$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft File: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft (raw, json) Hash identifier: 3lQbng5nB3KJtdKWikVQLc4X3iq/gxqDjkWzRkMvefk= Subject key identifier: C9:8E:A0:35:D8:96:55:41:9F:18:F8:05:B4:34:82:21:06:0D:A4:2B Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Certificate serial: 01A02620E42CF30C04BCA11FE78E29E0B34A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft Manifest number: 0E36 Signing time: Fri 21 Aug 2026 21:01:24 +0000 Manifest this update: Fri 21 Aug 2026 21:01:24 +0000 Manifest next update: Sat 22 Aug 2026 21:01:24 +0000 Files and hashes: 1: 4GUElnAPOkrPLe4DgpHfnLNp6J0.roa (hash: 9fjN9auBgqJVcYNofzCrv75bDC2wBZmo8SkzmPt8j0k=) 2: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl (hash: T61wV1W0dvQ982h6Sl5qW1decldFsD59Ncn0MrPQSMI=) 3: I282anzuqDNnfUXZQwC7438bDro.roa (hash: AyYFkSKEVTPhYSL98MtWNGzVahEdTLNrPzpWGukk9EI=) 4: IJyWPZnNDgJGIYhxLR2ej2t89_4.roa (hash: Qk+CHppMk+2IdIytCSpQwUqW+0YGuxpw+lnNEU7EhcA=) 5: Kx1eIMK1ZB6OHHGc0668tmq96XA.roa (hash: lhgEO2Wo4yISCyt2s4yNXehUniTGVxp13Q/4RJVezZM=) 6: NRDXJZDQ0OHFo8ltyyB-kSPP1pE.roa (hash: DtNekApdMNPRg72NXouh7K4NrMm+yrRhvaVrr6YhrSM=) 7: PBaUsMT5mW4QdmVNy1huwmi14Rs.roa (hash: GH37jfI8HpuLofSLQfgmqiOioAVbcQ5ZxEHr0iJBbzs=) 8: Q0FYrPKVMh5kkSRmFyVQJj0e1Rw.roa (hash: WPIh6hbyuuhuP5KMCKvJ7WqPLV4IVG0JUTQFgBQuqzg=) 9: XSSPfODDElNAi7HHbT39Dq_G2W8.roa (hash: XAO7DayjW29BbqYUQasCT3PGXv6XygmyC7EFfkszTjo=) 10: cMf9i5uQ_W8w4eYlPuCuDGVpKnw.roa (hash: ++i8IZt9sWW1wF4ErWsx0bQbw6R8LDli6rinP6RFECs=) 11: cid7HvMidFvtXH-s1EtdDJVv1aQ.roa (hash: ZcrBoPwGj+5nUM9q0wHZrerMhRIb1xZrFSae5lJQklM=) 12: ckvWEpZk8GRhPrKIFVzhYtX4HLo.roa (hash: XvnymWdIgJUBdvk4Eput5qhCNQkwhBx2JHcRbIziQ24=) 13: eE2QQRwGdkhCYaEeU7X8BmNk-EI.roa (hash: 3Mb1ZwjnO6N7pPKN5Ned7OyhEEInX7LRS977TQB+72Q=) 14: fOoxnzASXzopslTz2k2wiJL3x5M.roa (hash: D1BQFLMSMw0KzyyXwQEu8OixU3Lr8v2KEMxHdqrQGxI=) 15: pOQXq0nmpz6pKYDrNuVK9kkpTyI.roa (hash: 38r8niOxTbvNmg9dfnoXSRz/LfPPGz9NUmHiyiOX9Hk=) 16: xHeW6hanIuUj6uUE4gfLE62ik_E.roa (hash: s8Vjq9HDlOU0cOKYgu76uft1EVcTgBUurUnTdZ01l/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Aug 2026 16:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:26:20:e4:2c:f3:0c:04:bc:a1:1f:e7:8e:29:e0:b3:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Validity Not Before: Aug 21 21:01:24 2026 GMT Not After : Aug 22 21:01:24 2026 GMT Subject: CN=c98ea035d89655419f18f805b4348221060da42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3b:dc:49:84:fa:ac:c9:52:e3:26:fa:d5:3e: f2:2f:40:c2:4e:d0:96:53:e4:06:8b:71:ff:46:d5: 2b:66:c1:d3:00:3e:25:f7:16:cf:23:74:e3:66:a0: b8:ed:f8:bd:b1:d5:c6:8a:79:5a:14:fc:a0:47:06: d9:49:87:e3:e5:f4:fc:60:8b:ec:43:7f:ef:b5:a4: 75:8c:d4:62:7b:b4:5c:27:60:78:d5:83:a6:0b:9b: 