$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json) Hash identifier: DSTyW6leXaKnXHHpsFPZgEVLjIJwua8mMLTF8qIvPsc= Subject key identifier: C1:7F:27:3C:1E:2E:B4:83:D2:58:AE:94:03:B8:C2:A5:E9:D4:EA:C2 Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 019D98BD8087362BCD972C1FD4CEA2E30D01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft Manifest number: 18EB Signing time: Fri 17 Apr 2026 00:00:49 +0000 Manifest this update: Fri 17 Apr 2026 00:00:49 +0000 Manifest next update: Sat 18 Apr 2026 00:00:49 +0000 Files and hashes: 1: 1-QrkJ1ReezcgF73EgGbqmxSp9iE.roa (hash: RSa2cTQxNZP76zXoi1N6FVpNx/a7WiCBFEO8rdHSaGo=) 2: GadZnqwNNL6vcO0uNGOaOFXO-5w.roa (hash: WPx0ZxFduASzoEDiUK1PVK0AV5w4NdVYDhxmnMrQPaw=) 3: Kt7Bb9a8NYPt2hdNoCtrivgec60.roa (hash: hZLmp4pyqAJx5mRvIALIF4vmWmI8U/uE03XVLg5S0aE=) 4: QGMHAWeIiva_ANIU0MC7CU9-6f8.roa (hash: 4G0dmujJfspfIapxR+knOukRFXWULsWgi/aWj5BdVi4=) 5: XiIbEnKjYE8MkI8g3bZKNddtCfQ.roa (hash: 969ogNKjx9JV6jK/y8xnBqcJ9Cd0T2enS1wUqhtbhGY=) 6: dGOsV8rB3n2kiiSorQ7C_OLvWso.roa (hash: CfnCuNHVj64xX3Nr1KaQqkMmG3m7OTprs4PyzRWTuhc=) 7: gsGfrYs1utK7SrtoyVPXL783bwM.roa (hash: 1zqi9F+7GRzsZKDlqyActNmPOf78TLbsfJ6f9t5J09A=) 8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: 9UML74v3zJu5+MOY+9jFGaud4kX4CbUM1AK/sEfWPHk=) 9: l-WUCYIzfrmbOY4lSlHo4EHYa-0.roa (hash: wRHoNrFNfoLupFB4h8pnue6IATQIBeN3aGRRjbWhTLE=) 10: quXPd4m3roGOFCgsU-cq5zkXqMM.roa (hash: cygguz3JRfVDe2shlN+tdvmvE/mxwD8qbYQvNiz7ASQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:bd:80:87:36:2b:cd:97:2c:1f:d4:ce:a2:e3:0d:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Apr 17 00:00:49 2026 GMT Not After : Apr 18 00:00:49 2026 GMT Subject: CN=c17f273c1e2eb483d258ae9403b8c2a5e9d4eac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5b:c3:ff:80:c5:80:bb:e5:c7:aa:5b:62:96: 6f:11:10:43:ee:fa:07:80:4d:66:cd:c8:40:4a:4f: 8a:90:6b:86:15:16:73:80:3d:3e:82:c9:14:26:40: 75:64:71:6b:d4:5b:c1:69:cb:59:0e:b1:35:23:34: 10:75:97:6e:dd:ac:f0:92:19:cb:da:3e:ec:32:d6: 3b:45:aa:99:ef:42:f7:0c:10:e2:0c:9f:eb:59:59: 20:d2:44:06:5b:5d:39:e3:15:5f:8b:4f:a6:4c:a2: b8:84:e3:0f:ea:f5:1b:68:f8:f2:d6:a9:fa:64:57: c4:79:1f:bb:8a:6e:e4:29:c3:7b:5a:0e:9b:c3:6d: aa:67:95:9b:3b:f1:71:e4:48:fa:e1:5b:2b:4f:4a: 8f:95:af:26:c8:a6:f0:3b:8b:0c:d5:a5:bc:ea:f6: 47:47:ac:aa:bc:0a:e2:3d:62:a0:9e:05:d0:13:99: a1:56:0a:23:3b:42:cc:55:d6:34:0a:a9:38:3b:49: 