$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft File: OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft (raw, json) Hash identifier: 6cYYeQ+54sSKn1hWJcsajHpoK8020ssDocInoPJpc14= Subject key identifier: F6:96:B6:40:E1:9D:1A:D6:13:5B:B8:62:7E:D6:EB:34:19:EE:A4:CC Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 01A0BFC37CC16B2566F6D0F2136A754EB81B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft Manifest number: 1A76 Signing time: Sun 20 Sep 2026 17:00:54 +0000 Manifest this update: Sun 20 Sep 2026 17:00:54 +0000 Manifest next update: Mon 21 Sep 2026 17:00:54 +0000 Files and hashes: 1: 1wr8QIeSM3CIv5J7uap933hLaGs.roa (hash: Y6lFO4ooFEDBG8EOKNjhhaIJIuCCzVgscAraR7wX8B4=) 2: 4nJ0h3kxVoLTGLl-KMMdIGNO3U4.roa (hash: yXSTzPv+VSMPQEsmFJQmVgwkS8AYD6u5M83BtbV+VIE=) 3: EdrkWbcqLRMSNrh6Sa5x5mnTLPc.roa (hash: Fk5tDegQkNWmVnCc3SYJvszlVAARBSOO/qIaE+GvEdY=) 4: FOt64C6RCxN5JGIdYYt0-jp9RJQ.roa (hash: tamHBKuLjpWpXY8LQK286Mn5I3Q0OVkX8D4lvECCpD8=) 5: LTj2PGdyu1TZVch3WwkoLN3benA.roa (hash: 0uIInrnjr5BRMLrYPZ3TlKAb12B+T0z8Pu5nxkwhOwA=) 6: OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl (hash: 1BtZKKM8xPBUXKpvFyair/fkTlAb5BPWVMbbQCYdacU=) 7: OR9wB6bWiqsZvjqNRRbC11UhrBA.roa (hash: BLhfuTsmrrfMXC8Lx4hjGsCFS5Q2HKcD1UJlTtem6+U=) 8: UJVwk9mntlMFjdR5x6Gz4DwAego.roa (hash: Y9Qzk1ZJNkQeeN5SL4rk7tJNNAoeHg7LXp+c5rv1kJY=) 9: XIxZD227ioGX0cqqVFAINXLyX6Q.roa (hash: sDleWGEf+rrGs4/hbX/4+JTQcRgaaTHiE45KWqHpF+s=) 10: XkdalcQg6hGFzhglm3gQzCnpww4.roa (hash: 8jItQEffXXa+ZvcKZLLyn2RNT/EfLCbVUQe+TOkVNeM=) 11: YWsBcXgsO8gZFuZAgXqc8mQzIPQ.roa (hash: FIq3otCEvunZWYD7V3EpFGXTGzchT90RBkn3PHEPtpE=) 12: cgpmcoUK85pTENssifHpCXJlfPE.roa (hash: JM0iNu1ajeTkqDE4Nqu0ZyqAU2JL5GqcLbiW8nq6Ilc=) 13: eSOXNELPy2P_3h7R8IBwrZVgqTM.roa (hash: r38ULUfgOCtbQfGW33x7ibVGykkgQ5HIh/ZXyBOz91w=) 14: fny2WANL9Kakl_hzClrFytLGIbA.roa (hash: Li0zLoSXMQkOWimSeqYniHU5WmqmT1OGtibQ573h2wE=) 15: hSqKucNYzrS-ITecCZqK51ewyo0.roa (hash: WlW+oWE3pA2mAbzyCA2PCiD4XrqfKT7ZH8dHdqawUFo=) 16: lqG4TiS1VcHtRo5hXtYqEofYXQY.roa (hash: lQ0va2Pv+RAccp1R5C/OndWZWgx6m66STBo/DZ6jbSw=) 17: snScws96TnQnAtgCESncYf2cHQI.roa (hash: Rg061AAdsDJTEuVCFaKulmhMa2nYwQQcIJgWuXh/KyU=) 18: zyiTueEsxpcD3PrX5wVtwGJMZ_Y.roa (hash: 7R1f/73J/Qx3gYsQEvvU8YVQZND5dDU9/Elan9+1kYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 16:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bf:c3:7c:c1:6b:25:66:f6:d0:f2:13:6a:75:4e:b8:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: Sep 20 17:00:54 2026 GMT Not After : Sep 21 17:00:54 2026 GMT Subject: CN=f696b640e19d1ad6135bb8627ed6eb3419eea4cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e4:fe:67:68:d3:58:84:d3:97:e2:b0:86:ca: 34:ed:1c:db:f4:13:cd:99:32:a9:50:d5:64:80:64: fc:e8:29:b0:37:43:d4:34:de:db:46:a8:05:24:10: 5d:53:be:1a:a9:f2:4f:f6:e9:78:e9:31:92:d1:cf: 