$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft File: oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft (raw, json) Hash identifier: 9lkcxTDMT0OP2oMnEo/+QUCk5s/O7/fGfWxYf0vRI0U= Subject key identifier: C4:04:48:05:CB:D1:53:A5:21:6B:98:CF:2D:CD:B2:C5:89:43:8D:F5 Authority key identifier: A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 Certificate issuer: /CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7 Certificate serial: 019D9A75419ECD5B3A534A4C742DC96ED80B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft Manifest number: 0850 Signing time: Fri 17 Apr 2026 08:01:08 +0000 Manifest this update: Fri 17 Apr 2026 08:01:08 +0000 Manifest next update: Sat 18 Apr 2026 08:01:08 +0000 Files and hashes: 1: 1-EbrvxNY7jUJJte1JMBcOC69EBk.roa (hash: /M4gkvV/7tnw4BlBdpuc1viYnL0XhtHAFXwLDGq3QCg=) 2: NjOJ8tUpqLJAAfHhfTTwUysAm7s.roa (hash: 3a42jEcgSU6c6ZDozj7GhmcER8SN0dScIEdBDzntTP4=) 3: OA81K4GFXKVrjD-M584jTyFYST8.roa (hash: C4S9fMtXlXuIFqggmB3QlimOTqdUpyywlGKQgdOtY5w=) 4: YpbC5jk8lzSJpred_IHkkCVUCKE.roa (hash: Zo4+zcIWbT83bhve20wlbO77GzQpKYPsD28KLD9jN8Y=) 5: YxQb53gzYd0iTmUe7A41D-2rnY8.roa (hash: q+Z1iMu62RV5K/wK7fU9JbtFm1jSO7NLnuxYy0Ettbk=) 6: h_aNMTHSod3zvEv_zlqSsdV20TQ.roa (hash: GccHbmvEFlhiHjnJ+i3nG2pD81e9dD/oLrnSrArj6ig=) 7: oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl (hash: TTg11vjgdDk6cTUy0tTOKT1AxW5DfAcWOYp6aECUqbA=) 8: oh53IB-aUH2plypNUq8_qw59tUU.roa (hash: k/rLC3QFD8nEmci+tQAmE7NOGPMxS4KDVOpLNqgFsg4=) 9: ondT0lA34VONX208YudOD0r79Fo.roa (hash: Q5xYjBiSMcwIIASL37DpTBEnCFikNHHBxM8KVMbJfYU=) 10: vyjCA1W9-6KFsgjaGvfzXuiMYLQ.roa (hash: 7JV7egLgY4Bzr/UvgYj0RPwIqhuXjEo3YWECD7QdwW0=) 11: wtolA6HMGVvPA6gYljfUXhGgO9w.roa (hash: 9lH1rM52hRaE2Kxe2ZgcgE2kAZOcfeGaiUJXArzl1qI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:75:41:9e:cd:5b:3a:53:4a:4c:74:2d:c9:6e:d8:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7 Validity Not Before: Apr 17 08:01:08 2026 GMT Not After : Apr 18 08:01:08 2026 GMT Subject: CN=c4044805cbd153a5216b98cf2dcdb2c589438df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c8:9b:c4:54:72:8d:b1:f9:b6:83:04:c7:55: b2:32:34:66:02:ef:da:ad:9f:c6:c3:e4:d0:1e:b8: 07:d5:9d:98:17:d7:09:e8:1c:88:78:f5:5b:d9:e6: 02:b3:f2:ea:4b:96:50:57:cd:91:da:47:af:ef:d1: 20:6c:2d:fc:69:8f:fd:99:91:e2:bd:bf:8f:4b:9c: 43:b0:05:99:e4:05:d3:72:36:8f:2f:ba:7e:eb:71: a7:3e:83:4e:e1:43:f9:0a:b8:c7:f1:d4:dd:ee:f8: 91:30:5d:34:c3:ee:5b:03:66:c4:77:c6:79:2e:c2: c5:0e:b3:d2:5f:54:e0:fa:3d:76:e0:30:de:bf:24: 8e:f2:35:b3:26:4c:0f:d0:f3:2e:7b:49:3a:8c:b0: 5c:3d:64:fd:f1:3f:c5:4a:6c:5a:f0:2a:0c:dc:32: d8:bd:c1:09:96:73:6b:70:1f:94:4c:30:33:cf:eb: 95:3a:53:9d:b7:30:55:28:b1:00:db:4c:e1:fd:0a: a5:54:27:d6:ad:52:ee:2f:f0:d4:fa:46:48:57:1e: fc:7d:74:bc:0d:db:d1:01:3b:1b:98:bc:4f:4b:90: ef:eb:a7:cf:5d:f3:38:b6:e6:c5:08:1e:ad:80:31: be:07:da:af:e1:96:19:97:8a:d0:15:01:10:1a:7b: 19:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:04:48:05:CB:D1:53:A5:21:6B:98:CF:2D:CD:B2:C5:89:43:8D:F5 X509v3 Authority Key Identifier: keyid:A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:56:80:31:a1:6e:50:21:22:5d:50:92:49:e4:de:2c:c2:86: 64:b1:fb:57:64:c9:5b:60:4e:43:f5:b5:4b:68:ef:0c:79:4e: 35:eb:1b:8e:6e:67:b1:aa:31:2f:94:f3:bb:73:d1:b3:6b:48: af:d1:f8:c8:ce:34:3f:c0:d5:e5:96:a2:ec:ea:b0:fa:8f:27: 3e:86:31:1b:aa:90:46:4a:23:eb:f9:d8:76:97:51:86:88:90: 9c:e1:dd:9b:67:ea:5a:ac:0a:ef:79:be:05:d9:d4:35:10:f4: 17:b1:62:22:9c:20:9e:c6:14:59:17:54:43:aa:19:7a:63:44: d2:3e:6d:8a:19:f6:d1:66:77:e6:45:6e:04:a5:0f:5d:2d:fe: f7:ad:16:ae:44:00:09:22:63:56:28:70:60:a8:07:f0:da:c3: 00:05:13:f4:bb:02:f0:bd:ef:80:8c:bc:4f:d4:5e:73:3a:a6: 7b:ee:18:60:55:b3:14:ab:f7:f6:b3:60:a5:ae:30:64:ae:fe: 5f:b6:80:b5:89:35:d7:a1:0d:3d:f1:2d:a3:33:fc:f2:db:08: 5d:e1:c3:37:2c:7d:2f:da:4a:6e:65:ff:82:f0:5a:95:d1:0e: 5d:b9:5e:f2:c8:3a:09:ea:57:33:62:6c:dc:37:60:6f:97:14: d2:55:e8:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2adUGezVs6U0pMdC3JbtgLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMjRjY2RkNzBmM2VjNzYyY2JkNjVlMDRkZDZmNzZiZTIz NmE4YTcwHhcNMjYwNDE3MDgwMTA4WhcNMjYwNDE4MDgwMTA4WjAzMTEwLwYDVQQD EyhjNDA0NDgwNWNiZDE1M2E1MjE2Yjk4Y2YyZGNkYjJjNTg5NDM4ZGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcibxFRyjbH5toMEx1WyMjRmAu/a rZ/Gw+TQHrgH1Z2YF9cJ6ByIePVb2eYCs/LqS5ZQV82R2kev79EgbC38aY/9mZHi vb+PS5xDsAWZ5AXTcjaPL7p+63GnPoNO4UP5CrjH8dTd7viRMF00w+5bA2bEd8Z5 LsLFDrPSX1Tg+j124DDevySO8jWzJkwP0PMue0k6jLBcPWT98T/FSmxa8CoM3DLY vcEJlnNrcB+UTDAzz+uVOlOdtzBVKLEA20zh/QqlVCfWrVLuL/DU+kZIVx78fXS8 DdvRATsbmLxPS5Dv66fPXfM4tubFCB6tgDG+B9qv4ZYZl4rQFQEQGnsZ9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQESAXL0VOlIWuYzy3NssWJQ431MB8GA1UdIwQY MBaAFKEkzN1w8+x2LL1l4E3W92viNqinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iNjk0YjgtODIxMS00YzA2LTljODEt N2IzNTM5N2FmMmY3LzEvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9iNjk0YjgtODIxMS00YzA2LTljODEtN2IzNTM5N2FmMmY3 LzEvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1aAMaFu UCEiXVCSSeTeLMKGZLH7V2TJW2BOQ/W1S2jvDHlONesbjm5nsaoxL5Tzu3PRs2tI r9H4yM40P8DV5Zai7Oqw+o8nPoYxG6qQRkoj6/nYdpdRhoiQnOHdm2fqWqwK73m+ BdnUNRD0F7FiIpwgnsYUWRdUQ6oZemNE0j5tihn20WZ35kVuBKUPXS3+960WrkQA CSJjVihwYKgH8NrDAAUT9LsC8L3vgIy8T9Reczqme+4YYFWzFKv39rNgpa4wZK7+ X7aAtYk116ENPfEtozP88tsIXeHDNyx9L9pKbmX/gvBaldEOXble8sg6CepXM2Js 3Ddgb5cU0lXoEA== -----END CERTIFICATE-----Generated at Fri Apr 17 10:15:59 2026 by rpki-client