$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json) Hash identifier: 4SmXHUqRHusZhRjh/cuCXaGFvez0jBUILCwzpiNukfQ= Subject key identifier: 35:B9:CC:10:7E:71:97:4C:93:F0:2D:10:2F:79:A3:FA:18:E2:B2:FA Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 01A1DDCBC54907F0270CCFC368DD266A49DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft Manifest number: 1748 Signing time: Sun 15 Nov 2026 06:01:21 +0000 Manifest this update: Sun 15 Nov 2026 06:01:21 +0000 Manifest next update: Mon 16 Nov 2026 06:01:21 +0000 Files and hashes: 1: 0Id9ZYia89tn9rGbVp1WccKbdLs.roa (hash: H/d3G1LlSq5Lm4RmW5/Q0ROpxkgSnJpVhWwEfjRrmCE=) 2: 4i9ivIesCHsbnVrZP6Me_46hnOo.roa (hash: qu7/9ByyUg/pGlPFs771pDMBYsdYL5/jWLiIBXBq/us=) 3: 5NyfZtZq8I_a22w9fqIDYQ8J3zo.roa (hash: ZXAkN8Owpsubs84/gjn1dQB9OdgtJ+vDayAhe4jgKik=) 4: 9bdi8ZcArF7uIVM_PWOWOKzHAwM.roa (hash: ksm5o6Brqb84qifDdWrqQOIBVSbPQo+Iqz+ko5JrdDE=) 5: AJc1n1WlM_uViiz8P-Q_ZGlrmkI.roa (hash: 5BjqoTSt8ivKeTgUMxzWvODvEYATsy/sKY0BmzBKn2k=) 6: F2qeHQTP3YKUfyoMJ2I6cHyrIBk.roa (hash: FVx/e+sO+XB2wvTGriWONMagJGCQ6hVxISJ0xlebzr0=) 7: GQccrYsGeyc_jz14ZkRPvffaEMY.roa (hash: iZxmpGm8fTch7x8Mf4u1f0OmBwCOdgCfCEjgwepuDV8=) 8: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: tCeOuTw48XslrxM0SensVLbwJUjCTMejDhI/IA7axsc=) 9: QtPx4ap949xN5arcMJRpZvFzTfM.roa (hash: KaudJcjJFvIdlbff02gWZxLZI4bRcA90hXhml9h/ITE=) 10: khYS0lYDwiX9lTkfE55JUXtp8-s.roa (hash: bmf6tC0bXLVB4qb1Vl64CHJZEDbU89NkLDTPf7Yci6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dd:cb:c5:49:07:f0:27:0c:cf:c3:68:dd:26:6a:49:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Nov 15 06:01:21 2026 GMT Not After : Nov 16 06:01:21 2026 GMT Subject: CN=35b9cc107e71974c93f02d102f79a3fa18e2b2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a3:b0:ec:e3:5f:05:9d:69:fd:42:c8:b0:46: b5:81:d4:33:c4:4b:f9:17:b7:9d:11:92:29:4e:ee: d4:08:5c:45:15:3b:88:4a:10:20:62:62:af:ef:fd: 8a:b2:b4:22:90:40:b3:0e:23:f7:af:7c:40:a5:79: 3d:dd:d6:19:57:52:c6:dc:ce:18:8f:e5:87:78:f6: eb:a8:27:a8:ca:67:01:7b:99:97:7f:cb:5c:ac:dd: 81:0f:62:a5:32:24:eb:7b:24:3c:4f:96:2d:0f:cd: 3f:8c:14:1e:82:c7:63:b4:dc:bb:c9:1f:d7:6a:dc: a8:85:c3:b1:32:3c:0e:be:fb:9c:d4:8a:15:a5:72: 1d:05:80:0e:65:d7:78:09:19:90:58:36:a4:c2:c6: ec:b5:ca:3f:bb:b9:a1:51:62:42:c8:16:5a:74:3f: 00:ac:45:aa:73:d6:69:54:80:97:fb:41:cd:14:ea: ec:5c:39:3e:b2:1a:fb:bb:a7:e7:fb:fa:d8:75:8e: ad:99:7d:c8:c9:dd:b4:d0:2e:47:45:9a:8a:d3:99: 34:5b:93:68:ea:39:25:d6:97:fe:8b:c9:17:29:39: 62:7d:9c:6f:53:d7:bf:ef:52:89:7f:ec:07:eb:a6: 69:7d:7e:50:ff:ed:e4:62:df:32:fd:05:8a:dd:8e: 31:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B9:CC:10:7E:71:97:4C:93:F0:2D:10:2F:79:A3:FA:18:E2:B2:FA X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:0c:ea:87:59:22:24:4a:6f:3c:00:b9:88:8f:3b:45:67:8e: 81:30:25:ba:47:3d:6e:0a:9a:cb:96:f3:c7:2f:ba:6c:a6:70: ca:8a:ef:1f:ae:ee:01:fe:4e:03:54:6a:b0:b2:4a:57:fd:f2: 57:32:1f:56:a5:2c:6e:28:41:83:65:8c:9d:49:5d:f8:a6:64: 16:ee:f1:f5:fe:4f:22:21:65:a2:a0:0e:21:df:c3:25:60:e3: 4b:a8:1c:b8:53:27:1a:6c:1f:46:bf:e9:d3:44:8d:07:17:6b: d1:1e:34:fa:2f:24:ab:7a:fb:69:6f:76:bc:5f:62:2e:30:9e: 87:0b:8a:b5:4d:66:05:b7:53:de:4d:10:57:90:d6:2e:7a:cf: 31:7b:17:69:69:62:33:20:99:a8:d9:fa:3c:96:19:d7:ad:4a: 6b:c8:02:3c:3f:d0:7c:f2:2c:a1:0e:65:8d:87:1d:57:87:f3: 0a:59:fa:49:08:68:b6:62:27:7f:90:5d:aa:10:aa:27:03:1f: 3c:4c:33:10:57:2b:ec:2d:83:33:cb:1e:5d:66:84:e6:f4:e2: ec:d0:aa:4d:f4:e1:99:d4:ea:39:ca:13:d9:e2:a9:e1:e3:5c: 30:c0:15:c2:a4:05:4d:7e:e7:06:73:24:73:2d:0a:fa:c4:82: fb:ae:46:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHdy8VJB/AnDM/DaN0maknaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjYxMTE1MDYwMTIxWhcNMjYxMTE2MDYwMTIxWjAzMTEwLwYDVQQD EygzNWI5Y2MxMDdlNzE5NzRjOTNmMDJkMTAyZjc5YTNmYTE4ZTJiMmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKOw7ONfBZ1p/ULIsEa1gdQzxEv5 F7edEZIpTu7UCFxFFTuIShAgYmKv7/2KsrQikECzDiP3r3xApXk93dYZV1LG3M4Y j+WHePbrqCeoymcBe5mXf8tcrN2BD2KlMiTreyQ8T5YtD80/jBQegsdjtNy7yR/X atyohcOxMjwOvvuc1IoVpXIdBYAOZdd4CRmQWDakwsbstco/u7mhUWJCyBZadD8A rEWqc9ZpVICX+0HNFOrsXDk+shr7u6fn+/rYdY6tmX3Iyd200C5HRZqK05k0W5No 6jkl1pf+i8kXKTlifZxvU9e/71KJf+wH66ZpfX5Q/+3kYt8y/QWK3Y4xtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDW5zBB+cZdMk/AtEC95o/oY4rL6MB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwzqh1ki JEpvPAC5iI87RWeOgTAlukc9bgqay5bzxy+6bKZwyorvH67uAf5OA1RqsLJKV/3y VzIfVqUsbihBg2WMnUld+KZkFu7x9f5PIiFloqAOId/DJWDjS6gcuFMnGmwfRr/p 00SNBxdr0R40+i8kq3r7aW92vF9iLjCehwuKtU1mBbdT3k0QV5DWLnrPMXsXaWli MyCZqNn6PJYZ161Ka8gCPD/QfPIsoQ5ljYcdV4fzCln6SQhotmInf5BdqhCqJwMf PEwzEFcr7C2DM8seXWaE5vTi7NCqTfThmdTqOcoT2eKp4eNcMMAVwqQFTX7nBnMk cy0K+sSC+65GmA== -----END CERTIFICATE-----Generated at Sun Nov 15 13:15:09 2026 by rpki-client