
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
File: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft (raw, json)
Hash identifier: kCBTwFcRcit0G2h5uo0tKgJ/8vLOoFOV7kAOGbvJtZI=
Subject key identifier: 8B:0B:14:AB:EC:27:64:D3:19:77:2E:9B:09:B1:5F:5B:F9:42:B7:E4
Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Certificate serial: 019F916D00495B08A8B118278E0C3CE70221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
Manifest number: 0DE9
Signing time: Fri 24 Jul 2026 00:01:07 +0000
Manifest this update: Fri 24 Jul 2026 00:01:07 +0000
Manifest next update: Sat 25 Jul 2026 00:01:07 +0000
Files and hashes: 1: 4GUElnAPOkrPLe4DgpHfnLNp6J0.roa (hash: 9fjN9auBgqJVcYNofzCrv75bDC2wBZmo8SkzmPt8j0k=)
2: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl (hash: XrHTLY3R+0hEsL8b6ti+eGMjBrHMw8Wuocs8fq7usK4=)
3: I282anzuqDNnfUXZQwC7438bDro.roa (hash: AyYFkSKEVTPhYSL98MtWNGzVahEdTLNrPzpWGukk9EI=)
4: IJyWPZnNDgJGIYhxLR2ej2t89_4.roa (hash: Qk+CHppMk+2IdIytCSpQwUqW+0YGuxpw+lnNEU7EhcA=)
5: Kx1eIMK1ZB6OHHGc0668tmq96XA.roa (hash: lhgEO2Wo4yISCyt2s4yNXehUniTGVxp13Q/4RJVezZM=)
6: NRDXJZDQ0OHFo8ltyyB-kSPP1pE.roa (hash: DtNekApdMNPRg72NXouh7K4NrMm+yrRhvaVrr6YhrSM=)
7: PBaUsMT5mW4QdmVNy1huwmi14Rs.roa (hash: GH37jfI8HpuLofSLQfgmqiOioAVbcQ5ZxEHr0iJBbzs=)
8: Q0FYrPKVMh5kkSRmFyVQJj0e1Rw.roa (hash: WPIh6hbyuuhuP5KMCKvJ7WqPLV4IVG0JUTQFgBQuqzg=)
9: XSSPfODDElNAi7HHbT39Dq_G2W8.roa (hash: XAO7DayjW29BbqYUQasCT3PGXv6XygmyC7EFfkszTjo=)
10: cMf9i5uQ_W8w4eYlPuCuDGVpKnw.roa (hash: ++i8IZt9sWW1wF4ErWsx0bQbw6R8LDli6rinP6RFECs=)
11: cid7HvMidFvtXH-s1EtdDJVv1aQ.roa (hash: ZcrBoPwGj+5nUM9q0wHZrerMhRIb1xZrFSae5lJQklM=)
12: ckvWEpZk8GRhPrKIFVzhYtX4HLo.roa (hash: XvnymWdIgJUBdvk4Eput5qhCNQkwhBx2JHcRbIziQ24=)
13: eE2QQRwGdkhCYaEeU7X8BmNk-EI.roa (hash: 3Mb1ZwjnO6N7pPKN5Ned7OyhEEInX7LRS977TQB+72Q=)
14: fOoxnzASXzopslTz2k2wiJL3x5M.roa (hash: D1BQFLMSMw0KzyyXwQEu8OixU3Lr8v2KEMxHdqrQGxI=)
15: pOQXq0nmpz6pKYDrNuVK9kkpTyI.roa (hash: 38r8niOxTbvNmg9dfnoXSRz/LfPPGz9NUmHiyiOX9Hk=)
16: xHeW6hanIuUj6uUE4gfLE62ik_E.roa (hash: s8Vjq9HDlOU0cOKYgu76uft1EVcTgBUurUnTdZ01l/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:00:49:5b:08:a8:b1:18:27:8e:0c:3c:e7:02:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Validity
Not Before: Jul 24 00:01:07 2026 GMT
Not After : Jul 25 00:01:07 2026 GMT
Subject: CN=8b0b14abec2764d319772e9b09b15f5bf942b7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ab:d1:45:24:54:a3:a8:87:2d:5e:ff:d0:3f:
58:2a:63:2f:fd:28:f8:ed:7c:17:8a:ac:42:f5:f1:
fa:94:56:15:d5:06:08:2a:f1:c7:97:4b:e6:84:61:
4e:35:00:63:8f:c7:f3:8a:eb:7e:3b:64:73:2f:1b:
9b:2e:e2:c9:ce:f3:4a:c5:26:87:da:75:af:1a:77:
0a:45:e4:29:ed:d9:e3:f6:26:43:b5:42:2b:ea:54:
56:c2:6d:03:74:8b:83:91:94:9e:bb:0f:a5:ef:27:
f4:2e:a0:61:5b:cc:a7:ed:1d:7b:e6:b6:4d:81:01:
0b:d5:e3:6d:d5:39:11:24:3c:4a:01:27:fa:10:9e:
45:68:e0:75:1a:8a:90:09:9e:42:c5:42:df:7c:4c:
99:26:1d:f5:44:37:5c:24:c2:a8:d3:4e:20:91:d3:
f4:17:66:e0:d1:18:9b:cf:ee:2d:e4:45:e8:95:0d:
3d:69:09:67:35:9e:ed:d4:d0:ff:df:0d:82:56:98:
f7:65:18:e6:84:dc:0f:95:5d:00:76:7c:38:4d:1c:
77:4f:23:e4:61:24:2c:64:bb:82:96:f7:4b:5b:b7:
37:fc:19:6b:5d:fc:73:12:77:b6:cb:fe:30:d9:b8:
da:69:85:fb:c4:49:e9:31:fe:9c:cf:4e:04:1a:ec:
d5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0B:14:AB:EC:27:64:D3:19:77:2E:9B:09:B1:5F:5B:F9:42:B7:E4
X509v3 Authority Key Identifier:
keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:98:9b:31:be:62:5d:bd:01:dc:44:46:4f:da:b0:ee:b5:4d:
5c:3f:32:7a:3e:56:2b:73:83:55:75:52:64:e7:66:f5:a7:c9:
81:7d:0a:8a:82:bf:d1:e0:df:22:ca:1b:5d:b9:50:aa:de:dc:
1b:47:a0:d0:06:8f:38:52:91:39:5f:38:70:f8:35:ff:5d:85:
ff:9c:f1:95:e1:dd:25:49:54:ec:15:7c:c7:6f:15:97:cf:21:
70:e9:68:a8:33:d5:ff:a2:20:16:ca:39:ef:8d:14:b3:14:52:
e7:f8:ad:26:96:71:41:78:b2:61:a4:7b:b3:38:af:73:c0:1b:
60:24:92:f0:bf:e9:74:d4:da:3e:e4:f1:81:bd:6e:99:b0:b5:
d5:30:f8:c8:da:38:80:47:ad:71:36:8f:a8:7a:1e:0c:a7:4f:
dd:7c:e1:3f:62:9b:21:e7:4f:6d:81:a1:62:fa:13:dc:6a:1d:
d9:96:a9:75:28:22:2c:8e:26:1e:d3:90:a4:66:09:d7:6d:d2:
5e:52:80:d8:69:ae:b3:43:83:72:19:14:87:27:30:bb:13:81:
47:88:dc:98:76:ee:e0:a3:4f:85:3c:8d:55:e1:db:aa:0f:d2:
88:e6:41:b9:f3:ab:93:7c:0a:72:30:c9:3b:17:c4:28:23:d3:
ba:84:bb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:25 2026 by rpki-client