$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json) Hash identifier: EXRB0EBkKmYb/gljuABkAj3auj80JDeZUe5jc8WoEKs= Subject key identifier: AF:25:94:D7:34:9A:84:1C:0A:1B:43:CC:AF:D6:7B:DC:88:68:FB:0B Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 01A0C8FCFCDB176A5F2D91B60232F46FBA92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft Manifest number: 1A93 Signing time: Tue 22 Sep 2026 12:00:17 +0000 Manifest this update: Tue 22 Sep 2026 12:00:17 +0000 Manifest next update: Wed 23 Sep 2026 12:00:17 +0000 Files and hashes: 1: 8-hboCP-U8Wk9qtGn0IWpFqelRc.roa (hash: j5xldAU1MujpYVAZwSnjN9dxcpWX63Cij0SbzlZlEHU=) 2: GadZnqwNNL6vcO0uNGOaOFXO-5w.roa (hash: WPx0ZxFduASzoEDiUK1PVK0AV5w4NdVYDhxmnMrQPaw=) 3: Kt7Bb9a8NYPt2hdNoCtrivgec60.roa (hash: hZLmp4pyqAJx5mRvIALIF4vmWmI8U/uE03XVLg5S0aE=) 4: QGMHAWeIiva_ANIU0MC7CU9-6f8.roa (hash: 4G0dmujJfspfIapxR+knOukRFXWULsWgi/aWj5BdVi4=) 5: XiIbEnKjYE8MkI8g3bZKNddtCfQ.roa (hash: 969ogNKjx9JV6jK/y8xnBqcJ9Cd0T2enS1wUqhtbhGY=) 6: dGOsV8rB3n2kiiSorQ7C_OLvWso.roa (hash: CfnCuNHVj64xX3Nr1KaQqkMmG3m7OTprs4PyzRWTuhc=) 7: gsGfrYs1utK7SrtoyVPXL783bwM.roa (hash: 1zqi9F+7GRzsZKDlqyActNmPOf78TLbsfJ6f9t5J09A=) 8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: 9hchgK1UxGweuYXPHn3275Qf2FxNbDcseFJWMyT8q8Q=) 9: l-WUCYIzfrmbOY4lSlHo4EHYa-0.roa (hash: wRHoNrFNfoLupFB4h8pnue6IATQIBeN3aGRRjbWhTLE=) 10: quXPd4m3roGOFCgsU-cq5zkXqMM.roa (hash: cygguz3JRfVDe2shlN+tdvmvE/mxwD8qbYQvNiz7ASQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c8:fc:fc:db:17:6a:5f:2d:91:b6:02:32:f4:6f:ba:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Sep 22 12:00:17 2026 GMT Not After : Sep 23 12:00:17 2026 GMT Subject: CN=af2594d7349a841c0a1b43ccafd67bdc8868fb0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6b:c2:2f:a1:5f:24:bb:9f:26:bc:af:8d:b8: 1b:39:c9:a6:8d:21:6b:51:a2:b8:f5:ef:0e:10:c7: 69:dd:b0:66:fa:3d:40:1a:b3:a2:94:8c:02:3b:ac: b0:18:13:48:1d:d8:1e:c7:68:f1:32:93:56:00:75: a1:e5:d2:a4:18:6c:7b:aa:86:d5:fe:3c:47:fc:09: f4:4b:46:c8:ef:02:de:29:99:ff:d3:df:72:eb:ea: 4d:2d:b2:9f:05:e0:09:e9:28:00:ef:03:73:ad:fb: 4b:8f:d1:e6:3b:80:31:9e:c5:a2:6e:0a:d2:4a:0c: b8:aa:af:aa:f0:14:09:91:28:14:6b:b9:b6:07:a4: ef:4d:6a:9b:b4:d8:a2:71:c7:8b:b0:f1:6f:35:b0: e8:70:09:dd:da:57:8c:c9:f0:8c:15:d7:7f:2e:11: 13:82:88:52:73:da:10:04:a7:a2:1f:99:f1:d8:a1: 8e:56:b4:9a:7a:9a:34:08:b7:05:49:e3:52:d4:ff: dc:ec:52:c3:0e:60:5f:d9:8a:38:d5:1f:8e:15:a6: 71:af:75:db:c5:e8:3d:8b:59:d0:f7:f7:25:39:0a: dd:0d:a0:b2:a3:55:fd:93:5a:30:d0:f9:1c:50:1a: ad:3f:a5:52:74:40:e5:7a:b1:d7:41:e1:cc:f0:92: 10:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:25:94:D7:34:9A:84:1C:0A:1B:43:CC:AF:D6:7B:DC:88:68:FB:0B X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:06:c4:d3:4f:fd:70:63:3f:7b:af:6a:ec:bc:81:03:a8:4a: 12:c0:e3:cf:2b:dd:29:55:3f:fa:35:41:79:53:26:50:c4:14: af:62:13:d8:73:8a:6b:f8:5a:c2:65:ce:1a:27:87:0c:34:fa: 45:33:8c:18:51:45:94:8a:db:40:3f:4f:d5:f2:eb:be:34:71: 78:84:83:91:49:cb:58:db:1b:ca:8b:2e:97:93:25:4d:6f:45: 91:53:96:0a:fb:36:95:4b:ab:2d:27:ef:71:bc:8f:88:48:b7: 42:e8:0e:7d:52:7d:6e:ce:24:ac:66:d9:9b:1a:02:f2:62:ce: 9a:bf:50:2b:13:91:d2:a8:9c:11:78:fc:78:f2:73:ac:60:bc: 99:0f:d8:17:e7:cf:0f:28:2e:99:11:b2:55:58:b0:57:50:2b: dd:83:0e:ac:c8:9e:68:f2:d1:cf:bf:c5:90:b4:a2:a5:bd:2a: 41:52:c4:3c:f2:4c:8b:7e:56:bb:78:d5:93:5a:a8:91:08:02: 26:b4:85:94:c8:68:da:f0:6e:c9:d9:56:ac:ce:b7:a8:d7:0d: fa:08:b5:e0:36:b8:02:c2:b2:8d:e2:be:74:10:74:35:d5:c9: 77:c6:75:7e:55:dc:0a:b9:18:38:e2:fc:58:30:62:a3:b6:eb: ed:8e:13:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDI/PzbF2pfLZG2AjL0b7qSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjYwOTIyMTIwMDE3WhcNMjYwOTIzMTIwMDE3WjAzMTEwLwYDVQQD EyhhZjI1OTRkNzM0OWE4NDFjMGExYjQzY2NhZmQ2N2JkYzg4NjhmYjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGvCL6FfJLufJryvjbgbOcmmjSFr UaK49e8OEMdp3bBm+j1AGrOilIwCO6ywGBNIHdgex2jxMpNWAHWh5dKkGGx7qobV /jxH/An0S0bI7wLeKZn/099y6+pNLbKfBeAJ6SgA7wNzrftLj9HmO4AxnsWibgrS Sgy4qq+q8BQJkSgUa7m2B6TvTWqbtNiicceLsPFvNbDocAnd2leMyfCMFdd/LhET gohSc9oQBKeiH5nx2KGOVrSaepo0CLcFSeNS1P/c7FLDDmBf2Yo41R+OFaZxr3Xb xeg9i1nQ9/clOQrdDaCyo1X9k1ow0PkcUBqtP6VSdEDlerHXQeHM8JIQvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8llNc0moQcChtDzK/We9yIaPsLMB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQbE00/9 cGM/e69q7LyBA6hKEsDjzyvdKVU/+jVBeVMmUMQUr2IT2HOKa/hawmXOGieHDDT6 RTOMGFFFlIrbQD9P1fLrvjRxeISDkUnLWNsbyosul5MlTW9FkVOWCvs2lUurLSfv cbyPiEi3QugOfVJ9bs4krGbZmxoC8mLOmr9QKxOR0qicEXj8ePJzrGC8mQ/YF+fP DygumRGyVViwV1Ar3YMOrMieaPLRz7/FkLSipb0qQVLEPPJMi35Wu3jVk1qokQgC JrSFlMho2vBuydlWrM63qNcN+gi14Da4AsKyjeK+dBB0NdXJd8Z1flXcCrkYOOL8 WDBio7br7Y4TDA== -----END CERTIFICATE-----Generated at Tue Sep 22 18:12:59 2026 by rpki-client