$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json) Hash identifier: 0W4EoOWz5RE/34yhVhcXGD/g9wTvztHLg8ZhsxWUJSI= Subject key identifier: 56:13:83:B8:64:9E:8B:B2:59:2A:9C:D7:8A:B0:7F:0C:63:7E:B1:60 Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 01A0292131E1BA50030F478C4C96C95454F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft Manifest number: 1A40 Signing time: Sat 22 Aug 2026 11:00:36 +0000 Manifest this update: Sat 22 Aug 2026 11:00:36 +0000 Manifest next update: Sun 23 Aug 2026 11:00:36 +0000 Files and hashes: 1: 551VyyB9yt1jU1oArfdFyAq4eSg.roa (hash: gm5h/cU5QmHdORzGbSen605MM1rA87Jfvrz/TD6AKKo=) 2: GadZnqwNNL6vcO0uNGOaOFXO-5w.roa (hash: WPx0ZxFduASzoEDiUK1PVK0AV5w4NdVYDhxmnMrQPaw=) 3: Kt7Bb9a8NYPt2hdNoCtrivgec60.roa (hash: hZLmp4pyqAJx5mRvIALIF4vmWmI8U/uE03XVLg5S0aE=) 4: QGMHAWeIiva_ANIU0MC7CU9-6f8.roa (hash: 4G0dmujJfspfIapxR+knOukRFXWULsWgi/aWj5BdVi4=) 5: XiIbEnKjYE8MkI8g3bZKNddtCfQ.roa (hash: 969ogNKjx9JV6jK/y8xnBqcJ9Cd0T2enS1wUqhtbhGY=) 6: dGOsV8rB3n2kiiSorQ7C_OLvWso.roa (hash: CfnCuNHVj64xX3Nr1KaQqkMmG3m7OTprs4PyzRWTuhc=) 7: gsGfrYs1utK7SrtoyVPXL783bwM.roa (hash: 1zqi9F+7GRzsZKDlqyActNmPOf78TLbsfJ6f9t5J09A=) 8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: 0xLRKaB0X67AGSNfK9RWfnAfbM1s+CbCipJk4hEmO54=) 9: l-WUCYIzfrmbOY4lSlHo4EHYa-0.roa (hash: wRHoNrFNfoLupFB4h8pnue6IATQIBeN3aGRRjbWhTLE=) 10: quXPd4m3roGOFCgsU-cq5zkXqMM.roa (hash: cygguz3JRfVDe2shlN+tdvmvE/mxwD8qbYQvNiz7ASQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Aug 2026 10:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:29:21:31:e1:ba:50:03:0f:47:8c:4c:96:c9:54:54:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Aug 22 11:00:36 2026 GMT Not After : Aug 23 11:00:36 2026 GMT Subject: CN=561383b8649e8bb2592a9cd78ab07f0c637eb160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:21:c9:ae:fb:a7:f4:81:5f:2c:5c:68:66:c2: 63:b0:7c:7e:b2:35:2e:9c:ef:bb:ba:5b:c3:02:26: 46:2b:93:fd:00:64:37:62:38:2e:24:02:a9:bd:d2: e6:c7:4c:09:f3:8e:96:83:ff:f0:43:39:c5:86:1f: 7e:99:58:04:e9:9c:e3:1a:65:89:00:e2:6b:a6:f6: fc:76:29:b2:5d:9a:58:69:f8:52:a2:9f:19:9c:33: 70:a9:92:48:8f:a1:b3:a1:6e:4a:44:e7:38:aa:df: b0:d0:39:c3:bd:3e:dd:be:e9:b3:e2:52:5a:87:a2: f4:af:9b:b7:2d:6a:34:00:92:af:d0:48:c5:06:d3: aa:bf:b2:19:58:f2:2d:09:05:bf:33:90:9b:27:91: 1f:77:b2:c5:16:00:22:be:23:9d:30:c7:a5:7e:4a: f8:16:c1:be:f1:5a:52:ed:4e:02:81:7a:db:2c:fa: