$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft File: OklF5GdkAp0lgdggwzc_pEWFVTk.mft (raw, json) Hash identifier: 7qOHBTTPulY9blC/bb+8WLdoHTihJFD5JiFAyFhGo4I= Subject key identifier: 3C:0D:9C:02:24:12:C1:7F:76:E5:7C:3D:D3:3A:FF:D0:1E:54:3A:ED Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39 Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539 Certificate serial: 019DA3787034E5EF0587691FCA2335C4B30F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft Manifest number: 18D9 Signing time: Sun 19 Apr 2026 02:01:12 +0000 Manifest this update: Sun 19 Apr 2026 02:01:12 +0000 Manifest next update: Mon 20 Apr 2026 02:01:12 +0000 Files and hashes: 1: 0273NJ6iQvZTgyuMash3xOhPLj8.roa (hash: 4bykyvzdYlZRg3u7BKzjHELAB3KL3rC2juBQve+S7UU=) 2: 78Cs8FmR3BIH_U5LsGqewvTlDV8.roa (hash: Z1dE+G16ehwR1QYJ/Luwdk+orufuAf1qVWJAWByx1UU=) 3: 9ieasZqKBlr3lokENCedNiqsCIM.roa (hash: TDVoR875fUbuSNWGAFsbE/WCEgXPy5Nn5pq79JskxQQ=) 4: 9xohe0WrdtI7HVhoFYevFGaGlbc.roa (hash: JlRzOAenO4QPVaHIwuTlBW/1CKfl7RhsHIL/eBfeU2g=) 5: MD4cosIRi9elPGst52tPGWVVXgQ.roa (hash: uQ5E7La04dxcXCsqGXXrY+8iqi3ww+c05QuoQOajMIE=) 6: OklF5GdkAp0lgdggwzc_pEWFVTk.crl (hash: FB+zDkQYYZTtyQTPfty5b8TWpzze70Pjjom8xQ3KAFw=) 7: PrbXCFhVtFkWUcwdTHxrF95uYDo.roa (hash: qYxwfpMga93RAf62Cr8sXnqP6qDnonu8QcpFUw5HhJ8=) 8: aa9c3i_QmzIlTyi0XFZwJXrmq48.roa (hash: HcRPfUnw0rt8gf5+bGCJq0Ra7n/YA9e5E/2HwqC6qHA=) 9: pdrRYgteZLUMBCQJIc10YC36u-o.roa (hash: fx4ol1jSVjOBVf92RkrVydBgXb8sh/pU0bwRASzDz2U=) 10: pj8mJKqUF_T2Ou11ZZQsgbjDNYQ.roa (hash: fs3ur5x7vbxGo0xyTuilMeKyac+Lx5FJiRM1jXFcziw=) 11: vI4OFivT89O9243mI_1fzU94Pao.roa (hash: vkj2cXgQH1KS/H+As5+qw6+hxQEc0denm5Wi71uvRzE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:78:70:34:e5:ef:05:87:69:1f:ca:23:35:c4:b3:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a4945e46764029d2581d820c3373fa445855539 Validity Not Before: Apr 19 02:01:12 2026 GMT Not After : Apr 20 02:01:12 2026 GMT Subject: CN=3c0d9c022412c17f76e57c3dd33affd01e543aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6b:3c:64:a6:70:42:b1:04:00:35:35:d5:3b: e2:e3:8e:75:04:be:ed:2a:10:eb:eb:ca:ab:53:06: 19:a3:8d:28:cc:37:49:99:78:74:d0:d5:f7:a4:e7: ee:4e:24:3d:5f:67:37:a1:9e:5f:62:e9:cb:30:98: e0:39:3e:92:6b:9f:58:64:75:c6:36:48:f7:ca:da: 5b:20:44:70:e6:cf:6a:de:21:f5:2c:54:44:8f:54: 97:57:9c:30:6d:c2:55:7f:8c:95:83:bc:2f:2d:49: ed:ef:09:63:9b:25:a4:2d:c8:59:32:27:df:ec:d7: 26:16:31:1d:f6:79:a8:82:53:ef:66:d1:d6:97:b2: e1:1d:a1:74:36:85:cb:e7:d9:eb:72:21:3d:b6:21: 4a:0e:23:4c:d7:4a:09:b0:fe:2b:aa:59:27:6a:a0: fe:80:29:04:a7:df:55:3e:1f:98:85:8a:1e:5e:fe: 18:c1:6d:60:f4:dc:45:af:33:55:22:82:36:ac:40: 