$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft File: OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft (raw, json) Hash identifier: FWd7D1jg2ZEnBhaieBL/4C+Nxc2H7FiYdAR9hP67Fn0= Subject key identifier: F4:91:CC:91:ED:E4:DF:B4:10:89:93:FA:3E:98:D8:B6:69:C1:D7:69 Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 019FA9ABA498B12509962286867DA24C8E0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft Manifest number: 19E6 Signing time: Tue 28 Jul 2026 17:00:26 +0000 Manifest this update: Tue 28 Jul 2026 17:00:26 +0000 Manifest next update: Wed 29 Jul 2026 17:00:26 +0000 Files and hashes: 1: 1wr8QIeSM3CIv5J7uap933hLaGs.roa (hash: Y6lFO4ooFEDBG8EOKNjhhaIJIuCCzVgscAraR7wX8B4=) 2: 4nJ0h3kxVoLTGLl-KMMdIGNO3U4.roa (hash: yXSTzPv+VSMPQEsmFJQmVgwkS8AYD6u5M83BtbV+VIE=) 3: EdrkWbcqLRMSNrh6Sa5x5mnTLPc.roa (hash: Fk5tDegQkNWmVnCc3SYJvszlVAARBSOO/qIaE+GvEdY=) 4: FOt64C6RCxN5JGIdYYt0-jp9RJQ.roa (hash: tamHBKuLjpWpXY8LQK286Mn5I3Q0OVkX8D4lvECCpD8=) 5: LTj2PGdyu1TZVch3WwkoLN3benA.roa (hash: 0uIInrnjr5BRMLrYPZ3TlKAb12B+T0z8Pu5nxkwhOwA=) 6: OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl (hash: qdPxIgEFVJ7FEmhJkZfVT2cWqSDp2H8MauNgoPsdGKU=) 7: OR9wB6bWiqsZvjqNRRbC11UhrBA.roa (hash: BLhfuTsmrrfMXC8Lx4hjGsCFS5Q2HKcD1UJlTtem6+U=) 8: UJVwk9mntlMFjdR5x6Gz4DwAego.roa (hash: Y9Qzk1ZJNkQeeN5SL4rk7tJNNAoeHg7LXp+c5rv1kJY=) 9: XIxZD227ioGX0cqqVFAINXLyX6Q.roa (hash: sDleWGEf+rrGs4/hbX/4+JTQcRgaaTHiE45KWqHpF+s=) 10: XkdalcQg6hGFzhglm3gQzCnpww4.roa (hash: 8jItQEffXXa+ZvcKZLLyn2RNT/EfLCbVUQe+TOkVNeM=) 11: YWsBcXgsO8gZFuZAgXqc8mQzIPQ.roa (hash: FIq3otCEvunZWYD7V3EpFGXTGzchT90RBkn3PHEPtpE=) 12: cgpmcoUK85pTENssifHpCXJlfPE.roa (hash: JM0iNu1ajeTkqDE4Nqu0ZyqAU2JL5GqcLbiW8nq6Ilc=) 13: eSOXNELPy2P_3h7R8IBwrZVgqTM.roa (hash: r38ULUfgOCtbQfGW33x7ibVGykkgQ5HIh/ZXyBOz91w=) 14: fny2WANL9Kakl_hzClrFytLGIbA.roa (hash: Li0zLoSXMQkOWimSeqYniHU5WmqmT1OGtibQ573h2wE=) 15: hSqKucNYzrS-ITecCZqK51ewyo0.roa (hash: WlW+oWE3pA2mAbzyCA2PCiD4XrqfKT7ZH8dHdqawUFo=) 16: lqG4TiS1VcHtRo5hXtYqEofYXQY.roa (hash: lQ0va2Pv+RAccp1R5C/OndWZWgx6m66STBo/DZ6jbSw=) 17: snScws96TnQnAtgCESncYf2cHQI.roa (hash: Rg061AAdsDJTEuVCFaKulmhMa2nYwQQcIJgWuXh/KyU=) 18: zyiTueEsxpcD3PrX5wVtwGJMZ_Y.roa (hash: 7R1f/73J/Qx3gYsQEvvU8YVQZND5dDU9/Elan9+1kYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:ab:a4:98:b1:25:09:96:22:86:86:7d:a2:4c:8e:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: Jul 28 17:00:26 2026 GMT Not After : Jul 29 17:00:26 2026 GMT Subject: CN=f491cc91ede4dfb4108993fa3e98d8b669c1d769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:6c:d9:32:7b:6b:fb:1a:ea:92:af:e3:e0: ca:ef:8d:61:ba:29:b0:39:db:e9:8a:85:93:83:38: 2b:1e:24:8f:ec:da:e3:9b:fe:6f:8e:a8:9c:9d:1e: 7d:f7:f8:89:20:e8:6a:02:ca:d6:04:fa:4b:40:60: 