a6:b3:29:71:10:2e:84:da:a1:bc:e4:86:d1:41:95: bf:30:87:ba:e8:56:7f:fa:50:35:bb:c2:19:7e:78: 99:9c:a4:a4:0a:d8:15:02:78:81:90:40:5a:b6:0a: 60:0f:ab:2a:3c:39:17:72:33:30:64:6c:2e:15:f2: 62:48:0e:cb:85:f1:7d:6e:fa:ef:e0:52:bc:1f:f2: 2e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:13:83:B8:64:9E:8B:B2:59:2A:9C:D7:8A:B0:7F:0C:63:7E:B1:60 X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:0e:4f:19:c3:4c:47:63:41:93:3b:c7:a5:5c:16:50:11:75: e0:34:3b:ad:90:e9:c9:26:63:5c:c3:2f:ee:a3:6f:fa:c6:7b: 5b:bb:f9:04:0d:5f:99:4e:27:3e:c7:d7:ba:79:98:6e:35:b0: 19:c8:a7:35:71:c2:f7:55:8b:a4:b2:57:6f:d6:0b:42:6f:eb: 0c:7f:d2:ff:53:24:f4:bf:64:2c:87:38:8f:1f:d4:6d:ff:98: b1:ca:29:2c:ae:50:d8:dd:4d:de:68:b1:b6:b9:55:11:f2:f3: 2a:9b:8a:ae:94:93:be:0c:c8:66:01:c8:13:46:30:a2:8b:ee: 62:30:2f:06:11:09:f2:db:d5:c6:a3:ec:19:56:cf:c2:54:01: 04:73:6e:fd:d8:f0:87:52:41:5d:2a:85:9e:81:c0:76:f0:45: 83:d1:96:f4:be:d5:e5:de:4b:19:c9:cc:8a:db:9f:40:2c:8a: 0e:56:44:f9:a8:a9:82:fd:92:a5:9f:9f:a1:e4:b4:70:96:bf: c9:85:e8:6f:c9:39:2a:ad:a1:28:57:dc:94:03:2c:46:6a:50: 41:0c:c2:65:da:d1:c0:a9:bd:59:85:90:54:89:d1:b0:1f:ad: 2a:d3:e6:f7:a3:5d:e6:1b:5a:9e:61:63:1e:a4:f1:96:7c:ca: 99:48:53:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaApITHhulADD0eMTJbJVFTwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjYwODIyMTEwMDM2WhcNMjYwODIzMTEwMDM2WjAzMTEwLwYDVQQD Eyg1NjEzODNiODY0OWU4YmIyNTkyYTljZDc4YWIwN2YwYzYzN2ViMTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiHJrvun9IFfLFxoZsJjsHx+sjUu nO+7ulvDAiZGK5P9AGQ3YjguJAKpvdLmx0wJ846Wg//wQznFhh9+mVgE6ZzjGmWJ AOJrpvb8dimyXZpYafhSop8ZnDNwqZJIj6GzoW5KROc4qt+w0DnDvT7dvumz4lJa h6L0r5u3LWo0AJKv0EjFBtOqv7IZWPItCQW/M5CbJ5Efd7LFFgAiviOdMMelfkr4 FsG+8VpS7U4CgXrbLPqmsylxEC6E2qG85IbRQZW/MIe66FZ/+lA1u8IZfniZnKSk CtgVAniBkEBatgpgD6sqPDkXcjMwZGwuFfJiSA7LhfF9bvrv4FK8H/IuvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYTg7hknouyWSqc14qwfwxjfrFgMB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArQ5PGcNM R2NBkzvHpVwWUBF14DQ7rZDpySZjXMMv7qNv+sZ7W7v5BA1fmU4nPsfXunmYbjWw GcinNXHC91WLpLJXb9YLQm/rDH/S/1Mk9L9kLIc4jx/Ubf+YscopLK5Q2N1N3mix trlVEfLzKpuKrpSTvgzIZgHIE0YwoovuYjAvBhEJ8tvVxqPsGVbPwlQBBHNu/djw h1JBXSqFnoHAdvBFg9GW9L7V5d5LGcnMitufQCyKDlZE+aipgv2SpZ+foeS0cJa/ yYXob8k5Kq2hKFfclAMsRmpQQQzCZdrRwKm9WYWQVInRsB+tKtPm96Nd5htanmFj HqTxlnzKmUhTiA== -----END CERTIFICATE-----Generated at Sat Aug 22 15:39:06 2026 by rpki-client