5c:cc:30:2b:33:ad:b4:49:87:87:78:bf:bf:08:c1: 0b:1a:3a:a1:4e:b9:e2:ce:85:c0:6d:78:d7:23:26: 4b:53:36:c5:e0:f0:03:4d:45:c9:f5:92:ce:ee:28: 71:be:b7:4a:53:d5:99:d6:19:01:e4:2e:df:de:d2: 00:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0D:9C:02:24:12:C1:7F:76:E5:7C:3D:D3:3A:FF:D0:1E:54:3A:ED X509v3 Authority Key Identifier: keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:5a:02:95:42:c6:80:20:42:47:c9:35:a6:99:bf:57:d8:88: ed:92:d6:f7:58:cb:ef:aa:04:92:90:8c:58:8b:88:fb:08:8c: ee:89:68:39:38:73:22:21:2b:ff:9a:1e:93:1f:5c:26:9c:8b: c3:fa:0a:df:5f:9a:67:78:42:e1:9b:63:fd:c2:17:44:dc:d0: 4b:23:b2:9b:35:d2:5c:98:8a:67:8b:a1:a7:ee:fe:c4:a7:c9: e3:ea:d0:ed:ad:1c:11:5d:c3:ef:73:db:9d:f5:fc:3d:4a:44: 27:66:9a:26:0e:da:dd:d2:93:f1:71:9c:94:6b:24:e6:fa:be: 92:af:86:33:67:8c:d9:81:0c:fe:8a:ff:ab:26:ed:04:be:c4: d2:3e:a4:4e:e9:63:e8:f1:fb:38:68:d8:30:1f:25:4f:ee:a4: 4a:84:bc:60:a8:a6:00:f0:2b:20:78:47:35:0f:09:16:e5:1c: 2a:a6:69:95:13:f6:47:7e:1c:7b:86:10:65:7d:0a:dc:04:64: 0b:bc:14:b8:bb:e6:f8:67:19:12:1d:db:93:c2:7b:68:f1:01: f7:e0:d6:e6:f4:4b:c6:d8:84:37:76:22:15:93:70:70:6b:2c: 2e:f7:f9:c0:18:b7:1c:8d:8b:ba:46:bd:59:8b:15:8d:f7:80: 4b:cc:f6:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2jeHA05e8Fh2kfyiM1xLMPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNDk0NWU0Njc2NDAyOWQyNTgxZDgyMGMzMzczZmE0NDU4 NTU1MzkwHhcNMjYwNDE5MDIwMTEyWhcNMjYwNDIwMDIwMTEyWjAzMTEwLwYDVQQD EygzYzBkOWMwMjI0MTJjMTdmNzZlNTdjM2RkMzNhZmZkMDFlNTQzYWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12s8ZKZwQrEEADU11Tvi4451BL7t KhDr68qrUwYZo40ozDdJmXh00NX3pOfuTiQ9X2c3oZ5fYunLMJjgOT6Sa59YZHXG Nkj3ytpbIERw5s9q3iH1LFREj1SXV5wwbcJVf4yVg7wvLUnt7wljmyWkLchZMiff 7NcmFjEd9nmoglPvZtHWl7LhHaF0NoXL59nrciE9tiFKDiNM10oJsP4rqlknaqD+ gCkEp99VPh+YhYoeXv4YwW1g9NxFrzNVIoI2rEBczDArM620SYeHeL+/CMELGjqh TrnizoXAbXjXIyZLUzbF4PADTUXJ9ZLO7ihxvrdKU9WZ1hkB5C7f3tIAkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwNnAIkEsF/duV8PdM6/9AeVDrtMB8GA1UdIwQY MBaAFDpJReRnZAKdJYHYIMM3P6RFhVU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1Njgt MzM2YWM5NDU2NDY0LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1NjgtMzM2YWM5NDU2NDY0 LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEloClULG gCBCR8k1ppm/V9iI7ZLW91jL76oEkpCMWIuI+wiM7oloOThzIiEr/5oekx9cJpyL w/oK31+aZ3hC4Ztj/cIXRNzQSyOymzXSXJiKZ4uhp+7+xKfJ4+rQ7a0cEV3D73Pb nfX8PUpEJ2aaJg7a3dKT8XGclGsk5vq+kq+GM2eM2YEM/or/qybtBL7E0j6kTulj 6PH7OGjYMB8lT+6kSoS8YKimAPArIHhHNQ8JFuUcKqZplRP2R34ce4YQZX0K3ARk C7wUuLvm+GcZEh3bk8J7aPEB9+DW5vRLxtiEN3YiFZNwcGssLvf5wBi3HI2Luka9 WYsVjfeAS8z2Ag== -----END CERTIFICATE-----Generated at Sun Apr 19 08:27:58 2026 by rpki-client