02:f3:b8:0f:94:15:5f:da:77:9f:5e:1d:eb:87:8c:39: 78:6b:d3:a6:a8:c4:bf:22:32:ca:6d:53:e3:19:d9:0f:5a:64: 1b:bd:7c:5b:3f:ba:b4:11:8b:84:13:c4:a3:ff:fd:63:d8:b3: 1c:83:b0:12:d2:de:53:a4:89:36:19:fc:f5:9a:98:ce:fb:17: 96:e8:7d:69:e3:f4:de:24:b3:ae:05:89:fb:47:c7:3a:1d:de: b2:ae:22:eb:b4:34:ff:12:34:15:eb:88:f9:48:ce:e1:99:cc: 74:47:d5:11:32:82:df:42:23:64:93:b0:22:d4:23:3d:2b:dd: 5f:a9:eb:b7:7d:9b:4a:12:d2:f5:02:ad:64:5d:11:90:c1:5a: 70:21:e5:ee:f2:d3:91:13:a5:61:a5:34:44:62:0c:7d:67:35: 20:f9:bd:00:37:1a:c8:e7:66:55:50:f6:b4:cf:8e:99:40:d2: 69:dc:6d:56:4a:7c:36:e9:0a:02:a6:03:08:82:e4:e3:76:1b: cb:bf:72:5a:d6:86:89:5e:d4:b4:09:0b:2e:ad:33:ab:a5:5b: 9c:5f:11:1d:e6:ec:c1:ea:27:34:a8:aa:62:2c:3a:e0:7c:27: 46:26:95:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+fzQj4Kyn4TE5U0XZzdbfCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjYwNzI2MTkwMDQyWhcNMjYwNzI3MTkwMDQyWjAzMTEwLwYDVQQD Eyg1NjNhMjEyNDk1NTI2Yzg5ZmFhMTY5ODUzOWIwNTc3YzIwMmE2YzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEXG6kVBWs2fu79Fg+KK91BQcS3U FRa9Ii0NkJLT4+pnR16YvQKhNYsRmf33JJ0XBaMH/zWdW013sx3mqMWTGGYdgsiD P/G6k/sc1WIMivmRSP4fXlGyROMGbeS+tbWlylSaxufpQYX7E2eOw3xX/Fjy2giu m5ZS/6BXTCtR5JFzhbOK1siMoxCe/t8Xbo7tRBVmN3C3Jvynqxi2F/6KrsuY0Be4 2ce2CrrwqGXon/Jr3hNE3ainXZb9HlCcJzb3ZtFIsim7KMsF+PyZ+5CdJWP+o0fj Zq7v/pnLMqr5WuTJnPOtOWRW64NpeN/IEmipQs0OrL+POA29HUC5WjeSfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFY6ISSVUmyJ+qFphTmwV3wgKmxGMB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+IAjML2 jV8G7ERr1asdkWfwgHEC87gPlBVf2nefXh3rh4w5eGvTpqjEvyIyym1T4xnZD1pk G718Wz+6tBGLhBPEo//9Y9izHIOwEtLeU6SJNhn89ZqYzvsXluh9aeP03iSzrgWJ +0fHOh3esq4i67Q0/xI0FeuI+UjO4ZnMdEfVETKC30IjZJOwItQjPSvdX6nrt32b ShLS9QKtZF0RkMFacCHl7vLTkROlYaU0RGIMfWc1IPm9ADcayOdmVVD2tM+OmUDS adxtVkp8NukKAqYDCILk43Yby79yWtaGiV7UtAkLLq0zq6VbnF8RHebsweonNKiq Yiw64HwnRiaVww== -----END CERTIFICATE-----Generated at Mon Jul 27 04:34:46 2026 by rpki-client