$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json) Hash identifier: FlNC4pqHCAvcYKnAPEXO0arhdOSur6nyKDi9/Hu/zHU= Subject key identifier: 5B:64:3D:28:16:0B:ED:0B:B8:B9:E3:D1:3F:27:74:5C:90:AA:13:4B Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 019D9AABA6D4F5E87A6390DDD13BF851593C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft Manifest number: 18EC Signing time: Fri 17 Apr 2026 09:00:33 +0000 Manifest this update: Fri 17 Apr 2026 09:00:33 +0000 Manifest next update: Sat 18 Apr 2026 09:00:33 +0000 Files and hashes: 1: 1-QrkJ1ReezcgF73EgGbqmxSp9iE.roa (hash: RSa2cTQxNZP76zXoi1N6FVpNx/a7WiCBFEO8rdHSaGo=) 2: GadZnqwNNL6vcO0uNGOaOFXO-5w.roa (hash: WPx0ZxFduASzoEDiUK1PVK0AV5w4NdVYDhxmnMrQPaw=) 3: Kt7Bb9a8NYPt2hdNoCtrivgec60.roa (hash: hZLmp4pyqAJx5mRvIALIF4vmWmI8U/uE03XVLg5S0aE=) 4: QGMHAWeIiva_ANIU0MC7CU9-6f8.roa (hash: 4G0dmujJfspfIapxR+knOukRFXWULsWgi/aWj5BdVi4=) 5: XiIbEnKjYE8MkI8g3bZKNddtCfQ.roa (hash: 969ogNKjx9JV6jK/y8xnBqcJ9Cd0T2enS1wUqhtbhGY=) 6: dGOsV8rB3n2kiiSorQ7C_OLvWso.roa (hash: CfnCuNHVj64xX3Nr1KaQqkMmG3m7OTprs4PyzRWTuhc=) 7: gsGfrYs1utK7SrtoyVPXL783bwM.roa (hash: 1zqi9F+7GRzsZKDlqyActNmPOf78TLbsfJ6f9t5J09A=) 8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: 61mgrI3ABFsdZeLYJ4sqz9Y4llvn6i3AEdLuZJel2dw=) 9: l-WUCYIzfrmbOY4lSlHo4EHYa-0.roa (hash: wRHoNrFNfoLupFB4h8pnue6IATQIBeN3aGRRjbWhTLE=) 10: quXPd4m3roGOFCgsU-cq5zkXqMM.roa (hash: cygguz3JRfVDe2shlN+tdvmvE/mxwD8qbYQvNiz7ASQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:ab:a6:d4:f5:e8:7a:63:90:dd:d1:3b:f8:51:59:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Apr 17 09:00:33 2026 GMT Not After : Apr 18 09:00:33 2026 GMT Subject: CN=5b643d28160bed0bb8b9e3d13f27745c90aa134b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:55:0b:c9:3f:bc:49:04:af:16:1a:73:d0:d3: fc:3e:e4:97:d1:0a:b1:50:59:e2:c0:c0:ac:9c:c8: 90:3e:b7:22:ea:0c:62:c4:cf:d0:df:9e:67:2d:d1: c7:cc:67:f4:88:51:f7:9b:dd:5b:e3:58:e1:f2:e3: c9:d3:11:9a:ce:0b:ae:28:93:bd:10:16:48:08:4d: df:cb:c6:9e:7a:67:77:47:8c:a7:43:85:73:c6:2b: e0:5c:75:ac:11:6b:ca:c9:a6:05:9b:2b:05:0f:1b: f4:0a:93:66:bc:52:40:54:35:20:ba:96:ad:cf:5d: e4:96:a9:0b:6b:b8:c3:06:f9:55:4a:2a:ee:52:3d: c9:6a:3f:a4:34:a4:00:e2:47:14:e2:1d:ca:96:f6: 4c:7d:89:3f:3f:dc:10:dc:4b:2c:46:a1:9b:9e:8a: 99:53:0d:17:d5:09:ab:1d:25:01:d8:f1:e9:6d:93: ff:32:8d:98:a9:fa:b9:27:08:02:68:b8:68:57:3f: 