$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft File: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft (raw, json) Hash identifier: 4euhdEAsOR+jDoqifmMnsNDMCKtf7lqEG4YXiqX3Mlk= Subject key identifier: 0B:CF:35:C7:77:7A:C1:E0:0A:92:DA:A3:F1:45:8C:E9:95:74:91:15 Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Certificate serial: 019D284DC488E5061B5371BBB5BA849C544D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft Manifest number: 0CA4 Signing time: Thu 26 Mar 2026 04:01:18 +0000 Manifest this update: Thu 26 Mar 2026 04:01:18 +0000 Manifest next update: Fri 27 Mar 2026 04:01:18 +0000 Files and hashes: 1: 4GUElnAPOkrPLe4DgpHfnLNp6J0.roa (hash: 9fjN9auBgqJVcYNofzCrv75bDC2wBZmo8SkzmPt8j0k=) 2: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl (hash: Qfk5681gsbmvk327xncNHBCwVETXl+Q6xR2qj13IBig=) 3: IJyWPZnNDgJGIYhxLR2ej2t89_4.roa (hash: Qk+CHppMk+2IdIytCSpQwUqW+0YGuxpw+lnNEU7EhcA=) 4: Kx1eIMK1ZB6OHHGc0668tmq96XA.roa (hash: lhgEO2Wo4yISCyt2s4yNXehUniTGVxp13Q/4RJVezZM=) 5: NRDXJZDQ0OHFo8ltyyB-kSPP1pE.roa (hash: DtNekApdMNPRg72NXouh7K4NrMm+yrRhvaVrr6YhrSM=) 6: PBaUsMT5mW4QdmVNy1huwmi14Rs.roa (hash: GH37jfI8HpuLofSLQfgmqiOioAVbcQ5ZxEHr0iJBbzs=) 7: Q0FYrPKVMh5kkSRmFyVQJj0e1Rw.roa (hash: WPIh6hbyuuhuP5KMCKvJ7WqPLV4IVG0JUTQFgBQuqzg=) 8: XSSPfODDElNAi7HHbT39Dq_G2W8.roa (hash: XAO7DayjW29BbqYUQasCT3PGXv6XygmyC7EFfkszTjo=) 9: YnV5OCyOfPBVco5xdJZF-QetlGk.roa (hash: AoCuMv1Tci/PDNFCplwkRHLb6d575MhKB667GfZucwc=) 10: cMf9i5uQ_W8w4eYlPuCuDGVpKnw.roa (hash: ++i8IZt9sWW1wF4ErWsx0bQbw6R8LDli6rinP6RFECs=) 11: cid7HvMidFvtXH-s1EtdDJVv1aQ.roa (hash: ZcrBoPwGj+5nUM9q0wHZrerMhRIb1xZrFSae5lJQklM=) 12: ckvWEpZk8GRhPrKIFVzhYtX4HLo.roa (hash: XvnymWdIgJUBdvk4Eput5qhCNQkwhBx2JHcRbIziQ24=) 13: eE2QQRwGdkhCYaEeU7X8BmNk-EI.roa (hash: 3Mb1ZwjnO6N7pPKN5Ned7OyhEEInX7LRS977TQB+72Q=) 14: klB7c8SjznhDunm8AASTyAh8ha0.roa (hash: SttRsPnDdbFZx2E+AETM7JQIzgUVtn/c2cNJqHwON1I=) 15: pOQXq0nmpz6pKYDrNuVK9kkpTyI.roa (hash: 38r8niOxTbvNmg9dfnoXSRz/LfPPGz9NUmHiyiOX9Hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:4d:c4:88:e5:06:1b:53:71:bb:b5:ba:84:9c:54:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Validity Not Before: Mar 26 04:01:18 2026 GMT Not After : Mar 27 04:01:18 2026 GMT Subject: CN=0bcf35c7777ac1e00a92daa3f1458ce995749115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:36:f0:1f:fd:08:cf:c1:f0:86:9d:51:86:89: 17:d9:55:a6:cf:df:28:36:b1:d7:7b:9d:01:2e:c3: 29:f3:25:19:52:0a:de:45:09:8c:ac:d8:42:dd:17: 9a:0f:f3:9b:6b:73:f1:45:60:e1:3b:b0:d4:95:2c: f5:26:d6:db:9f:e0:7f:36:6b:51:45:dd:ae:1e:b9: bc:95:40:5a:1f:18:08:b9:84:df:30:41:a0:15:1d: 0b:a1:91:f2:ca:bc:79:98:b8:f7:e2:ac:b2:df:14: b3:04:e6:60:2e:a7:0e:9c:af:d2:f0:33:1a:86:56: 