$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json) Hash identifier: ckK5Z0tYm17ChKizx+8VowFd0v5BRAdf6SguprDtucg= Subject key identifier: 7F:9D:2A:AA:38:9E:DE:7D:37:E3:C7:EF:93:70:B6:53:0C:6D:77:55 Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 019D9962B37E9213A4A0387134A5302231F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft Manifest number: 17C4 Signing time: Fri 17 Apr 2026 03:01:15 +0000 Manifest this update: Fri 17 Apr 2026 03:01:15 +0000 Manifest next update: Sat 18 Apr 2026 03:01:15 +0000 Files and hashes: 1: FGiko7dGfaIB7oR3Xi7Mm0g0B5A.roa (hash: scq4CicoT05WIHFHPE3BCJO1Q1h5wfjqMz4jQNxHqFE=) 2: KQgcPbLRBBc_xsh51xPt4IehnO4.roa (hash: pCfM4q8twqlvRaHLGHOBBp4aKXHoEg09la6QGcZB7h0=) 3: MCBZ2CxaM7LC481GLSYWHeppO5E.roa (hash: 02Ro7KtAxSGq3svayvXMnjLyQYv+fnx2uhv691O7tMc=) 4: OJxTLDXJ9pqUGXVl4-ml1R-2R0g.roa (hash: /fFWCePAVkjb5ODL9wnIO10abW6/OG68dBuoesYNJwY=) 5: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: uuoreobNZhQ2l+e8NF/ZwdGqrfgKaHF3JILGVALsZJk=) 6: P2rUWmGQtbBmqctNiSQO8OXzg4I.roa (hash: bkGnGwFiN2vuWeWrlQUo7BY3bYxabah/LiMHvh76HzA=) 7: dnVcuIVq43rB8PBNyYX_JeEUFJ0.roa (hash: Ff78hIKwiWd51/Bth5HBmfNxfzKtqYOa3kRFT0AYoJo=) 8: qMp9a9fZ12e7dbvzcdMaCDW60vw.roa (hash: o7dkvXGE+57eQ04kql8R9kA6Rq92Dubxz9WCs56/6I0=) 9: rjNblK4bxhZyMeZC4OHShSQ8Jlc.roa (hash: yvBwo79kSdn4a3N6pjUOiYNe2QQKF2EmdQtpBeT8m8w=) 10: ui12U8ehqDuyNEV4dxeMmGkBpyU.roa (hash: yINc/cfZuw+HDq9yk/ySvw+zjfDYf1qaipCTcvu1wXg=) 11: yPa3IsW1LrF4FBqa6S6lkA7l0yg.roa (hash: axDlKBJFR60teKJKWRG+25tdp59Gp45JEAqx4Nz1QQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:62:b3:7e:92:13:a4:a0:38:71:34:a5:30:22:31:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: Apr 17 03:01:15 2026 GMT Not After : Apr 18 03:01:15 2026 GMT Subject: CN=7f9d2aaa389ede7d37e3c7ef9370b6530c6d7755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e7:56:13:2d:5d:d2:f1:b6:36:62:65:89:14: fc:fb:d2:da:3f:41:f9:06:5e:a8:bb:96:10:76:1f: 18:19:a4:80:c5:00:8b:5e:d1:bb:7b:99:af:cd:8d: 58:a0:3d:07:c2:37:6a:48:14:bf:4a:fb:3d:47:19: 0d:8e:f7:62:28:35:93:20:12:9f:a4:5c:9f:d9:b7: 74:98:40:bc:67:d0:bc:fa:b0:3c:6f:28:d4:90:24: 9b:af:2f:c5:1a:a9:a6:50:7a:12:a8:69:b4:14:d4: 07:94:3a:15:f4:69:0a:55:44:68:ed:4f:ca:2e:1e: 48:a5:40:98:b5:67:a4:d0:be:17:06:37:50:53:61: 82:f2:bd:8c:a0:58:c5:6e:f6:21:6d:7c:f7:df:c8: 0f:d7:68:9c:35:7c:8b:23:55:d6:66:1d:a9:70:d0: e6:93:0f:40:d8:0d:c8:8e:10:24:11:ed:4b:66:b7: