$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json) Hash identifier: 6rmOOF3PfwYaUfPZV4SNkWmlRMpw+VhTTjkTwD2AI/8= Subject key identifier: 8D:26:80:CE:3B:8C:45:61:59:81:64:C5:C8:BC:E6:B4:FE:D3:8D:97 Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 019D98BD25841CC7333548AE61069AE78788 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft Manifest number: 1512 Signing time: Fri 17 Apr 2026 00:00:25 +0000 Manifest this update: Fri 17 Apr 2026 00:00:25 +0000 Manifest next update: Sat 18 Apr 2026 00:00:25 +0000 Files and hashes: 1: 0Id9ZYia89tn9rGbVp1WccKbdLs.roa (hash: H/d3G1LlSq5Lm4RmW5/Q0ROpxkgSnJpVhWwEfjRrmCE=) 2: 4i9ivIesCHsbnVrZP6Me_46hnOo.roa (hash: qu7/9ByyUg/pGlPFs771pDMBYsdYL5/jWLiIBXBq/us=) 3: 5NyfZtZq8I_a22w9fqIDYQ8J3zo.roa (hash: ZXAkN8Owpsubs84/gjn1dQB9OdgtJ+vDayAhe4jgKik=) 4: 9bdi8ZcArF7uIVM_PWOWOKzHAwM.roa (hash: ksm5o6Brqb84qifDdWrqQOIBVSbPQo+Iqz+ko5JrdDE=) 5: AJc1n1WlM_uViiz8P-Q_ZGlrmkI.roa (hash: 5BjqoTSt8ivKeTgUMxzWvODvEYATsy/sKY0BmzBKn2k=) 6: F2qeHQTP3YKUfyoMJ2I6cHyrIBk.roa (hash: FVx/e+sO+XB2wvTGriWONMagJGCQ6hVxISJ0xlebzr0=) 7: GQccrYsGeyc_jz14ZkRPvffaEMY.roa (hash: iZxmpGm8fTch7x8Mf4u1f0OmBwCOdgCfCEjgwepuDV8=) 8: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: 4vC/ML+LZ+3y7d3VTVe79o/J4YjUZjadeaJNZjdx/FA=) 9: QtPx4ap949xN5arcMJRpZvFzTfM.roa (hash: KaudJcjJFvIdlbff02gWZxLZI4bRcA90hXhml9h/ITE=) 10: khYS0lYDwiX9lTkfE55JUXtp8-s.roa (hash: bmf6tC0bXLVB4qb1Vl64CHJZEDbU89NkLDTPf7Yci6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:bd:25:84:1c:c7:33:35:48:ae:61:06:9a:e7:87:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Apr 17 00:00:25 2026 GMT Not After : Apr 18 00:00:25 2026 GMT Subject: CN=8d2680ce3b8c4561598164c5c8bce6b4fed38d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cc:62:eb:6a:4e:6b:44:92:fa:79:e6:c7:25: 8d:91:6c:d1:6e:cc:bf:80:e6:13:f0:a3:3d:a8:49: 88:3b:b3:bd:50:bc:3f:b8:2c:77:16:25:29:09:02: 5b:1d:6b:2f:79:58:92:f0:9d:98:2b:8f:d6:16:be: 75:36:88:24:ac:52:67:e7:21:f8:b4:b9:f2:f1:47: 01:78:be:a9:63:f7:5b:2a:e5:d5:60:57:ef:21:25: 5d:fa:f0:61:41:56:3f:f4:5d:d6:93:f4:57:43:ec: af:c1:00:54:f4:57:09:43:9d:04:1f:02:0e:59:f3: af:bc:61:e0:3b:d8:ee:2e:0e:97:bc:f5:e5:e3:59: 9a:17:d8:34:e7:25:20:60:7c:69:49:5f:de:6e:03: 52:5a:cc:4c:d9:2b:fe:c7:26:a4:65:81:9f:9d:19: 0d:a6:1f:92:f6:23:72:dc:51:82:d2:8a:08:91:98: d4:d6:4b:bb:fb:3c:42:ac:26:3c:1c:06:34:b9:42: a8:0b:a5:dd:86:53:5e:3e:da:6d:c2:55:67:e2:d7: 30:51:5c:bb:60:28:5b:ab:40:77:12:f5:95:f1:08: eb:52:5a:20:15:10:b1:10:42:b0:e0:01:5a:09:76: c9:b1:33:3c:b3:b3:09:97:f3:c5:01:a7:08:df:e7: 5a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:26:80:CE:3B:8C:45:61:59:81:64:C5:C8:BC:E6:B4:FE:D3:8D:97 X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:04:2f:40:75:bd:35:93:d1:7d:a8:10:d4:da:9c:ad:bb:f6: 20:56:3c:b8:7b:e0:52:56:0d:ab:15:d9:02:b6:0b:28:c2:6b: 1c:2a:39:70:32:4f:ac:4f:fe:86:04:65:11:ec:53:0d:dd:01: 33:0a:9c:61:fc:02:95:05:c5:11:9d:b3:fc:d3:59:b0:91:d6: 12:bc:be:10:f6:e2:76:86:78:c6:d4:66:6d:29:95:1d:14:4c: d6:04:e6:b3:1c:d4:d3:6d:fe:4f:59:45:6e:12:f0:f7:5f:2d: a9:41:3a:d2:aa:f7:4e:3e:d5:31:99:6a:b4:17:64:8f:bd:b0: 1b:4f:a9:99:e8:76:a0:f3:4a:50:55:f7:0b:81:23:7b:71:37: 39:fb:fa:c5:b7:43:40:6b:73:60:ad:47:ce:2e:5d:3c:49:6a: 23:cf:c4:21:d8:83:bc:19:74:b2:7f:32:9d:fc:89:ee:4a:27: eb:ab:43:2a:3b:43:52:ce:c8:43:fc:57:d1:62:18:f6:af:a2: f2:f3:35:9e:8d:64:d4:b4:52:1d:1f:f5:ec:56:31:30:7f:57: 4d:6c:df:57:d4:f5:2c:f3:39:b4:3a:d5:83:94:37:f0:08:1a: 65:a6:70:6c:7a:ce:94:82:b4:5c:3f:b3:c4:8a:26:f4:e7:b2: 25:4e:d8:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YvSWEHMczNUiuYQaa54eIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjYwNDE3MDAwMDI1WhcNMjYwNDE4MDAwMDI1WjAzMTEwLwYDVQQD Eyg4ZDI2ODBjZTNiOGM0NTYxNTk4MTY0YzVjOGJjZTZiNGZlZDM4ZDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsxi62pOa0SS+nnmxyWNkWzRbsy/ gOYT8KM9qEmIO7O9ULw/uCx3FiUpCQJbHWsveViS8J2YK4/WFr51NogkrFJn5yH4 tLny8UcBeL6pY/dbKuXVYFfvISVd+vBhQVY/9F3Wk/RXQ+yvwQBU9FcJQ50EHwIO WfOvvGHgO9juLg6XvPXl41maF9g05yUgYHxpSV/ebgNSWsxM2Sv+xyakZYGfnRkN ph+S9iNy3FGC0ooIkZjU1ku7+zxCrCY8HAY0uUKoC6XdhlNePtptwlVn4tcwUVy7 YChbq0B3EvWV8QjrUlogFRCxEEKw4AFaCXbJsTM8s7MJl/PFAacI3+daCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0mgM47jEVhWYFkxci85rT+042XMB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQQvQHW9 NZPRfagQ1Nqcrbv2IFY8uHvgUlYNqxXZArYLKMJrHCo5cDJPrE/+hgRlEexTDd0B MwqcYfwClQXFEZ2z/NNZsJHWEry+EPbidoZ4xtRmbSmVHRRM1gTmsxzU023+T1lF bhLw918tqUE60qr3Tj7VMZlqtBdkj72wG0+pmeh2oPNKUFX3C4Eje3E3Ofv6xbdD QGtzYK1Hzi5dPElqI8/EIdiDvBl0sn8ynfyJ7kon66tDKjtDUs7IQ/xX0WIY9q+i 8vM1no1k1LRSHR/17FYxMH9XTWzfV9T1LPM5tDrVg5Q38AgaZaZwbHrOlIK0XD+z xIom9OeyJU7YKw== -----END CERTIFICATE-----Generated at Fri Apr 17 07:58:23 2026 by rpki-client