$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft File: OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json) Hash identifier: eHlyGkGhO7eYV897QbSbs/dC/5dgy/GzlZz45aowGS8= Subject key identifier: A3:17:BC:1C:A4:86:AC:99:36:EF:0A:3B:3D:52:39:0A:FA:C6:27:55 Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b Certificate serial: 019D992B2B5F82953E3EC738FC70618AE3A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft Manifest number: 18D3 Signing time: Fri 17 Apr 2026 02:00:36 +0000 Manifest this update: Fri 17 Apr 2026 02:00:36 +0000 Manifest next update: Sat 18 Apr 2026 02:00:36 +0000 Files and hashes: 1: 0Bk51Mjn6qErtAhOivvm_I8c0aE.roa (hash: aq3ZMEYBOh/rpC3SYBAxrvfX3FzvIksQARIozff4ffc=) 2: 3l3JwyRn9LUMsz8MYG14zOnBHdc.roa (hash: 2A1HY2h9Phgu+RFmc7588XfC02kPw7N3ZbQ8wc/kW84=) 3: 8bVGqU-tjWPnIG8sBYrZvrrahKI.roa (hash: IFFyNQvZAT+Bna1YbPC14TW6c3lxt7eZvL1L0yVl4NA=) 4: 8cAZRJhTLPqKsm4TAUR87r4-9JA.roa (hash: sx3g13vfM7xaU8g2AQwyXKrMTuN6j6YaMqFMPUpyTc0=) 5: CQTXAg4uTXvVTudN5hFeeXkNvkQ.roa (hash: MvXWyNfB+L1JsnBDH+iw0vhodg+qR3E3YtxwCLlLcLM=) 6: H_ZqL6RkECdFkORWPkQHZkQLmTw.roa (hash: iJ7KZIZmr4InzppQ2C7K5GIf14/i+7a4DnEB+2Vcn7s=) 7: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: Pu50PRVsSPg8atCII8QU5VEljoEcBCvwBAttPZ1VgB0=) 8: PZJni5TxpYn092_2LgQ4TzNg1Vk.roa (hash: KAnI/w7Z4z73b7zbsNexFN30a6Ok+1UWHYIM1LyRw7A=) 9: TZUj41Zk_a4ctgh6bkXXZRSBnwo.roa (hash: SlDdEwpdjEtSII8TXEBDIBic9lrt5T7OD2GqENaMep4=) 10: dc8BS5CRu-zycD-wNYY8YKfw4Cw.roa (hash: 2OEK8MCyAYfbPpIXmNvUjGE5NLgSoSESlZhOHxxGtOM=) 11: g96pKLe6ZF1dh195VH6q_6jtDKE.roa (hash: GXl5Z35Jg4C6xTmicgl5RWGF0PIPfwr7nEkhMgfzcrU=) 12: iKkbPcQ4WIJAurPfzrtorCYjeJc.roa (hash: t+1uw36Adk7Pip1XNPSev194m4wMZgCV8f3gz9/3gjg=) 13: jT0g8lVx3dcAMaKxYxMOa3DkEIY.roa (hash: m3BcVFDXlnD1YdMRwzlLYT9pFM0ZGvuCdz2ltBkF8AA=) 14: n-mejQ3q29BELhma3oWoUOm-iuQ.roa (hash: NGJx12o2aUAcKnv8G9XcrR/xbQgpGxsRftcm0M1WRmc=) 15: oQGGdDTaNSA17PKm44IDHYFop2E.roa (hash: zwBhRxHLQ9o3LHpah+oy4Xr0d2WLdIvePEERXND5wzs=) 16: tklVWYVDGXe5URD0QFeTFCI-yOg.roa (hash: gNNzPMTDn7JasW09Gz6g9NSXq8GJJJOIAedRgSZzHrE=) 17: xXkiOHP5GPVKZFmsEyZEMy5ArTU.roa (hash: xeH/fFNJIFUXQ3IjYea8XVk8nJ8Z09onGn+NwK+Mb24=) 18: yVcflys92CzAxU-EuN_3N-w3nlE.roa (hash: zUTtMpuZxFGygRwVxvfWbYqYKDMVT6hU9O37iMaFGcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:2b:2b:5f:82:95:3e:3e:c7:38:fc:70:61:8a:e3:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b Validity Not Before: Apr 17 02:00:36 2026 GMT Not After : Apr 18 02:00:36 2026 GMT Subject: CN=a317bc1ca486ac9936ef0a3b3d52390afac62755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:56:21:f7:ad:c4:99:b7:c8:7e:68:e5:8d: 5a:8a:59:8c:41:99:3f:0c:73:e7:f8:64:27:38:af: dc:6c:de:ed:2d:9d:b4:ef:11:f9:60:86:32:ef:83: 05:49:10:9e:74:49:09:a8:86:9d:b8:eb:f0:88:99: ec:04:a7:26:fa:d9:17:1d:8c:a7:37:82:de:76:44: 