
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json)
Hash identifier: ivkcZRnOpitmZqjfWJZkpzcQpR6tyMRMk1v/b/JADvk=
Subject key identifier: 33:AA:A6:A3:F6:3D:8C:36:03:BF:52:EB:F9:F0:8E:2F:A0:EF:59:23
Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Certificate serial: 019FA9E2915B1954612D4DC4F14E6DFBD8F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
Manifest number: 1624
Signing time: Tue 28 Jul 2026 18:00:25 +0000
Manifest this update: Tue 28 Jul 2026 18:00:25 +0000
Manifest next update: Wed 29 Jul 2026 18:00:25 +0000
Files and hashes: 1: 0Id9ZYia89tn9rGbVp1WccKbdLs.roa (hash: H/d3G1LlSq5Lm4RmW5/Q0ROpxkgSnJpVhWwEfjRrmCE=)
2: 4i9ivIesCHsbnVrZP6Me_46hnOo.roa (hash: qu7/9ByyUg/pGlPFs771pDMBYsdYL5/jWLiIBXBq/us=)
3: 5NyfZtZq8I_a22w9fqIDYQ8J3zo.roa (hash: ZXAkN8Owpsubs84/gjn1dQB9OdgtJ+vDayAhe4jgKik=)
4: 9bdi8ZcArF7uIVM_PWOWOKzHAwM.roa (hash: ksm5o6Brqb84qifDdWrqQOIBVSbPQo+Iqz+ko5JrdDE=)
5: AJc1n1WlM_uViiz8P-Q_ZGlrmkI.roa (hash: 5BjqoTSt8ivKeTgUMxzWvODvEYATsy/sKY0BmzBKn2k=)
6: F2qeHQTP3YKUfyoMJ2I6cHyrIBk.roa (hash: FVx/e+sO+XB2wvTGriWONMagJGCQ6hVxISJ0xlebzr0=)
7: GQccrYsGeyc_jz14ZkRPvffaEMY.roa (hash: iZxmpGm8fTch7x8Mf4u1f0OmBwCOdgCfCEjgwepuDV8=)
8: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: 63fIVgGHHCDwdWH+BBVfk+fpqe0K7wSs0upiqHx9izQ=)
9: QtPx4ap949xN5arcMJRpZvFzTfM.roa (hash: KaudJcjJFvIdlbff02gWZxLZI4bRcA90hXhml9h/ITE=)
10: khYS0lYDwiX9lTkfE55JUXtp8-s.roa (hash: bmf6tC0bXLVB4qb1Vl64CHJZEDbU89NkLDTPf7Yci6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:91:5b:19:54:61:2d:4d:c4:f1:4e:6d:fb:d8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Validity
Not Before: Jul 28 18:00:25 2026 GMT
Not After : Jul 29 18:00:25 2026 GMT
Subject: CN=33aaa6a3f63d8c3603bf52ebf9f08e2fa0ef5923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c2:28:d0:de:70:d9:42:17:2c:dd:cb:45:cb:
f1:75:06:60:fd:a4:48:25:9c:b5:fe:38:3c:cf:68:
b2:93:4e:ae:11:68:0d:83:80:ea:35:fc:81:f0:24:
cb:80:61:eb:c4:e2:30:00:94:0d:c3:10:0b:92:88:
05:24:63:5f:be:0d:e4:4e:9a:91:63:66:2e:82:3d:
df:87:36:01:4f:79:83:95:d4:a8:77:f6:87:38:81:
ea:7b:3a:9e:6c:bf:c2:80:25:5b:9f:38:3c:cf:09:
25:28:76:8f:6a:49:04:5a:e3:3b:c8:5d:0e:42:28:
b5:e6:9f:40:40:51:55:66:f2:49:b0:23:d6:cf:97:
71:7c:dc:e0:64:4d:d4:89:66:14:cf:5c:63:6f:54:
7c:2e:b6:8c:b2:b3:00:71:2a:12:02:47:e7:90:e9:
ba:71:a4:6c:e3:4d:4b:e6:77:a8:ef:df:49:3a:59:
e4:cf:19:23:76:62:13:6b:d1:63:99:59:84:ba:33:
1e:17:e7:20:e5:65:9a:81:07:b8:7e:87:1b:27:ba:
