
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json)
Hash identifier: ltIrZ85P05cCZicJmty9ut4Y+JMqHOh8ARQXRMpeN0g=
Subject key identifier: 03:93:18:C4:03:1E:F1:4B:89:93:3A:34:60:8E:B6:53:17:11:C2:7C
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 019F419A41DB915380EE9B21DAE4A7C8D717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
Manifest number: 19C7
Signing time: Wed 08 Jul 2026 12:00:56 +0000
Manifest this update: Wed 08 Jul 2026 12:00:56 +0000
Manifest next update: Thu 09 Jul 2026 12:00:56 +0000
Files and hashes: 1: 1-QrkJ1ReezcgF73EgGbqmxSp9iE.roa (hash: RSa2cTQxNZP76zXoi1N6FVpNx/a7WiCBFEO8rdHSaGo=)
2: GadZnqwNNL6vcO0uNGOaOFXO-5w.roa (hash: WPx0ZxFduASzoEDiUK1PVK0AV5w4NdVYDhxmnMrQPaw=)
3: Kt7Bb9a8NYPt2hdNoCtrivgec60.roa (hash: hZLmp4pyqAJx5mRvIALIF4vmWmI8U/uE03XVLg5S0aE=)
4: QGMHAWeIiva_ANIU0MC7CU9-6f8.roa (hash: 4G0dmujJfspfIapxR+knOukRFXWULsWgi/aWj5BdVi4=)
5: XiIbEnKjYE8MkI8g3bZKNddtCfQ.roa (hash: 969ogNKjx9JV6jK/y8xnBqcJ9Cd0T2enS1wUqhtbhGY=)
6: dGOsV8rB3n2kiiSorQ7C_OLvWso.roa (hash: CfnCuNHVj64xX3Nr1KaQqkMmG3m7OTprs4PyzRWTuhc=)
7: gsGfrYs1utK7SrtoyVPXL783bwM.roa (hash: 1zqi9F+7GRzsZKDlqyActNmPOf78TLbsfJ6f9t5J09A=)
8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: H+vr8N2fDkYMg3neqAchkKk+0KVjAGV38pC9rkWmXQ0=)
9: l-WUCYIzfrmbOY4lSlHo4EHYa-0.roa (hash: wRHoNrFNfoLupFB4h8pnue6IATQIBeN3aGRRjbWhTLE=)
10: quXPd4m3roGOFCgsU-cq5zkXqMM.roa (hash: cygguz3JRfVDe2shlN+tdvmvE/mxwD8qbYQvNiz7ASQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:9a:41:db:91:53:80:ee:9b:21:da:e4:a7:c8:d7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Jul 8 12:00:56 2026 GMT
Not After : Jul 9 12:00:56 2026 GMT
Subject: CN=039318c4031ef14b89933a34608eb6531711c27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:73:50:bf:60:c3:3b:40:c2:f3:43:61:d4:3e:
e4:e4:0a:53:ec:ea:d9:c4:55:c6:f9:a7:2f:a7:12:
71:7e:6d:87:17:04:24:0d:82:c0:03:61:04:7e:3e:
18:f9:46:39:f4:c4:09:23:cc:db:63:1f:2b:3b:3b:
bd:b8:4b:5f:05:98:f2:97:43:b5:ef:82:60:45:3e:
a0:23:5d:06:93:7d:27:d2:65:9e:b7:0b:8d:6a:83:
79:a4:ba:aa:03:b0:bb:95:28:91:28:62:66:8f:0a:
4e:b5:ff:6e:77:c8:2c:26:24:dd:d3:3d:b1:f1:74:
6a:1e:5e:0c:a2:f6:2d:40:2c:21:f1:6b:d9:7b:ec:
97:f9:40:2d:cb:cd:0a:37:af:01:a8:4b:92:e0:5d:
2b:80:7b:aa:2e:42:f4:df:d3:a9:07:c6:71:e4:0a:
a5:c0:c3:04:6c:db:43:17:ac:ce:95:a0:06:58:fa:
cd:0a:a8:d4:d5:93:40:a7:37:e3:95:1d:92:86:a4:
1f:89:64:f6:a2:35:ae:3c:d9:88:4a:79:fe:5f:6a:
e9:0a:c3:c5:76:e8:a4:0f:a2:b9:be:29:2b:c9:00:
de:31:16:9d:cc:73:58:9d:ae:e2:81:3f:6b:12:16:
07:3f:1e:4f:17:69:9a:c7:9b:79:2d:45:93:c6:24:
dd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:93:18:C4:03:1E:F1:4B:89:93:3A:34:60:8E:B6:53:17:11:C2:7C
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e3:32:9f:81:c9:e9:b5:4f:94:ca:0c:55:75:f7:c3:0a:fd:
26:1f:4a:96:f2:7d:d9:ae:19:20:50:55:3e:27:2c:36:6d:cb:
1b:db:b4:9e:50:60:c0:5d:1e:ff:87:4d:19:d4:8f:89:15:76:
c0:e5:51:93:23:85:77:95:33:73:3c:02:11:de:1e:32:1a:fe:
43:f9:a9:9d:95:44:67:01:42:f0:0e:06:6e:1d:a5:e3:5e:01:
14:e4:df:64:3b:4e:08:c5:61:9d:0c:8d:14:c4:87:65:61:7e:
35:76:b2:50:36:24:4e:3c:11:67:ea:39:66:ba:b9:fa:5e:79:
dc:20:8e:5f:98:5c:50:96:80:89:6c:81:dc:d7:3d:61:8d:5f:
f7:40:15:4a:f3:1b:60:71:66:80:da:ee:72:77:7b:7f:72:31:
ef:7c:f4:60:e3:7a:b4:33:f3:41:c0:5e:73:40:a4:91:80:22:
23:c9:36:ec:04:99:09:a8:af:38:72:c8:87:d1:53:d0:6d:d1:
2d:7c:0a:8a:72:fb:b2:72:2d:5c:16:53:6d:11:9b:10:a4:13:
bc:9f:e3:9c:64:c1:e8:84:66:7f:a8:cc:c5:89:9a:3c:f1:99:
5d:de:5d:fa:20:78:0b:f9:e4:36:cc:cd:e7:86:3b:5d:f3:10:
dd:09:14:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 14:02:25 2026 by rpki-client