$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json) Hash identifier: OOEGvhFv84sgVILnhvY55bikNEgeSP9J80W41/+P3j0= Subject key identifier: D9:A4:45:BE:D4:77:B5:3A:D2:5B:73:BE:51:46:D5:38:A4:E5:50:07 Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 019CAB3467000B95F3DC2148784EA33467DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft Manifest number: 1497 Signing time: Sun 01 Mar 2026 21:01:03 +0000 Manifest this update: Sun 01 Mar 2026 21:01:03 +0000 Manifest next update: Mon 02 Mar 2026 21:01:03 +0000 Files and hashes: 1: 0Id9ZYia89tn9rGbVp1WccKbdLs.roa (hash: H/d3G1LlSq5Lm4RmW5/Q0ROpxkgSnJpVhWwEfjRrmCE=) 2: 4i9ivIesCHsbnVrZP6Me_46hnOo.roa (hash: qu7/9ByyUg/pGlPFs771pDMBYsdYL5/jWLiIBXBq/us=) 3: 5NyfZtZq8I_a22w9fqIDYQ8J3zo.roa (hash: ZXAkN8Owpsubs84/gjn1dQB9OdgtJ+vDayAhe4jgKik=) 4: 9bdi8ZcArF7uIVM_PWOWOKzHAwM.roa (hash: ksm5o6Brqb84qifDdWrqQOIBVSbPQo+Iqz+ko5JrdDE=) 5: AJc1n1WlM_uViiz8P-Q_ZGlrmkI.roa (hash: 5BjqoTSt8ivKeTgUMxzWvODvEYATsy/sKY0BmzBKn2k=) 6: F2qeHQTP3YKUfyoMJ2I6cHyrIBk.roa (hash: FVx/e+sO+XB2wvTGriWONMagJGCQ6hVxISJ0xlebzr0=) 7: GQccrYsGeyc_jz14ZkRPvffaEMY.roa (hash: iZxmpGm8fTch7x8Mf4u1f0OmBwCOdgCfCEjgwepuDV8=) 8: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: Oc78ZrvAZWEZhTTDtInoE+CZ+Iw/DSPj93bz5wiMfhA=) 9: QtPx4ap949xN5arcMJRpZvFzTfM.roa (hash: KaudJcjJFvIdlbff02gWZxLZI4bRcA90hXhml9h/ITE=) 10: khYS0lYDwiX9lTkfE55JUXtp8-s.roa (hash: bmf6tC0bXLVB4qb1Vl64CHJZEDbU89NkLDTPf7Yci6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:34:67:00:0b:95:f3:dc:21:48:78:4e:a3:34:67:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Mar 1 21:01:03 2026 GMT Not After : Mar 2 21:01:03 2026 GMT Subject: CN=d9a445bed477b53ad25b73be5146d538a4e55007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:59:94:43:04:77:1e:c5:f2:f8:7a:1f:a3:fe: 99:59:c4:1d:73:42:e1:5a:1f:ef:21:2a:e2:ed:dd: b7:7e:02:0c:1f:62:08:9f:f0:cd:69:fd:c0:d5:b9: 86:ac:6c:54:49:2d:09:d0:df:0c:f2:7d:1a:c5:1d: cc:cc:2c:96:19:a4:b8:2a:62:b2:47:0c:08:f5:d3: 15:4b:cf:56:d5:8c:0d:a3:a2:7b:0a:16:96:06:4b: 07:36:75:ce:db:92:3f:75:03:db:0d:11:c3:cf:dc: b1:48:eb:a7:35:44:94:89:43:f9:17:ea:62:7b:0e: 80:67:0e:03:c2:f5:44:40:ee:7d:b7:96:3a:35:0b: ac:c8:09:e3:d7:a3:6a:f7:57:bc:4f:7c:44:8a:f3: 42:8e:a1:9e:a7:b0:5c:80:cf:df:7a:4e:18:a1:be: 60:3c:c7:a4:fa:7b:b3:22:0b:f8:bd:da:a8:1d:8f: d3:88:a6:27:c0:a6:3f:dd:97:5d:de:dd:10:67:f9: 