$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft File: Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json) Hash identifier: QWezGTn4tg/1iU6DXzrK+avvLJ5xYHf9yFP/r340+bE= Subject key identifier: BA:F0:EC:31:53:27:6E:7D:F0:BE:57:C3:4B:26:40:E4:B8:A3:DB:6B Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 019CAAC6DFAA583F707202D43E1A9EA53FF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft Manifest number: 1865 Signing time: Sun 01 Mar 2026 19:01:25 +0000 Manifest this update: Sun 01 Mar 2026 19:01:25 +0000 Manifest next update: Mon 02 Mar 2026 19:01:25 +0000 Files and hashes: 1: 1-Qbrqy3eaDyYZjmaWJLP3YQsQ0U.roa (hash: 1GmvfspmxhXRZfjHjp+Nn84fIdG09U8DoT1IgAU3Frc=) 2: 6PKIKUxySdUwZYjBpQdap24rMCA.roa (hash: Q+sfZpJT+al0TFOwIddw17g5+KoGJur9NLjQbu4nLpM=) 3: 8V2NwbvFlQZYvhmUrca34kxhXa0.roa (hash: DM0RB7X2NkgoMommIXHbEaH33Jj0bMo7E0xn5ejVedM=) 4: GVZv2oi_g9ML6Vffwo3Z-L0pcGI.roa (hash: NNStdhcPHaUpwAIwLb3EKr9AAN0bNFO1ZK0PdF60xzc=) 5: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: YY0N9tVplDJmoLTKAsdU1YsbSUFYjewbGcDNNVWfm/s=) 6: QawDO3nriy0Ac_BTEa82vA_nGDI.roa (hash: ONoC4PBmZZaC9uv6W2VVUcFA7b/wums0wl8fDhnZ7Gg=) 7: ZUtFH_qhx3L4PEjgB3q82Pko9A8.roa (hash: cpl/eTn6qz8+2/3oyMQl/oJw6IV6mFmSjoin/h1krGs=) 8: f8crMnaCvVJR24y4HZK4aF4ON_Y.roa (hash: a4LuuWR1pCU4Uin5c2uaOnWKPPk90YN8aUWR2m/vZDQ=) 9: kO9WlUparYb6jLj3Al1HAfYWyc4.roa (hash: uf/Ee/JGBTSZ54j7ty6QwzOZpLC0w43Jza7tQwup4Iw=) 10: oeb6m3It37B8PGE2O7TDai_TrWY.roa (hash: AfKJo3qTL26v5E6lQbsmszspXYIo4b8KBBv1yOMp4wQ=) 11: u5pqVXheduvSRyevzvk3F281Pv8.roa (hash: 99RNfzNuS1w8/5besxPZV13SYkOzDoP6UORAhIYy5ic=) 12: w8agfRL1GVHiUSL4QR-4AfJIyKQ.roa (hash: hBE3KCvCu5YG/sDO5HAFViDYI0rH255FlChKrGnbX6E=) 13: wvc7hmN_qOw44QTtjVGpa7H0Y0I.roa (hash: 7x0ZicNAknUw4aPkY6qk/SSSVnY0qsOQEXjRjIouV4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:c6:df:aa:58:3f:70:72:02:d4:3e:1a:9e:a5:3f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Mar 1 19:01:25 2026 GMT Not After : Mar 2 19:01:25 2026 GMT Subject: CN=baf0ec3153276e7df0be57c34b2640e4b8a3db6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:19:a6:6f:bf:2f:9b:eb:bd:85:14:80:ca:94: 54:9c:af:ea:e0:ea:16:f2:91:3c:16:38:2d:37:3b: 97:29:7b:07:ae:95:b4:b2:d6:a1:58:4a:7d:fc:da: a6:54:2d:6f:16:d2:65:d4:2f:81:f6:7c:68:d2:4e: 7e:d0:f6:71:8b:e7:a7:25:78:ac:b4:5d:ee:0d:30: 71:03:06:ba:bf:e2:5e:f2:03:5b:74:da:48:a9:c4: aa:ef:e2:3d:75:a7:64:ba:53:79:3e:30:3e:c8:ed: 90:b5:79:be:8c:60:18:75:66:33:13:96:80:a7:e9: 73:c2:4d:67:ea:28:bb:2f:05:34:76:48:0d:64:77: b1:f8:d4:e6:67:25:06:f7:6b:60:16:73:b6:2d:b5: 8f:35:99:0a:0d:f6:c6:2e:18:be:dd:c9:52:9a:e8: 84:f3:31:00:77:03:5f:c1:d7:58:9a:6c:3d:57:f7: 66:ff:16:ac:68:1c:9a:ab:75:86:db:27:79:1a:ca: aa:89:c1:2d:70:f0:ac:e9:76:0b:e3:06:3c:64:90: 7b:2b:64:69:e2:8d:ac:ef:cf:35:64:b9:d4:89:d2: ab:36:ab:d3:51:a9:3b:88:8c:ab:aa:0b:7d:e5:99: ce:c4:40:27:66:8e:a6:0f:13:e2:97:a4:0b:6c:87: 88:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F0:EC:31:53:27:6E:7D:F0:BE:57:C3:4B:26:40:E4:B8:A3:DB:6B X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:52:80:3d:76:18:f7:b4:84:61:30:89:91:ef:76:de:ff:ff: a8:47:69:41:3a:62:86:43:3f:75:fb:d3:24:cc:93:48:2e:6f: a7:61:7d:9f:72:57:c4:e4:44:2a:2f:18:8f:7e:64:cf:68:06: 20:f7:66:f9:bd:d0:2e:12:84:84:c7:fe:f3:70:7f:0e:ba:3b: b6:1e:71:4f:21:b2:cc:ff:09:69:5d:c1:c0:77:2e:20:9e:90: 81:56:8b:5d:59:86:5d:78:63:e5:6b:f4:5b:28:0a:a8:82:40: c2:40:8e:63:1b:b6:af:cf:ed:23:a3:1a:2a:4c:37:8d:90:2f: 96:d7:c8:9f:59:0a:63:0f:a3:7a:ee:41:8d:a9:78:4a:37:51: 5b:13:e7:d7:11:c5:87:be:c3:47:4c:0f:e5:63:f7:ca:ae:3b: e3:9d:9e:85:0e:b0:ff:88:e8:87:cc:f0:e7:c2:69:56:8b:cc: 40:c7:c5:fb:f9:64:dd:c3:2d:4e:a7:a1:bf:89:10:d9:0c:9a: a2:7e:2f:31:df:5e:2e:88:1c:cb:04:ba:0e:fa:93:ab:e9:88: 07:b4:db:75:55:6d:2e:3c:64:b4:49:fe:35:f3:a9:02:ed:53: 9c:01:e8:73:12:c2:9e:f7:2d:6f:f5:7e:8f:4d:ac:0c:c4:10: b0:c5:fb:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqxt+qWD9wcgLUPhqepT/5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjYwMzAxMTkwMTI1WhcNMjYwMzAyMTkwMTI1WjAzMTEwLwYDVQQD EyhiYWYwZWMzMTUzMjc2ZTdkZjBiZTU3YzM0YjI2NDBlNGI4YTNkYjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hmmb78vm+u9hRSAypRUnK/q4OoW 8pE8FjgtNzuXKXsHrpW0stahWEp9/NqmVC1vFtJl1C+B9nxo0k5+0PZxi+enJXis tF3uDTBxAwa6v+Je8gNbdNpIqcSq7+I9dadkulN5PjA+yO2QtXm+jGAYdWYzE5aA p+lzwk1n6ii7LwU0dkgNZHex+NTmZyUG92tgFnO2LbWPNZkKDfbGLhi+3clSmuiE 8zEAdwNfwddYmmw9V/dm/xasaByaq3WG2yd5GsqqicEtcPCs6XYL4wY8ZJB7K2Rp 4o2s7881ZLnUidKrNqvTUak7iIyrqgt95ZnOxEAnZo6mDxPil6QLbIeIAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrw7DFTJ2598L5Xw0smQOS4o9trMB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR1KAPXYY 97SEYTCJke923v//qEdpQTpihkM/dfvTJMyTSC5vp2F9n3JXxOREKi8Yj35kz2gG IPdm+b3QLhKEhMf+83B/Dro7th5xTyGyzP8JaV3BwHcuIJ6QgVaLXVmGXXhj5Wv0 WygKqIJAwkCOYxu2r8/tI6MaKkw3jZAvltfIn1kKYw+jeu5Bjal4SjdRWxPn1xHF h77DR0wP5WP3yq47452ehQ6w/4joh8zw58JpVovMQMfF+/lk3cMtTqehv4kQ2Qya on4vMd9eLogcywS6DvqTq+mIB7TbdVVtLjxktEn+NfOpAu1TnAHocxLCnvctb/V+ j02sDMQQsMX7yA== -----END CERTIFICATE-----Generated at Mon Mar 2 01:08:07 2026 by rpki-client