
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json)
Hash identifier: Z82mUfa+bvRA4CaxDTjU4KbGMhmDxRfWzpaZFqNSB0M=
Subject key identifier: DF:20:35:CA:8F:AE:9F:24:56:B7:89:0A:B9:74:E4:1D:E6:48:7D:F6
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 019F3FAC1660327F56B9475823E076230389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
Manifest number: 19C6
Signing time: Wed 08 Jul 2026 03:01:10 +0000
Manifest this update: Wed 08 Jul 2026 03:01:10 +0000
Manifest next update: Thu 09 Jul 2026 03:01:10 +0000
Files and hashes: 1: 1-QrkJ1ReezcgF73EgGbqmxSp9iE.roa (hash: RSa2cTQxNZP76zXoi1N6FVpNx/a7WiCBFEO8rdHSaGo=)
2: GadZnqwNNL6vcO0uNGOaOFXO-5w.roa (hash: WPx0ZxFduASzoEDiUK1PVK0AV5w4NdVYDhxmnMrQPaw=)
3: Kt7Bb9a8NYPt2hdNoCtrivgec60.roa (hash: hZLmp4pyqAJx5mRvIALIF4vmWmI8U/uE03XVLg5S0aE=)
4: QGMHAWeIiva_ANIU0MC7CU9-6f8.roa (hash: 4G0dmujJfspfIapxR+knOukRFXWULsWgi/aWj5BdVi4=)
5: XiIbEnKjYE8MkI8g3bZKNddtCfQ.roa (hash: 969ogNKjx9JV6jK/y8xnBqcJ9Cd0T2enS1wUqhtbhGY=)
6: dGOsV8rB3n2kiiSorQ7C_OLvWso.roa (hash: CfnCuNHVj64xX3Nr1KaQqkMmG3m7OTprs4PyzRWTuhc=)
7: gsGfrYs1utK7SrtoyVPXL783bwM.roa (hash: 1zqi9F+7GRzsZKDlqyActNmPOf78TLbsfJ6f9t5J09A=)
8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: nlvw0prLWytCWrOvTrpZRQzkmRt5LDILb1pE+x3Ho3U=)
9: l-WUCYIzfrmbOY4lSlHo4EHYa-0.roa (hash: wRHoNrFNfoLupFB4h8pnue6IATQIBeN3aGRRjbWhTLE=)
10: quXPd4m3roGOFCgsU-cq5zkXqMM.roa (hash: cygguz3JRfVDe2shlN+tdvmvE/mxwD8qbYQvNiz7ASQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3f:ac:16:60:32:7f:56:b9:47:58:23:e0:76:23:03:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Jul 8 03:01:10 2026 GMT
Not After : Jul 9 03:01:10 2026 GMT
Subject: CN=df2035ca8fae9f2456b7890ab974e41de6487df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:e0:6b:96:cb:98:85:e7:84:df:ff:e5:6a:
86:79:48:f2:36:4b:95:7d:41:7d:cc:b8:d3:d9:bd:
d1:a4:9a:a2:48:ea:b9:c5:68:fd:a9:16:20:bf:37:
9f:cf:7a:8c:96:35:10:bb:ba:c5:57:c4:9a:83:d7:
a9:5a:b7:bc:77:ab:e8:3f:9a:90:35:a2:ad:ae:25:
59:9b:79:43:38:a3:f7:cd:0c:35:36:7d:dd:00:e1:
10:15:0a:c8:ce:68:ea:ad:67:14:bd:ba:92:80:d6:
a0:0f:05:b6:36:a5:d5:4d:e6:ec:8a:2f:7d:93:66:
99:74:83:0f:92:f1:d5:f0:e2:da:61:31:07:52:b9:
93:e4:ce:0a:d4:05:6d:57:aa:69:ff:96:27:ad:c4:
05:80:3d:72:4d:4a:f7:21:5f:3a:64:9c:92:86:84:
44:21:64:58:ec:00:fb:c5:2f:6c:f2:09:cb:66:b4:
8a:93:70:c3:04:7c:a4:ec:f7:02:c1:28:76:58:ad:
ed:83:4b:5e:d5:84:bb:bb:55:ec:45:95:01:aa:7a:
29:3b:31:46:f1:27:76:04:b6:7e:25:c0:a8:be:28:
de:4c:08:32:e6:25:97:25:7e:d3:98:9d:aa:83:4a:
1e:36:e5:2b:18:01:8d:fe:1c:b3:b8:f5:40:0c:3a:
17:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:20:35:CA:8F:AE:9F:24:56:B7:89:0A:B9:74:E4:1D:E6:48:7D:F6
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d6:f3:fc:18:9f:ec:b1:a2:63:19:b2:fe:90:55:1a:f9:4c:
4f:1c:19:8e:b6:85:a4:9e:fe:9d:ce:e8:70:5c:74:ba:9a:04:
30:b4:ff:6d:8c:c1:4a:9b:be:46:f1:2b:10:2a:5a:9e:75:8f:
fa:d9:31:e1:b8:0e:f1:a3:a7:33:74:cf:86:27:da:c5:49:8b:
96:23:09:d8:94:71:9f:8a:e0:88:c2:78:6b:1d:6d:64:65:71:
78:74:98:93:5e:7d:7b:95:47:59:f1:5e:60:90:d6:7a:fd:8b:
92:f3:67:d9:f0:95:e7:95:6f:e4:64:e6:34:07:a6:08:1a:03:
63:35:f5:32:1e:bc:c5:69:d8:3f:ac:25:25:4c:66:52:0e:ff:
92:4e:19:2e:02:69:8b:f8:44:7c:43:3e:d3:5f:26:9c:bd:2e:
87:df:a4:68:43:be:3e:29:27:30:60:7b:e5:b7:17:6b:a6:fc:
8e:45:1f:9a:d6:3b:6c:be:97:73:ee:ba:5a:d4:e0:4e:f3:be:
08:02:8a:63:19:35:a0:19:a5:bd:e7:a9:00:14:b3:90:97:5a:
c9:c0:77:20:b1:dd:3c:d4:17:c9:57:61:27:fa:29:05:c3:4f:
63:3b:6e:b1:d3:9e:7e:43:c5:94:89:5a:9f:e3:d2:be:17:d5:
89:b0:10:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 13:16:15 2026 by rpki-client