$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json) Hash identifier: r7nACvS+GAnFCtTdREM5GXCMOb6r1m35gAmzae1MKS8= Subject key identifier: 2A:75:FC:CF:9B:3B:D8:C6:D8:E3:92:BE:09:2C:C2:9C:41:5E:F0:D3 Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 019EB6205099EEB9F59957250967F787C9B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft Manifest number: 185C Signing time: Thu 11 Jun 2026 10:00:31 +0000 Manifest this update: Thu 11 Jun 2026 10:00:31 +0000 Manifest next update: Fri 12 Jun 2026 10:00:31 +0000 Files and hashes: 1: KQgcPbLRBBc_xsh51xPt4IehnO4.roa (hash: pCfM4q8twqlvRaHLGHOBBp4aKXHoEg09la6QGcZB7h0=) 2: MCBZ2CxaM7LC481GLSYWHeppO5E.roa (hash: 02Ro7KtAxSGq3svayvXMnjLyQYv+fnx2uhv691O7tMc=) 3: OJxTLDXJ9pqUGXVl4-ml1R-2R0g.roa (hash: /fFWCePAVkjb5ODL9wnIO10abW6/OG68dBuoesYNJwY=) 4: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: 3NCTBFYGguwzzFZSUQSIWG/vQe2CqOth86luAONbQJc=) 5: UNEG0RbhpGfDIQfxZ4i2ieICO9g.roa (hash: kKbhwxHzyZ1nQMHyypRvyIhRmV3QS30VEm56g35Omd4=) 6: Vg59mkjZjPChn5V72yQkRuYsw5w.roa (hash: ZT1vWv2NLvyggQYSfbG/ST95n5y42mBT1SrPiyV/11c=) 7: dnVcuIVq43rB8PBNyYX_JeEUFJ0.roa (hash: Ff78hIKwiWd51/Bth5HBmfNxfzKtqYOa3kRFT0AYoJo=) 8: rjNblK4bxhZyMeZC4OHShSQ8Jlc.roa (hash: yvBwo79kSdn4a3N6pjUOiYNe2QQKF2EmdQtpBeT8m8w=) 9: ui12U8ehqDuyNEV4dxeMmGkBpyU.roa (hash: yINc/cfZuw+HDq9yk/ySvw+zjfDYf1qaipCTcvu1wXg=) 10: ybxPsztAzlmVPObK0OoBTddoDSQ.roa (hash: d3b9yiAURGnHAdeyevteUI2cI7ETobUn55NXVEoQFao=) 11: znRtvDjx6p6QKqOpN-UH1Bqd7ao.roa (hash: +4jJSJNUJ8eFyd4hEIFej6uo6SX/BvFj2H5hv/FUtHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 10:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b6:20:50:99:ee:b9:f5:99:57:25:09:67:f7:87:c9:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: Jun 11 10:00:31 2026 GMT Not After : Jun 12 10:00:31 2026 GMT Subject: CN=2a75fccf9b3bd8c6d8e392be092cc29c415ef0d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:89:db:06:5c:83:47:42:1a:53:4e:c9:c6:39: 82:ac:ee:52:0e:a1:26:2a:8a:be:ab:cc:ed:f6:3e: 80:a9:44:6f:92:0b:9b:94:ac:5f:ca:16:06:79:b2: 1b:51:68:06:93:48:68:0a:36:af:95:e3:ee:a3:2e: 98:68:fe:07:bd:17:0e:33:68:da:14:16:fd:07:6c: bd:75:c7:48:52:80:85:aa:98:70:ea:90:c0:0e:cf: 7f:52:58:d4:34:7a:26:2a:e9:e3:f1:96:b4:f3:82: a7:85:4c:e2:60:0b:c2:b0:f5:e9:9d:81:1a:30:3d: 27:d5:18:71:fc:94:7e:ed:ed:3a:c7:c1:04:9a:41: b3:59:26:31:1b:4f:c8:55:1c:bf:9a:6d:bd:42:e1: e8:90:98:26:e6:c2:a3:cc:2a:1b:74:7b:4d:26:3e: 