$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft File: OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft (raw, json) Hash identifier: cXbTUhaT0+z4e+muz+pL6/F/CoiQFIYQkrHQiU/JgRI= Subject key identifier: BF:C4:EC:16:E5:D9:8D:D7:D3:C7:4A:36:C6:28:02:FE:4A:2B:53:4B Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 019EBFFF60822A69F7276FFA816C3A3537C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft Manifest number: 196C Signing time: Sat 13 Jun 2026 08:00:45 +0000 Manifest this update: Sat 13 Jun 2026 08:00:45 +0000 Manifest next update: Sun 14 Jun 2026 08:00:45 +0000 Files and hashes: 1: 1wr8QIeSM3CIv5J7uap933hLaGs.roa (hash: Y6lFO4ooFEDBG8EOKNjhhaIJIuCCzVgscAraR7wX8B4=) 2: 4nJ0h3kxVoLTGLl-KMMdIGNO3U4.roa (hash: yXSTzPv+VSMPQEsmFJQmVgwkS8AYD6u5M83BtbV+VIE=) 3: EdrkWbcqLRMSNrh6Sa5x5mnTLPc.roa (hash: Fk5tDegQkNWmVnCc3SYJvszlVAARBSOO/qIaE+GvEdY=) 4: FOt64C6RCxN5JGIdYYt0-jp9RJQ.roa (hash: tamHBKuLjpWpXY8LQK286Mn5I3Q0OVkX8D4lvECCpD8=) 5: LTj2PGdyu1TZVch3WwkoLN3benA.roa (hash: 0uIInrnjr5BRMLrYPZ3TlKAb12B+T0z8Pu5nxkwhOwA=) 6: OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl (hash: F2d7+ug1+ngjmJm+jl9+ED03D0YdZJFxQLtqjBXN8Os=) 7: OR9wB6bWiqsZvjqNRRbC11UhrBA.roa (hash: BLhfuTsmrrfMXC8Lx4hjGsCFS5Q2HKcD1UJlTtem6+U=) 8: UJVwk9mntlMFjdR5x6Gz4DwAego.roa (hash: Y9Qzk1ZJNkQeeN5SL4rk7tJNNAoeHg7LXp+c5rv1kJY=) 9: XIxZD227ioGX0cqqVFAINXLyX6Q.roa (hash: sDleWGEf+rrGs4/hbX/4+JTQcRgaaTHiE45KWqHpF+s=) 10: XkdalcQg6hGFzhglm3gQzCnpww4.roa (hash: 8jItQEffXXa+ZvcKZLLyn2RNT/EfLCbVUQe+TOkVNeM=) 11: YWsBcXgsO8gZFuZAgXqc8mQzIPQ.roa (hash: FIq3otCEvunZWYD7V3EpFGXTGzchT90RBkn3PHEPtpE=) 12: cgpmcoUK85pTENssifHpCXJlfPE.roa (hash: JM0iNu1ajeTkqDE4Nqu0ZyqAU2JL5GqcLbiW8nq6Ilc=) 13: eSOXNELPy2P_3h7R8IBwrZVgqTM.roa (hash: r38ULUfgOCtbQfGW33x7ibVGykkgQ5HIh/ZXyBOz91w=) 14: fPatpWdNAbZy6ojdptQs2lNi1EE.roa (hash: X9tWk7+bmsyMGDUglxjA0jdRl4uO9c2P7cIjkiKVhfo=) 15: fny2WANL9Kakl_hzClrFytLGIbA.roa (hash: Li0zLoSXMQkOWimSeqYniHU5WmqmT1OGtibQ573h2wE=) 16: lqG4TiS1VcHtRo5hXtYqEofYXQY.roa (hash: lQ0va2Pv+RAccp1R5C/OndWZWgx6m66STBo/DZ6jbSw=) 17: snScws96TnQnAtgCESncYf2cHQI.roa (hash: Rg061AAdsDJTEuVCFaKulmhMa2nYwQQcIJgWuXh/KyU=) 18: zyiTueEsxpcD3PrX5wVtwGJMZ_Y.roa (hash: 7R1f/73J/Qx3gYsQEvvU8YVQZND5dDU9/Elan9+1kYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bf:ff:60:82:2a:69:f7:27:6f:fa:81:6c:3a:35:37:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: Jun 13 08:00:45 2026 GMT Not After : Jun 14 08:00:45 2026 GMT Subject: CN=bfc4ec16e5d98dd7d3c74a36c62802fe4a2b534b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4c:d9:7d:6a:8c:51:19:e7:4b:3c:6a:c3:aa: 68:10:3a:71:1a:31:3b:ce:33:08:c0:90:98:8d:87: df:9c:93:a9:8a:3a:91:e6:86:33:dc:e7:70:78:91: 43:46:66:0b:d9:cf:b9:7c:84:a2:46:66:ca:33:51: 