1f:42:ce:1d:9f:2d:79:81:77:28:29:42:04:f0:68: 19:9e:cc:15:1d:6f:7e:a8:22:b2:67:d0:17:c1:f7: 02:94:5e:49:06:bc:82:65:ba:45:77:1c:e9:74:90: bb:c0:8f:ba:93:b5:43:43:1a:07:19:a1:29:64:1a: b6:75:8e:34:b3:8d:82:a5:07:1f:9b:0c:1c:8a:2c: 3a:bd:26:98:41:13:e5:93:d2:4b:e3:53:90:9f:46: 68:d1:be:32:97:ad:4a:04:d0:ae:1a:f7:d7:5d:18: 33:5b:7c:65:63:15:08:18:d4:b6:c9:b8:19:ad:fc: c7:af:fc:e4:b2:29:ab:8b:e4:1e:aa:f8:00:ee:f4: 7c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:CF:35:C7:77:7A:C1:E0:0A:92:DA:A3:F1:45:8C:E9:95:74:91:15 X509v3 Authority Key Identifier: keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:5b:e5:41:0c:5a:e8:ca:73:40:fb:73:76:47:78:e9:1a:14: bc:4a:ae:61:49:2b:93:f5:20:33:9b:aa:51:9a:41:3d:a7:d9: 00:18:3a:a8:0d:e2:11:a4:ac:1a:27:1f:6c:06:95:d4:cd:96: ae:25:2b:19:5b:6a:b6:6a:ba:ac:a2:0a:80:e9:5a:ac:9c:ed: 33:12:c9:52:23:8b:71:fc:55:39:7f:ba:0c:05:6c:6a:50:2f: 84:ed:35:6a:e0:74:2d:bd:91:4c:77:09:89:f3:7a:e0:79:6b: 09:3f:f4:21:6b:c8:2e:33:a8:15:70:92:2d:2f:33:42:2c:9f: 16:13:f0:1a:6c:75:30:3c:2a:d7:ac:f4:94:29:0e:ef:c8:bc: 24:72:2f:fd:5e:ba:fa:3b:fe:50:67:c5:a2:1e:bc:84:de:1f: 1e:c1:1e:24:5f:f9:cc:93:cf:87:33:b5:de:a1:09:d6:31:1b: 1c:7b:95:c4:90:73:e6:f9:67:74:77:39:eb:e8:f2:0b:92:6b: a6:3c:22:37:5e:bd:d6:a0:74:df:2a:b3:76:6a:eb:68:69:f8: 77:46:e5:68:d2:c7:26:b8:15:af:b2:75:8d:53:eb:d0:80:9b: ad:ee:a9:61:c5:a3:d5:ce:58:90:f8:47:0b:66:17:7b:c2:7d: 89:d6:2d:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oTcSI5QYbU3G7tbqEnFRNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx YmRjYzkwHhcNMjYwMzI2MDQwMTE4WhcNMjYwMzI3MDQwMTE4WjAzMTEwLwYDVQQD EygwYmNmMzVjNzc3N2FjMWUwMGE5MmRhYTNmMTQ1OGNlOTk1NzQ5MTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDbwH/0Iz8Hwhp1RhokX2VWmz98o NrHXe50BLsMp8yUZUgreRQmMrNhC3ReaD/Oba3PxRWDhO7DUlSz1Jtbbn+B/NmtR Rd2uHrm8lUBaHxgIuYTfMEGgFR0LoZHyyrx5mLj34qyy3xSzBOZgLqcOnK/S8DMa hlYfQs4dny15gXcoKUIE8GgZnswVHW9+qCKyZ9AXwfcClF5JBryCZbpFdxzpdJC7 wI+6k7VDQxoHGaEpZBq2dY40s42CpQcfmwwciiw6vSaYQRPlk9JL41OQn0Zo0b4y l61KBNCuGvfXXRgzW3xlYxUIGNS2ybgZrfzHr/zksimri+QeqvgA7vR80wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvPNcd3esHgCpLao/FFjOmVdJEVMB8GA1UdIwQY MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt NjFhZmI2NmQxZThjLzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVvlQQxa 6MpzQPtzdkd46RoUvEquYUkrk/UgM5uqUZpBPafZABg6qA3iEaSsGicfbAaV1M2W riUrGVtqtmq6rKIKgOlarJztMxLJUiOLcfxVOX+6DAVsalAvhO01auB0Lb2RTHcJ ifN64HlrCT/0IWvILjOoFXCSLS8zQiyfFhPwGmx1MDwq16z0lCkO78i8JHIv/V66 +jv+UGfFoh68hN4fHsEeJF/5zJPPhzO13qEJ1jEbHHuVxJBz5vlndHc56+jyC5Jr pjwiN1691qB03yqzdmrraGn4d0blaNLHJrgVr7J1jVPr0ICbre6pYcWj1c5YkPhH C2YXe8J9idYtXQ== -----END CERTIFICATE-----Generated at Thu Mar 26 11:55:30 2026 by rpki-client