3e:9b:f4:07:f9:29:50:cc:17:2e:8c:15:d4:ac:af:
32:be:fe:2a:2b:07:d9:fa:f2:4c:50:25:67:8a:98:
7f:10:5e:b9:06:1d:f4:f6:e0:14:98:95:6f:38:b1:
b2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AA:A6:A3:F6:3D:8C:36:03:BF:52:EB:F9:F0:8E:2F:A0:EF:59:23
X509v3 Authority Key Identifier:
keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:94:35:0a:bc:b0:5e:c7:a0:37:ac:34:6f:69:fb:aa:2a:aa:
8d:6a:fb:82:6d:a8:66:c0:54:e3:57:42:dc:ac:a7:5f:bd:8e:
4e:be:e2:9c:b0:2d:b4:ef:37:a8:d2:52:d1:ca:94:e7:2b:54:
d7:a6:93:9e:22:c0:bb:77:a5:b2:36:2a:88:0b:78:6b:cf:32:
b1:3e:28:de:4b:30:e2:60:c5:e5:fd:0f:d0:25:fe:4d:3b:22:
ab:22:32:f9:cd:31:2c:54:e5:df:78:8b:7a:e4:fe:56:10:ff:
4d:a6:30:a5:08:0d:60:fe:1e:ff:ca:bb:32:d8:81:b1:83:46:
fa:e5:7e:04:99:6a:ec:36:ce:da:1b:05:b8:55:4c:f5:53:47:
1b:7d:a2:ab:1c:3f:42:34:62:46:26:39:80:f7:9e:95:fe:58:
67:fe:43:a6:47:1a:ae:d9:da:f0:a3:29:4a:d7:94:d1:a2:eb:
0c:26:60:53:8c:8f:3b:de:80:d6:3d:e5:61:d2:4c:f2:c2:ed:
68:0d:9d:b8:93:f1:bb:83:b4:a4:fc:fe:66:f9:35:75:8a:f4:
f0:16:fb:d4:43:31:dc:d4:d3:8a:06:f7:e6:e0:5e:b1:08:29:
ad:0a:bc:31:eb:cf:ae:b3:22:41:51:66:0d:09:ed:bd:65:6c:
00:d8:04:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4pFbGVRhLU3E8U5t+9jwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi
ZTU3Y2UwHhcNMjYwNzI4MTgwMDI1WhcNMjYwNzI5MTgwMDI1WjAzMTEwLwYDVQQD
EygzM2FhYTZhM2Y2M2Q4YzM2MDNiZjUyZWJmOWYwOGUyZmEwZWY1OTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8Io0N5w2UIXLN3LRcvxdQZg/aRI
JZy1/jg8z2iyk06uEWgNg4DqNfyB8CTLgGHrxOIwAJQNwxALkogFJGNfvg3kTpqR
Y2Yugj3fhzYBT3mDldSod/aHOIHqezqebL/CgCVbnzg8zwklKHaPakkEWuM7yF0O
Qii15p9AQFFVZvJJsCPWz5dxfNzgZE3UiWYUz1xjb1R8LraMsrMAcSoSAkfnkOm6
caRs401L5neo799JOlnkzxkjdmITa9FjmVmEujMeF+cg5WWagQe4focbJ7o+m/QH
+SlQzBcujBXUrK8yvv4qKwfZ+vJMUCVniph/EF65Bh309uAUmJVvOLGyVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOqpqP2PYw2A79S6/nwji+g71kjMB8GA1UdIwQY
MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt
MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl
LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5Q1Cryw
XsegN6w0b2n7qiqqjWr7gm2oZsBU41dC3KynX72OTr7inLAttO83qNJS0cqU5ytU
16aTniLAu3elsjYqiAt4a88ysT4o3ksw4mDF5f0P0CX+TTsiqyIy+c0xLFTl33iL
euT+VhD/TaYwpQgNYP4e/8q7MtiBsYNG+uV+BJlq7DbO2hsFuFVM9VNHG32iqxw/
QjRiRiY5gPeelf5YZ/5Dpkcartna8KMpSteU0aLrDCZgU4yPO96A1j3lYdJM8sLt
aA2duJPxu4O0pPz+Zvk1dYr08Bb71EMx3NTTigb35uBesQgprQq8MevPrrMiQVFm
DQntvWVsANgEzA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:53:50 2026 by rpki-client