$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json) Hash identifier: VGRB8JNjz6DAzI5icTdXmEEGgtB42hL1YmSPJKfv6lY= Subject key identifier: 29:EC:04:42:C3:41:6E:08:23:01:89:75:66:EF:79:01:3C:49:9B:87 Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 019CAD5A09A3C07D73F0EBCDF61D98EC70CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft Manifest number: 1749 Signing time: Mon 02 Mar 2026 07:01:24 +0000 Manifest this update: Mon 02 Mar 2026 07:01:24 +0000 Manifest next update: Tue 03 Mar 2026 07:01:24 +0000 Files and hashes: 1: FGiko7dGfaIB7oR3Xi7Mm0g0B5A.roa (hash: scq4CicoT05WIHFHPE3BCJO1Q1h5wfjqMz4jQNxHqFE=) 2: KQgcPbLRBBc_xsh51xPt4IehnO4.roa (hash: pCfM4q8twqlvRaHLGHOBBp4aKXHoEg09la6QGcZB7h0=) 3: OJxTLDXJ9pqUGXVl4-ml1R-2R0g.roa (hash: /fFWCePAVkjb5ODL9wnIO10abW6/OG68dBuoesYNJwY=) 4: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: Uh78KFQ5ra5LISbgRBG3RW/3w9ihruMD0zMt70L5uQ8=) 5: P2rUWmGQtbBmqctNiSQO8OXzg4I.roa (hash: bkGnGwFiN2vuWeWrlQUo7BY3bYxabah/LiMHvh76HzA=) 6: RzegIjPR1QzKh4a_hxBHbhA-B7Q.roa (hash: X0vld209GqgyvupdPCzCZcV5LdmNngCSYRQVBP6Po68=) 7: dnVcuIVq43rB8PBNyYX_JeEUFJ0.roa (hash: Ff78hIKwiWd51/Bth5HBmfNxfzKtqYOa3kRFT0AYoJo=) 8: iT_vYQVHuMA40jiF0Cyjlq3oV5Q.roa (hash: uoXIHy7+H0DFX9JCkb/wj88eqL9rtsamz/egtPFv+L4=) 9: qMp9a9fZ12e7dbvzcdMaCDW60vw.roa (hash: o7dkvXGE+57eQ04kql8R9kA6Rq92Dubxz9WCs56/6I0=) 10: rjNblK4bxhZyMeZC4OHShSQ8Jlc.roa (hash: yvBwo79kSdn4a3N6pjUOiYNe2QQKF2EmdQtpBeT8m8w=) 11: ui12U8ehqDuyNEV4dxeMmGkBpyU.roa (hash: yINc/cfZuw+HDq9yk/ySvw+zjfDYf1qaipCTcvu1wXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ad:5a:09:a3:c0:7d:73:f0:eb:cd:f6:1d:98:ec:70:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: Mar 2 07:01:24 2026 GMT Not After : Mar 3 07:01:24 2026 GMT Subject: CN=29ec0442c3416e082301897566ef79013c499b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cf:8a:e9:86:68:4a:c1:2a:f1:4f:ac:01:51: f2:5e:d1:2a:99:d9:0a:93:88:d8:52:3d:2d:80:c7: 0b:32:1f:27:49:e2:a6:09:9f:b2:66:95:25:83:86: ec:8d:46:26:01:0a:ff:5e:43:a7:21:8b:d0:60:ad: b2:65:63:54:7f:df:07:14:84:fc:81:ec:49:77:83: 1f:16:46:76:18:67:e1:94:71:76:6f:33:2c:e4:48: f9:d5:82:fc:70:d6:6f:ba:ee:1a:da:46:29:1f:4d: 29:8b:65:ed:e2:98:b7:03:6a:3b:7f:fa:cf:6c:ec: dd:97:ea:40:34:27:57:49:25:4e:aa:78:63:7e:6a: c3:a5:86:d7:66:20:4c:53:4c:a7:13:2c:5e:27:d9: e3:52:05:c4:db:75:66:84:3d:27:d8:b5:c8:01:5d: f3:71:39:94:ae:6e:6c:2c:28:e3:01:eb:93:1c:7a: 