$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft File: olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json) Hash identifier: YdLSWyam3NHltzKhwpRv35JwWaVlF9OJyUGjIIcisvE= Subject key identifier: 23:07:7E:EF:8E:EA:E3:32:0F:D1:E5:37:A9:62:42:70:5F:92:F0:D0 Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 019D9998D6BA2675DCB23F839512EFC14B31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft Manifest number: 18F8 Signing time: Fri 17 Apr 2026 04:00:23 +0000 Manifest this update: Fri 17 Apr 2026 04:00:23 +0000 Manifest next update: Sat 18 Apr 2026 04:00:23 +0000 Files and hashes: 1: 0dbyZwebQgTGMD5-wPhJH6_Pd5I.roa (hash: rG5nZgpv1Ah9jz+mC9094dW59+5lFAhfWaH5ssnQtAk=) 2: 1-SQFDfpp9D_i817zUQFbntY0dRQ.roa (hash: biSe4GCFtSwazcB9PCCa1NKBDVP5/i0SLuwOHponshU=) 3: 2frKTWb3ttQDpCXNMXbTSXrlIqI.roa (hash: obnt34G7IEsjg6vdddM8muzJwshLaBlLPb65paOFsfE=) 4: 3lYygY9QSAAHtzgINKWVRrbCp_4.roa (hash: xTlxdsrlszD3wQ8XFzdmUFKsu5SMwqAldL5Rb7oJqzA=) 5: 4WijXRQsTuAJtSd_hSZYlUqj8lA.roa (hash: cDODijNSh6xud6bY86CXr7OdBhes8GnABNkzt2sQT9E=) 6: 7zTwSbIrIN1tbHKaAerBGKh4H_4.roa (hash: Uj+d0N/fp4CQPw2Wdyt0B7bkrgBCMNOKaEUgThPZLo4=) 7: Gv1ql7t0nNON87AJIldQVqDpbaw.roa (hash: Afsi36EyWB2mwsT0UzfNkOmYYiw9CwLh31zU2SIsaxk=) 8: I2KpdLXbpYuKcc5P2UrERlbUmQI.roa (hash: QwjjNYoou+Yqw7bbIshNHDY3CQQBCro8tQly5UuqIPQ=) 9: K6IIfeYnJcau7XFah26WtRrWoX4.roa (hash: kAmjx0E3nDeIJhDMXwZG/0loikW8ryL2ZHfuoiau2sI=) 10: KfKdKGXKrJVAyc679p1xVdKcOuU.roa (hash: MZjQw9I7nKK82B9sKr7/qbtBGaD/PhRCNNoKDtPpSRQ=) 11: Nn2M0QjFRAa_T2cmYDVUHTJ5GXs.roa (hash: ROtPVP9nVJ4sSu+guXDuQ34VOIJfTdPXZnYgNbsVTRc=) 12: PT0OVKn7DoYDkXnLiYT9h8XOQSo.roa (hash: P3oRTt1oGGLmL6K2JdXvl8dIu0LI9RbrIcGwZo70+dU=) 13: T-Tc8u-y-A23bEMCsm71F_7_jTg.roa (hash: uvA7IEtWcoBgqQxL/f1PptXnW15RVEqbUY2vsk5myZQ=) 14: TUHp0yldZUy2noEeejLALiKlsOA.roa (hash: hJdNCDGT+WfObUpSa1plMcdJasirz1T8A6b/aK4MsFo=) 15: TgBpdGwKgCYXVi-ZeVCMbfdynwQ.roa (hash: WSlOfiJJGk4JzRn+dJ1iw8VYAl7aA0mI15CFDBrgID0=) 16: Urxc-_3dN2rsdSn-CFXZaM1OMmE.roa (hash: KTdVek6dN9t33L+6LCMmAcoph/JKLQZZF3RFY22Laag=) 17: aFybrbDshxtrknuOyM8RFxRBKs0.roa (hash: RQU0CLTgvLglUS45QfR69+raL0+alWumuh4CDPItdCA=) 18: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: 2J//m3BGZ/bO7yOF4ONJ2xctDovTwldC+VKr5a3DX3o=) 19: rZIzlxjNqrmdhiYj8eZcD_DAyYQ.roa (hash: HtYYyQJMTgOPk/TpOD1+JZFhzQ3pNzbNJ5gyclYza/w=) 20: thqMO7NSQ4YZbOJpf7E5T4h4Qx4.roa (hash: CSkwEjedoekw5JE8fDs8zoEDa+VA8TtlPZQTJSLtR3Q=) 21: xqLMI4n3mv1T0FOyglej7wVFdYE.roa (hash: BA8dbC4wqu6gr5aHMdPy/PzpkFFbaeIFkYk6ddxpagE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 04:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:98:d6:ba:26:75:dc:b2:3f:83:95:12:ef:c1:4b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Apr 17 04:00:23 2026 GMT Not After : Apr 18 04:00:23 2026 GMT Subject: CN=23077eef8eeae3320fd1e537a96242705f92f0d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:db:4b:33:f1:d8:5a:c7:08:24:b9:94:5e:e1: 