$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json) Hash identifier: wNmTVJRy+PkBic+kzB8A4QgKephD0+C9y8A6L9+t/G8= Subject key identifier: 96:D6:1A:67:3C:86:DD:0F:79:84:CE:94:BA:5F:82:B2:E2:02:46:1B Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 01A1182B3500D33C82543C78C127CFD0DD4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft Manifest number: 1ABC Signing time: Wed 07 Oct 2026 21:00:47 +0000 Manifest this update: Wed 07 Oct 2026 21:00:47 +0000 Manifest next update: Thu 08 Oct 2026 21:00:47 +0000 Files and hashes: 1: 8-hboCP-U8Wk9qtGn0IWpFqelRc.roa (hash: j5xldAU1MujpYVAZwSnjN9dxcpWX63Cij0SbzlZlEHU=) 2: GadZnqwNNL6vcO0uNGOaOFXO-5w.roa (hash: WPx0ZxFduASzoEDiUK1PVK0AV5w4NdVYDhxmnMrQPaw=) 3: Kt7Bb9a8NYPt2hdNoCtrivgec60.roa (hash: hZLmp4pyqAJx5mRvIALIF4vmWmI8U/uE03XVLg5S0aE=) 4: QGMHAWeIiva_ANIU0MC7CU9-6f8.roa (hash: 4G0dmujJfspfIapxR+knOukRFXWULsWgi/aWj5BdVi4=) 5: XiIbEnKjYE8MkI8g3bZKNddtCfQ.roa (hash: 969ogNKjx9JV6jK/y8xnBqcJ9Cd0T2enS1wUqhtbhGY=) 6: dGOsV8rB3n2kiiSorQ7C_OLvWso.roa (hash: CfnCuNHVj64xX3Nr1KaQqkMmG3m7OTprs4PyzRWTuhc=) 7: gsGfrYs1utK7SrtoyVPXL783bwM.roa (hash: 1zqi9F+7GRzsZKDlqyActNmPOf78TLbsfJ6f9t5J09A=) 8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: 0Ax+DjKxDF/jP0rcJQOFl+xXHuPXgo8ZD8msGG5e1l0=) 9: l-WUCYIzfrmbOY4lSlHo4EHYa-0.roa (hash: wRHoNrFNfoLupFB4h8pnue6IATQIBeN3aGRRjbWhTLE=) 10: quXPd4m3roGOFCgsU-cq5zkXqMM.roa (hash: cygguz3JRfVDe2shlN+tdvmvE/mxwD8qbYQvNiz7ASQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Oct 2026 21:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:18:2b:35:00:d3:3c:82:54:3c:78:c1:27:cf:d0:dd:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Oct 7 21:00:47 2026 GMT Not After : Oct 8 21:00:47 2026 GMT Subject: CN=96d61a673c86dd0f7984ce94ba5f82b2e202461b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ea:4f:b5:b8:0e:d8:ce:0e:02:b5:9b:7e:66: 4c:e4:a2:25:8a:79:3e:c8:2a:61:7a:8a:46:45:b0: bd:a0:c2:c6:94:0a:2e:d1:9e:c9:2c:1f:20:42:f5: 6f:79:49:61:6a:86:84:64:c0:cd:bf:f0:50:8c:09: 2f:da:3a:6f:85:f5:ba:c4:10:ab:09:20:a3:0c:a7: fa:d1:00:af:a3:0c:f4:55:14:16:73:ca:fb:00:7c: 0d:30:63:15:5c:4c:ad:94:70:8c:a8:90:93:74:f3: 92:ec:90:82:c7:8d:59:fa:ff:57:66:52:28:42:0a: d4:3b:db:49:e2:1e:ab:ce:56:8c:93:85:d1:83:8c: 97:af:f5:2c:f9:ae:2f:14:33:c7:f5:24:b3:4a:98: 57:20:8a:5d:af:8d:f6:59:18:ad:a8:1f:5e:3b:cc: 82:92:cb:07:db:b8:d7:65:1b:b3:32:59:a1:1d:00: 