$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json) Hash identifier: jlrDE/iGlSAYwoiOglfE0VqTKLiCr8rd6lw5F/9fGD4= Subject key identifier: EA:74:CB:9F:32:C6:73:30:2A:A3:D2:55:2F:1A:2A:2E:53:ED:CA:2C Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 019CAB34B676FD70199FA1202DAED9F4572E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft Manifest number: 1870 Signing time: Sun 01 Mar 2026 21:01:24 +0000 Manifest this update: Sun 01 Mar 2026 21:01:24 +0000 Manifest next update: Mon 02 Mar 2026 21:01:24 +0000 Files and hashes: 1: 1-QrkJ1ReezcgF73EgGbqmxSp9iE.roa (hash: RSa2cTQxNZP76zXoi1N6FVpNx/a7WiCBFEO8rdHSaGo=) 2: GadZnqwNNL6vcO0uNGOaOFXO-5w.roa (hash: WPx0ZxFduASzoEDiUK1PVK0AV5w4NdVYDhxmnMrQPaw=) 3: Kt7Bb9a8NYPt2hdNoCtrivgec60.roa (hash: hZLmp4pyqAJx5mRvIALIF4vmWmI8U/uE03XVLg5S0aE=) 4: QGMHAWeIiva_ANIU0MC7CU9-6f8.roa (hash: 4G0dmujJfspfIapxR+knOukRFXWULsWgi/aWj5BdVi4=) 5: XiIbEnKjYE8MkI8g3bZKNddtCfQ.roa (hash: 969ogNKjx9JV6jK/y8xnBqcJ9Cd0T2enS1wUqhtbhGY=) 6: dGOsV8rB3n2kiiSorQ7C_OLvWso.roa (hash: CfnCuNHVj64xX3Nr1KaQqkMmG3m7OTprs4PyzRWTuhc=) 7: gsGfrYs1utK7SrtoyVPXL783bwM.roa (hash: 1zqi9F+7GRzsZKDlqyActNmPOf78TLbsfJ6f9t5J09A=) 8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: MXMoyEymhGL7rxb01r9i8ky8NRostvJ6s8Y+EL1jveA=) 9: l-WUCYIzfrmbOY4lSlHo4EHYa-0.roa (hash: wRHoNrFNfoLupFB4h8pnue6IATQIBeN3aGRRjbWhTLE=) 10: quXPd4m3roGOFCgsU-cq5zkXqMM.roa (hash: cygguz3JRfVDe2shlN+tdvmvE/mxwD8qbYQvNiz7ASQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 21:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:34:b6:76:fd:70:19:9f:a1:20:2d:ae:d9:f4:57:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Mar 1 21:01:24 2026 GMT Not After : Mar 2 21:01:24 2026 GMT Subject: CN=ea74cb9f32c673302aa3d2552f1a2a2e53edca2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:25:f5:1e:dc:d6:c1:03:6d:af:55:56:d6:7c: d4:ee:51:bb:c0:79:c5:19:19:c9:ab:a2:1c:a6:70: 4b:cd:b5:88:5a:45:47:8c:40:49:b0:ea:9e:76:9c: 72:dc:1d:dd:84:2c:4a:4c:9e:ee:a0:0a:2e:f5:d2: 66:4a:1c:91:7d:e2:91:16:7a:5d:59:7f:2b:5c:b3: a8:c3:c2:6d:e6:7c:36:98:f1:89:05:f9:88:c7:e8: 35:48:60:0b:7d:aa:1e:53:37:c6:e8:5f:0e:91:74: 89:72:36:e4:70:cd:c0:99:3a:b1:b6:29:37:85:0f: 20:d7:de:33:54:7f:c2:cd:6d:3d:c9:6c:52:c9:0f: 1e:90:02:e4:38:2f:86:9d:91:83:f0:cb:33:5e:88: 6a:8f:01:1b:5e:eb:5f:77:f7:aa:3f:73:31:c0:1e: b9:4d:18:34:ed:fd:98:02:b5:1b:c5:a2:2c:ee:db: