$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft File: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft (raw, json) Hash identifier: n4ZAZF4StMDT94fdfMHBSTlmmv8s1BUIekkLXIm51U4= Subject key identifier: 7A:1F:2F:84:5A:A8:AB:BE:9D:87:8B:C6:5D:9E:E3:8B:6E:02:25:1F Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Certificate serial: 019D99623A8856411E4C01AAA72DA9604C7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft Manifest number: 0CE0 Signing time: Fri 17 Apr 2026 03:00:44 +0000 Manifest this update: Fri 17 Apr 2026 03:00:44 +0000 Manifest next update: Sat 18 Apr 2026 03:00:44 +0000 Files and hashes: 1: 4GUElnAPOkrPLe4DgpHfnLNp6J0.roa (hash: 9fjN9auBgqJVcYNofzCrv75bDC2wBZmo8SkzmPt8j0k=) 2: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl (hash: UOSne3/4c+3aGOxwM5hS8H6qhW413uvDDvFx23cR+Rs=) 3: HG8euhMHDzklpc5Z5Ii3PPu534U.roa (hash: YB8In2fSfbAlLllrD2Rtlf6DdG7evFcVx3XQrRykKoA=) 4: IJyWPZnNDgJGIYhxLR2ej2t89_4.roa (hash: Qk+CHppMk+2IdIytCSpQwUqW+0YGuxpw+lnNEU7EhcA=) 5: KVaqqJdl4OWU-nS3c4G7HYSWvD8.roa (hash: 6I0hrQaC37yT2lm/ecMZgtBWgY80KUcTVluxPp2IsBs=) 6: Kx1eIMK1ZB6OHHGc0668tmq96XA.roa (hash: lhgEO2Wo4yISCyt2s4yNXehUniTGVxp13Q/4RJVezZM=) 7: NRDXJZDQ0OHFo8ltyyB-kSPP1pE.roa (hash: DtNekApdMNPRg72NXouh7K4NrMm+yrRhvaVrr6YhrSM=) 8: PBaUsMT5mW4QdmVNy1huwmi14Rs.roa (hash: GH37jfI8HpuLofSLQfgmqiOioAVbcQ5ZxEHr0iJBbzs=) 9: Q0FYrPKVMh5kkSRmFyVQJj0e1Rw.roa (hash: WPIh6hbyuuhuP5KMCKvJ7WqPLV4IVG0JUTQFgBQuqzg=) 10: XSSPfODDElNAi7HHbT39Dq_G2W8.roa (hash: XAO7DayjW29BbqYUQasCT3PGXv6XygmyC7EFfkszTjo=) 11: cMf9i5uQ_W8w4eYlPuCuDGVpKnw.roa (hash: ++i8IZt9sWW1wF4ErWsx0bQbw6R8LDli6rinP6RFECs=) 12: cid7HvMidFvtXH-s1EtdDJVv1aQ.roa (hash: ZcrBoPwGj+5nUM9q0wHZrerMhRIb1xZrFSae5lJQklM=) 13: ckvWEpZk8GRhPrKIFVzhYtX4HLo.roa (hash: XvnymWdIgJUBdvk4Eput5qhCNQkwhBx2JHcRbIziQ24=) 14: eE2QQRwGdkhCYaEeU7X8BmNk-EI.roa (hash: 3Mb1ZwjnO6N7pPKN5Ned7OyhEEInX7LRS977TQB+72Q=) 15: pOQXq0nmpz6pKYDrNuVK9kkpTyI.roa (hash: 38r8niOxTbvNmg9dfnoXSRz/LfPPGz9NUmHiyiOX9Hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:62:3a:88:56:41:1e:4c:01:aa:a7:2d:a9:60:4c:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Validity Not Before: Apr 17 03:00:44 2026 GMT Not After : Apr 18 03:00:44 2026 GMT Subject: CN=7a1f2f845aa8abbe9d878bc65d9ee38b6e02251f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fe:97:41:23:6e:ec:a0:d6:59:da:be:2b:16: 7a:4a:e6:a2:6f:34:d9:99:e3:87:ef:99:76:f1:c8: 79:f3:52:af:6e:ed:ed:4a:6a:60:c3:d9:ec:d0:65: b4:68:04:62:12:d7:22:59:73:be:b1:fd:82:77:08: 36:8e:1f:24:21:ca:57:ce:f0:1f:ce:a5:77:aa:f7: d2:52:3c:b3:e8:50:22:0b:51:9c:79:bc:db:19:f2: cc:8c:bb:d2:77:5e:e5:bc:fa:d8:fd:dd:b1:e4:2b: 7b:71:19:c2:a4:59:f1:07:61:8a:fd:17:8b:29:26: