$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json) Hash identifier: DE0JFkCe/MAdmEr2VV62JZzJVLfkvZC/Q/bYKtgKWtw= Subject key identifier: A1:4C:33:7F:36:93:3E:D4:F2:E0:E7:AC:DF:73:6B:03:9E:0E:33:66 Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 019EBE47E0BD21221840DA1FF2524BCA42A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft Manifest number: 1983 Signing time: Sat 13 Jun 2026 00:00:42 +0000 Manifest this update: Sat 13 Jun 2026 00:00:42 +0000 Manifest next update: Sun 14 Jun 2026 00:00:42 +0000 Files and hashes: 1: 1-QrkJ1ReezcgF73EgGbqmxSp9iE.roa (hash: RSa2cTQxNZP76zXoi1N6FVpNx/a7WiCBFEO8rdHSaGo=) 2: GadZnqwNNL6vcO0uNGOaOFXO-5w.roa (hash: WPx0ZxFduASzoEDiUK1PVK0AV5w4NdVYDhxmnMrQPaw=) 3: Kt7Bb9a8NYPt2hdNoCtrivgec60.roa (hash: hZLmp4pyqAJx5mRvIALIF4vmWmI8U/uE03XVLg5S0aE=) 4: QGMHAWeIiva_ANIU0MC7CU9-6f8.roa (hash: 4G0dmujJfspfIapxR+knOukRFXWULsWgi/aWj5BdVi4=) 5: XiIbEnKjYE8MkI8g3bZKNddtCfQ.roa (hash: 969ogNKjx9JV6jK/y8xnBqcJ9Cd0T2enS1wUqhtbhGY=) 6: dGOsV8rB3n2kiiSorQ7C_OLvWso.roa (hash: CfnCuNHVj64xX3Nr1KaQqkMmG3m7OTprs4PyzRWTuhc=) 7: gsGfrYs1utK7SrtoyVPXL783bwM.roa (hash: 1zqi9F+7GRzsZKDlqyActNmPOf78TLbsfJ6f9t5J09A=) 8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: 8h1H+2Z4CDX/24brCcWht0Q0zBkyBLzvm1PBlmnqQcA=) 9: l-WUCYIzfrmbOY4lSlHo4EHYa-0.roa (hash: wRHoNrFNfoLupFB4h8pnue6IATQIBeN3aGRRjbWhTLE=) 10: quXPd4m3roGOFCgsU-cq5zkXqMM.roa (hash: cygguz3JRfVDe2shlN+tdvmvE/mxwD8qbYQvNiz7ASQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:be:47:e0:bd:21:22:18:40:da:1f:f2:52:4b:ca:42:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Jun 13 00:00:42 2026 GMT Not After : Jun 14 00:00:42 2026 GMT Subject: CN=a14c337f36933ed4f2e0e7acdf736b039e0e3366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cd:e9:88:2a:4e:3f:a4:c4:1e:5f:ad:1a:04: 62:b2:99:1f:7c:bd:af:7c:a3:22:dc:e3:49:1f:b4: 6e:6d:83:6f:7c:9b:ff:9f:e1:75:5b:33:6c:77:20: c0:ab:e4:4a:a6:44:06:2d:67:06:d8:f0:ec:21:ab: b2:79:3b:c0:06:4a:4b:28:c9:4e:b7:e8:85:42:ca: 7d:fa:8c:65:2e:54:5d:ef:fa:54:9f:60:0a:55:0f: 33:d9:94:db:1b:42:63:95:77:78:8b:c0:01:a3:0c: c0:b0:52:df:b8:c3:a5:9e:34:0e:5f:b4:0d:bd:ae: 3e:21:42:34:fe:b3:f5:09:b0:2a:80:e9:bb:2a:d0: 12:3c:6a:92:03:fa:b0:ff:32:6c:a6:3b:a6:a0:6d: 4d:5e:96:48:9e:43:88:fa:ec:fe:ae:73:a9:31:19: 1d:e2:e3:70:6f:a2:e4:5f:03:83:ba:ee:84:1f:64: 96:94:f4:45:af:ba:60:c2:f2:95:58:a9:1d:0b:30: ea:9a:b7:67:fd:51:02:63:1a:f7:2b:84:cf:66:b8: d1:58:59:d8:9d:44:72:7d:c2:b1:49:d6:49:77:84: 15:29:86:70:ed:38:8c:f1:29:ae:03:70:5b:eb:68: 75:59:03:73:e9:d3:d7:0a:0f:ae:ca:60:81:1c:eb: 28:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:4C:33:7F:36:93:3E:D4:F2:E0:E7:AC:DF:73:6B:03:9E:0E:33:66 X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:11:19:60:4f:2f:47:f2:7f:d4:7b:75:1e:ae:13:e2:72:84: 82:1f:76:b2:c1:d9:ed:ce:04:45:58:dd:4b:81:04:6f:7d:0f: 80:7b:93:39:81:62:40:3d:70:7a:70:f1:f4:da:bd:de:89:97: 84:1f:4d:54:cb:28:62:cd:e2:0b:ba:2d:20:08:d3:0a:61:f2: 40:9f:82:de:a6:fb:1a:cc:7b:f4:ea:ec:ca:a4:b1:7a:49:34: cb:8b:51:57:1b:c5:ed:67:bd:f9:0a:21:93:10:ad:ba:26:9c: 52:be:2e:9e:83:42:8d:eb:37:d3:c7:bf:6c:86:fe:a6:72:a5: fb:3b:46:ba:c8:a4:c8:63:69:8a:d2:46:c4:e4:dd:58:e5:ad: 0b:c5:32:dc:12:4a:15:c2:7a:b8:71:ce:44:b9:70:d5:03:7b: 51:2c:4f:2a:99:df:98:14:d0:a5:a1:9f:5e:66:50:79:96:79: a9:cf:ba:9e:98:7f:a6:8b:d7:82:e9:f5:00:1b:85:36:ac:85: cd:b1:24:82:cd:92:9a:80:e5:2d:f2:7a:62:68:46:ef:0c:d0: 10:d8:43:e6:e8:3c:4e:34:d3:22:f2:f1:7a:47:27:10:4c:fa: 3d:f4:ea:83:fb:4d:c0:cd:f8:0c:22:8e:fd:da:6c:1d:19:b1: fe:4a:d3:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6+R+C9ISIYQNof8lJLykKjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjYwNjEzMDAwMDQyWhcNMjYwNjE0MDAwMDQyWjAzMTEwLwYDVQQD EyhhMTRjMzM3ZjM2OTMzZWQ0ZjJlMGU3YWNkZjczNmIwMzllMGUzMzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM3piCpOP6TEHl+tGgRispkffL2v fKMi3ONJH7RubYNvfJv/n+F1WzNsdyDAq+RKpkQGLWcG2PDsIauyeTvABkpLKMlO t+iFQsp9+oxlLlRd7/pUn2AKVQ8z2ZTbG0JjlXd4i8ABowzAsFLfuMOlnjQOX7QN va4+IUI0/rP1CbAqgOm7KtASPGqSA/qw/zJspjumoG1NXpZInkOI+uz+rnOpMRkd 4uNwb6LkXwODuu6EH2SWlPRFr7pgwvKVWKkdCzDqmrdn/VECYxr3K4TPZrjRWFnY nURyfcKxSdZJd4QVKYZw7TiM8SmuA3Bb62h1WQNz6dPXCg+uymCBHOsoJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFMM382kz7U8uDnrN9zawOeDjNmMB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHREZYE8v R/J/1Ht1Hq4T4nKEgh92ssHZ7c4ERVjdS4EEb30PgHuTOYFiQD1wenDx9Nq93omX hB9NVMsoYs3iC7otIAjTCmHyQJ+C3qb7Gsx79OrsyqSxekk0y4tRVxvF7We9+Qoh kxCtuiacUr4unoNCjes308e/bIb+pnKl+ztGusikyGNpitJGxOTdWOWtC8Uy3BJK FcJ6uHHORLlw1QN7USxPKpnfmBTQpaGfXmZQeZZ5qc+6nph/povXgun1ABuFNqyF zbEkgs2SmoDlLfJ6YmhG7wzQENhD5ug8TjTTIvLxekcnEEz6PfTqg/tNwM34DCKO /dpsHRmx/krT9w== -----END CERTIFICATE-----Generated at Sat Jun 13 08:46:15 2026 by rpki-client