$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft File: olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json) Hash identifier: zM0JVhMsOI0xYljQOfmQldOkYZlib9qJyxi45xGSkO4= Subject key identifier: 52:6A:B1:43:54:05:C8:6A:32:FD:C3:5B:BF:A6:9A:F0:D0:D0:97:DB Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 019CA8D885E3D26F40FA7B8FE98C911719B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft Manifest number: 187B Signing time: Sun 01 Mar 2026 10:01:28 +0000 Manifest this update: Sun 01 Mar 2026 10:01:28 +0000 Manifest next update: Mon 02 Mar 2026 10:01:28 +0000 Files and hashes: 1: 0dbyZwebQgTGMD5-wPhJH6_Pd5I.roa (hash: rG5nZgpv1Ah9jz+mC9094dW59+5lFAhfWaH5ssnQtAk=) 2: 1-SQFDfpp9D_i817zUQFbntY0dRQ.roa (hash: biSe4GCFtSwazcB9PCCa1NKBDVP5/i0SLuwOHponshU=) 3: 2frKTWb3ttQDpCXNMXbTSXrlIqI.roa (hash: obnt34G7IEsjg6vdddM8muzJwshLaBlLPb65paOFsfE=) 4: 3lYygY9QSAAHtzgINKWVRrbCp_4.roa (hash: xTlxdsrlszD3wQ8XFzdmUFKsu5SMwqAldL5Rb7oJqzA=) 5: 4WijXRQsTuAJtSd_hSZYlUqj8lA.roa (hash: cDODijNSh6xud6bY86CXr7OdBhes8GnABNkzt2sQT9E=) 6: 7zTwSbIrIN1tbHKaAerBGKh4H_4.roa (hash: Uj+d0N/fp4CQPw2Wdyt0B7bkrgBCMNOKaEUgThPZLo4=) 7: Gv1ql7t0nNON87AJIldQVqDpbaw.roa (hash: Afsi36EyWB2mwsT0UzfNkOmYYiw9CwLh31zU2SIsaxk=) 8: I2KpdLXbpYuKcc5P2UrERlbUmQI.roa (hash: QwjjNYoou+Yqw7bbIshNHDY3CQQBCro8tQly5UuqIPQ=) 9: K6IIfeYnJcau7XFah26WtRrWoX4.roa (hash: kAmjx0E3nDeIJhDMXwZG/0loikW8ryL2ZHfuoiau2sI=) 10: KfKdKGXKrJVAyc679p1xVdKcOuU.roa (hash: MZjQw9I7nKK82B9sKr7/qbtBGaD/PhRCNNoKDtPpSRQ=) 11: KhnFPatizLYzbuYdUdtwNlimK_A.roa (hash: p+Mj3EP56tIkokr0WqjKkNv7zw4zz51aSvtLv2wkCDw=) 12: Nn2M0QjFRAa_T2cmYDVUHTJ5GXs.roa (hash: ROtPVP9nVJ4sSu+guXDuQ34VOIJfTdPXZnYgNbsVTRc=) 13: PT0OVKn7DoYDkXnLiYT9h8XOQSo.roa (hash: P3oRTt1oGGLmL6K2JdXvl8dIu0LI9RbrIcGwZo70+dU=) 14: T-Tc8u-y-A23bEMCsm71F_7_jTg.roa (hash: uvA7IEtWcoBgqQxL/f1PptXnW15RVEqbUY2vsk5myZQ=) 15: TUHp0yldZUy2noEeejLALiKlsOA.roa (hash: hJdNCDGT+WfObUpSa1plMcdJasirz1T8A6b/aK4MsFo=) 16: TgBpdGwKgCYXVi-ZeVCMbfdynwQ.roa (hash: WSlOfiJJGk4JzRn+dJ1iw8VYAl7aA0mI15CFDBrgID0=) 17: Urxc-_3dN2rsdSn-CFXZaM1OMmE.roa (hash: KTdVek6dN9t33L+6LCMmAcoph/JKLQZZF3RFY22Laag=) 18: aFybrbDshxtrknuOyM8RFxRBKs0.roa (hash: RQU0CLTgvLglUS45QfR69+raL0+alWumuh4CDPItdCA=) 19: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: O0vX4ni57WQMrP43q+rr/ZY9QkdH17z8tGavx8oT8z0=) 20: rZIzlxjNqrmdhiYj8eZcD_DAyYQ.roa (hash: HtYYyQJMTgOPk/TpOD1+JZFhzQ3pNzbNJ5gyclYza/w=) 21: thqMO7NSQ4YZbOJpf7E5T4h4Qx4.roa (hash: CSkwEjedoekw5JE8fDs8zoEDa+VA8TtlPZQTJSLtR3Q=) 22: xqLMI4n3mv1T0FOyglej7wVFdYE.roa (hash: BA8dbC4wqu6gr5aHMdPy/PzpkFFbaeIFkYk6ddxpagE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a8:d8:85:e3:d2:6f:40:fa:7b:8f:e9:8c:91:17:19:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Mar 1 10:01:28 2026 GMT Not After : Mar 2 10:01:28 2026 GMT Subject: CN=526ab1435405c86a32fdc35bbfa69af0d0d097db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a0:a1:4c:28:90:67:ab:87:90:35:1a:73:ef: 