
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json)
Hash identifier: 7H2qQtt6gnK8UJPsdjkp2UPAjecp6IyCt2IYdCY2mZA=
Subject key identifier: 5E:8D:32:D9:FD:C2:2C:31:B9:15:CC:C0:85:3D:BF:57:65:E7:30:93
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 019E57EDE5A9FDDEF2204D66B207F6447DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
Manifest number: 194E
Signing time: Sun 24 May 2026 03:01:09 +0000
Manifest this update: Sun 24 May 2026 03:01:09 +0000
Manifest next update: Mon 25 May 2026 03:01:09 +0000
Files and hashes: 1: 1-QrkJ1ReezcgF73EgGbqmxSp9iE.roa (hash: RSa2cTQxNZP76zXoi1N6FVpNx/a7WiCBFEO8rdHSaGo=)
2: GadZnqwNNL6vcO0uNGOaOFXO-5w.roa (hash: WPx0ZxFduASzoEDiUK1PVK0AV5w4NdVYDhxmnMrQPaw=)
3: Kt7Bb9a8NYPt2hdNoCtrivgec60.roa (hash: hZLmp4pyqAJx5mRvIALIF4vmWmI8U/uE03XVLg5S0aE=)
4: QGMHAWeIiva_ANIU0MC7CU9-6f8.roa (hash: 4G0dmujJfspfIapxR+knOukRFXWULsWgi/aWj5BdVi4=)
5: XiIbEnKjYE8MkI8g3bZKNddtCfQ.roa (hash: 969ogNKjx9JV6jK/y8xnBqcJ9Cd0T2enS1wUqhtbhGY=)
6: dGOsV8rB3n2kiiSorQ7C_OLvWso.roa (hash: CfnCuNHVj64xX3Nr1KaQqkMmG3m7OTprs4PyzRWTuhc=)
7: gsGfrYs1utK7SrtoyVPXL783bwM.roa (hash: 1zqi9F+7GRzsZKDlqyActNmPOf78TLbsfJ6f9t5J09A=)
8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: 3Ki+ighaGx4PNhk3/35oTRgSvgDsr6Zw38CTfesPfmw=)
9: l-WUCYIzfrmbOY4lSlHo4EHYa-0.roa (hash: wRHoNrFNfoLupFB4h8pnue6IATQIBeN3aGRRjbWhTLE=)
10: quXPd4m3roGOFCgsU-cq5zkXqMM.roa (hash: cygguz3JRfVDe2shlN+tdvmvE/mxwD8qbYQvNiz7ASQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:57:ed:e5:a9:fd:de:f2:20:4d:66:b2:07:f6:44:7d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: May 24 03:01:09 2026 GMT
Not After : May 25 03:01:09 2026 GMT
Subject: CN=5e8d32d9fdc22c31b915ccc0853dbf5765e73093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:c2:7b:39:01:77:15:d8:7d:62:39:89:b4:
49:cb:75:56:83:71:46:8a:30:3f:1f:d9:5f:9c:07:
9b:20:a5:20:61:ea:8b:45:da:bf:64:51:2a:06:1f:
cc:cd:42:19:54:27:eb:1a:2a:7d:fe:af:03:f5:72:
5e:ba:a3:92:7a:f5:48:96:54:2b:a1:5c:dc:08:33:
27:8b:c0:44:2e:90:f1:c0:58:22:5a:ba:c6:42:09:
10:c6:78:cd:91:ac:ff:8c:88:54:43:88:cc:61:5a:
f9:20:65:8b:76:e5:4b:b6:f1:30:c7:0e:a2:92:9b:
9d:f3:52:77:34:f3:52:b1:4a:a7:e7:a7:da:6e:24:
36:6a:05:c1:78:12:c9:8f:24:ce:02:10:34:f6:00:
73:70:24:d8:ff:35:1a:fe:d8:c8:57:d7:6d:66:57:
b5:ad:a4:1f:78:a9:ba:1e:58:17:80:5d:4d:d3:6e:
b2:e7:ec:3d:8f:76:25:fe:f9:c1:99:1a:2a:04:94:
8e:6f:9d:8a:e2:b5:9e:d4:bf:65:5d:12:8e:f9:f0:
0e:26:ed:96:06:33:4e:4e:e8:c6:a3:92:dc:04:a7:
d8:f6:c6:75:66:19:25:f3:2e:78:1b:09:8e:cb:73:
3b:02:a2:46:78:00:ce:0b:51:0a:73:95:6e:08:e9:
4c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8D:32:D9:FD:C2:2C:31:B9:15:CC:C0:85:3D:BF:57:65:E7:30:93
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:6d:60:2a:5e:62:a3:aa:9c:10:84:a9:0e:05:42:f4:c0:0e:
8a:f0:a8:ab:69:fc:6b:18:49:20:9c:f6:90:2f:4f:94:8a:7e:
77:a2:83:de:c1:38:b6:76:8b:f9:8f:08:30:e9:06:a4:d3:28:
34:9d:0c:07:b8:43:6d:ff:27:25:0d:28:37:7f:0d:4d:36:96:
c1:e2:f9:37:31:d3:55:b0:83:33:76:38:a1:f9:54:75:0f:9d:
1e:81:90:88:0f:af:11:6c:d5:ae:d0:59:d6:f8:0e:bf:bf:cd:
1b:e4:0f:9e:c4:21:a9:b5:48:01:08:a8:55:db:91:db:da:bd:
74:ca:1c:3c:8f:d2:e5:df:62:7d:98:05:36:15:60:f6:c3:30:
d7:8f:48:ee:cd:34:0c:71:84:be:82:18:18:bc:5e:33:7a:e4:
80:98:69:12:46:89:3c:da:90:fa:43:ee:f2:e7:9b:b8:cd:5a:
ba:70:cd:bd:a7:32:df:d3:5b:75:36:ab:9f:89:62:01:26:3a:
c4:85:66:54:77:9d:e8:df:ce:84:f2:9c:2d:90:a6:60:ab:4a:
01:0d:c4:a1:8a:53:c2:ec:a0:d0:7c:20:6f:ff:c4:ed:0c:2c:
71:f9:11:9d:c0:5b:68:45:05:cf:98:b0:21:bd:0a:33:9a:c6:
b0:69:11:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 11:22:03 2026 by rpki-client