$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft File: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft (raw, json) Hash identifier: eIpM/6PaRRE20gIyuyIEja4cZS9EziYmmT1AB/ijq+Y= Subject key identifier: 8E:19:29:73:B0:1D:E6:0D:3B:A9:83:BB:D5:3F:F3:37:DC:5B:3A:36 Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Certificate serial: 019D37C07E43A93F8DA690FE72AA73A05ECA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft Manifest number: 0CAC Signing time: Sun 29 Mar 2026 04:00:55 +0000 Manifest this update: Sun 29 Mar 2026 04:00:55 +0000 Manifest next update: Mon 30 Mar 2026 04:00:55 +0000 Files and hashes: 1: 4GUElnAPOkrPLe4DgpHfnLNp6J0.roa (hash: 9fjN9auBgqJVcYNofzCrv75bDC2wBZmo8SkzmPt8j0k=) 2: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl (hash: EjQouJD9PNN72bDRE0w8Mb8Qnsn7/Zb6bYU2LHU4N0g=) 3: IJyWPZnNDgJGIYhxLR2ej2t89_4.roa (hash: Qk+CHppMk+2IdIytCSpQwUqW+0YGuxpw+lnNEU7EhcA=) 4: Kx1eIMK1ZB6OHHGc0668tmq96XA.roa (hash: lhgEO2Wo4yISCyt2s4yNXehUniTGVxp13Q/4RJVezZM=) 5: NRDXJZDQ0OHFo8ltyyB-kSPP1pE.roa (hash: DtNekApdMNPRg72NXouh7K4NrMm+yrRhvaVrr6YhrSM=) 6: PBaUsMT5mW4QdmVNy1huwmi14Rs.roa (hash: GH37jfI8HpuLofSLQfgmqiOioAVbcQ5ZxEHr0iJBbzs=) 7: Q0FYrPKVMh5kkSRmFyVQJj0e1Rw.roa (hash: WPIh6hbyuuhuP5KMCKvJ7WqPLV4IVG0JUTQFgBQuqzg=) 8: XSSPfODDElNAi7HHbT39Dq_G2W8.roa (hash: XAO7DayjW29BbqYUQasCT3PGXv6XygmyC7EFfkszTjo=) 9: YnV5OCyOfPBVco5xdJZF-QetlGk.roa (hash: AoCuMv1Tci/PDNFCplwkRHLb6d575MhKB667GfZucwc=) 10: cMf9i5uQ_W8w4eYlPuCuDGVpKnw.roa (hash: ++i8IZt9sWW1wF4ErWsx0bQbw6R8LDli6rinP6RFECs=) 11: cid7HvMidFvtXH-s1EtdDJVv1aQ.roa (hash: ZcrBoPwGj+5nUM9q0wHZrerMhRIb1xZrFSae5lJQklM=) 12: ckvWEpZk8GRhPrKIFVzhYtX4HLo.roa (hash: XvnymWdIgJUBdvk4Eput5qhCNQkwhBx2JHcRbIziQ24=) 13: eE2QQRwGdkhCYaEeU7X8BmNk-EI.roa (hash: 3Mb1ZwjnO6N7pPKN5Ned7OyhEEInX7LRS977TQB+72Q=) 14: klB7c8SjznhDunm8AASTyAh8ha0.roa (hash: SttRsPnDdbFZx2E+AETM7JQIzgUVtn/c2cNJqHwON1I=) 15: pOQXq0nmpz6pKYDrNuVK9kkpTyI.roa (hash: 38r8niOxTbvNmg9dfnoXSRz/LfPPGz9NUmHiyiOX9Hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 04:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:37:c0:7e:43:a9:3f:8d:a6:90:fe:72:aa:73:a0:5e:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Validity Not Before: Mar 29 04:00:55 2026 GMT Not After : Mar 30 04:00:55 2026 GMT Subject: CN=8e192973b01de60d3ba983bbd53ff337dc5b3a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c4:f0:c2:cd:51:29:cb:0f:0e:4d:03:eb:7b: 87:09:4a:a3:3b:0b:7c:73:b2:3f:b8:fa:35:0d:3a: 5f:2f:d9:bb:dc:26:9b:80:9d:95:5f:0e:7f:5a:8c: 22:ec:a7:26:54:5b:31:38:a1:ea:8b:a7:69:0f:b8: d1:e3:34:10:46:b3:cd:0a:43:95:73:a2:6b:2a:e1: af:af:38:62:8f:33:b8:31:f1:78:55:92:98:fd:dd: 03:9e:19:bd:1f:d5:0a:25:71:08:59:fb:c9:42:7e: c7:59:c8:75:90:fb:10:01:88:43:78:7a:c6:d4:81: b5:3b:99:4e:b6:71:21:c6:ee:3d:56:18:1c:33:cb: 4d:16:fd:70:61:c2:3b:e3:b9:87:7d:30:38:35:ff: 98:68:20:4b:1c:5f:7a:88:07:b1:2a:6c:68:ce:0c: 38:d0:f0:a3:c3:e7:56:af:60:a9:29:b4:b3:de:b6: cb:1d:fa:50:89:7f:ee:2b:01:36:0b:4d:86:c9:2d: bd:78:41:77:55:d0:f9:40:b5:07:83:2a:86:e1:54: d2:e2:d0:b4:3f:04:6c:66:6d:b6:96:a9:8c:5d:49: bb:09:5d:2c:b9:1e:4a:d8:cf:75:d3:06:a5:2d:75: cd:92:63:15:76:27:2f:fe:07:2f:9e:02:82:d2:85: e9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:19:29:73:B0:1D:E6:0D:3B:A9:83:BB:D5:3F:F3:37:DC:5B:3A:36 X509v3 Authority Key Identifier: keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:47:ed:c9:28:a6:5e:47:b4:1c:3a:61:51:b7:47:bd:d9:87: db:a6:41:c0:ab:be:01:d5:6b:4a:62:79:35:df:4b:20:a1:c2: 5e:44:6d:f8:4a:4b:36:d8:5e:f8:96:d7:bd:8c:78:78:00:34: 35:b1:49:52:c0:b9:d7:11:6b:70:c4:cc:d8:36:39:1f:27:7c: 23:24:c3:8a:0d:8d:b9:82:16:82:48:b6:ee:fb:5d:4e:0e:a3: ad:86:14:10:e7:20:82:90:e0:38:35:91:eb:a2:6d:17:0f:b3: 52:33:f5:f3:b0:d8:ce:57:1c:8e:3e:52:ad:52:d8:8b:36:15: 8c:e8:05:c8:3e:de:71:98:28:3c:4c:a3:37:92:4a:3f:e8:6b: 42:d0:00:2c:49:64:30:5b:9f:07:a6:84:37:a7:da:26:81:0e: 2f:c1:11:19:0d:11:d8:31:29:1a:60:e1:11:d7:ee:cc:a1:6a: b5:d4:7b:25:d9:03:d8:9b:cc:b3:40:bb:ce:cf:a8:5a:e5:03: 9e:e5:03:2c:a6:ea:44:9d:08:3c:94:fa:76:08:95:98:a8:b8: 8f:ff:8d:dd:19:fe:73:ce:ec:ac:e0:b6:05:4b:01:e7:4a:c1: 81:cf:2c:d1:e4:89:e6:e3:1f:7d:1b:45:76:ee:1f:58:9f:3a: f7:8a:a2:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ03wH5DqT+NppD+cqpzoF7KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx YmRjYzkwHhcNMjYwMzI5MDQwMDU1WhcNMjYwMzMwMDQwMDU1WjAzMTEwLwYDVQQD Eyg4ZTE5Mjk3M2IwMWRlNjBkM2JhOTgzYmJkNTNmZjMzN2RjNWIzYTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMTwws1RKcsPDk0D63uHCUqjOwt8 c7I/uPo1DTpfL9m73CabgJ2VXw5/Wowi7KcmVFsxOKHqi6dpD7jR4zQQRrPNCkOV c6JrKuGvrzhijzO4MfF4VZKY/d0Dnhm9H9UKJXEIWfvJQn7HWch1kPsQAYhDeHrG 1IG1O5lOtnEhxu49VhgcM8tNFv1wYcI747mHfTA4Nf+YaCBLHF96iAexKmxozgw4 0PCjw+dWr2CpKbSz3rbLHfpQiX/uKwE2C02GyS29eEF3VdD5QLUHgyqG4VTS4tC0 PwRsZm22lqmMXUm7CV0suR5K2M910walLXXNkmMVdicv/gcvngKC0oXpMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4ZKXOwHeYNO6mDu9U/8zfcWzo2MB8GA1UdIwQY MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt NjFhZmI2NmQxZThjLzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACEftySim Xke0HDphUbdHvdmH26ZBwKu+AdVrSmJ5Nd9LIKHCXkRt+EpLNthe+JbXvYx4eAA0 NbFJUsC51xFrcMTM2DY5Hyd8IyTDig2NuYIWgki27vtdTg6jrYYUEOcggpDgODWR 66JtFw+zUjP187DYzlccjj5SrVLYizYVjOgFyD7ecZgoPEyjN5JKP+hrQtAALElk MFufB6aEN6faJoEOL8ERGQ0R2DEpGmDhEdfuzKFqtdR7JdkD2JvMs0C7zs+oWuUD nuUDLKbqRJ0IPJT6dgiVmKi4j/+N3Rn+c87srOC2BUsB50rBgc8s0eSJ5uMffRtF du4fWJ8694qiGA== -----END CERTIFICATE-----Generated at Sun Mar 29 13:42:08 2026 by rpki-client