$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft File: oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft (raw, json) Hash identifier: dGERw6EJBCWToEwpWFh1qOBk/npRMEBG7jzT+LXE6sM= Subject key identifier: 93:50:EF:D2:5E:D3:FC:8F:E9:BB:FE:FA:20:77:6B:50:13:93:74:B9 Authority key identifier: A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 Certificate issuer: /CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7 Certificate serial: 019CAA2161F435BFA45FCE6455B4FA73B9CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft Manifest number: 07D3 Signing time: Sun 01 Mar 2026 16:00:40 +0000 Manifest this update: Sun 01 Mar 2026 16:00:40 +0000 Manifest next update: Mon 02 Mar 2026 16:00:40 +0000 Files and hashes: 1: 1-EbrvxNY7jUJJte1JMBcOC69EBk.roa (hash: /M4gkvV/7tnw4BlBdpuc1viYnL0XhtHAFXwLDGq3QCg=) 2: NjOJ8tUpqLJAAfHhfTTwUysAm7s.roa (hash: 3a42jEcgSU6c6ZDozj7GhmcER8SN0dScIEdBDzntTP4=) 3: OA81K4GFXKVrjD-M584jTyFYST8.roa (hash: C4S9fMtXlXuIFqggmB3QlimOTqdUpyywlGKQgdOtY5w=) 4: YpbC5jk8lzSJpred_IHkkCVUCKE.roa (hash: Zo4+zcIWbT83bhve20wlbO77GzQpKYPsD28KLD9jN8Y=) 5: YxQb53gzYd0iTmUe7A41D-2rnY8.roa (hash: q+Z1iMu62RV5K/wK7fU9JbtFm1jSO7NLnuxYy0Ettbk=) 6: h_aNMTHSod3zvEv_zlqSsdV20TQ.roa (hash: GccHbmvEFlhiHjnJ+i3nG2pD81e9dD/oLrnSrArj6ig=) 7: oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl (hash: 7fe0hMuz/CTShSVf3yUuiNyVyJpHmdWRxackI5aXwMc=) 8: oh53IB-aUH2plypNUq8_qw59tUU.roa (hash: k/rLC3QFD8nEmci+tQAmE7NOGPMxS4KDVOpLNqgFsg4=) 9: vyjCA1W9-6KFsgjaGvfzXuiMYLQ.roa (hash: 7JV7egLgY4Bzr/UvgYj0RPwIqhuXjEo3YWECD7QdwW0=) 10: wtolA6HMGVvPA6gYljfUXhGgO9w.roa (hash: 9lH1rM52hRaE2Kxe2ZgcgE2kAZOcfeGaiUJXArzl1qI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:21:61:f4:35:bf:a4:5f:ce:64:55:b4:fa:73:b9:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7 Validity Not Before: Mar 1 16:00:40 2026 GMT Not After : Mar 2 16:00:40 2026 GMT Subject: CN=9350efd25ed3fc8fe9bbfefa20776b50139374b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4e:ec:fd:b9:4f:de:d8:39:18:c5:bb:c4:af: 84:45:51:00:55:bd:8f:57:a7:e1:b7:ec:3b:6b:ee: 85:86:44:20:e5:0d:2b:2c:42:ac:7a:50:8f:98:7d: 6e:64:3a:5a:c9:df:0e:17:cb:73:85:ef:ba:b7:3e: 04:ad:55:b5:d0:0a:2e:2e:51:a3:9d:61:92:d0:bd: 61:c1:0b:83:75:96:4a:89:19:1c:c2:5a:ad:ac:29: 6c:1c:1a:40:98:da:72:7c:ef:3c:5e:e0:b7:1f:06: fb:b1:f8:22:6c:f8:fd:ba:21:cf:be:05:d6:e8:43: 6f:28:2f:73:c6:d7:7c:3a:50:b3:ae:3a:de:4b:00: 29:2e:00:1e:f3:4c:f1:ec:12:2a:6a:8a:5d:1d:87: 43:5d:d3:a1:22:f7:2a:13:af:c4:14:67:dc:d9:00: db:f4:98:08:84:09:23:6b:37:f3:09:40:6e:62:b4: 2b:56:24:7f:49:21:16:6c:64:92:27:1a:95:9e:20: f9:1b:0f:1e:e3:dd:aa:9e:8c:7d:3a:4b:88:a8:f2: c1:96:63:ba:a8:57:be:4c:14:4a:53:8d:6b:1d:e9: e6:08:65:aa:fd:dd:e0:36:f9:e2:ef:fb:c1:c2:a4: 45:9c:9e:99:1d:31:ec:d1:bb:b6:c9:46:b6:ea:62: 3b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:50:EF:D2:5E:D3:FC:8F:E9:BB:FE:FA:20:77:6B:50:13:93:74:B9 X509v3 Authority Key Identifier: keyid:A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:cb:35:8b:f4:7e:69:82:19:57:4e:33:02:48:3d:39:e9:00: 63:a4:85:db:87:84:a1:83:d3:68:f1:e4:bf:40:ce:e5:35:5c: b8:29:ca:29:1d:a0:0b:cc:39:f2:0e:b7:83:bc:3a:fe:cc:f2: 55:c8:3f:fd:b4:ce:c9:36:51:71:66:3a:ba:66:27:3c:7c:16: 17:17:03:4a:cb:67:05:c0:eb:03:db:65:e5:85:9f:47:92:65: 2e:86:4f:5c:a8:9b:c6:8c:60:42:e6:85:9a:c0:b7:e2:3d:0f: e7:97:f9:cf:fb:d6:5f:55:7a:31:63:21:6f:27:2a:90:a2:35: d6:50:9f:75:3e:91:e0:d6:f5:53:c3:4b:eb:84:05:b0:74:6b: f9:f4:f0:ae:8f:ee:e9:ce:73:aa:d3:a3:c4:df:a5:b4:f6:63: 98:41:fe:e0:e6:db:5c:d6:a3:42:d8:5d:af:16:fe:b6:8a:c1: 34:71:47:41:c7:e2:ab:ca:3b:bb:44:6a:18:ee:d0:8f:7c:b3: fc:ee:d6:d6:8b:3b:10:51:08:c4:bf:35:13:af:e1:25:7a:44: a3:9b:b4:62:86:03:3b:61:70:14:e6:41:d9:b5:15:87:f6:1e: d5:47:58:75:8e:41:21:50:d2:7d:69:f0:69:52:0c:35:fb:be: b8:b9:15:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqIWH0Nb+kX85kVbT6c7nKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMjRjY2RkNzBmM2VjNzYyY2JkNjVlMDRkZDZmNzZiZTIz NmE4YTcwHhcNMjYwMzAxMTYwMDQwWhcNMjYwMzAyMTYwMDQwWjAzMTEwLwYDVQQD Eyg5MzUwZWZkMjVlZDNmYzhmZTliYmZlZmEyMDc3NmI1MDEzOTM3NGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr07s/blP3tg5GMW7xK+ERVEAVb2P V6fht+w7a+6FhkQg5Q0rLEKselCPmH1uZDpayd8OF8tzhe+6tz4ErVW10AouLlGj nWGS0L1hwQuDdZZKiRkcwlqtrClsHBpAmNpyfO88XuC3Hwb7sfgibPj9uiHPvgXW 6ENvKC9zxtd8OlCzrjreSwApLgAe80zx7BIqaopdHYdDXdOhIvcqE6/EFGfc2QDb 9JgIhAkjazfzCUBuYrQrViR/SSEWbGSSJxqVniD5Gw8e492qnox9OkuIqPLBlmO6 qFe+TBRKU41rHenmCGWq/d3gNvni7/vBwqRFnJ6ZHTHs0bu2yUa26mI7qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNQ79Je0/yP6bv++iB3a1ATk3S5MB8GA1UdIwQY MBaAFKEkzN1w8+x2LL1l4E3W92viNqinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iNjk0YjgtODIxMS00YzA2LTljODEt N2IzNTM5N2FmMmY3LzEvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9iNjk0YjgtODIxMS00YzA2LTljODEtN2IzNTM5N2FmMmY3 LzEvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcss1i/R+ aYIZV04zAkg9OekAY6SF24eEoYPTaPHkv0DO5TVcuCnKKR2gC8w58g63g7w6/szy Vcg//bTOyTZRcWY6umYnPHwWFxcDSstnBcDrA9tl5YWfR5JlLoZPXKibxoxgQuaF msC34j0P55f5z/vWX1V6MWMhbycqkKI11lCfdT6R4Nb1U8NL64QFsHRr+fTwro/u 6c5zqtOjxN+ltPZjmEH+4ObbXNajQthdrxb+torBNHFHQcfiq8o7u0RqGO7Qj3yz /O7W1os7EFEIxL81E6/hJXpEo5u0YoYDO2FwFOZB2bUVh/Ye1UdYdY5BIVDSfWnw aVIMNfu+uLkVZg== -----END CERTIFICATE-----Generated at Mon Mar 2 02:30:47 2026 by rpki-client