$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json) Hash identifier: Phe1bRoR5tiKhdRDfvpf5+H1PuW2gv+Z4c5VtQuPBmo= Subject key identifier: B2:88:F0:38:0A:FC:94:67:36:A2:27:AD:14:31:2C:E1:4D:44:16:76 Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 019FA9E297941904456224D3E595EA9967CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft Manifest number: 19FD Signing time: Tue 28 Jul 2026 18:00:27 +0000 Manifest this update: Tue 28 Jul 2026 18:00:27 +0000 Manifest next update: Wed 29 Jul 2026 18:00:27 +0000 Files and hashes: 1: 1-QrkJ1ReezcgF73EgGbqmxSp9iE.roa (hash: RSa2cTQxNZP76zXoi1N6FVpNx/a7WiCBFEO8rdHSaGo=) 2: GadZnqwNNL6vcO0uNGOaOFXO-5w.roa (hash: WPx0ZxFduASzoEDiUK1PVK0AV5w4NdVYDhxmnMrQPaw=) 3: Kt7Bb9a8NYPt2hdNoCtrivgec60.roa (hash: hZLmp4pyqAJx5mRvIALIF4vmWmI8U/uE03XVLg5S0aE=) 4: QGMHAWeIiva_ANIU0MC7CU9-6f8.roa (hash: 4G0dmujJfspfIapxR+knOukRFXWULsWgi/aWj5BdVi4=) 5: XiIbEnKjYE8MkI8g3bZKNddtCfQ.roa (hash: 969ogNKjx9JV6jK/y8xnBqcJ9Cd0T2enS1wUqhtbhGY=) 6: dGOsV8rB3n2kiiSorQ7C_OLvWso.roa (hash: CfnCuNHVj64xX3Nr1KaQqkMmG3m7OTprs4PyzRWTuhc=) 7: gsGfrYs1utK7SrtoyVPXL783bwM.roa (hash: 1zqi9F+7GRzsZKDlqyActNmPOf78TLbsfJ6f9t5J09A=) 8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: 4a8FMtJMZrXCOvgpxY3zcaG40sNdN7GHsqL3yHQOjuA=) 9: l-WUCYIzfrmbOY4lSlHo4EHYa-0.roa (hash: wRHoNrFNfoLupFB4h8pnue6IATQIBeN3aGRRjbWhTLE=) 10: quXPd4m3roGOFCgsU-cq5zkXqMM.roa (hash: cygguz3JRfVDe2shlN+tdvmvE/mxwD8qbYQvNiz7ASQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:e2:97:94:19:04:45:62:24:d3:e5:95:ea:99:67:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Jul 28 18:00:27 2026 GMT Not After : Jul 29 18:00:27 2026 GMT Subject: CN=b288f0380afc946736a227ad14312ce14d441676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3a:be:18:bf:34:cd:73:01:f6:cd:bd:f7:32: 18:b4:4a:f1:3e:f6:74:2b:cb:fb:a9:0b:9a:1a:33: 34:28:7e:7e:7e:58:92:87:34:fc:16:b2:9b:7a:fa: d7:ac:1d:de:b2:25:07:d8:5e:f5:52:df:91:e0:79: 75:b0:4c:cf:d9:61:80:57:63:82:7f:b8:e2:74:ac: 9c:92:4b:75:a4:6a:cc:e4:6f:a8:09:3d:a1:9d:1b: 71:38:81:ca:87:e7:1c:4c:7c:5a:d4:28:b3:03:5a: bf:de:ea:1f:ef:7c:61:4f:c4:74:76:56:a9:71:2e: 8d:ae:19:4f:90:c1:fe:8b:89:be:88:de:ad:6b:35: d2:26:26:e1:91:f7:70:e4:43:39:3f:ba:5d:3d:bf: 5b:8d:0e:e1:c0:fe:13:11:e0:7c:1d:c3:1a:14:ee: 5b:e4:2c:46:5a:3c:ae:be:96:5a:33:c1:f3:87:f1: ba:9d:c6:a2:3f:87:6d:c7:7c:77:2e:a4:48:cd:96: f9:e4:33:44:a3:03:b3:11:f8:1c:ff:ae:62:51:c3: 3f:8f:e7:21:ae:62:d9:57:3a:b5:ea:06:d5:24:41: 6a:5b:3c:e8:e5:ef:ff:c3:f9:15:c8:a0:57:0d:a4: 72:f5:d7:65:44:b5:e1:a6:87:4d:b2:98:da:f9:94: d5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:88:F0:38:0A:FC:94:67:36:A2:27:AD:14:31:2C:E1:4D:44:16:76 X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:7a:83:d9:61:63:63:49:90:31:e9:17:2a:c8:8c:0b:6f:31: 83:0a:73:ed:ae:64:b7:2b:99:39:a7:a9:b4:8c:84:10:5c:1a: 1e:9c:97:8a:58:58:08:0d:6b:bc:49:c8:10:a8:cc:b7:5b:9d: c1:f1:8d:d1:87:c0:35:2b:4c:fd:a1:0b:ff:f9:37:44:76:f3: 2a:c3:2a:be:fd:26:ca:1a:85:6d:2c:a3:3c:e1:8f:17:d2:57: 89:b9:ff:dc:11:c9:e8:af:69:e7:7a:2f:37:9c:d6:3b:48:e6: 7e:b8:7f:9c:1b:0e:38:19:bf:30:49:14:f1:a7:99:04:5a:6e: f7:c4:c1:2c:f1:69:b9:0f:73:35:36:7d:ac:f0:78:61:a1:85: 4a:6c:9a:36:4a:3b:0e:21:b3:fc:3b:d9:e5:d4:60:0b:1c:62: 32:06:48:5e:d4:ea:bc:f8:1a:5f:5d:c9:c6:16:8f:1b:f1:c2: e6:af:84:f7:93:b3:74:1b:66:6c:b1:15:7e:51:ce:c9:98:2e: 6b:4e:73:50:13:50:bb:84:87:fc:7e:92:81:4a:a5:90:39:b3: b6:80:e5:97:00:f1:93:7c:fa:b0:f5:0f:a6:58:68:11:0b:37: 4e:b7:69:e3:8e:88:0f:91:58:51:3d:d8:85:39:b6:6b:98:70: d7:75:62:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+p4peUGQRFYiTT5ZXqmWfOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjYwNzI4MTgwMDI3WhcNMjYwNzI5MTgwMDI3WjAzMTEwLwYDVQQD EyhiMjg4ZjAzODBhZmM5NDY3MzZhMjI3YWQxNDMxMmNlMTRkNDQxNjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zq+GL80zXMB9s299zIYtErxPvZ0 K8v7qQuaGjM0KH5+fliShzT8FrKbevrXrB3esiUH2F71Ut+R4Hl1sEzP2WGAV2OC f7jidKyckkt1pGrM5G+oCT2hnRtxOIHKh+ccTHxa1CizA1q/3uof73xhT8R0dlap cS6NrhlPkMH+i4m+iN6tazXSJibhkfdw5EM5P7pdPb9bjQ7hwP4TEeB8HcMaFO5b 5CxGWjyuvpZaM8Hzh/G6ncaiP4dtx3x3LqRIzZb55DNEowOzEfgc/65iUcM/j+ch rmLZVzq16gbVJEFqWzzo5e//w/kVyKBXDaRy9ddlRLXhpodNspja+ZTViwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKI8DgK/JRnNqInrRQxLOFNRBZ2MB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXqD2WFj Y0mQMekXKsiMC28xgwpz7a5ktyuZOaeptIyEEFwaHpyXilhYCA1rvEnIEKjMt1ud wfGN0YfANStM/aEL//k3RHbzKsMqvv0myhqFbSyjPOGPF9JXibn/3BHJ6K9p53ov N5zWO0jmfrh/nBsOOBm/MEkU8aeZBFpu98TBLPFpuQ9zNTZ9rPB4YaGFSmyaNko7 DiGz/DvZ5dRgCxxiMgZIXtTqvPgaX13JxhaPG/HC5q+E95OzdBtmbLEVflHOyZgu a05zUBNQu4SH/H6SgUqlkDmztoDllwDxk3z6sPUPplhoEQs3Trdp446ID5FYUT3Y hTm2a5hw13ViUA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:48:31 2026 by rpki-client