0d:98:bb:dd:2d:3b:2e:77:a8:9d:89:50:46:4b:a1: 8d:ad:6b:cf:82:27:b0:2a:71:8e:65:09:50:26:5a: e9:63:77:6a:45:6f:d8:30:22:66:58:ee:92:cd:9e: 5c:15:59:8d:47:58:8d:d2:69:65:99:d6:da:d1:63: a4:01:cd:7f:e3:4a:c5:e4:1b:e2:e3:47:12:0d:12: cd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D6:1A:67:3C:86:DD:0F:79:84:CE:94:BA:5F:82:B2:E2:02:46:1B X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:83:8c:47:2e:76:65:c7:38:bf:a0:ae:a0:45:8a:8c:81:57: 24:22:3c:8c:04:2a:31:83:fb:a3:b2:e7:36:9a:e8:b1:de:10: fa:14:e6:81:c0:95:f1:76:42:08:fe:61:8c:2e:ff:2b:b2:02: d7:f4:e2:3e:65:f1:6c:0d:74:ee:05:32:8c:cf:65:03:eb:b2: 2d:91:fc:78:d4:7b:d7:5e:c5:1c:79:cc:ba:e4:01:fb:70:50: e1:78:f0:97:81:f9:b3:2f:79:f9:b6:7e:59:4a:c7:05:7d:ea: dd:31:57:c6:3e:8e:4e:8f:c8:c3:05:75:94:4e:17:50:2d:fe: 10:20:21:40:9f:63:32:47:d1:7c:51:4b:02:7d:c7:05:4a:af: a2:ee:57:cd:54:c6:a9:19:d8:b7:fc:3e:63:36:d3:d8:14:d8: 54:43:1a:2e:83:3d:93:52:92:ae:e6:b1:41:dc:15:0c:28:1f: 7f:8a:ed:6d:49:02:31:ea:2f:c0:d6:13:04:f2:2b:f8:99:80: 37:71:f2:c3:45:74:7e:8d:9b:72:5c:1f:74:f3:7a:ad:4b:50: b2:e9:db:0c:09:7f:57:a2:4a:6d:78:ac:f6:45:d8:9e:56:f0: 26:e8:8d:07:f3:0e:2e:a8:0d:de:86:14:62:c3:6a:a0:e7:4b: d9:44:78:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEYKzUA0zyCVDx4wSfP0N1NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjYxMDA3MjEwMDQ3WhcNMjYxMDA4MjEwMDQ3WjAzMTEwLwYDVQQD Eyg5NmQ2MWE2NzNjODZkZDBmNzk4NGNlOTRiYTVmODJiMmUyMDI0NjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOpPtbgO2M4OArWbfmZM5KIlink+ yCpheopGRbC9oMLGlAou0Z7JLB8gQvVveUlhaoaEZMDNv/BQjAkv2jpvhfW6xBCr CSCjDKf60QCvowz0VRQWc8r7AHwNMGMVXEytlHCMqJCTdPOS7JCCx41Z+v9XZlIo QgrUO9tJ4h6rzlaMk4XRg4yXr/Us+a4vFDPH9SSzSphXIIpdr432WRitqB9eO8yC kssH27jXZRuzMlmhHQANmLvdLTsud6idiVBGS6GNrWvPgiewKnGOZQlQJlrpY3dq RW/YMCJmWO6SzZ5cFVmNR1iN0mllmdba0WOkAc1/40rF5Bvi40cSDRLNrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbWGmc8ht0PeYTOlLpfgrLiAkYbMB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYoOMRy52 Zcc4v6CuoEWKjIFXJCI8jAQqMYP7o7LnNprosd4Q+hTmgcCV8XZCCP5hjC7/K7IC 1/TiPmXxbA107gUyjM9lA+uyLZH8eNR7117FHHnMuuQB+3BQ4Xjwl4H5sy95+bZ+ WUrHBX3q3TFXxj6OTo/IwwV1lE4XUC3+ECAhQJ9jMkfRfFFLAn3HBUqvou5XzVTG qRnYt/w+YzbT2BTYVEMaLoM9k1KSruaxQdwVDCgff4rtbUkCMeovwNYTBPIr+JmA N3Hyw0V0fo2bclwfdPN6rUtQsunbDAl/V6JKbXis9kXYnlbwJuiNB/MOLqgN3oYU YsNqoOdL2UR4mQ== -----END CERTIFICATE-----Generated at Thu Oct 8 05:28:07 2026 by rpki-client