$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json) Hash identifier: AzFi+J6DuFHs/PHsojQcWnJBA43mpGxfMPFrbI9gVJc= Subject key identifier: 45:5F:24:20:DA:7B:18:D8:8F:42:C9:AA:A8:A0:2C:50:88:8D:40:20 Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 01A0C3D74887BFCE34CEDE53CAF7ABB590D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft Manifest number: 16B6 Signing time: Mon 21 Sep 2026 12:01:00 +0000 Manifest this update: Mon 21 Sep 2026 12:01:00 +0000 Manifest next update: Tue 22 Sep 2026 12:01:00 +0000 Files and hashes: 1: 0Id9ZYia89tn9rGbVp1WccKbdLs.roa (hash: H/d3G1LlSq5Lm4RmW5/Q0ROpxkgSnJpVhWwEfjRrmCE=) 2: 4i9ivIesCHsbnVrZP6Me_46hnOo.roa (hash: qu7/9ByyUg/pGlPFs771pDMBYsdYL5/jWLiIBXBq/us=) 3: 5NyfZtZq8I_a22w9fqIDYQ8J3zo.roa (hash: ZXAkN8Owpsubs84/gjn1dQB9OdgtJ+vDayAhe4jgKik=) 4: 9bdi8ZcArF7uIVM_PWOWOKzHAwM.roa (hash: ksm5o6Brqb84qifDdWrqQOIBVSbPQo+Iqz+ko5JrdDE=) 5: AJc1n1WlM_uViiz8P-Q_ZGlrmkI.roa (hash: 5BjqoTSt8ivKeTgUMxzWvODvEYATsy/sKY0BmzBKn2k=) 6: F2qeHQTP3YKUfyoMJ2I6cHyrIBk.roa (hash: FVx/e+sO+XB2wvTGriWONMagJGCQ6hVxISJ0xlebzr0=) 7: GQccrYsGeyc_jz14ZkRPvffaEMY.roa (hash: iZxmpGm8fTch7x8Mf4u1f0OmBwCOdgCfCEjgwepuDV8=) 8: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: qVlMWNxAam8mh4FsrRRTdbWOnBNJRs0rt5Lxn3x20kU=) 9: QtPx4ap949xN5arcMJRpZvFzTfM.roa (hash: KaudJcjJFvIdlbff02gWZxLZI4bRcA90hXhml9h/ITE=) 10: khYS0lYDwiX9lTkfE55JUXtp8-s.roa (hash: bmf6tC0bXLVB4qb1Vl64CHJZEDbU89NkLDTPf7Yci6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c3:d7:48:87:bf:ce:34:ce:de:53:ca:f7:ab:b5:90:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Sep 21 12:01:00 2026 GMT Not After : Sep 22 12:01:00 2026 GMT Subject: CN=455f2420da7b18d88f42c9aaa8a02c50888d4020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:71:e7:73:20:82:35:7b:17:5e:c9:a0:7d:29: f0:9e:9a:cf:3a:4a:23:07:eb:97:5c:78:91:11:82: e5:55:9d:0f:9b:c6:fe:20:83:fe:40:ed:f8:7a:b2: da:05:57:c2:f8:55:4a:30:fb:3e:01:22:90:25:b8: 5e:16:64:69:83:76:3c:64:5c:e1:37:97:48:74:51: a3:2a:ae:20:0a:ed:7a:f5:fa:46:eb:80:71:0e:2f: 5b:ea:50:41:ca:c9:db:09:82:4d:84:d7:24:e4:d5: 49:6c:6d:c3:a5:71:49:62:94:4a:80:89:44:37:60: fa:2d:6a:b4:5e:3a:85:94:fb:56:8c:10:16:00:79: 36:c6:63:29:da:09:4b:6e:6b:44:1a:42:ad:7a:6c: 81:7b:44:1e:90:c0:a7:5e:8e:f5:0d:73:40:66:63: aa:39:49:fc:cb:98:8e:79:41:26:31:c7:e2:ae:c9: 5a:00:d9:79:41:25:12:62:01:22:8b:dd:d7:47:a0: 