$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json) Hash identifier: KFotKXgOUFD81Osctwl+aokQSROJdsVtPWHQAgtxIwY= Subject key identifier: BB:E4:4C:13:01:DD:4F:EA:B1:13:9B:3D:C8:BB:BD:A3:FA:72:5E:64 Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 019EC970EC2F75184EC2342AD81AC062FAC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft Manifest number: 1866 Signing time: Mon 15 Jun 2026 04:01:21 +0000 Manifest this update: Mon 15 Jun 2026 04:01:21 +0000 Manifest next update: Tue 16 Jun 2026 04:01:21 +0000 Files and hashes: 1: KQgcPbLRBBc_xsh51xPt4IehnO4.roa (hash: pCfM4q8twqlvRaHLGHOBBp4aKXHoEg09la6QGcZB7h0=) 2: MCBZ2CxaM7LC481GLSYWHeppO5E.roa (hash: 02Ro7KtAxSGq3svayvXMnjLyQYv+fnx2uhv691O7tMc=) 3: OJxTLDXJ9pqUGXVl4-ml1R-2R0g.roa (hash: /fFWCePAVkjb5ODL9wnIO10abW6/OG68dBuoesYNJwY=) 4: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: k+DjhIBHZTztk7IRerLT4b2VDIAO1jGPXFFMXLHDyMc=) 5: UNEG0RbhpGfDIQfxZ4i2ieICO9g.roa (hash: kKbhwxHzyZ1nQMHyypRvyIhRmV3QS30VEm56g35Omd4=) 6: Vg59mkjZjPChn5V72yQkRuYsw5w.roa (hash: ZT1vWv2NLvyggQYSfbG/ST95n5y42mBT1SrPiyV/11c=) 7: dnVcuIVq43rB8PBNyYX_JeEUFJ0.roa (hash: Ff78hIKwiWd51/Bth5HBmfNxfzKtqYOa3kRFT0AYoJo=) 8: rjNblK4bxhZyMeZC4OHShSQ8Jlc.roa (hash: yvBwo79kSdn4a3N6pjUOiYNe2QQKF2EmdQtpBeT8m8w=) 9: ui12U8ehqDuyNEV4dxeMmGkBpyU.roa (hash: yINc/cfZuw+HDq9yk/ySvw+zjfDYf1qaipCTcvu1wXg=) 10: ybxPsztAzlmVPObK0OoBTddoDSQ.roa (hash: d3b9yiAURGnHAdeyevteUI2cI7ETobUn55NXVEoQFao=) 11: znRtvDjx6p6QKqOpN-UH1Bqd7ao.roa (hash: +4jJSJNUJ8eFyd4hEIFej6uo6SX/BvFj2H5hv/FUtHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Jun 2026 04:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c9:70:ec:2f:75:18:4e:c2:34:2a:d8:1a:c0:62:fa:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: Jun 15 04:01:21 2026 GMT Not After : Jun 16 04:01:21 2026 GMT Subject: CN=bbe44c1301dd4feab1139b3dc8bbbda3fa725e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4a:e2:d6:a7:21:a6:f8:97:9e:00:7b:f2:d3: d7:37:a2:27:e3:10:f7:fe:3e:b2:52:9a:7d:fc:1f: c2:50:52:84:af:99:4f:48:66:31:4a:2c:28:fd:69: 55:f7:a2:f4:9f:a4:0d:fe:b9:8b:16:05:75:ad:ed: 72:3b:80:3b:21:bc:14:ce:b5:be:99:ed:6a:21:07: cf:03:61:55:6b:e4:87:78:ea:a8:54:bd:24:b6:6b: 24:c6:b4:0e:b9:0d:29:16:74:80:0e:58:d1:12:4b: a1:30:c9:c4:f5:6d:fc:25:ee:55:45:b6:24:e5:19: d6:eb:01:b6:0b:e1:e1:ed:89:25:ac:8c:eb:59:40: 5a:88:b2:d6:b5:a1:18:2c:07:34:04:a2:c1:20:6f: b5:51:51:1f:57:44:0f:2a:31:65:de:7c:27:6f:e3: fc:33:b6:35:f2:38:a6:fa:24:1e:a1:08:df:ae:64: d3:7a:08:cc:60:a8:40:ad:89:d0:4f:75:57:be:91: b0:23:0d:87:41:ec:fe:2a:39:8a:4a:5d:f4:8f:6a: 3a:2e:e6:09:f2:2e:31:dc:e9:28:e9:79:ac:d1:9d: ff:39:02:93:c4:c5:d1:53:57:e9:6c:b2:dd:78:63: 12:ef:80:24:36:dc:a5:25:7c:30:1c:17:c3:29:df: 17:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E4:4C:13:01:DD:4F:EA:B1:13:9B:3D:C8:BB:BD:A3:FA:72:5E:64 X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ec:1e:49:6b:f5:39:cc:ce:6a:47:72:2f:f9:46:9f:27:d7: 03:72:95:f0:e6:c6:86:e7:f4:9b:bf:54:eb:80:05:58:03:cf: 89:18:88:5e:7f:47:47:dd:b8:b0:35:18:1e:a6:f9:b3:dc:d7: d1:aa:ea:aa:90:20:8c:74:33:0a:76:ab:e6:0e:b2:85:06:b7: e4:a2:92:7a:97:37:12:1a:9a:06:a8:e8:30:c9:2b:53:0e:de: 44:a4:f4:8d:d3:0b:17:9a:da:6d:4d:1d:ce:07:de:10:d0:a8: 4e:60:d7:83:a4:0e:26:61:36:ae:ea:fb:06:80:45:2c:f8:e3: b1:00:11:86:1c:34:d8:23:3d:e0:ad:3b:fa:bb:db:14:81:e8: 0f:14:df:4f:1a:24:d2:e9:58:6e:30:ed:20:01:c8:b4:e8:29: 65:ed:6e:e0:34:03:d6:4d:6b:75:e6:0c:90:fc:69:1b:0c:74: 4e:94:21:47:33:6f:02:85:ce:c9:ec:c5:cc:ef:dc:13:e0:3e: 98:67:c0:fe:5f:5b:81:e9:88:b1:91:49:16:ad:4d:18:82:4c: 31:48:3a:8c:1e:44:5d:52:d8:7d:02:2c:04:e9:5c:09:50:c2: 96:c2:6f:0e:29:97:cd:ba:fc:28:fa:b0:1c:2d:db:76:dd:4e: c7:20:d6:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7JcOwvdRhOwjQq2BrAYvrCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjYwNjE1MDQwMTIxWhcNMjYwNjE2MDQwMTIxWjAzMTEwLwYDVQQD EyhiYmU0NGMxMzAxZGQ0ZmVhYjExMzliM2RjOGJiYmRhM2ZhNzI1ZTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEri1qchpviXngB78tPXN6In4xD3 /j6yUpp9/B/CUFKEr5lPSGYxSiwo/WlV96L0n6QN/rmLFgV1re1yO4A7IbwUzrW+ me1qIQfPA2FVa+SHeOqoVL0ktmskxrQOuQ0pFnSADljREkuhMMnE9W38Je5VRbYk 5RnW6wG2C+Hh7YklrIzrWUBaiLLWtaEYLAc0BKLBIG+1UVEfV0QPKjFl3nwnb+P8 M7Y18jim+iQeoQjfrmTTegjMYKhArYnQT3VXvpGwIw2HQez+KjmKSl30j2o6LuYJ 8i4x3Oko6Xms0Z3/OQKTxMXRU1fpbLLdeGMS74AkNtylJXwwHBfDKd8XFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvkTBMB3U/qsRObPci7vaP6cl5kMB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjOweSWv1 OczOakdyL/lGnyfXA3KV8ObGhuf0m79U64AFWAPPiRiIXn9HR924sDUYHqb5s9zX 0arqqpAgjHQzCnar5g6yhQa35KKSepc3EhqaBqjoMMkrUw7eRKT0jdMLF5rabU0d zgfeENCoTmDXg6QOJmE2rur7BoBFLPjjsQARhhw02CM94K07+rvbFIHoDxTfTxok 0ulYbjDtIAHItOgpZe1u4DQD1k1rdeYMkPxpGwx0TpQhRzNvAoXOyezFzO/cE+A+ mGfA/l9bgemIsZFJFq1NGIJMMUg6jB5EXVLYfQIsBOlcCVDClsJvDimXzbr8KPqw HC3bdt1OxyDWNw== -----END CERTIFICATE-----Generated at Mon Jun 15 12:35:36 2026 by rpki-client