$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft File: OklF5GdkAp0lgdggwzc_pEWFVTk.mft (raw, json) Hash identifier: QOGhmyMyx86WHl2Ce6oZZP4V5xz5cq6RtpygRqrWWpI= Subject key identifier: 27:A3:C5:3D:F1:39:AA:DA:A3:90:0F:72:DC:6B:5A:69:C0:59:F4:27 Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39 Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539 Certificate serial: 019EBF5A3F5ABF41CCD740C0D39CF541B7E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft Manifest number: 196C Signing time: Sat 13 Jun 2026 05:00:23 +0000 Manifest this update: Sat 13 Jun 2026 05:00:23 +0000 Manifest next update: Sun 14 Jun 2026 05:00:23 +0000 Files and hashes: 1: 0273NJ6iQvZTgyuMash3xOhPLj8.roa (hash: 4bykyvzdYlZRg3u7BKzjHELAB3KL3rC2juBQve+S7UU=) 2: 78Cs8FmR3BIH_U5LsGqewvTlDV8.roa (hash: Z1dE+G16ehwR1QYJ/Luwdk+orufuAf1qVWJAWByx1UU=) 3: 9ieasZqKBlr3lokENCedNiqsCIM.roa (hash: TDVoR875fUbuSNWGAFsbE/WCEgXPy5Nn5pq79JskxQQ=) 4: 9xohe0WrdtI7HVhoFYevFGaGlbc.roa (hash: JlRzOAenO4QPVaHIwuTlBW/1CKfl7RhsHIL/eBfeU2g=) 5: MD4cosIRi9elPGst52tPGWVVXgQ.roa (hash: uQ5E7La04dxcXCsqGXXrY+8iqi3ww+c05QuoQOajMIE=) 6: OklF5GdkAp0lgdggwzc_pEWFVTk.crl (hash: bpjLyh767R7cVmv04Qnvgc+2xt3uT0IwLm16eVcLRx0=) 7: PrbXCFhVtFkWUcwdTHxrF95uYDo.roa (hash: qYxwfpMga93RAf62Cr8sXnqP6qDnonu8QcpFUw5HhJ8=) 8: aa9c3i_QmzIlTyi0XFZwJXrmq48.roa (hash: HcRPfUnw0rt8gf5+bGCJq0Ra7n/YA9e5E/2HwqC6qHA=) 9: pdrRYgteZLUMBCQJIc10YC36u-o.roa (hash: fx4ol1jSVjOBVf92RkrVydBgXb8sh/pU0bwRASzDz2U=) 10: pj8mJKqUF_T2Ou11ZZQsgbjDNYQ.roa (hash: fs3ur5x7vbxGo0xyTuilMeKyac+Lx5FJiRM1jXFcziw=) 11: vI4OFivT89O9243mI_1fzU94Pao.roa (hash: vkj2cXgQH1KS/H+As5+qw6+hxQEc0denm5Wi71uvRzE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bf:5a:3f:5a:bf:41:cc:d7:40:c0:d3:9c:f5:41:b7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a4945e46764029d2581d820c3373fa445855539 Validity Not Before: Jun 13 05:00:23 2026 GMT Not After : Jun 14 05:00:23 2026 GMT Subject: CN=27a3c53df139aadaa3900f72dc6b5a69c059f427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a9:b5:f9:68:1f:24:e7:cf:e3:fa:39:50:1e: c9:49:2b:8c:dc:31:f8:1d:76:8b:69:bf:00:16:ed: c8:d2:bd:e5:34:61:53:5f:94:eb:83:22:d9:32:e3: a5:bc:93:f9:3d:a0:6e:79:60:bd:d4:1a:72:31:e0: 65:fe:af:4a:ee:9d:a2:1f:62:dd:ce:3b:ff:75:9c: 64:8d:43:74:fe:9a:b6:96:d9:12:89:bc:7f:0e:c9: e4:0a:02:81:de:2b:84:de:de:1f:23:a5:d7:f5:aa: 6b:e5:f0:95:fd:a2:74:00:f7:aa:af:57:31:cb:c9: a9:12:8b:36:90:01:9b:12:1f:64:6c:7f:56:0d:c6: 6e:0c:54:32:c1:51:bc:26:14:da:c2:ef:18:b2:6c: 6d:38:cb:2c:4d:73:16:60:1f:d4:d7:d5:9f:10:a0: 24:f1:fb:d3:79:d0:de:a1:d4:a1:aa:d5:4d:c5:c9: e9:94:38:18:ec:5a:05:e7:a2:e2:2c:f6:2c:6d:65: cf:05:47:aa:43:89:29:3e:02:0e:99:0c:c8:7c:68: 4e:74:73:e2:fe:be:80:4a:2e:a6:ce:61:6d:5d:06: 37:c8:51:e2:19:27:90:a4:1a:aa:cc:4d:c4:7e:4d: 22:9d:86:0c:7a:69:d7:b2:47:bc:5b:3e:dc:ac:35: 93:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A3:C5:3D:F1:39:AA:DA:A3:90:0F:72:DC:6B:5A:69:C0:59:F4:27 X509v3 Authority Key Identifier: keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:4c:dd:42:ae:a5:29:83:88:8d:15:12:1a:5c:ec:22:b1:99: 99:6a:3a:0c:a5:bb:0f:46:ee:7c:cd:c4:07:93:04:57:e7:f7: 4f:48:27:99:bf:44:43:4d:4c:ab:52:5c:21:21:41:81:51:00: ca:b8:de:bd:8a:3c:77:8c:59:6f:01:e4:54:fd:01:97:86:e6: 6a:00:ad:fc:0a:df:a1:b7:6c:cb:51:95:10:99:d9:ae:2f:32: 3e:a2:23:ed:ef:e2:ee:5c:8e:f1:8c:f0:58:26:cb:d7:29:ab: ce:49:87:87:93:4c:5a:8b:82:bb:ab:22:ff:b0:2b:35:6e:50: d4:1a:7d:d0:63:d9:70:6b:bc:fe:31:5a:a6:7e:74:52:d8:39: 2d:38:c5:98:6b:f0:83:2e:f1:58:72:d5:72:b3:42:f8:11:f4: 19:ff:f0:d3:7a:05:28:18:db:2f:bf:e7:c8:33:5e:f3:44:5e: 7f:c2:09:79:65:8a:11:a1:6b:c3:85:b3:89:0f:17:f2:93:63: 74:1c:a0:eb:85:10:07:28:7f:0c:26:74:f5:85:ab:0b:7d:bb: b4:4b:0e:27:03:df:8d:7f:4b:1b:7b:c4:b7:3e:81:90:f9:d6: 30:a9:e7:7b:d4:25:9a:ad:bf:76:cf:10:74:69:cb:f5:b8:28: ca:45:fc:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6/Wj9av0HM10DA05z1QbfgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNDk0NWU0Njc2NDAyOWQyNTgxZDgyMGMzMzczZmE0NDU4 NTU1MzkwHhcNMjYwNjEzMDUwMDIzWhcNMjYwNjE0MDUwMDIzWjAzMTEwLwYDVQQD EygyN2EzYzUzZGYxMzlhYWRhYTM5MDBmNzJkYzZiNWE2OWMwNTlmNDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6m1+WgfJOfP4/o5UB7JSSuM3DH4 HXaLab8AFu3I0r3lNGFTX5TrgyLZMuOlvJP5PaBueWC91BpyMeBl/q9K7p2iH2Ld zjv/dZxkjUN0/pq2ltkSibx/DsnkCgKB3iuE3t4fI6XX9apr5fCV/aJ0APeqr1cx y8mpEos2kAGbEh9kbH9WDcZuDFQywVG8JhTawu8YsmxtOMssTXMWYB/U19WfEKAk 8fvTedDeodShqtVNxcnplDgY7FoF56LiLPYsbWXPBUeqQ4kpPgIOmQzIfGhOdHPi /r6ASi6mzmFtXQY3yFHiGSeQpBqqzE3Efk0inYYMemnXske8Wz7crDWTRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCejxT3xOarao5APctxrWmnAWfQnMB8GA1UdIwQY MBaAFDpJReRnZAKdJYHYIMM3P6RFhVU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1Njgt MzM2YWM5NDU2NDY0LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1NjgtMzM2YWM5NDU2NDY0 LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUzdQq6l KYOIjRUSGlzsIrGZmWo6DKW7D0bufM3EB5MEV+f3T0gnmb9EQ01Mq1JcISFBgVEA yrjevYo8d4xZbwHkVP0Bl4bmagCt/Arfobdsy1GVEJnZri8yPqIj7e/i7lyO8Yzw WCbL1ymrzkmHh5NMWouCu6si/7ArNW5Q1Bp90GPZcGu8/jFapn50Utg5LTjFmGvw gy7xWHLVcrNC+BH0Gf/w03oFKBjbL7/nyDNe80Ref8IJeWWKEaFrw4WziQ8X8pNj dByg64UQByh/DCZ09YWrC327tEsOJwPfjX9LG3vEtz6BkPnWMKnne9Qlmq2/ds8Q dGnL9bgoykX8Vw== -----END CERTIFICATE-----Generated at Sat Jun 13 08:28:33 2026 by rpki-client