5a:23:a7:5f:10:7c:36:74:2b:b1:17:cd:e8:53:ea: 16:2f:45:80:5a:18:79:b9:88:c6:6d:e9:86:7e:19: 0f:eb:9c:4a:2e:9e:13:34:39:9f:8c:53:1d:54:13: ea:96:ef:cb:4f:a6:ad:63:00:3d:a7:5b:79:ab:c7: 09:99:1b:20:ec:22:15:7d:30:22:9b:c1:54:4d:3e: cf:f6:be:44:94:49:24:1b:60:04:a4:4c:16:67:cc: ac:d8:9a:74:53:e2:88:17:e7:fe:b4:56:ea:09:1a: d3:66:28:9b:16:af:2e:83:1d:cb:32:1f:e2:de:ed: ce:76:60:c2:43:29:30:1e:cb:97:9d:65:a4:b3:a6: c9:08:08:55:34:eb:1e:2d:35:09:c8:b5:d6:d8:f1: 6c:36:3f:d5:10:4d:ba:e7:a9:a5:f9:9e:08:a5:b5: da:b2:1c:75:2c:f8:ed:da:bc:7e:1b:cc:6d:72:9b: de:dc:ad:64:f8:4b:2c:6e:98:ed:bc:0c:95:bc:29: 42:35:0b:d1:a9:84:0d:38:29:b3:85:df:a7:48:41: 08:75:e2:83:0a:42:39:98:a8:d6:42:ab:11:9e:35: 93:27:ab:88:b7:af:dc:40:8a:b7:ef:94:b4:38:a4: 2d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6A:B1:43:54:05:C8:6A:32:FD:C3:5B:BF:A6:9A:F0:D0:D0:97:DB X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e6:15:39:9c:fe:34:15:f5:9e:9e:15:b4:fd:66:79:a9:04: ee:6e:e6:35:53:74:bc:ed:b6:1c:b6:f2:4e:75:01:d9:2b:fa: 65:04:03:52:75:c1:b4:75:2c:db:a3:23:8a:fa:5c:ed:ac:cd: 7e:f9:de:3e:fd:32:e3:89:7b:fa:d4:32:6f:78:0c:f2:36:5c: a8:36:cf:88:39:3b:ba:e1:2c:e2:52:43:90:8f:2e:cd:13:d1: 50:a3:6a:69:d4:7d:a5:3a:4c:03:f5:ca:42:16:c2:32:69:3a: 8b:da:f1:4b:4b:0f:9b:f0:f2:8a:d0:64:98:96:76:77:a6:dd: d2:dc:ba:fb:2c:1f:1d:d8:70:5a:42:62:10:48:d9:8e:3e:fe: 1c:d0:41:9e:02:a3:6b:d8:9c:4e:61:90:56:2f:72:c5:d5:22: fd:04:1b:19:88:e0:79:3e:91:1f:dc:70:d0:a5:66:5e:0b:f5: 98:9b:37:6f:6f:ab:65:f5:42:63:6b:bf:6f:14:ca:b1:0b:6e: 0d:47:f2:6f:0a:50:af:37:67:8b:f1:72:61:41:4e:c5:5c:99: f8:1a:67:07:59:ef:43:8a:1e:57:db:c8:31:84:2a:ef:94:9f: ef:df:cc:51:2d:5a:51:e7:64:e7:77:df:a7:ec:13:48:f3:f1: f0:f7:94:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyo2IXj0m9A+nuP6YyRFxm1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjYwMzAxMTAwMTI4WhcNMjYwMzAyMTAwMTI4WjAzMTEwLwYDVQQD Eyg1MjZhYjE0MzU0MDVjODZhMzJmZGMzNWJiZmE2OWFmMGQwZDA5N2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aChTCiQZ6uHkDUac+9aI6dfEHw2 dCuxF83oU+oWL0WAWhh5uYjGbemGfhkP65xKLp4TNDmfjFMdVBPqlu/LT6atYwA9 p1t5q8cJmRsg7CIVfTAim8FUTT7P9r5ElEkkG2AEpEwWZ8ys2Jp0U+KIF+f+tFbq CRrTZiibFq8ugx3LMh/i3u3OdmDCQykwHsuXnWWks6bJCAhVNOseLTUJyLXW2PFs Nj/VEE2656ml+Z4IpbXashx1LPjt2rx+G8xtcpve3K1k+EssbpjtvAyVvClCNQvR qYQNOCmzhd+nSEEIdeKDCkI5mKjWQqsRnjWTJ6uIt6/cQIq375S0OKQtZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJqsUNUBchqMv3DW7+mmvDQ0JfbMB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+YVOZz+ NBX1np4VtP1meakE7m7mNVN0vO22HLbyTnUB2Sv6ZQQDUnXBtHUs26Mjivpc7azN fvnePv0y44l7+tQyb3gM8jZcqDbPiDk7uuEs4lJDkI8uzRPRUKNqadR9pTpMA/XK QhbCMmk6i9rxS0sPm/DyitBkmJZ2d6bd0ty6+ywfHdhwWkJiEEjZjj7+HNBBngKj a9icTmGQVi9yxdUi/QQbGYjgeT6RH9xw0KVmXgv1mJs3b2+rZfVCY2u/bxTKsQtu DUfybwpQrzdni/FyYUFOxVyZ+BpnB1nvQ4oeV9vIMYQq75Sf79/MUS1aUedk53ff p+wTSPPx8PeUpw== -----END CERTIFICATE-----Generated at Sun Mar 1 16:28:36 2026 by rpki-client