$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft File: OklF5GdkAp0lgdggwzc_pEWFVTk.mft (raw, json) Hash identifier: +PMknslnBPqht2VfgaRqzi051+VOMl74hl7EPeDQ2oQ= Subject key identifier: EC:36:67:34:6B:B1:E1:C5:BA:02:38:B3:38:AA:06:20:F7:1D:0C:01 Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39 Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539 Certificate serial: 019DA754E2590E0B66410C59D907DF16BD57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft Manifest number: 18DB Signing time: Sun 19 Apr 2026 20:00:51 +0000 Manifest this update: Sun 19 Apr 2026 20:00:51 +0000 Manifest next update: Mon 20 Apr 2026 20:00:51 +0000 Files and hashes: 1: 0273NJ6iQvZTgyuMash3xOhPLj8.roa (hash: 4bykyvzdYlZRg3u7BKzjHELAB3KL3rC2juBQve+S7UU=) 2: 78Cs8FmR3BIH_U5LsGqewvTlDV8.roa (hash: Z1dE+G16ehwR1QYJ/Luwdk+orufuAf1qVWJAWByx1UU=) 3: 9ieasZqKBlr3lokENCedNiqsCIM.roa (hash: TDVoR875fUbuSNWGAFsbE/WCEgXPy5Nn5pq79JskxQQ=) 4: 9xohe0WrdtI7HVhoFYevFGaGlbc.roa (hash: JlRzOAenO4QPVaHIwuTlBW/1CKfl7RhsHIL/eBfeU2g=) 5: MD4cosIRi9elPGst52tPGWVVXgQ.roa (hash: uQ5E7La04dxcXCsqGXXrY+8iqi3ww+c05QuoQOajMIE=) 6: OklF5GdkAp0lgdggwzc_pEWFVTk.crl (hash: l7OPc20lhKRVn4rURO0Lu2QMFYlfv9SPGxBSAgmdgeI=) 7: PrbXCFhVtFkWUcwdTHxrF95uYDo.roa (hash: qYxwfpMga93RAf62Cr8sXnqP6qDnonu8QcpFUw5HhJ8=) 8: aa9c3i_QmzIlTyi0XFZwJXrmq48.roa (hash: HcRPfUnw0rt8gf5+bGCJq0Ra7n/YA9e5E/2HwqC6qHA=) 9: pdrRYgteZLUMBCQJIc10YC36u-o.roa (hash: fx4ol1jSVjOBVf92RkrVydBgXb8sh/pU0bwRASzDz2U=) 10: pj8mJKqUF_T2Ou11ZZQsgbjDNYQ.roa (hash: fs3ur5x7vbxGo0xyTuilMeKyac+Lx5FJiRM1jXFcziw=) 11: vI4OFivT89O9243mI_1fzU94Pao.roa (hash: vkj2cXgQH1KS/H+As5+qw6+hxQEc0denm5Wi71uvRzE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 20:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a7:54:e2:59:0e:0b:66:41:0c:59:d9:07:df:16:bd:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a4945e46764029d2581d820c3373fa445855539 Validity Not Before: Apr 19 20:00:51 2026 GMT Not After : Apr 20 20:00:51 2026 GMT Subject: CN=ec3667346bb1e1c5ba0238b338aa0620f71d0c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:84:20:b5:8b:4e:70:b5:cc:2b:cf:2d:c8:6e: c0:f0:e6:0c:40:38:bb:e7:df:91:2c:3c:ca:cf:93: 0d:71:ce:1a:3d:78:77:ce:b8:e5:5a:5e:42:75:5c: 2e:f5:43:da:fc:a1:0b:da:9a:af:f8:d0:76:89:2a: d8:d5:5d:f4:04:20:65:11:98:18:ee:07:3d:b0:fc: b5:04:fa:06:4d:db:34:00:43:e5:68:6d:e0:e9:fe: d7:29:30:82:67:06:9b:e0:0a:eb:c2:b1:16:98:9b: ee:41:ea:f7:c8:3d:04:44:f9:d5:94:4c:19:30:77: 43:65:6e:28:23:c7:c7:37:07:ab:ef:38:75:1d:fd: 8a:31:9c:a8:bf:d6:b2:b8:bf:44:63:0f:37:62:98: 8c:cd:9b:90:81:28:cd:e5:5d:79:a3:31:36:53:45: 49:12:9c:ef:f3:3d:35:ee:06:53:92:e7:8d:84:2b: 