56:5c:27:c5:20:56:59:01:5b:4c:c3:c0:79:4a:71: 8b:67:49:8a:ed:ea:fd:f7:e7:21:24:29:0b:f2:47: 0c:c5:65:14:e9:2b:00:c5:3c:a0:35:fd:2c:7a:c9: f4:95:ce:d8:42:f5:91:1b:84:67:41:53:3a:54:be: 69:e3:8f:73:5e:6e:e7:0c:aa:d5:a3:17:e7:6f:53: 28:55:64:24:16:31:f3:05:f6:b6:89:f8:fe:11:20: ec:1f:d7:6d:19:86:f2:67:81:94:aa:3f:5f:3e:6e: 10:36:48:17:00:57:36:f9:f1:bb:ac:48:99:41:b1: c2:b6:f7:8f:55:1e:94:9a:5f:cf:14:3d:9b:0f:52: 44:18:aa:63:aa:56:da:37:39:13:3d:62:9e:ba:8f: 1e:8b:12:94:57:d9:c0:ba:6d:f4:54:1d:bf:f9:2b: ee:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8E:A0:35:D8:96:55:41:9F:18:F8:05:B4:34:82:21:06:0D:A4:2B X509v3 Authority Key Identifier: keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:4a:da:fc:18:a4:1a:fd:69:ab:9f:d0:73:0b:90:3c:ef:b2: 8d:ec:77:54:66:a5:48:9b:d4:fa:3c:de:a0:fe:d5:a8:c4:42: 14:7a:f9:e6:23:10:c4:1a:ca:4a:dc:be:2a:b8:d3:a8:61:2f: 87:b6:e0:73:0c:bc:16:29:03:f9:0e:bc:85:b9:89:8f:3c:5a: bf:87:0c:ea:97:fb:44:cc:60:1c:23:06:0c:75:65:b9:c5:2e: e3:81:e2:af:41:fe:78:99:2e:35:28:5b:73:a0:f5:87:fa:df: 3e:63:a1:c2:e7:9c:24:ad:fa:27:ee:61:5e:f3:00:63:8f:0c: c2:1c:b1:bd:fb:6e:f6:ec:b0:c6:fa:29:fc:1e:ac:c1:39:bf: c9:45:61:fb:ec:5f:ef:0e:35:1f:34:88:4d:a9:4c:f5:02:7d: 1e:fa:77:2a:53:a1:4d:db:a5:92:fd:30:1f:82:37:5e:c4:60: 95:16:c4:0f:e8:17:6a:97:d7:1e:c0:68:43:5b:40:0c:4a:91: e6:35:b0:86:94:a6:ef:8b:d5:6c:c5:46:41:5d:93:c7:5e:f1: 9b:23:99:55:62:50:33:05:b2:80:f4:d8:46:a9:cf:42:31:25: f0:2e:40:ea:e6:25:4c:2d:d4:be:66:f2:3e:34:ec:87:18:a4: ed:48:84:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAmIOQs8wwEvKEf544p4LNKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx YmRjYzkwHhcNMjYwODIxMjEwMTI0WhcNMjYwODIyMjEwMTI0WjAzMTEwLwYDVQQD EyhjOThlYTAzNWQ4OTY1NTQxOWYxOGY4MDViNDM0ODIyMTA2MGRhNDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjvcSYT6rMlS4yb61T7yL0DCTtCW U+QGi3H/RtUrZsHTAD4l9xbPI3TjZqC47fi9sdXGinlaFPygRwbZSYfj5fT8YIvs Q3/vtaR1jNRie7RcJ2B41YOmC5tWXCfFIFZZAVtMw8B5SnGLZ0mK7er99+chJCkL 8kcMxWUU6SsAxTygNf0sesn0lc7YQvWRG4RnQVM6VL5p449zXm7nDKrVoxfnb1Mo VWQkFjHzBfa2ifj+ESDsH9dtGYbyZ4GUqj9fPm4QNkgXAFc2+fG7rEiZQbHCtveP VR6Uml/PFD2bD1JEGKpjqlbaNzkTPWKeuo8eixKUV9nAum30VB2/+SvurQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMmOoDXYllVBnxj4BbQ0giEGDaQrMB8GA1UdIwQY MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt NjFhZmI2NmQxZThjLzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkUra/Bik Gv1pq5/QcwuQPO+yjex3VGalSJvU+jzeoP7VqMRCFHr55iMQxBrKSty+KrjTqGEv h7bgcwy8FikD+Q68hbmJjzxav4cM6pf7RMxgHCMGDHVlucUu44Hir0H+eJkuNShb c6D1h/rfPmOhwuecJK36J+5hXvMAY48Mwhyxvftu9uywxvop/B6swTm/yUVh++xf 7w41HzSITalM9QJ9Hvp3KlOhTdulkv0wH4I3XsRglRbED+gXapfXHsBoQ1tADEqR 5jWwhpSm74vVbMVGQV2Tx17xmyOZVWJQMwWygPTYRqnPQjEl8C5A6uYlTC3Uvmby PjTshxik7UiE1Q== -----END CERTIFICATE-----Generated at Sat Aug 22 02:38:40 2026 by rpki-client