60:61:8c:ce:f0:b1:d6:c1:9c:14:d2:91:4d:83:66: 8e:0f:8e:9c:94:20:ef:ec:27:42:07:9a:39:1f:62: 98:cb:65:44:9b:9e:88:c3:9b:dd:7a:fd:ee:3f:f0: c3:8d:e1:fa:13:a7:8d:0f:10:72:7a:ba:49:4e:9c: a6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7F:27:3C:1E:2E:B4:83:D2:58:AE:94:03:B8:C2:A5:E9:D4:EA:C2 X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:16:ee:a4:46:44:ca:37:dc:b3:ea:26:38:73:4b:cb:9f:fe: b0:c4:04:27:3a:b9:c4:94:b5:68:6e:5e:b2:2b:0d:03:00:e4: fd:bd:df:d1:96:e0:5b:cc:7e:8e:c3:86:bf:74:18:10:0c:06: 7f:b4:d0:08:b5:37:9f:aa:b1:40:fc:fe:a9:2d:88:a7:41:49: 20:c6:d3:0b:f9:43:ef:37:34:bf:7a:00:59:cf:f1:78:ef:08: 5c:91:01:80:3a:4c:02:c6:ee:20:0f:d0:d9:87:4a:64:27:4b: 59:69:b5:41:c2:e3:fd:5a:70:fd:45:fb:04:d0:40:17:d3:56: 1f:52:f6:71:6d:9b:b5:c3:2f:97:88:90:8f:c3:af:b5:ed:34: 5f:08:9c:50:d3:14:9a:7d:b5:8a:3a:c7:a0:36:aa:d5:54:b5: 12:6a:5b:9b:04:9c:1c:25:07:19:83:08:35:5a:0a:16:af:83: 93:c8:62:9d:10:d1:c5:2b:3e:d0:f1:25:af:1c:33:bb:fa:f2: f5:ac:ca:53:3a:ae:25:5c:3b:6c:07:c4:f6:2e:6e:96:bf:a7: 82:25:e3:10:dd:d3:2f:dd:fd:04:81:80:91:76:fe:95:9e:8e: bd:50:f3:6a:a8:2f:1d:89:81:4f:cf:a6:05:24:54:41:1b:f8: 6c:91:c8:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YvYCHNivNlywf1M6i4w0BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjYwNDE3MDAwMDQ5WhcNMjYwNDE4MDAwMDQ5WjAzMTEwLwYDVQQD EyhjMTdmMjczYzFlMmViNDgzZDI1OGFlOTQwM2I4YzJhNWU5ZDRlYWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFvD/4DFgLvlx6pbYpZvERBD7voH gE1mzchASk+KkGuGFRZzgD0+gskUJkB1ZHFr1FvBactZDrE1IzQQdZdu3azwkhnL 2j7sMtY7RaqZ70L3DBDiDJ/rWVkg0kQGW1054xVfi0+mTKK4hOMP6vUbaPjy1qn6 ZFfEeR+7im7kKcN7Wg6bw22qZ5WbO/Fx5Ej64VsrT0qPla8myKbwO4sM1aW86vZH R6yqvAriPWKgngXQE5mhVgojO0LMVdY0Cqk4O0lgYYzO8LHWwZwU0pFNg2aOD46c lCDv7CdCB5o5H2KYy2VEm56Iw5vdev3uP/DDjeH6E6eNDxByerpJTpymYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMF/JzweLrSD0liulAO4wqXp1OrCMB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohbupEZE yjfcs+omOHNLy5/+sMQEJzq5xJS1aG5esisNAwDk/b3f0ZbgW8x+jsOGv3QYEAwG f7TQCLU3n6qxQPz+qS2Ip0FJIMbTC/lD7zc0v3oAWc/xeO8IXJEBgDpMAsbuIA/Q 2YdKZCdLWWm1QcLj/Vpw/UX7BNBAF9NWH1L2cW2btcMvl4iQj8Ovte00XwicUNMU mn21ijrHoDaq1VS1EmpbmwScHCUHGYMINVoKFq+Dk8hinRDRxSs+0PElrxwzu/ry 9azKUzquJVw7bAfE9i5ulr+ngiXjEN3TL939BIGAkXb+lZ6OvVDzaqgvHYmBT8+m BSRUQRv4bJHIPg== -----END CERTIFICATE-----Generated at Fri Apr 17 10:07:44 2026 by rpki-client