6d:75:2a:61:d7:3d:8b:ab:de:e8:13:d5:16:21:5c: da:d6:75:3e:57:9e:14:1c:f2:5b:27:af:6e:9c:36: ba:03:c1:b6:5c:4b:31:8e:c3:80:5d:b0:af:b3:e6: 84:82:f0:c6:1c:b1:9f:60:3f:8f:27:dd:4b:89:8a: f4:c8:e7:76:10:71:87:39:7f:64:48:cc:e1:fd:a2: b6:cb:e2:f5:ff:dd:f5:f2:23:e2:ed:34:3e:9f:8e: 04:1e:7f:54:36:c4:4b:09:ce:75:c0:ac:5c:c5:21: 48:d9:84:6b:00:3e:9b:79:66:46:04:6a:34:3a:dc: d2:29:38:d1:33:3c:64:d7:45:1b:f1:45:b7:6d:31: 61:0c:82:56:67:d7:ed:21:88:bd:cc:b2:86:fc:3a: c0:38:70:3e:55:0d:0a:e4:c7:8c:8d:27:6d:90:6c: 48:8a:f5:1b:ea:cb:d1:d7:fd:9f:28:a7:13:72:77: 9a:20:b7:4f:0e:28:6d:94:42:fe:b4:08:7a:10:00: a1:1d:55:86:df:fe:88:3b:0d:ac:b3:e1:e7:57:22: 5b:c3:c8:85:d5:7a:5e:54:98:e5:7c:f6:73:b6:b8: b7:8c:a6:d6:94:f7:85:7e:34:a5:ef:fd:b6:7f:2f: bf:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:07:7E:EF:8E:EA:E3:32:0F:D1:E5:37:A9:62:42:70:5F:92:F0:D0 X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:c7:b6:d9:56:7c:4d:32:d9:ac:68:c6:b6:b8:19:ef:47:b9: 36:df:dc:cf:c1:80:6f:ec:8f:a5:24:a3:6c:02:33:0d:db:bb: 9a:46:e4:6a:be:1d:95:15:ac:ce:f5:24:2b:aa:5a:aa:ac:1a: ef:3b:c0:bd:49:2d:c5:10:ae:0b:9a:31:85:9e:d8:5a:64:0a: 1f:cf:00:25:0d:50:48:e3:c9:e5:5e:ec:3a:9c:52:22:d5:8a: e8:6c:a7:28:99:66:77:31:7d:b3:91:5c:99:60:7f:86:58:b0: a7:67:fd:79:11:cb:0b:97:e3:b1:a0:cd:df:04:29:6b:42:9b: c4:e3:5b:8b:f7:c5:e4:2c:58:77:5b:2e:aa:05:fb:e7:e4:d5: 9e:b5:21:33:c2:94:ab:7c:07:c7:0d:22:14:28:10:0b:13:2e: c1:ce:36:f5:f0:aa:1e:05:60:90:30:d2:3c:a5:60:d4:24:4a: fd:53:5e:4a:61:f8:96:9b:88:a7:79:10:f1:93:7a:af:70:9c: 1e:a4:92:8f:30:f6:6e:e8:1c:4c:1d:d8:fb:a7:3c:ad:0e:9b: 06:2e:be:b1:d7:6f:21:a3:d9:63:8b:a6:d8:ad:af:99:1f:ca: 41:43:d1:43:a3:1b:9b:3f:ab:56:6b:ab:67:d9:54:cb:7e:d1: f4:be:98:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZmNa6JnXcsj+DlRLvwUsxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjYwNDE3MDQwMDIzWhcNMjYwNDE4MDQwMDIzWjAzMTEwLwYDVQQD EygyMzA3N2VlZjhlZWFlMzMyMGZkMWU1MzdhOTYyNDI3MDVmOTJmMGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdtLM/HYWscIJLmUXuFtdSph1z2L q97oE9UWIVza1nU+V54UHPJbJ69unDa6A8G2XEsxjsOAXbCvs+aEgvDGHLGfYD+P J91LiYr0yOd2EHGHOX9kSMzh/aK2y+L1/9318iPi7TQ+n44EHn9UNsRLCc51wKxc xSFI2YRrAD6beWZGBGo0OtzSKTjRMzxk10Ub8UW3bTFhDIJWZ9ftIYi9zLKG/DrA OHA+VQ0K5MeMjSdtkGxIivUb6svR1/2fKKcTcneaILdPDihtlEL+tAh6EAChHVWG 3/6IOw2ss+HnVyJbw8iF1XpeVJjlfPZztri3jKbWlPeFfjSl7/22fy+/JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMHfu+O6uMyD9HlN6liQnBfkvDQMB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVse22VZ8 TTLZrGjGtrgZ70e5Nt/cz8GAb+yPpSSjbAIzDdu7mkbkar4dlRWszvUkK6paqqwa 7zvAvUktxRCuC5oxhZ7YWmQKH88AJQ1QSOPJ5V7sOpxSItWK6GynKJlmdzF9s5Fc mWB/hliwp2f9eRHLC5fjsaDN3wQpa0KbxONbi/fF5CxYd1suqgX75+TVnrUhM8KU q3wHxw0iFCgQCxMuwc429fCqHgVgkDDSPKVg1CRK/VNeSmH4lpuIp3kQ8ZN6r3Cc HqSSjzD2bugcTB3Y+6c8rQ6bBi6+sddvIaPZY4um2K2vmR/KQUPRQ6Mbmz+rVmur Z9lUy37R9L6YwA== -----END CERTIFICATE-----Generated at Fri Apr 17 11:16:43 2026 by rpki-client