$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft File: OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft (raw, json) Hash identifier: O5xNPrEwzLstNrUwNZDPXoTknnsERw7kO3uvrAS2Zo4= Subject key identifier: 85:B0:1A:D5:08:A8:9A:A3:CB:92:1D:CB:D4:47:83:9B:F1:24:BA:4E Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 01A15E1F2DF4C343D3C1E29E2A7175FD1D65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft Manifest number: 1AC8 Signing time: Wed 21 Oct 2026 11:01:03 +0000 Manifest this update: Wed 21 Oct 2026 11:01:03 +0000 Manifest next update: Thu 22 Oct 2026 11:01:03 +0000 Files and hashes: 1: 1wr8QIeSM3CIv5J7uap933hLaGs.roa (hash: Y6lFO4ooFEDBG8EOKNjhhaIJIuCCzVgscAraR7wX8B4=) 2: 4nJ0h3kxVoLTGLl-KMMdIGNO3U4.roa (hash: yXSTzPv+VSMPQEsmFJQmVgwkS8AYD6u5M83BtbV+VIE=) 3: EdrkWbcqLRMSNrh6Sa5x5mnTLPc.roa (hash: Fk5tDegQkNWmVnCc3SYJvszlVAARBSOO/qIaE+GvEdY=) 4: FOt64C6RCxN5JGIdYYt0-jp9RJQ.roa (hash: tamHBKuLjpWpXY8LQK286Mn5I3Q0OVkX8D4lvECCpD8=) 5: LTj2PGdyu1TZVch3WwkoLN3benA.roa (hash: 0uIInrnjr5BRMLrYPZ3TlKAb12B+T0z8Pu5nxkwhOwA=) 6: OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl (hash: u2CEEK05Mq7UM21Q8me4rvIslKFP88xLX2VAAIy+rbo=) 7: OR9wB6bWiqsZvjqNRRbC11UhrBA.roa (hash: BLhfuTsmrrfMXC8Lx4hjGsCFS5Q2HKcD1UJlTtem6+U=) 8: UJVwk9mntlMFjdR5x6Gz4DwAego.roa (hash: Y9Qzk1ZJNkQeeN5SL4rk7tJNNAoeHg7LXp+c5rv1kJY=) 9: XIxZD227ioGX0cqqVFAINXLyX6Q.roa (hash: sDleWGEf+rrGs4/hbX/4+JTQcRgaaTHiE45KWqHpF+s=) 10: XkdalcQg6hGFzhglm3gQzCnpww4.roa (hash: 8jItQEffXXa+ZvcKZLLyn2RNT/EfLCbVUQe+TOkVNeM=) 11: YWsBcXgsO8gZFuZAgXqc8mQzIPQ.roa (hash: FIq3otCEvunZWYD7V3EpFGXTGzchT90RBkn3PHEPtpE=) 12: cgpmcoUK85pTENssifHpCXJlfPE.roa (hash: JM0iNu1ajeTkqDE4Nqu0ZyqAU2JL5GqcLbiW8nq6Ilc=) 13: eSOXNELPy2P_3h7R8IBwrZVgqTM.roa (hash: r38ULUfgOCtbQfGW33x7ibVGykkgQ5HIh/ZXyBOz91w=) 14: fny2WANL9Kakl_hzClrFytLGIbA.roa (hash: Li0zLoSXMQkOWimSeqYniHU5WmqmT1OGtibQ573h2wE=) 15: hSqKucNYzrS-ITecCZqK51ewyo0.roa (hash: WlW+oWE3pA2mAbzyCA2PCiD4XrqfKT7ZH8dHdqawUFo=) 16: lqG4TiS1VcHtRo5hXtYqEofYXQY.roa (hash: lQ0va2Pv+RAccp1R5C/OndWZWgx6m66STBo/DZ6jbSw=) 17: snScws96TnQnAtgCESncYf2cHQI.roa (hash: Rg061AAdsDJTEuVCFaKulmhMa2nYwQQcIJgWuXh/KyU=) 18: zyiTueEsxpcD3PrX5wVtwGJMZ_Y.roa (hash: 7R1f/73J/Qx3gYsQEvvU8YVQZND5dDU9/Elan9+1kYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:5e:1f:2d:f4:c3:43:d3:c1:e2:9e:2a:71:75:fd:1d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: Oct 21 11:01:03 2026 GMT Not After : Oct 22 11:01:03 2026 GMT Subject: CN=85b01ad508a89aa3cb921dcbd447839bf124ba4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:90:0e:2c:18:5e:e1:12:a4:d4:0e:2b:95:3a: 5d:6f:85:98:ab:bc:5e:c0:9b:86:e5:de:b3:c8:7c: 0e:f3:33:86:aa:9f:b5:b7:e2:98:71:88:04:55:b3: 4d:ab:42:63:55:3f:55:8c:aa:aa:7b:21:ad:f1:fd: