$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json) Hash identifier: HJBzRdX3Bui54UaIgEaziip70I7Vm6Gym0XiNEZM6hE= Subject key identifier: 0D:D1:6D:83:DF:7A:3F:27:C0:B4:8D:A3:6A:7B:D0:05:76:EC:FA:24 Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 01A0DA5F3777051F536EFBAF7469DAB9A919 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft Manifest number: 1A9C Signing time: Fri 25 Sep 2026 21:01:08 +0000 Manifest this update: Fri 25 Sep 2026 21:01:08 +0000 Manifest next update: Sat 26 Sep 2026 21:01:08 +0000 Files and hashes: 1: 8-hboCP-U8Wk9qtGn0IWpFqelRc.roa (hash: j5xldAU1MujpYVAZwSnjN9dxcpWX63Cij0SbzlZlEHU=) 2: GadZnqwNNL6vcO0uNGOaOFXO-5w.roa (hash: WPx0ZxFduASzoEDiUK1PVK0AV5w4NdVYDhxmnMrQPaw=) 3: Kt7Bb9a8NYPt2hdNoCtrivgec60.roa (hash: hZLmp4pyqAJx5mRvIALIF4vmWmI8U/uE03XVLg5S0aE=) 4: QGMHAWeIiva_ANIU0MC7CU9-6f8.roa (hash: 4G0dmujJfspfIapxR+knOukRFXWULsWgi/aWj5BdVi4=) 5: XiIbEnKjYE8MkI8g3bZKNddtCfQ.roa (hash: 969ogNKjx9JV6jK/y8xnBqcJ9Cd0T2enS1wUqhtbhGY=) 6: dGOsV8rB3n2kiiSorQ7C_OLvWso.roa (hash: CfnCuNHVj64xX3Nr1KaQqkMmG3m7OTprs4PyzRWTuhc=) 7: gsGfrYs1utK7SrtoyVPXL783bwM.roa (hash: 1zqi9F+7GRzsZKDlqyActNmPOf78TLbsfJ6f9t5J09A=) 8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: bXQGeaNG2UjUt/ZZzFGXhDPXtS4f6mK3VKvxq+DCQ/Y=) 9: l-WUCYIzfrmbOY4lSlHo4EHYa-0.roa (hash: wRHoNrFNfoLupFB4h8pnue6IATQIBeN3aGRRjbWhTLE=) 10: quXPd4m3roGOFCgsU-cq5zkXqMM.roa (hash: cygguz3JRfVDe2shlN+tdvmvE/mxwD8qbYQvNiz7ASQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 17:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:da:5f:37:77:05:1f:53:6e:fb:af:74:69:da:b9:a9:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Sep 25 21:01:08 2026 GMT Not After : Sep 26 21:01:08 2026 GMT Subject: CN=0dd16d83df7a3f27c0b48da36a7bd00576ecfa24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f3:4e:e2:61:2c:bd:9d:08:23:0b:9b:02:26: 52:d5:de:d7:43:b8:06:aa:9d:9f:ee:18:75:d6:24: 93:72:3d:8c:2b:e4:4f:1d:60:6a:a0:c7:e2:84:f4: ea:9e:2e:3d:27:d8:ac:bb:0a:54:86:10:18:7f:59: ee:cc:3f:d9:8e:ed:76:46:8a:b7:de:03:fc:83:f6: 06:4e:45:f6:38:2d:b0:7b:0c:8e:5e:1a:56:a9:dc: 7e:ea:b4:60:d5:61:90:0b:e4:6b:9f:c0:d0:b9:cf: 5e:52:94:cf:57:03:3c:82:12:b9:0b:9f:ff:9f:6e: b1:6b:60:a4:94:82:88:49:9b:39:c2:87:c9:12:ba: e8:a3:3c:7d:17:3e:6d:49:9d:69:d6:53:88:4f:51: 42:66:c2:1d:54:4d:bb:3b:d0:75:3d:6c:d8:ce:35: 97:8c:37:df:68:ac:ce:90:00:56:76:cd:fb:0d:12: c1:97:c1:31:30:ac:ba:b8:a0:1e:58:b1:e6:e8:6b: 00:16:25:4a:cd:d0:e0:13:0b:98:5b:45:6a:60:c8: 2d:6d:6a:01:f6:b5:dd:0e:de:02:94:30:a5:95:48: 2b:9b:e1:0b:3a:9c:18:d7:7e:1c:64:d3:bb:70:27: 66:15:a9:54:a0:62:6d:f8:ff:34:09:aa:c6:df:c0: 72:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D1:6D:83:DF:7A:3F:27:C0:B4:8D:A3:6A:7B:D0:05:76:EC:FA:24 X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:45:cf:92:be:89:26:6c:58:e7:e7:19:a5:8c:ae:06:03:bf: c7:a0:e8:22:a5:01:88:d4:2f:11:53:d1:fb:bd:09:20:68:24: ff:e2:c4:6f:b2:1a:c8:5c:21:ad:26:43:81:69:d6:68:22:5f: 23:52:2b:3d:50:f5:21:83:35:87:06:e4:7e:c6:5c:ea:1c:b6: 20:2e:c8:c0:ae:65:d2:7f:5d:27:18:58:4b:e6:77:08:5a:47: eb:c2:73:45:15:6c:26:5e:fb:33:0d:4c:51:24:79:84:5c:3a: 21:d5:d8:1b:45:2a:90:1b:02:8f:70:8a:e5:c4:a4:0a:8e:02: 0d:e6:d0:8b:1d:6b:9a:45:90:60:8b:d2:27:5a:df:94:28:90: fd:99:79:4d:2b:6c:d6:1e:0a:fd:64:2f:64:30:e9:b3:12:11: a1:4e:aa:2e:b9:bc:9c:0e:58:b8:a0:59:6d:45:2f:81:bc:e0: 4e:b4:2d:7e:23:1b:99:10:cd:91:fc:c1:31:1d:65:85:d5:6e: 41:b4:0b:8b:db:34:5e:22:69:b1:4b:18:d1:9a:f6:92:56:e6: ce:a8:36:0e:e4:a1:65:bb:b3:40:d0:6a:21:ba:dc:7b:d5:ba: 4d:c8:b9:e2:0b:7c:72:df:29:13:36:b1:48:e1:59:9e:aa:55: 2e:e2:f1:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDaXzd3BR9TbvuvdGnauakZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjYwOTI1MjEwMTA4WhcNMjYwOTI2MjEwMTA4WjAzMTEwLwYDVQQD EygwZGQxNmQ4M2RmN2EzZjI3YzBiNDhkYTM2YTdiZDAwNTc2ZWNmYTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/NO4mEsvZ0IIwubAiZS1d7XQ7gG qp2f7hh11iSTcj2MK+RPHWBqoMfihPTqni49J9isuwpUhhAYf1nuzD/Zju12Roq3 3gP8g/YGTkX2OC2wewyOXhpWqdx+6rRg1WGQC+Rrn8DQuc9eUpTPVwM8ghK5C5// n26xa2CklIKISZs5wofJErroozx9Fz5tSZ1p1lOIT1FCZsIdVE27O9B1PWzYzjWX jDffaKzOkABWds37DRLBl8ExMKy6uKAeWLHm6GsAFiVKzdDgEwuYW0VqYMgtbWoB 9rXdDt4ClDCllUgrm+ELOpwY134cZNO7cCdmFalUoGJt+P80CarG38ByowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3RbYPfej8nwLSNo2p70AV27PokMB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm0XPkr6J JmxY5+cZpYyuBgO/x6DoIqUBiNQvEVPR+70JIGgk/+LEb7IayFwhrSZDgWnWaCJf I1IrPVD1IYM1hwbkfsZc6hy2IC7IwK5l0n9dJxhYS+Z3CFpH68JzRRVsJl77Mw1M USR5hFw6IdXYG0UqkBsCj3CK5cSkCo4CDebQix1rmkWQYIvSJ1rflCiQ/Zl5TSts 1h4K/WQvZDDpsxIRoU6qLrm8nA5YuKBZbUUvgbzgTrQtfiMbmRDNkfzBMR1lhdVu QbQLi9s0XiJpsUsY0Zr2klbmzqg2DuShZbuzQNBqIbrce9W6Tci54gt8ct8pEzax SOFZnqpVLuLx+Q== -----END CERTIFICATE-----Generated at Sat Sep 26 04:19:23 2026 by rpki-client