97:f9:52:43:a5:67:dd:02:93:d0:9b:25:e1:b9:95: 57:31:89:86:1a:ed:c4:f2:83:27:80:37:87:ac:33: 17:0c:74:7f:20:b2:f4:6c:c7:2a:17:86:e3:07:c4: 40:94:dc:71:09:26:9f:04:7b:c8:66:04:9a:36:ce: be:bb:1e:df:c9:21:ed:35:ef:a8:e7:85:df:04:c2: 4c:6d:a6:22:b1:e3:c7:97:f5:bb:ef:19:5a:2b:6c: a0:10:e6:f8:b5:d9:fb:53:41:33:e9:0b:45:05:55: 72:99:91:0c:43:2d:ee:19:c0:d1:d0:91:0c:15:63: 20:43:0c:aa:d8:21:96:9c:eb:2f:3d:e6:5d:09:70: d8:20:e5:0e:95:10:95:31:57:89:e1:71:98:a8:b7: ed:1f:8c:c8:77:aa:e3:4d:2a:01:72:74:88:3a:c7: 0d:e8:04:a2:93:eb:93:23:1f:23:38:00:c2:50:ac: c7:54:70:fb:e7:48:66:31:72:e7:76:6c:72:5e:e5: ba:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:91:CC:91:ED:E4:DF:B4:10:89:93:FA:3E:98:D8:B6:69:C1:D7:69 X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:91:a8:74:bc:9c:c4:fb:f9:f2:87:dd:5f:a4:95:1d:38:15: eb:9d:30:26:83:f8:4b:1e:ac:7e:cf:6b:4a:0c:de:3c:60:d5: 7f:3f:84:30:af:d9:28:f3:d5:9a:33:a0:be:78:18:91:06:30: 72:ca:37:dc:78:d2:1f:f8:5e:fc:77:55:19:2b:7d:a9:6b:fc: a7:65:ac:9e:c8:41:b5:71:0c:96:d2:5f:3f:c3:95:87:69:94: 58:ab:66:44:b3:8f:bd:29:a8:7c:53:ad:7c:d5:8f:e1:9a:c3: 07:cf:6d:32:e8:77:d3:74:36:16:f4:7d:2e:0a:76:7b:c4:dc: 43:38:4f:68:db:b7:c6:fb:73:7d:0c:35:bd:90:a2:3f:7c:c1: 56:63:20:5a:00:3b:16:9b:32:f5:d9:90:2c:ea:58:98:e3:02: e2:5b:7f:72:d3:6f:5c:43:d3:96:4d:b4:33:7e:18:bc:b4:70: 4c:ad:37:78:8d:67:56:f5:4e:69:7d:e2:8b:87:0e:0a:fb:3b: ca:e4:d6:39:3c:18:64:f8:36:b5:f1:ac:42:97:5b:72:09:bf: c6:fa:2d:19:d9:4d:11:0b:c0:3c:c7:f8:3c:59:90:5a:74:c1: 9a:06:29:69:f7:57:54:7a:88:e4:08:68:be:1d:6d:a6:46:4d: 45:66:e3:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pq6SYsSUJliKGhn2iTI4KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjYwNzI4MTcwMDI2WhcNMjYwNzI5MTcwMDI2WjAzMTEwLwYDVQQD EyhmNDkxY2M5MWVkZTRkZmI0MTA4OTkzZmEzZTk4ZDhiNjY5YzFkNzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGps2TJ7a/sa6pKv4+DK741huimw OdvpioWTgzgrHiSP7Nrjm/5vjqicnR599/iJIOhqAsrWBPpLQGCX+VJDpWfdApPQ myXhuZVXMYmGGu3E8oMngDeHrDMXDHR/ILL0bMcqF4bjB8RAlNxxCSafBHvIZgSa Ns6+ux7fySHtNe+o54XfBMJMbaYisePHl/W77xlaK2ygEOb4tdn7U0Ez6QtFBVVy mZEMQy3uGcDR0JEMFWMgQwyq2CGWnOsvPeZdCXDYIOUOlRCVMVeJ4XGYqLftH4zI d6rjTSoBcnSIOscN6ASik+uTIx8jOADCUKzHVHD750hmMXLndmxyXuW6mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSRzJHt5N+0EImT+j6Y2LZpwddpMB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJGodLyc xPv58ofdX6SVHTgV650wJoP4Sx6sfs9rSgzePGDVfz+EMK/ZKPPVmjOgvngYkQYw cso33HjSH/he/HdVGSt9qWv8p2WsnshBtXEMltJfP8OVh2mUWKtmRLOPvSmofFOt fNWP4ZrDB89tMuh303Q2FvR9Lgp2e8TcQzhPaNu3xvtzfQw1vZCiP3zBVmMgWgA7 Fpsy9dmQLOpYmOMC4lt/ctNvXEPTlk20M34YvLRwTK03eI1nVvVOaX3ii4cOCvs7 yuTWOTwYZPg2tfGsQpdbcgm/xvotGdlNEQvAPMf4PFmQWnTBmgYpafdXVHqI5Aho vh1tpkZNRWbjRQ== -----END CERTIFICATE-----Generated at Tue Jul 28 23:06:08 2026 by rpki-client