$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft File: OklF5GdkAp0lgdggwzc_pEWFVTk.mft (raw, json) Hash identifier: ujSu9YMlTiO0nfjIXPz9O88ed01xn8tHERT8G700pPs= Subject key identifier: C3:7C:CB:74:C9:3C:5A:67:7E:0F:A2:4F:29:B4:81:0E:F6:87:DE:D8 Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39 Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539 Certificate serial: 019FA907B094D1D782D6BBD9A13468E8F0F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft Manifest number: 19E5 Signing time: Tue 28 Jul 2026 14:01:20 +0000 Manifest this update: Tue 28 Jul 2026 14:01:20 +0000 Manifest next update: Wed 29 Jul 2026 14:01:20 +0000 Files and hashes: 1: 0273NJ6iQvZTgyuMash3xOhPLj8.roa (hash: 4bykyvzdYlZRg3u7BKzjHELAB3KL3rC2juBQve+S7UU=) 2: 78Cs8FmR3BIH_U5LsGqewvTlDV8.roa (hash: Z1dE+G16ehwR1QYJ/Luwdk+orufuAf1qVWJAWByx1UU=) 3: 9ieasZqKBlr3lokENCedNiqsCIM.roa (hash: TDVoR875fUbuSNWGAFsbE/WCEgXPy5Nn5pq79JskxQQ=) 4: 9xohe0WrdtI7HVhoFYevFGaGlbc.roa (hash: JlRzOAenO4QPVaHIwuTlBW/1CKfl7RhsHIL/eBfeU2g=) 5: MD4cosIRi9elPGst52tPGWVVXgQ.roa (hash: uQ5E7La04dxcXCsqGXXrY+8iqi3ww+c05QuoQOajMIE=) 6: OklF5GdkAp0lgdggwzc_pEWFVTk.crl (hash: TNfShgBjPBKfmvi4Wfwgjp30jOHha31JmpVD8VjdLTo=) 7: PrbXCFhVtFkWUcwdTHxrF95uYDo.roa (hash: qYxwfpMga93RAf62Cr8sXnqP6qDnonu8QcpFUw5HhJ8=) 8: aa9c3i_QmzIlTyi0XFZwJXrmq48.roa (hash: HcRPfUnw0rt8gf5+bGCJq0Ra7n/YA9e5E/2HwqC6qHA=) 9: pdrRYgteZLUMBCQJIc10YC36u-o.roa (hash: fx4ol1jSVjOBVf92RkrVydBgXb8sh/pU0bwRASzDz2U=) 10: pj8mJKqUF_T2Ou11ZZQsgbjDNYQ.roa (hash: fs3ur5x7vbxGo0xyTuilMeKyac+Lx5FJiRM1jXFcziw=) 11: vI4OFivT89O9243mI_1fzU94Pao.roa (hash: vkj2cXgQH1KS/H+As5+qw6+hxQEc0denm5Wi71uvRzE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:07:b0:94:d1:d7:82:d6:bb:d9:a1:34:68:e8:f0:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a4945e46764029d2581d820c3373fa445855539 Validity Not Before: Jul 28 14:01:20 2026 GMT Not After : Jul 29 14:01:20 2026 GMT Subject: CN=c37ccb74c93c5a677e0fa24f29b4810ef687ded8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f4:d6:86:43:0e:9e:a6:d4:48:fb:41:6b:18: a3:05:bf:e5:43:5b:c1:b3:bf:40:08:92:1f:42:a4: 44:db:be:8b:42:0c:22:76:de:cd:50:60:3c:a0:c4: 75:42:a7:08:ea:54:80:3b:d2:18:14:e9:96:2a:de: ea:08:c8:26:45:c2:50:bb:22:ac:12:1e:37:2b:4a: a8:14:be:56:ff:32:a4:c9:4b:f0:33:40:51:7d:2a: 03:0a:bc:4e:d9:7f:67:cf:57:95:cb:66:d1:be:59: 09:87:2a:99:fd:38:f5:5d:bc:82:5d:6d:f3:b9:00: 2d:0e:9a:cb:42:c1:9e:f4:ca:28:b5:5b:2c:79:e8: 21:74:93:df:ff:56:b6:98:d2:36:70:7e:b0:3d:29: c9:79:c8:6b:09:90:ae:d6:3d:93:63:1d:61:f0:c2: 6f:24:74:f3:62:dc:aa:48:15:1c:ab:7c:15:83:f9: d8:63:49:ca:9d:53:0b:62:b2:7b:68:b8:50:b1:a0: a1:20:e1:fb:58:bf:62:ad:20:da:9d:a6:1a:cf:28: 54:b9:4e:51:5b:40:13:c5:a7:4b:e6:b3:25:a9:83: 8a:f3:2f:85:23:71:09:d7:51:12:49:03:bb:bc:fc: 7d:26:0e:39:98:a3:7f:b6:37:ba:90:e8:67:59:79: 76:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7C:CB:74:C9:3C:5A:67:7E:0F:A2:4F:29:B4:81:0E:F6:87:DE:D8 X509v3 Authority Key Identifier: keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ca:ec:95:03:66:1b:e3:2c:74:77:40:f8:6e:12:ab:52:b6: 0e:e1:6c:ec:41:be:ab:f6:43:74:32:8c:3a:1e:21:ed:c6:d5: 21:68:71:80:24:d4:05:cf:1b:6b:24:e4:27:c9:44:7c:06:91: b6:08:50:58:4d:48:26:19:75:8a:88:92:5a:0f:ca:a9:6c:65: 1c:5b:c1:96:ab:80:54:50:3b:e5:d1:f5:35:c6:f8:44:42:b2: d9:e8:4a:5a:8c:ec:d7:89:ac:2b:9e:4e:1c:6e:2f:30:61:14: 98:aa:0a:82:1e:c5:3d:bf:a7:47:8e:36:8c:cc:05:05:cc:94: 7b:b1:fd:97:5e:2f:81:6a:93:aa:77:44:52:ac:02:ee:93:4c: 14:ad:36:d7:31:20:42:ab:27:8f:0d:9c:ba:24:ae:23:6e:cc: 81:72:74:f7:4a:22:87:0d:ff:17:eb:02:76:87:ff:9e:22:21: 86:27:35:1d:69:d4:a7:f0:a5:f4:b8:e1:0c:4b:d9:2f:ce:d6: 88:f9:bb:df:96:21:9f:b5:3c:94:6a:a4:c7:ab:47:9a:df:43: 86:fe:de:b4:f5:d9:f5:b9:dc:d5:4a:7c:24:13:4d:40:5c:28: 4b:78:c4:5b:9c:f1:7e:28:df:e7:c5:5b:5f:b4:df:46:09:cf: 20:6b:52:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pB7CU0deC1rvZoTRo6PD2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNDk0NWU0Njc2NDAyOWQyNTgxZDgyMGMzMzczZmE0NDU4 NTU1MzkwHhcNMjYwNzI4MTQwMTIwWhcNMjYwNzI5MTQwMTIwWjAzMTEwLwYDVQQD EyhjMzdjY2I3NGM5M2M1YTY3N2UwZmEyNGYyOWI0ODEwZWY2ODdkZWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/TWhkMOnqbUSPtBaxijBb/lQ1vB s79ACJIfQqRE276LQgwidt7NUGA8oMR1QqcI6lSAO9IYFOmWKt7qCMgmRcJQuyKs Eh43K0qoFL5W/zKkyUvwM0BRfSoDCrxO2X9nz1eVy2bRvlkJhyqZ/Tj1XbyCXW3z uQAtDprLQsGe9MootVsseeghdJPf/1a2mNI2cH6wPSnJechrCZCu1j2TYx1h8MJv JHTzYtyqSBUcq3wVg/nYY0nKnVMLYrJ7aLhQsaChIOH7WL9irSDanaYazyhUuU5R W0ATxadL5rMlqYOK8y+FI3EJ11ESSQO7vPx9Jg45mKN/tje6kOhnWXl2HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMN8y3TJPFpnfg+iTym0gQ72h97YMB8GA1UdIwQY MBaAFDpJReRnZAKdJYHYIMM3P6RFhVU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1Njgt MzM2YWM5NDU2NDY0LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1NjgtMzM2YWM5NDU2NDY0 LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMrslQNm G+MsdHdA+G4Sq1K2DuFs7EG+q/ZDdDKMOh4h7cbVIWhxgCTUBc8bayTkJ8lEfAaR tghQWE1IJhl1ioiSWg/KqWxlHFvBlquAVFA75dH1Ncb4REKy2ehKWozs14msK55O HG4vMGEUmKoKgh7FPb+nR442jMwFBcyUe7H9l14vgWqTqndEUqwC7pNMFK021zEg Qqsnjw2cuiSuI27MgXJ090oihw3/F+sCdof/niIhhic1HWnUp/Cl9LjhDEvZL87W iPm735Yhn7U8lGqkx6tHmt9Dhv7etPXZ9bnc1Up8JBNNQFwoS3jEW5zxfijf58Vb X7TfRgnPIGtSXw== -----END CERTIFICATE-----Generated at Tue Jul 28 18:10:46 2026 by rpki-client