b8:45:1d:fd:d5:76:fb:46:63:e1:28:cc:8c:a0:55: 1d:f3:3c:64:f2:2c:b2:43:d5:04:a1:03:ef:f1:0b: 97:7a:75:e8:15:d3:c0:93:1e:5d:7e:0b:f4:14:b7: c5:a3:7d:9e:37:18:19:cf:21:dc:2a:63:d3:ba:8c: f1:bc:c1:5a:35:01:6a:af:ad:1c:0f:37:47:30:b9: 07:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:9D:2A:AA:38:9E:DE:7D:37:E3:C7:EF:93:70:B6:53:0C:6D:77:55 X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:c1:5c:11:d8:78:aa:f2:18:a2:92:1b:dc:98:b2:d2:df:40: 17:28:7a:39:4b:8a:44:2a:a8:3b:c3:9f:33:0a:fc:bf:7d:2a: d4:0d:f1:46:12:e2:5a:78:a7:7d:8b:d2:dc:b2:8b:4d:8f:33: dd:ed:a6:d4:91:63:c6:df:ac:c4:40:cb:f2:09:9e:3d:23:68: 04:7c:5c:bb:d2:f2:19:f6:07:a0:48:bf:cc:1a:b6:4c:28:e7: 87:9c:1c:61:1f:43:2a:35:23:4a:56:f5:a2:23:09:38:26:43: 76:94:5c:61:e0:39:8c:2e:66:d3:2f:87:41:73:04:05:69:1b: 09:cb:02:5b:2b:9a:3d:0e:23:a7:43:0c:e8:5e:15:9d:4a:66: 0c:18:df:7a:4a:f6:ee:a7:75:fa:44:37:5a:10:16:1c:f6:56: 34:d4:b1:ca:02:d2:03:85:7e:68:e2:bf:b7:77:b6:97:22:cf: 3f:09:d3:31:d1:3f:98:a4:f8:52:4f:84:2a:cf:0a:74:61:85: ef:9d:64:f9:c4:ca:72:7b:47:8f:31:b5:2a:43:fa:7c:03:4a: c5:ec:3a:0c:33:0a:0d:97:5a:67:6a:1b:b2:fe:56:72:ac:28: d2:61:f8:ab:1b:f2:5e:e9:31:38:97:22:b7:73:f1:8f:fc:1c: ff:c0:db:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZYrN+khOkoDhxNKUwIjHzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjYwNDE3MDMwMTE1WhcNMjYwNDE4MDMwMTE1WjAzMTEwLwYDVQQD Eyg3ZjlkMmFhYTM4OWVkZTdkMzdlM2M3ZWY5MzcwYjY1MzBjNmQ3NzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+dWEy1d0vG2NmJliRT8+9LaP0H5 Bl6ou5YQdh8YGaSAxQCLXtG7e5mvzY1YoD0HwjdqSBS/Svs9RxkNjvdiKDWTIBKf pFyf2bd0mEC8Z9C8+rA8byjUkCSbry/FGqmmUHoSqGm0FNQHlDoV9GkKVURo7U/K Lh5IpUCYtWek0L4XBjdQU2GC8r2MoFjFbvYhbXz338gP12icNXyLI1XWZh2pcNDm kw9A2A3IjhAkEe1LZre4RR391Xb7RmPhKMyMoFUd8zxk8iyyQ9UEoQPv8QuXenXo FdPAkx5dfgv0FLfFo32eNxgZzyHcKmPTuozxvMFaNQFqr60cDzdHMLkHXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+dKqo4nt59N+PH75NwtlMMbXdVMB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVsFcEdh4 qvIYopIb3Jiy0t9AFyh6OUuKRCqoO8OfMwr8v30q1A3xRhLiWninfYvS3LKLTY8z 3e2m1JFjxt+sxEDL8gmePSNoBHxcu9LyGfYHoEi/zBq2TCjnh5wcYR9DKjUjSlb1 oiMJOCZDdpRcYeA5jC5m0y+HQXMEBWkbCcsCWyuaPQ4jp0MM6F4VnUpmDBjfekr2 7qd1+kQ3WhAWHPZWNNSxygLSA4V+aOK/t3e2lyLPPwnTMdE/mKT4Uk+EKs8KdGGF 751k+cTKcntHjzG1KkP6fANKxew6DDMKDZdaZ2obsv5Wcqwo0mH4qxvyXukxOJci t3Pxj/wc/8DbCw== -----END CERTIFICATE-----Generated at Fri Apr 17 06:26:31 2026 by rpki-client