3c:9c:bd:b1:95:eb:24:e0:71:99:0a:3f:42:b4:c0: 99:59:89:43:e1:2b:e4:24:57:3a:fa:8a:1c:55:52: 54:4e:e3:af:43:b5:ef:d9:f8:1b:7f:f3:f0:65:87: fb:79:01:ea:b2:68:50:71:84:86:bd:43:2d:fe:e6: 58:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:64:3D:28:16:0B:ED:0B:B8:B9:E3:D1:3F:27:74:5C:90:AA:13:4B X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:94:db:dc:fa:89:69:88:f8:d9:ac:d1:d8:a2:5c:9a:bb:4b: e4:a5:e4:e1:9d:5a:c7:09:8f:9b:c7:a6:48:27:e2:6c:44:de: 90:5b:50:d2:fe:75:ba:47:62:97:cb:5f:ee:20:df:22:89:0a: 6a:c5:ac:f3:23:6e:cc:39:ee:54:e1:75:d0:03:eb:8c:86:18: 8b:1e:58:9b:7e:13:dc:fb:f3:1c:d5:30:ba:b1:dd:ad:e4:0c: ce:fc:ba:c2:ff:ef:f0:68:41:2d:af:57:13:ab:40:fe:1f:10: fa:49:fe:cb:6c:0b:92:39:09:12:00:70:5a:06:26:14:8d:44: 08:5a:6f:ff:20:93:b7:6a:70:78:67:c5:43:44:46:a4:16:44: cf:37:82:da:90:0e:66:b6:2d:37:46:87:da:81:3a:76:dc:be: 54:4c:ac:f6:13:c9:64:a2:4b:19:36:2b:a3:ca:43:7e:84:5e: f4:fc:bf:68:74:da:1d:12:fa:e1:e3:04:50:15:a7:46:b2:ed: df:6d:c4:e7:e3:a5:ae:ec:62:84:72:a6:fc:a2:56:74:82:d1: e0:32:f0:58:a3:2a:08:b7:31:07:5e:fc:79:62:0a:ae:f1:4c: ff:15:21:9a:a1:67:24:ae:75:86:07:ae:8d:9d:4f:d6:ec:63: 12:6c:45:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aq6bU9eh6Y5Dd0Tv4UVk8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjYwNDE3MDkwMDMzWhcNMjYwNDE4MDkwMDMzWjAzMTEwLwYDVQQD Eyg1YjY0M2QyODE2MGJlZDBiYjhiOWUzZDEzZjI3NzQ1YzkwYWExMzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFULyT+8SQSvFhpz0NP8PuSX0Qqx UFniwMCsnMiQPrci6gxixM/Q355nLdHHzGf0iFH3m91b41jh8uPJ0xGazguuKJO9 EBZICE3fy8aeemd3R4ynQ4VzxivgXHWsEWvKyaYFmysFDxv0CpNmvFJAVDUgupat z13klqkLa7jDBvlVSiruUj3Jaj+kNKQA4kcU4h3KlvZMfYk/P9wQ3EssRqGbnoqZ Uw0X1QmrHSUB2PHpbZP/Mo2Yqfq5JwgCaLhoVz88nL2xlesk4HGZCj9CtMCZWYlD 4SvkJFc6+oocVVJUTuOvQ7Xv2fgbf/PwZYf7eQHqsmhQcYSGvUMt/uZYiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtkPSgWC+0LuLnj0T8ndFyQqhNLMB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZTb3PqJ aYj42azR2KJcmrtL5KXk4Z1axwmPm8emSCfibETekFtQ0v51ukdil8tf7iDfIokK asWs8yNuzDnuVOF10APrjIYYix5Ym34T3PvzHNUwurHdreQMzvy6wv/v8GhBLa9X E6tA/h8Q+kn+y2wLkjkJEgBwWgYmFI1ECFpv/yCTt2pweGfFQ0RGpBZEzzeC2pAO ZrYtN0aH2oE6dty+VEys9hPJZKJLGTYro8pDfoRe9Py/aHTaHRL64eMEUBWnRrLt 323E5+OlruxihHKm/KJWdILR4DLwWKMqCLcxB178eWIKrvFM/xUhmqFnJK51hgeu jZ1P1uxjEmxFNw== -----END CERTIFICATE-----Generated at Fri Apr 17 11:06:17 2026 by rpki-client