33:b7:d9:58:6c:3d:7d:b2:b7:ad:4e:b9:e1:e3:fa: 4a:8e:a6:6c:00:b2:c1:70:74:43:3a:01:23:e1:73: ad:ed:c2:fb:d5:29:a8:a1:1a:dc:2b:5b:38:a9:7d: 66:41:c1:5f:89:b0:2a:99:05:62:30:63:98:13:ce: 1e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A4:45:BE:D4:77:B5:3A:D2:5B:73:BE:51:46:D5:38:A4:E5:50:07 X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:1d:f2:2f:22:a7:a8:df:78:7e:ce:ba:a0:89:90:88:ad:55: b3:29:c3:ab:69:60:33:85:14:7a:b9:5a:20:4d:04:8f:c0:98: 46:0b:b7:4f:74:bb:6f:4b:f1:f3:92:5d:98:84:55:ef:1a:89: 1e:dd:42:48:7e:81:4a:6f:75:bf:f9:bc:9e:f7:74:6e:8e:c5: db:39:2b:e8:69:0d:96:00:77:34:41:6e:28:97:5a:c0:b4:f2: 2f:b0:cc:23:bd:f4:0e:b1:f9:90:71:25:5f:7f:38:64:2f:c7: be:5a:97:6e:5d:96:d3:ee:bd:d7:69:88:72:d7:e9:42:79:c2: 36:b1:6a:60:81:fc:60:e2:78:2a:e7:a8:19:15:eb:e5:8a:e3: 70:82:31:df:81:04:69:c1:5c:ad:7f:92:40:86:43:e7:25:a6: 6d:b1:9f:f6:a1:e8:56:86:d9:60:2c:40:cf:38:4b:13:c8:78: 6b:44:37:94:71:fb:1d:47:2c:f3:ff:9a:df:8b:62:58:c9:71: 57:bd:b5:b0:b1:20:50:3b:a8:0a:b3:a1:c8:4a:e4:42:19:ab: 34:ac:1c:6c:e7:cb:50:d1:64:8d:30:30:e5:a3:eb:fa:9a:62: 2d:b8:d2:71:d8:81:69:4b:84:ba:ff:6e:77:b7:fc:1d:c2:32: 54:98:8d:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrNGcAC5Xz3CFIeE6jNGfdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjYwMzAxMjEwMTAzWhcNMjYwMzAyMjEwMTAzWjAzMTEwLwYDVQQD EyhkOWE0NDViZWQ0NzdiNTNhZDI1YjczYmU1MTQ2ZDUzOGE0ZTU1MDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFmUQwR3HsXy+Hofo/6ZWcQdc0Lh Wh/vISri7d23fgIMH2IIn/DNaf3A1bmGrGxUSS0J0N8M8n0axR3MzCyWGaS4KmKy RwwI9dMVS89W1YwNo6J7ChaWBksHNnXO25I/dQPbDRHDz9yxSOunNUSUiUP5F+pi ew6AZw4DwvVEQO59t5Y6NQusyAnj16Nq91e8T3xEivNCjqGep7BcgM/fek4Yob5g PMek+nuzIgv4vdqoHY/TiKYnwKY/3Zdd3t0QZ/kzt9lYbD19sretTrnh4/pKjqZs ALLBcHRDOgEj4XOt7cL71SmooRrcK1s4qX1mQcFfibAqmQViMGOYE84eUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmkRb7Ud7U60ltzvlFG1Tik5VAHMB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASh3yLyKn qN94fs66oImQiK1VsynDq2lgM4UUerlaIE0Ej8CYRgu3T3S7b0vx85JdmIRV7xqJ Ht1CSH6BSm91v/m8nvd0bo7F2zkr6GkNlgB3NEFuKJdawLTyL7DMI730DrH5kHEl X384ZC/HvlqXbl2W0+6912mIctfpQnnCNrFqYIH8YOJ4KueoGRXr5YrjcIIx34EE acFcrX+SQIZD5yWmbbGf9qHoVobZYCxAzzhLE8h4a0Q3lHH7HUcs8/+a34tiWMlx V721sLEgUDuoCrOhyErkQhmrNKwcbOfLUNFkjTAw5aPr+ppiLbjScdiBaUuEuv9u d7f8HcIyVJiNeQ== -----END CERTIFICATE-----Generated at Mon Mar 2 02:11:44 2026 by rpki-client