$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft File: Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json) Hash identifier: 13ITmY38COboFzQ4EZiLbWipCkBmYFcs69SUL4pj/f0= Subject key identifier: C4:6B:D7:77:83:C5:EC:A5:4C:6D:B3:DF:13:CA:6B:91:22:86:B2:4C Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 019D9AE2901398136233ED35C8C95BC5D993 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft Manifest number: 18E4 Signing time: Fri 17 Apr 2026 10:00:32 +0000 Manifest this update: Fri 17 Apr 2026 10:00:32 +0000 Manifest next update: Sat 18 Apr 2026 10:00:32 +0000 Files and hashes: 1: 6PKIKUxySdUwZYjBpQdap24rMCA.roa (hash: Q+sfZpJT+al0TFOwIddw17g5+KoGJur9NLjQbu4nLpM=) 2: 8V2NwbvFlQZYvhmUrca34kxhXa0.roa (hash: DM0RB7X2NkgoMommIXHbEaH33Jj0bMo7E0xn5ejVedM=) 3: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: 1GM3gbMAObAALzOBqAVrV++EqvoZhYtZKosSypbLOTE=) 4: QawDO3nriy0Ac_BTEa82vA_nGDI.roa (hash: ONoC4PBmZZaC9uv6W2VVUcFA7b/wums0wl8fDhnZ7Gg=) 5: XJ2jXlF2Mo_xE-IDDytKM0CTO3E.roa (hash: HVJb11Pj3eJSoRHZP1XpkyINHh78VkvQ2O0d3UKBEjc=) 6: ZUtFH_qhx3L4PEjgB3q82Pko9A8.roa (hash: cpl/eTn6qz8+2/3oyMQl/oJw6IV6mFmSjoin/h1krGs=) 7: f8crMnaCvVJR24y4HZK4aF4ON_Y.roa (hash: a4LuuWR1pCU4Uin5c2uaOnWKPPk90YN8aUWR2m/vZDQ=) 8: hTSJfxOcDimDlYTfQcRbvzQKHsc.roa (hash: wKx5VDHNAbIU3w07fQ2WEFRFq5VMfAKh3nrE2+cguJU=) 9: kO9WlUparYb6jLj3Al1HAfYWyc4.roa (hash: uf/Ee/JGBTSZ54j7ty6QwzOZpLC0w43Jza7tQwup4Iw=) 10: oeb6m3It37B8PGE2O7TDai_TrWY.roa (hash: AfKJo3qTL26v5E6lQbsmszspXYIo4b8KBBv1yOMp4wQ=) 11: u5pqVXheduvSRyevzvk3F281Pv8.roa (hash: 99RNfzNuS1w8/5besxPZV13SYkOzDoP6UORAhIYy5ic=) 12: w8agfRL1GVHiUSL4QR-4AfJIyKQ.roa (hash: hBE3KCvCu5YG/sDO5HAFViDYI0rH255FlChKrGnbX6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:e2:90:13:98:13:62:33:ed:35:c8:c9:5b:c5:d9:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Apr 17 10:00:32 2026 GMT Not After : Apr 18 10:00:32 2026 GMT Subject: CN=c46bd77783c5eca54c6db3df13ca6b912286b24c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:68:6a:08:9e:15:22:9b:41:e0:39:1a:47:e3: 02:a1:32:75:fa:1f:98:32:53:be:95:f5:28:5d:e9: 3d:8c:f4:cd:19:b6:5b:fc:d2:f0:38:d6:dc:d7:bc: 25:81:b3:3b:1d:ec:06:e3:cf:2d:97:df:e0:38:e6: b1:28:e3:7b:c5:b3:47:13:c8:76:a9:1f:46:4b:9b: dc:46:9e:8f:dd:93:af:2e:a3:ba:ed:fa:6f:a8:dc: 80:3a:a4:4d:9f:23:9b:30:87:23:24:e4:a9:4f:fb: 59:a6:04:c8:fb:61:41:72:9e:1a:13:38:02:e9:1a: 17:7b:5b:71:38:3d:78:5e:90:e4:db:cf:da:21:5b: 76:ea:9b:35:c7:c0:db:87:5e:81:c1:c8:da:77:fa: d9:d3:4b:9d:89:02:09:fd:f5:74:f6:09:1b:3a:b6: 4d:73:5c:df:8b:09:da:30:41:30:8e:37:01:3e:07: 34:a1:f6:4d:63:33:07:38:a7:6d:89:61:33:73:bb: 3e:bc:c8:0f:48:9a:c6:ec:02:d0:7c:bc:95:c4:c4: f7:b0:ac:fd:c9:74:63:f0:ca:c6:19:fc:53:7c:93: c6:02:9c:af:e6:d5:59:11:79:9e:f4:cd:f9:e7:9a: f8:5b:41:eb:21:e8:83:bc:73:45:b5:d6:55:d5:bf: 32:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6B:D7:77:83:C5:EC:A5:4C:6D:B3:DF:13:CA:6B:91:22:86:B2:4C X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d9:50:49:29:3b:21:fb:84:e1:eb:56:53:f9:a6:da:e5:49: bf:0b:8c:5a:44:e1:85:8e:ae:e2:10:9a:e5:93:2b:47:54:8e: 93:68:7e:19:29:d4:bb:45:d0:b1:56:71:cb:bb:6b:83:be:58: 53:e1:41:c3:06:ac:a3:bb:d3:76:4f:d3:82:3c:3a:67:bc:36: 90:a5:16:23:1f:c5:35:dd:84:53:d4:fc:e8:e0:3c:7f:5b:5a: 2b:79:63:0c:a7:e4:53:87:c6:79:4a:07:2b:52:5c:94:2c:d9: b5:f7:92:c1:bb:42:f5:52:12:21:1e:8f:9e:36:b6:ee:b3:27: d8:d3:19:c0:be:1f:f4:4e:ac:2f:95:fd:49:f9:1d:86:46:d7: 4d:8d:30:0a:e7:92:52:83:69:13:2e:41:48:5e:5c:82:4b:ea: 82:fa:21:49:b8:70:7e:50:42:6a:f0:a6:cd:78:85:e1:6a:18: e7:fc:16:c1:24:1d:4b:9f:2d:5e:85:f0:ab:b1:b8:53:30:9a: dc:1f:c8:f4:a4:6c:65:81:42:4a:43:ad:88:ba:2c:f2:0d:8f: 19:e1:f6:79:af:97:6d:40:4c:26:ee:14:bc:d5:24:26:ca:8e: 3f:7c:17:79:67:d1:1e:2f:d9:6d:4f:5b:27:cb:b0:51:e4:0a: 93:9d:03:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2a4pATmBNiM+01yMlbxdmTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjYwNDE3MTAwMDMyWhcNMjYwNDE4MTAwMDMyWjAzMTEwLwYDVQQD EyhjNDZiZDc3NzgzYzVlY2E1NGM2ZGIzZGYxM2NhNmI5MTIyODZiMjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12hqCJ4VIptB4DkaR+MCoTJ1+h+Y MlO+lfUoXek9jPTNGbZb/NLwONbc17wlgbM7HewG488tl9/gOOaxKON7xbNHE8h2 qR9GS5vcRp6P3ZOvLqO67fpvqNyAOqRNnyObMIcjJOSpT/tZpgTI+2FBcp4aEzgC 6RoXe1txOD14XpDk28/aIVt26ps1x8Dbh16Bwcjad/rZ00udiQIJ/fV09gkbOrZN c1zfiwnaMEEwjjcBPgc0ofZNYzMHOKdtiWEzc7s+vMgPSJrG7ALQfLyVxMT3sKz9 yXRj8MrGGfxTfJPGApyv5tVZEXme9M3555r4W0HrIeiDvHNFtdZV1b8ybQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRr13eDxeylTG2z3xPKa5EihrJMMB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtlQSSk7 IfuE4etWU/mm2uVJvwuMWkThhY6u4hCa5ZMrR1SOk2h+GSnUu0XQsVZxy7trg75Y U+FBwwaso7vTdk/Tgjw6Z7w2kKUWIx/FNd2EU9T86OA8f1taK3ljDKfkU4fGeUoH K1JclCzZtfeSwbtC9VISIR6Pnja27rMn2NMZwL4f9E6sL5X9SfkdhkbXTY0wCueS UoNpEy5BSF5cgkvqgvohSbhwflBCavCmzXiF4WoY5/wWwSQdS58tXoXwq7G4UzCa 3B/I9KRsZYFCSkOtiLos8g2PGeH2ea+XbUBMJu4UvNUkJsqOP3wXeWfRHi/ZbU9b J8uwUeQKk50Dig== -----END CERTIFICATE-----Generated at Fri Apr 17 12:17:11 2026 by rpki-client