37:a1:37:cb:d0:b2:e6:6f:b0:34:48:3c:86:40:9c: 0f:6c:00:5d:bb:1e:2d:bd:42:a3:f4:9d:0d:4c:11: b4:29:e2:c6:ce:6f:77:69:ad:db:78:0a:63:72:af: ce:70:ff:a1:e4:83:bd:a0:fc:2d:e3:b9:dd:7d:82: 16:f2:cb:2f:bd:c0:53:5b:d2:61:53:fb:14:5a:66: c0:7f:22:9d:b6:e5:0c:60:f4:eb:fe:70:95:72:50: cc:f4:91:04:b6:0d:10:58:3c:ce:c8:4e:c6:1d:fe: 44:eb:7e:59:f0:a3:fd:d6:73:a7:13:42:c0:f3:5d: bd:b4:39:0a:e0:96:f1:a1:f1:f0:7b:56:51:06:2f: 3c:bd:59:9a:1d:ae:03:ce:51:13:18:a3:c6:fd:55: ea:fd:3d:2b:1e:84:6c:53:33:6c:d6:f4:7d:6a:e9: d3:1a:97:cb:cc:59:b1:aa:94:79:16:57:d5:17:fb: 73:64:99:20:76:95:ca:3f:b2:bd:3f:63:1a:04:07: ff:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C4:EC:16:E5:D9:8D:D7:D3:C7:4A:36:C6:28:02:FE:4A:2B:53:4B X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:c5:c2:2c:19:97:9c:58:54:80:bf:d3:74:f3:29:99:cf:27: 73:ba:b7:f7:e7:3f:f2:38:89:ae:60:7c:05:e2:21:0b:6d:5a: 3c:c4:66:cc:5b:67:89:51:80:38:3c:a0:0f:c3:e0:47:f7:dc: 21:60:31:94:52:5c:37:f2:bd:f5:8f:af:e8:e1:61:20:d5:74: 18:e1:78:5f:a0:f1:3e:86:4e:6e:da:4d:7a:be:dc:e3:23:16: d4:c0:b5:e0:cd:ae:13:b5:dc:42:fc:a4:8c:55:1c:69:3c:8e: 4d:44:36:06:eb:47:74:59:ab:3d:94:9c:95:8e:57:d7:37:92: 42:47:a8:18:c4:20:bb:bb:a9:de:3c:ef:a5:8b:c2:8d:71:9e: eb:53:fe:7b:fe:43:fc:65:8d:b1:25:a5:27:62:69:18:01:d3: 03:3d:53:7c:32:dc:3f:b3:bf:89:4b:fa:ea:e8:19:88:e6:d6: 31:57:6c:9f:2e:8a:ed:d1:58:aa:56:07:c0:bc:6e:9b:2f:98: 85:8f:98:6c:42:f1:7d:d6:4d:7c:f2:a4:f4:ad:bb:c1:27:90: 33:f4:9b:79:77:92:b4:8e:04:68:5d:b3:62:ce:b5:8e:da:00: f7:80:58:84:f1:38:8f:06:96:74:6f:22:a1:b9:56:e9:81:12: 76:8b:0c:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6//2CCKmn3J2/6gWw6NTfHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjYwNjEzMDgwMDQ1WhcNMjYwNjE0MDgwMDQ1WjAzMTEwLwYDVQQD EyhiZmM0ZWMxNmU1ZDk4ZGQ3ZDNjNzRhMzZjNjI4MDJmZTRhMmI1MzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskzZfWqMURnnSzxqw6poEDpxGjE7 zjMIwJCYjYffnJOpijqR5oYz3OdweJFDRmYL2c+5fISiRmbKM1E3oTfL0LLmb7A0 SDyGQJwPbABdux4tvUKj9J0NTBG0KeLGzm93aa3beApjcq/OcP+h5IO9oPwt47nd fYIW8ssvvcBTW9JhU/sUWmbAfyKdtuUMYPTr/nCVclDM9JEEtg0QWDzOyE7GHf5E 635Z8KP91nOnE0LA8129tDkK4JbxofHwe1ZRBi88vVmaHa4DzlETGKPG/VXq/T0r HoRsUzNs1vR9aunTGpfLzFmxqpR5FlfVF/tzZJkgdpXKP7K9P2MaBAf/aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/E7Bbl2Y3X08dKNsYoAv5KK1NLMB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcXCLBmX nFhUgL/TdPMpmc8nc7q39+c/8jiJrmB8BeIhC21aPMRmzFtniVGAODygD8PgR/fc IWAxlFJcN/K99Y+v6OFhINV0GOF4X6DxPoZObtpNer7c4yMW1MC14M2uE7XcQvyk jFUcaTyOTUQ2ButHdFmrPZSclY5X1zeSQkeoGMQgu7up3jzvpYvCjXGe61P+e/5D /GWNsSWlJ2JpGAHTAz1TfDLcP7O/iUv66ugZiObWMVdsny6K7dFYqlYHwLxumy+Y hY+YbELxfdZNfPKk9K27wSeQM/SbeXeStI4EaF2zYs61jtoA94BYhPE4jwaWdG8i oblW6YESdosMGQ== -----END CERTIFICATE-----Generated at Sat Jun 13 11:04:45 2026 by rpki-client