a8:19:dc:f3:b9:50:d1:9a:3f:01:03:00:4b:f3:da: 1c:21:43:0c:35:36:9f:e2:76:30:86:d0:2f:ca:3f: a3:28:36:e1:78:ce:7c:2d:92:c9:3e:10:3b:24:20: 66:1a:26:75:c8:00:2b:4a:80:6e:f1:b6:f3:96:05: 76:b5:84:8c:6f:c0:fb:5c:78:cb:d5:58:32:53:e2: 26:dc:8b:f0:26:8c:9e:0d:76:01:f5:0e:44:3c:90: 7c:79:cf:9f:32:f1:cb:b6:86:db:ad:11:6f:52:6a: ba:88:73:6e:04:c5:43:86:3d:14:58:a2:0b:05:2f: 7f:81:b2:23:4b:29:a6:80:74:0c:a6:d2:ba:74:ee: a4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:1F:2F:84:5A:A8:AB:BE:9D:87:8B:C6:5D:9E:E3:8B:6E:02:25:1F X509v3 Authority Key Identifier: keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:fe:fa:15:b8:35:d0:fb:bf:08:24:39:d8:55:a8:73:f4:ac: 90:1a:86:c1:ce:c7:e2:d3:83:1e:b5:6d:64:45:91:5e:bb:2b: b5:db:e0:3e:0f:b7:10:07:1d:4a:92:ef:96:61:16:92:b1:62: 30:af:9f:55:65:23:fa:f2:bd:3c:84:b3:aa:af:25:2f:5c:bf: b8:39:0c:74:60:cb:c8:21:06:46:50:d2:0f:9d:72:17:2e:0c: df:8d:13:50:32:1d:92:b5:fd:c3:26:3a:17:bf:11:d5:98:bf: 13:d4:64:0e:05:e4:5d:e3:7c:e2:ea:07:84:1f:70:1f:6e:62: 12:32:ab:79:06:e7:c5:72:83:9a:fa:61:ee:7b:5d:b0:60:41: 82:ad:e9:fb:ec:d7:f3:bd:4c:f6:ef:76:e8:d3:fb:e9:c4:a1: b8:e2:a9:47:68:3f:22:e3:19:2f:63:93:67:0c:55:3e:dc:09: d7:00:25:7a:a3:b9:04:ad:5c:f4:48:67:88:d3:9b:6e:6e:64: 0a:c7:0c:02:19:01:46:4d:cd:76:0a:8b:7a:35:92:48:9e:4a: fc:e4:65:ac:f6:1c:04:ef:e1:57:84:07:33:cd:09:ef:67:ad: 1b:f4:a2:cc:23:25:b1:63:30:dc:84:fe:fc:e7:73:b4:cd:cd: 88:e5:1f:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZYjqIVkEeTAGqpy2pYEx7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx YmRjYzkwHhcNMjYwNDE3MDMwMDQ0WhcNMjYwNDE4MDMwMDQ0WjAzMTEwLwYDVQQD Eyg3YTFmMmY4NDVhYThhYmJlOWQ4NzhiYzY1ZDllZTM4YjZlMDIyNTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv6XQSNu7KDWWdq+KxZ6SuaibzTZ meOH75l28ch581Kvbu3tSmpgw9ns0GW0aARiEtciWXO+sf2Cdwg2jh8kIcpXzvAf zqV3qvfSUjyz6FAiC1GcebzbGfLMjLvSd17lvPrY/d2x5Ct7cRnCpFnxB2GK/ReL KSaoGdzzuVDRmj8BAwBL89ocIUMMNTaf4nYwhtAvyj+jKDbheM58LZLJPhA7JCBm GiZ1yAArSoBu8bbzlgV2tYSMb8D7XHjL1VgyU+Im3IvwJoyeDXYB9Q5EPJB8ec+f MvHLtobbrRFvUmq6iHNuBMVDhj0UWKILBS9/gbIjSymmgHQMptK6dO6krwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHofL4RaqKu+nYeLxl2e44tuAiUfMB8GA1UdIwQY MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt NjFhZmI2NmQxZThjLzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/76Fbg1 0Pu/CCQ52FWoc/SskBqGwc7H4tODHrVtZEWRXrsrtdvgPg+3EAcdSpLvlmEWkrFi MK+fVWUj+vK9PISzqq8lL1y/uDkMdGDLyCEGRlDSD51yFy4M340TUDIdkrX9wyY6 F78R1Zi/E9RkDgXkXeN84uoHhB9wH25iEjKreQbnxXKDmvph7ntdsGBBgq3p++zX 871M9u926NP76cShuOKpR2g/IuMZL2OTZwxVPtwJ1wAleqO5BK1c9EhniNObbm5k CscMAhkBRk3NdgqLejWSSJ5K/ORlrPYcBO/hV4QHM80J72etG/SizCMlsWMw3IT+ /OdztM3NiOUfvg== -----END CERTIFICATE-----Generated at Fri Apr 17 06:36:42 2026 by rpki-client