1d:a6:2f:33:03:87:a9:b4:59:a1:fd:64:aa:f9:58: 04:40:19:b8:a6:97:10:5e:27:7e:39:b2:31:2d:8c: 42:1d:b1:74:88:2e:dd:20:7c:5d:c2:ce:90:54:87: c5:9d:28:c3:cd:47:4b:1b:24:32:dd:fe:b7:63:da: 4b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5F:24:20:DA:7B:18:D8:8F:42:C9:AA:A8:A0:2C:50:88:8D:40:20 X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:34:9a:34:f7:c0:9b:1d:4e:65:17:44:53:e6:11:e7:72:e6: 23:db:d6:09:93:e5:c0:5a:2f:99:b7:2b:c3:d7:9f:29:37:6f: 77:bd:db:be:5b:cc:f6:f6:0b:86:4a:95:1d:91:2c:dd:5b:57: aa:22:34:e7:35:67:a8:ac:0e:2d:81:cf:21:df:b1:46:51:0f: 2a:3c:bc:eb:ee:8c:62:4c:01:00:46:15:99:13:b0:1b:e3:c6: e3:0a:39:e5:6f:58:b1:b5:ca:c7:2a:25:da:68:fd:8e:8b:f3: 62:35:73:d9:fe:3a:c7:24:ef:2c:60:c2:57:27:f7:a5:fe:01: 36:83:d6:c0:01:8e:6d:1f:a7:d9:b3:4c:19:c2:c6:2f:15:a0: f5:9a:f7:a2:a7:f3:dd:71:83:e0:f9:b2:a0:3b:c0:f3:1c:5b: 43:5f:31:b2:35:18:1c:98:39:0b:a8:0a:c5:bf:d0:37:db:4d: 1e:c5:82:6f:3a:10:e3:ae:5b:43:f4:e3:e9:0e:a8:36:d2:3c: ea:ee:3e:a8:a9:8f:b3:d0:5a:c7:8c:b5:f8:f3:ea:fb:ee:86: b6:c1:e8:d7:b5:54:52:3e:de:36:be:86:e0:29:bf:dc:66:9c: 6a:e9:37:85:da:af:e6:ce:89:98:73:19:dc:3c:e1:d3:d6:9e: 94:9b:80:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDD10iHv840zt5TyvertZDUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjYwOTIxMTIwMTAwWhcNMjYwOTIyMTIwMTAwWjAzMTEwLwYDVQQD Eyg0NTVmMjQyMGRhN2IxOGQ4OGY0MmM5YWFhOGEwMmM1MDg4OGQ0MDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnHncyCCNXsXXsmgfSnwnprPOkoj B+uXXHiREYLlVZ0Pm8b+IIP+QO34erLaBVfC+FVKMPs+ASKQJbheFmRpg3Y8ZFzh N5dIdFGjKq4gCu169fpG64BxDi9b6lBBysnbCYJNhNck5NVJbG3DpXFJYpRKgIlE N2D6LWq0XjqFlPtWjBAWAHk2xmMp2glLbmtEGkKtemyBe0QekMCnXo71DXNAZmOq OUn8y5iOeUEmMcfirslaANl5QSUSYgEii93XR6Adpi8zA4eptFmh/WSq+VgEQBm4 ppcQXid+ObIxLYxCHbF0iC7dIHxdws6QVIfFnSjDzUdLGyQy3f63Y9pLJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVfJCDaexjYj0LJqqigLFCIjUAgMB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzSaNPfA mx1OZRdEU+YR53LmI9vWCZPlwFovmbcrw9efKTdvd73bvlvM9vYLhkqVHZEs3VtX qiI05zVnqKwOLYHPId+xRlEPKjy86+6MYkwBAEYVmROwG+PG4wo55W9YsbXKxyol 2mj9jovzYjVz2f46xyTvLGDCVyf3pf4BNoPWwAGObR+n2bNMGcLGLxWg9Zr3oqfz 3XGD4PmyoDvA8xxbQ18xsjUYHJg5C6gKxb/QN9tNHsWCbzoQ465bQ/Tj6Q6oNtI8 6u4+qKmPs9Bax4y1+PPq++6GtsHo17VUUj7eNr6G4Cm/3Gacauk3hdqv5s6JmHMZ 3Dzh09aelJuA1w== -----END CERTIFICATE-----Generated at Mon Sep 21 21:57:27 2026 by rpki-client