0c:89:ac:2b:93:04:42:3e:ef:f8:5e:cc:8b:71:72: 49:ec:29:fb:5f:42:fc:e3:cc:fe:5c:fe:4a:e5:3e: 3c:1e:fd:aa:a8:fb:66:f4:ed:4e:eb:96:41:44:a1: ce:71:0a:ea:a9:60:e1:8f:fb:d1:9c:54:95:b5:30: dc:ce:a9:fb:c4:b0:25:0c:31:3c:aa:f4:e7:45:61: f4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:36:67:34:6B:B1:E1:C5:BA:02:38:B3:38:AA:06:20:F7:1D:0C:01 X509v3 Authority Key Identifier: keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:82:fa:1a:56:b4:de:e1:13:9b:05:7f:73:4e:bc:2f:ce:07: 11:74:3f:11:7f:c4:db:28:85:e1:47:31:ea:3c:f8:f0:0a:2f: a3:5f:ba:93:5c:ff:23:42:0e:bc:66:54:3c:fa:91:d1:fe:ef: 78:53:3a:7c:f9:49:5d:e6:d1:b1:13:a2:a6:e1:9a:e9:9c:ec: b3:01:bd:02:c6:71:7e:26:49:4e:04:91:d1:96:e3:1a:b0:0c: 86:2f:08:6f:52:14:98:d3:75:1d:7e:20:73:47:37:84:93:14: bc:82:1b:fb:6e:1c:2a:7b:2f:8a:86:de:16:33:3f:09:72:64: e0:df:48:cf:21:d6:aa:e9:cb:fa:62:6f:0c:cd:c4:bc:29:85: 28:2f:45:12:a7:90:b3:e4:94:37:b6:32:1a:48:82:99:a4:6b: a4:46:9a:b9:9f:69:00:9d:77:87:23:1d:e6:a8:85:13:26:53: dc:2f:3b:3f:b3:00:16:bb:f0:35:91:36:41:bc:10:d6:57:98: 25:e5:cc:d0:fd:1a:77:26:2a:b5:c0:05:e7:f5:0b:cd:a6:0b: 25:be:bd:0f:76:43:cc:3c:20:a9:ef:50:00:a7:5f:d5:04:5f: bb:45:29:a7:73:d5:21:0b:4a:a7:67:37:80:1a:32:e1:fb:f8: 51:c4:09:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2nVOJZDgtmQQxZ2QffFr1XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNDk0NWU0Njc2NDAyOWQyNTgxZDgyMGMzMzczZmE0NDU4 NTU1MzkwHhcNMjYwNDE5MjAwMDUxWhcNMjYwNDIwMjAwMDUxWjAzMTEwLwYDVQQD EyhlYzM2NjczNDZiYjFlMWM1YmEwMjM4YjMzOGFhMDYyMGY3MWQwYzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4QgtYtOcLXMK88tyG7A8OYMQDi7 59+RLDzKz5MNcc4aPXh3zrjlWl5CdVwu9UPa/KEL2pqv+NB2iSrY1V30BCBlEZgY 7gc9sPy1BPoGTds0AEPlaG3g6f7XKTCCZwab4ArrwrEWmJvuQer3yD0ERPnVlEwZ MHdDZW4oI8fHNwer7zh1Hf2KMZyov9ayuL9EYw83YpiMzZuQgSjN5V15ozE2U0VJ Epzv8z017gZTkueNhCsMiawrkwRCPu/4XsyLcXJJ7Cn7X0L848z+XP5K5T48Hv2q qPtm9O1O65ZBRKHOcQrqqWDhj/vRnFSVtTDczqn7xLAlDDE8qvTnRWH0/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOw2ZzRrseHFugI4sziqBiD3HQwBMB8GA1UdIwQY MBaAFDpJReRnZAKdJYHYIMM3P6RFhVU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1Njgt MzM2YWM5NDU2NDY0LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1NjgtMzM2YWM5NDU2NDY0 LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoL6Gla0 3uETmwV/c068L84HEXQ/EX/E2yiF4Ucx6jz48Aovo1+6k1z/I0IOvGZUPPqR0f7v eFM6fPlJXebRsROipuGa6ZzsswG9AsZxfiZJTgSR0ZbjGrAMhi8Ib1IUmNN1HX4g c0c3hJMUvIIb+24cKnsviobeFjM/CXJk4N9IzyHWqunL+mJvDM3EvCmFKC9FEqeQ s+SUN7YyGkiCmaRrpEaauZ9pAJ13hyMd5qiFEyZT3C87P7MAFrvwNZE2QbwQ1leY JeXM0P0adyYqtcAF5/ULzaYLJb69D3ZDzDwgqe9QAKdf1QRfu0Upp3PVIQtKp2c3 gBoy4fv4UcQJ/Q== -----END CERTIFICATE-----Generated at Mon Apr 20 03:26:44 2026 by rpki-client