d5:25:cb:40:15:a3:86:e4:db:da:ca:c0:a0:b3:47: f3:e0:93:8d:57:f9:bd:1a:8e:ed:30:c8:8c:62:9e: 53:a7:50:18:d5:e1:c8:fa:71:cf:65:a4:77:05:3b: 29:99:fb:29:95:04:d4:0b:a9:ab:5c:2e:e9:e0:c8: 46:1a:42:33:16:e8:cd:89:41:da:ad:5a:a7:0d:5e: c5:ad:31:76:f4:1f:c5:02:e6:bd:ed:29:f0:2b:3e: 27:4d:92:37:ea:92:60:69:3a:e1:b2:aa:20:6d:33: b9:b4:e5:fb:e8:8f:4d:98:94:d3:b6:b8:11:81:00: 91:17:1e:83:fe:c0:f5:30:9e:e4:5b:83:5c:b8:9c: b8:b8:24:a5:61:47:6b:af:05:f3:a5:49:84:9f:c0: 38:09:af:be:8e:06:88:56:4f:d6:bd:ce:b8:79:8d: 24:9f:64:9b:a0:20:f7:d5:18:17:20:21:e8:7e:af: 8f:76:46:e8:cc:ca:df:fa:c8:85:6e:4e:67:a4:61: eb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B0:1A:D5:08:A8:9A:A3:CB:92:1D:CB:D4:47:83:9B:F1:24:BA:4E X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:6f:ae:a8:5d:37:8d:5b:63:22:bc:cc:8e:1a:cb:90:00:c3: 8f:b7:98:d4:f7:02:b9:23:06:ab:de:be:10:01:17:f5:62:1e: d3:af:e0:a2:27:55:b4:81:a4:f2:d4:24:e1:a4:05:ae:f3:ea: 5d:ec:ec:95:bb:41:88:67:03:6e:d8:4b:8c:44:8d:e2:ae:ab: aa:31:77:d8:f0:08:24:d6:f7:bb:20:96:b7:a2:12:3a:c1:f3: 84:13:bc:8d:94:2e:00:ae:35:5a:f5:fb:31:7e:9d:0f:2f:ba: b0:36:53:d3:76:bc:ca:47:0e:e4:60:b2:73:f5:f6:1d:5e:cd: 1e:23:d3:fd:bd:12:bb:38:da:ee:16:7b:d5:dd:ff:98:c9:2d: 26:4e:48:ef:05:f3:33:aa:e9:19:f0:00:d5:6e:4d:41:d9:56: 05:ed:54:15:80:ec:32:d7:72:e8:4f:87:72:35:59:c9:05:a1: 09:a0:06:36:89:0b:da:01:9b:eb:48:fc:be:11:1f:ec:04:7d: 25:75:b1:93:45:75:da:d7:79:4f:23:66:24:60:12:f1:af:33: cd:17:56:28:bb:95:b3:25:24:b2:71:39:e4:67:ee:13:1e:27: 1a:f4:85:cc:18:72:a7:66:08:f2:41:ce:be:18:65:5f:c0:0d: f9:d5:05:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFeHy30w0PTweKeKnF1/R1lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjYxMDIxMTEwMTAzWhcNMjYxMDIyMTEwMTAzWjAzMTEwLwYDVQQD Eyg4NWIwMWFkNTA4YTg5YWEzY2I5MjFkY2JkNDQ3ODM5YmYxMjRiYTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JAOLBhe4RKk1A4rlTpdb4WYq7xe wJuG5d6zyHwO8zOGqp+1t+KYcYgEVbNNq0JjVT9VjKqqeyGt8f3VJctAFaOG5Nva ysCgs0fz4JONV/m9Go7tMMiMYp5Tp1AY1eHI+nHPZaR3BTspmfsplQTUC6mrXC7p 4MhGGkIzFujNiUHarVqnDV7FrTF29B/FAua97SnwKz4nTZI36pJgaTrhsqogbTO5 tOX76I9NmJTTtrgRgQCRFx6D/sD1MJ7kW4NcuJy4uCSlYUdrrwXzpUmEn8A4Ca++ jgaIVk/Wvc64eY0kn2SboCD31RgXICHofq+PdkbozMrf+siFbk5npGHrJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWwGtUIqJqjy5Idy9RHg5vxJLpOMB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2+uqF03 jVtjIrzMjhrLkADDj7eY1PcCuSMGq96+EAEX9WIe06/goidVtIGk8tQk4aQFrvPq XezslbtBiGcDbthLjESN4q6rqjF32PAIJNb3uyCWt6ISOsHzhBO8jZQuAK41WvX7 MX6dDy+6sDZT03a8ykcO5GCyc/X2HV7NHiPT/b0Suzja7hZ71d3/mMktJk5I7wXz M6rpGfAA1W5NQdlWBe1UFYDsMtdy6E+HcjVZyQWhCaAGNokL2gGb60j8vhEf7AR9 JXWxk0V12td5TyNmJGAS8a8zzRdWKLuVsyUksnE55GfuEx4nGvSFzBhyp2YI8kHO vhhlX8AN+dUFSg== -----END CERTIFICATE-----Generated at Wed Oct 21 20:37:02 2026 by rpki-client