20:9a:17:a8:31:dd:d1:63:fb:4d:07:e5:16:f7:33: e4:75:f4:89:75:85:01:b5:5d:e9:77:08:db:7c:10: 03:d3:8c:6a:4e:ed:ab:64:a0:45:21:63:ef:b6:11: e7:ae:84:15:d2:3d:d3:75:7d:22:ef:3f:db:26:57: 4d:39:44:5d:8a:55:e2:de:15:6f:49:a5:57:05:c9: 13:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EC:04:42:C3:41:6E:08:23:01:89:75:66:EF:79:01:3C:49:9B:87 X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:7f:94:aa:99:d8:4d:82:7b:92:38:b5:35:19:8e:3e:19:99: 2c:27:e1:9c:ae:a9:67:b4:8c:68:78:59:f6:4c:9c:8c:11:66: 66:33:eb:85:b2:2a:fb:91:43:64:13:a9:78:53:2d:53:11:61: b9:6e:8e:5f:f4:50:fe:ab:20:f3:19:eb:fb:e8:c2:b8:15:1e: b7:a4:4d:bf:32:c7:b5:60:74:25:f4:f3:ee:79:22:01:79:9f: 8b:b6:61:30:e0:eb:88:a6:fc:51:ad:1b:f7:df:b6:30:56:a0: b1:50:26:f6:71:13:9f:c3:fb:52:1c:73:99:f7:04:bd:67:71: 23:82:e1:3e:31:c9:fc:36:e1:a2:87:7c:44:08:de:b7:1a:11: 80:4e:2d:8b:93:05:63:9d:52:9f:be:4d:e3:ac:91:f6:b3:cf: 52:fb:af:ac:d4:69:29:0b:2e:47:8a:90:27:f4:4f:c7:fc:4e: c0:f2:2e:58:cd:3a:e9:91:30:19:fc:54:cf:2a:e7:dc:a2:12: e6:46:f4:67:da:8a:51:ee:22:39:77:4f:7e:1e:a0:a5:28:3a: 4c:db:36:e3:e7:39:d5:40:b3:d6:5f:75:a0:b8:fd:a1:97:6d: c0:1a:24:7a:83:a1:dd:8d:ca:4b:e0:a3:d4:ab:37:7f:a0:92: b3:e7:d0:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZytWgmjwH1z8OvN9h2Y7HDNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjYwMzAyMDcwMTI0WhcNMjYwMzAzMDcwMTI0WjAzMTEwLwYDVQQD EygyOWVjMDQ0MmMzNDE2ZTA4MjMwMTg5NzU2NmVmNzkwMTNjNDk5Yjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28+K6YZoSsEq8U+sAVHyXtEqmdkK k4jYUj0tgMcLMh8nSeKmCZ+yZpUlg4bsjUYmAQr/XkOnIYvQYK2yZWNUf98HFIT8 gexJd4MfFkZ2GGfhlHF2bzMs5Ej51YL8cNZvuu4a2kYpH00pi2Xt4pi3A2o7f/rP bOzdl+pANCdXSSVOqnhjfmrDpYbXZiBMU0ynEyxeJ9njUgXE23VmhD0n2LXIAV3z cTmUrm5sLCjjAeuTHHogmheoMd3RY/tNB+UW9zPkdfSJdYUBtV3pdwjbfBAD04xq Tu2rZKBFIWPvthHnroQV0j3TdX0i7z/bJldNOURdilXi3hVvSaVXBckTCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCnsBELDQW4IIwGJdWbveQE8SZuHMB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgH+UqpnY TYJ7kji1NRmOPhmZLCfhnK6pZ7SMaHhZ9kycjBFmZjPrhbIq+5FDZBOpeFMtUxFh uW6OX/RQ/qsg8xnr++jCuBUet6RNvzLHtWB0JfTz7nkiAXmfi7ZhMODriKb8Ua0b 99+2MFagsVAm9nETn8P7UhxzmfcEvWdxI4LhPjHJ/Dbhood8RAjetxoRgE4ti5MF Y51Sn75N46yR9rPPUvuvrNRpKQsuR4qQJ/RPx/xOwPIuWM066ZEwGfxUzyrn3KIS 5kb0Z9qKUe4iOXdPfh6gpSg6TNs24+c51UCz1l91oLj9oZdtwBokeoOh3Y3KS+Cj 1Ks3f6CSs+fQhg== -----END CERTIFICATE-----Generated at Mon Mar 2 09:42:07 2026 by rpki-client