7b:72:54:3d:2e:5a:b7:92:10:0d:53:3f:e0:a8:ab: 7a:d6:15:1c:34:ad:42:81:8e:93:9a:a6:60:e9:f8: 74:47:97:c9:5d:2e:79:94:26:34:d8:57:da:b0:b6: 80:72:c9:59:8b:55:99:5d:be:76:f0:9e:c8:6d:8b: 6b:a4:9f:c2:ad:2d:ec:25:16:a4:23:24:b0:a8:46: 09:f3:21:fd:29:5f:ed:ab:86:fd:fa:94:a5:a3:d4: 86:80:e3:80:37:d9:7d:38:69:2b:c6:db:7c:66:64: ac:26:b4:f1:9b:a4:93:3a:c0:d6:17:53:a7:0e:d3: 49:21:0f:5d:ad:a7:c6:12:c7:63:64:14:a5:9f:cd: de:ed:af:29:43:33:e5:1a:8a:c9:60:04:97:0c:66: 7d:d1:2d:9e:f6:38:56:13:1e:be:59:a3:17:a8:e4: b1:a0:5e:15:10:ed:e6:ba:25:69:11:9f:3d:cb:3d: 35:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:17:BC:1C:A4:86:AC:99:36:EF:0A:3B:3D:52:39:0A:FA:C6:27:55 X509v3 Authority Key Identifier: keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:98:32:d8:0e:79:5f:2c:30:f3:ce:f7:07:18:62:d4:fe:95: d9:96:e9:3e:d0:13:5f:50:26:6b:c4:37:ad:57:62:ef:dd:ba: b5:a5:be:11:12:94:aa:af:da:f6:57:58:d5:22:87:a4:a5:2b: 0d:07:ed:7d:c1:86:c1:00:c3:b0:dc:a0:00:ff:b5:6c:09:e4: 11:70:44:43:67:b9:10:4f:b1:ac:95:0a:3b:49:7d:a9:91:fc: 77:43:7a:cf:ba:ae:1a:70:ec:ee:a9:85:f5:b8:e6:1a:2f:f0: 63:e9:36:52:a5:c2:f8:28:7b:bf:ff:fe:60:e0:1b:ae:1e:a6: e7:e1:ba:68:ca:cb:4f:4c:13:80:51:78:a3:09:4c:77:c2:db: 07:11:5a:58:81:a8:4e:f8:38:a3:df:42:e8:39:11:35:00:43: c5:d6:cf:a6:cb:1b:15:ad:f4:e3:d5:eb:76:e3:f8:b6:2d:9c: f1:37:47:25:7c:6e:d4:e9:99:dc:8c:be:fa:00:f8:cb:f4:ee: 0c:8b:32:e3:2e:93:c3:1b:42:1a:93:be:26:82:e5:9a:5b:e3: d8:b3:15:48:f6:85:62:0a:ce:63:7c:79:24:80:28:27:c4:3f: 17:f0:79:65:62:05:6e:c2:2a:50:51:bd:80:57:b7:e9:38:db: 4b:74:9b:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZKytfgpU+Psc4/HBhiuOjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1 N2E0OGIwHhcNMjYwNDE3MDIwMDM2WhcNMjYwNDE4MDIwMDM2WjAzMTEwLwYDVQQD EyhhMzE3YmMxY2E0ODZhYzk5MzZlZjBhM2IzZDUyMzkwYWZhYzYyNzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdtWIfetxJm3yH5o5Y1ailmMQZk/ DHPn+GQnOK/cbN7tLZ207xH5YIYy74MFSRCedEkJqIaduOvwiJnsBKcm+tkXHYyn N4LedkR7clQ9Llq3khANUz/gqKt61hUcNK1CgY6TmqZg6fh0R5fJXS55lCY02Ffa sLaAcslZi1WZXb528J7IbYtrpJ/CrS3sJRakIySwqEYJ8yH9KV/tq4b9+pSlo9SG gOOAN9l9OGkrxtt8ZmSsJrTxm6STOsDWF1OnDtNJIQ9drafGEsdjZBSln83e7a8p QzPlGorJYASXDGZ90S2e9jhWEx6+WaMXqOSxoF4VEO3muiVpEZ89yz015QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMXvBykhqyZNu8KOz1SOQr6xidVMB8GA1UdIwQY MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt YjIwZTI4ZjUxODhmLzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw5gy2A55 Xyww8873Bxhi1P6V2ZbpPtATX1Ama8Q3rVdi7926taW+ERKUqq/a9ldY1SKHpKUr DQftfcGGwQDDsNygAP+1bAnkEXBEQ2e5EE+xrJUKO0l9qZH8d0N6z7quGnDs7qmF 9bjmGi/wY+k2UqXC+Ch7v//+YOAbrh6m5+G6aMrLT0wTgFF4owlMd8LbBxFaWIGo Tvg4o99C6DkRNQBDxdbPpssbFa3049XrduP4ti2c8TdHJXxu1OmZ3Iy++gD4y/Tu DIsy4y6TwxtCGpO+JoLlmlvj2LMVSPaFYgrOY3x5JIAoJ8Q/F/B5ZWIFbsIqUFG9 gFe36TjbS3Sbdw== -----END CERTIFICATE-----Generated at Fri Apr 17 04:48:26 2026 by rpki-client