d1:47:b2:51:6a:c9:e5:17:c7:84:bb:f5:9d:f8:bb: 36:40:15:07:5a:d6:d6:f8:38:8b:94:34:cd:af:65: 94:a7:b3:6f:0c:6b:34:0c:90:ce:e5:2e:9a:57:48: 51:99:1b:f2:ca:27:d3:79:20:fc:f3:a2:40:80:be: 93:5b:40:37:a5:a2:cb:44:fb:0a:33:9f:2f:53:fa: 8b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:74:CB:9F:32:C6:73:30:2A:A3:D2:55:2F:1A:2A:2E:53:ED:CA:2C X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:8b:45:9c:f9:4d:a4:39:07:92:a8:15:45:11:59:ff:a1:a1: 2a:f7:ca:13:93:cc:c9:a9:ce:ab:8a:42:15:c8:74:29:a5:a6: 94:14:b2:fc:5a:ae:51:88:b3:24:c2:39:5f:8f:d1:f4:c8:70: 74:c3:b6:66:6a:44:c0:39:11:02:c3:4b:09:43:1c:50:04:c5: ae:4e:cf:e9:59:f3:29:1d:4c:12:5f:6e:25:1f:9f:b9:ad:a0: 0f:56:a5:d1:34:16:1b:aa:1c:35:9d:a6:6d:ca:c5:4b:45:84: e9:7d:0e:04:fb:18:9e:23:aa:40:f3:3b:88:18:35:04:63:88: 1e:f0:5e:c3:98:1c:34:ad:29:77:7b:95:86:d6:fe:06:b3:82: 0f:8e:af:ab:06:fa:23:f1:f5:fb:1e:a1:59:3f:8e:58:2c:e5: 20:e2:85:11:ed:73:71:a1:5d:60:69:73:39:5d:90:86:ce:41: 43:ca:af:f5:ae:85:2d:04:a3:52:97:a6:fb:cf:76:20:2b:59: 3e:2e:91:28:f6:59:8d:b2:e0:e3:5c:d0:05:26:43:1c:40:0b: 60:5d:41:c6:ca:7e:1f:6c:40:94:a9:48:65:12:8e:f0:91:84: 5b:91:ae:91:83:71:80:5a:4c:bd:d6:53:8d:44:d1:97:5d:c3: 3e:3a:fe:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrNLZ2/XAZn6EgLa7Z9FcuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjYwMzAxMjEwMTI0WhcNMjYwMzAyMjEwMTI0WjAzMTEwLwYDVQQD EyhlYTc0Y2I5ZjMyYzY3MzMwMmFhM2QyNTUyZjFhMmEyZTUzZWRjYTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSX1HtzWwQNtr1VW1nzU7lG7wHnF GRnJq6IcpnBLzbWIWkVHjEBJsOqedpxy3B3dhCxKTJ7uoAou9dJmShyRfeKRFnpd WX8rXLOow8Jt5nw2mPGJBfmIx+g1SGALfaoeUzfG6F8OkXSJcjbkcM3AmTqxtik3 hQ8g194zVH/CzW09yWxSyQ8ekALkOC+GnZGD8MszXohqjwEbXutfd/eqP3MxwB65 TRg07f2YArUbxaIs7tvRR7JRasnlF8eEu/Wd+Ls2QBUHWtbW+DiLlDTNr2WUp7Nv DGs0DJDO5S6aV0hRmRvyyifTeSD886JAgL6TW0A3paLLRPsKM58vU/qLIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOp0y58yxnMwKqPSVS8aKi5T7cosMB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoItFnPlN pDkHkqgVRRFZ/6GhKvfKE5PMyanOq4pCFch0KaWmlBSy/FquUYizJMI5X4/R9Mhw dMO2ZmpEwDkRAsNLCUMcUATFrk7P6VnzKR1MEl9uJR+fua2gD1al0TQWG6ocNZ2m bcrFS0WE6X0OBPsYniOqQPM7iBg1BGOIHvBew5gcNK0pd3uVhtb+BrOCD46vqwb6 I/H1+x6hWT+OWCzlIOKFEe1zcaFdYGlzOV2Qhs5BQ8qv9a6FLQSjUpem+892ICtZ Pi6RKPZZjbLg41zQBSZDHEALYF1Bxsp+H2xAlKlIZRKO8JGEW5GukYNxgFpMvdZT jUTRl13DPjr+Xg== -----END CERTIFICATE-----Generated at Mon Mar 2 08:01:39 2026 by rpki-client