33:3a:8b:e7:31:0d:e2:c4:8c:d3:9b:f3:15:52:c1: 40:7a:d1:75:c6:d8:53:d8:b1:89:e5:0c:c8:83:ae: a3:b6:dd:c9:05:c7:43:d6:2c:1e:40:0d:36:ae:f9: d4:67:9e:7a:c0:c0:c6:7f:77:71:ea:86:8e:0d:aa: 43:2c:11:7e:1b:a9:3e:e0:e5:43:f9:a3:3e:a7:f7: ba:10:07:8c:02:f0:d3:0b:f7:f3:03:0b:6a:40:01: cd:3f:5f:21:52:44:79:bc:c1:03:1f:31:c3:34:fb: 72:18:66:48:ab:a5:bb:95:e1:fe:bb:be:a3:da:61: 41:37:0d:27:a1:7f:79:cb:1b:fb:01:89:bf:be:8f: 75:43:69:3f:ef:0e:72:fe:d5:ea:9f:f5:4e:04:6c: 11:76:5b:0c:80:cd:cb:3a:bc:ea:26:7c:49:ea:4c: a1:c1:6b:ff:d7:4c:91:7c:48:c5:49:58:41:b8:18: a4:c1:b0:7b:05:62:a5:96:e3:a8:90:48:53:88:db: de:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:96:B6:40:E1:9D:1A:D6:13:5B:B8:62:7E:D6:EB:34:19:EE:A4:CC X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a4:0d:72:12:44:6e:ec:ec:a4:a4:2c:a8:bd:dc:11:81:be: 5e:d9:f2:a1:c2:2f:78:4f:79:f0:2d:96:b3:fb:de:db:1d:e3: 79:f4:91:4e:46:08:5f:4c:7e:f7:a7:42:da:35:a0:33:fb:13: 11:95:07:5a:62:2e:45:6d:71:9f:4b:be:f0:0d:c2:b1:98:10: 82:97:48:2b:6f:bb:23:17:a9:f6:ca:75:3b:ab:ae:72:80:ed: c9:5d:dd:95:a4:fc:3f:01:4a:8f:bf:bd:4e:fc:7f:25:21:48: 89:cc:83:02:01:76:9b:49:4e:a6:c3:0c:38:3b:2a:25:77:ca: f2:8f:22:05:d1:ad:06:47:e0:f4:e7:90:fd:ca:b2:d2:d7:8f: 2c:50:c3:c8:1c:5f:3e:fc:2a:c6:61:79:76:8c:e5:26:45:0f: 49:ea:ad:ca:a7:89:f3:4f:fe:15:4a:e9:a5:3d:fb:84:7f:4e: 82:c0:e8:c6:1d:93:43:2e:5b:c2:59:d8:c6:32:df:ea:9d:d2: 40:c3:f5:67:2c:27:df:30:12:5e:f2:ce:77:3e:1c:9c:20:23: 9e:db:e6:50:96:3c:ff:c5:63:56:85:a7:81:51:10:25:07:0d: 75:7a:4c:16:7b:17:51:81:e4:7a:39:f4:96:4e:91:1c:15:70: b7:24:72:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC/w3zBayVm9tDyE2p1TrgbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjYwOTIwMTcwMDU0WhcNMjYwOTIxMTcwMDU0WjAzMTEwLwYDVQQD EyhmNjk2YjY0MGUxOWQxYWQ2MTM1YmI4NjI3ZWQ2ZWIzNDE5ZWVhNGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOT+Z2jTWITTl+Kwhso07Rzb9BPN mTKpUNVkgGT86CmwN0PUNN7bRqgFJBBdU74aqfJP9ul46TGS0c8zOovnMQ3ixIzT m/MVUsFAetF1xthT2LGJ5QzIg66jtt3JBcdD1iweQA02rvnUZ556wMDGf3dx6oaO DapDLBF+G6k+4OVD+aM+p/e6EAeMAvDTC/fzAwtqQAHNP18hUkR5vMEDHzHDNPty GGZIq6W7leH+u76j2mFBNw0noX95yxv7AYm/vo91Q2k/7w5y/tXqn/VOBGwRdlsM gM3LOrzqJnxJ6kyhwWv/10yRfEjFSVhBuBikwbB7BWKlluOokEhTiNveSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPaWtkDhnRrWE1u4Yn7W6zQZ7qTMMB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6QNchJE buzspKQsqL3cEYG+XtnyocIveE958C2Ws/ve2x3jefSRTkYIX0x+96dC2jWgM/sT EZUHWmIuRW1xn0u+8A3CsZgQgpdIK2+7Ixep9sp1O6uucoDtyV3dlaT8PwFKj7+9 Tvx/JSFIicyDAgF2m0lOpsMMODsqJXfK8o8iBdGtBkfg9OeQ/cqy0tePLFDDyBxf PvwqxmF5dozlJkUPSeqtyqeJ80/+FUrppT37hH9OgsDoxh2TQy5bwlnYxjLf6p3S QMP1Zywn3zASXvLOdz4cnCAjntvmUJY8/8VjVoWngVEQJQcNdXpMFnsXUYHkejn0 lk6RHBVwtyRyew== -----END CERTIFICATE-----Generated at Mon Sep 21 01:16:10 2026 by rpki-client