13:af:e7:fb:36:b8:f4:4e:46:8d:16:7c:7d:b8:ce: 19:f9:4f:44:33:9f:dd:4e:77:f5:12:78:3b:5f:fa: 00:c5:bd:55:cd:c0:20:69:f0:49:d7:c5:6e:3c:b3: 89:77:66:15:f4:1b:c7:bf:b1:f4:4f:9a:9a:53:c7: 7e:ba:a7:0c:a0:9e:17:b0:a2:fb:08:6f:8b:24:11: da:5c:c9:11:af:87:32:f9:c8:33:1c:d7:df:10:4e: 1a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:75:FC:CF:9B:3B:D8:C6:D8:E3:92:BE:09:2C:C2:9C:41:5E:F0:D3 X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:76:74:bc:3c:65:ef:9d:fa:44:b7:d5:79:55:f2:3b:a7:8d: 73:7a:56:b3:41:33:b7:61:f3:26:64:fd:31:d6:49:60:22:ca: dd:2a:81:26:64:74:1e:73:61:f3:60:8c:09:5e:bc:57:ec:68: a5:a7:7b:c2:94:f7:29:bd:0f:66:8f:11:6e:47:13:72:13:2a: 2b:16:45:5d:cd:2b:22:0a:2b:b9:dc:25:26:5e:53:20:b8:78: 23:cf:b4:52:3b:a8:22:ce:ec:5e:7d:51:76:56:91:41:4b:e5: de:ea:03:2c:a1:4d:24:71:27:b6:09:91:ce:15:41:a8:a3:eb: 72:97:1a:3a:58:6b:6c:4c:e7:cc:29:5b:51:00:c3:d8:06:b8: 9c:cf:3f:d3:d9:71:4a:2f:be:ff:cc:f7:77:d3:c8:75:f1:dd: 94:18:56:88:e4:e3:05:5d:3a:c4:7c:5d:da:3a:a3:d2:60:49: b8:55:63:49:d7:a9:7c:09:a3:cc:a6:58:2b:08:2a:51:59:55: 7f:b0:35:1b:77:5f:9c:55:18:52:b7:f6:bf:0c:e4:4b:ba:d4: c5:33:7a:e9:42:ab:33:db:63:3f:65:f3:1e:16:89:09:2d:3c: e7:99:12:18:76:be:76:91:84:79:5b:1c:f6:6e:2b:f6:5f:c8: 1c:57:41:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ62IFCZ7rn1mVclCWf3h8m2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjYwNjExMTAwMDMxWhcNMjYwNjEyMTAwMDMxWjAzMTEwLwYDVQQD EygyYTc1ZmNjZjliM2JkOGM2ZDhlMzkyYmUwOTJjYzI5YzQxNWVmMGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4nbBlyDR0IaU07JxjmCrO5SDqEm Koq+q8zt9j6AqURvkgublKxfyhYGebIbUWgGk0hoCjavlePuoy6YaP4HvRcOM2ja FBb9B2y9dcdIUoCFqphw6pDADs9/UljUNHomKunj8Za084KnhUziYAvCsPXpnYEa MD0n1Rhx/JR+7e06x8EEmkGzWSYxG0/IVRy/mm29QuHokJgm5sKjzCobdHtNJj4T r+f7Nrj0TkaNFnx9uM4Z+U9EM5/dTnf1Eng7X/oAxb1VzcAgafBJ18VuPLOJd2YV 9BvHv7H0T5qaU8d+uqcMoJ4XsKL7CG+LJBHaXMkRr4cy+cgzHNffEE4aawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCp1/M+bO9jG2OOSvgkswpxBXvDTMB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHZ0vDxl 7536RLfVeVXyO6eNc3pWs0Ezt2HzJmT9MdZJYCLK3SqBJmR0HnNh82CMCV68V+xo pad7wpT3Kb0PZo8RbkcTchMqKxZFXc0rIgorudwlJl5TILh4I8+0UjuoIs7sXn1R dlaRQUvl3uoDLKFNJHEntgmRzhVBqKPrcpcaOlhrbEznzClbUQDD2Aa4nM8/09lx Si++/8z3d9PIdfHdlBhWiOTjBV06xHxd2jqj0mBJuFVjSdepfAmjzKZYKwgqUVlV f7A1G3dfnFUYUrf2vwzkS7rUxTN66UKrM9tjP2XzHhaJCS0855kSGHa+dpGEeVsc 9m4r9l/IHFdBOA== -----END CERTIFICATE-----Generated at Thu Jun 11 20:28:13 2026 by rpki-client