$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json) Hash identifier: 9+OrZIOSTxpvimS+kR7PZciKDCBQyZRMah1Lu+UD3MY= Subject key identifier: AF:8E:11:10:6E:D9:52:9A:55:48:A9:41:DD:CE:F9:16:5C:3E:C2:97 Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 019DCED000EE9E9F82721BB59B2749EE62DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft Manifest number: 152E Signing time: Mon 27 Apr 2026 12:00:31 +0000 Manifest this update: Mon 27 Apr 2026 12:00:31 +0000 Manifest next update: Tue 28 Apr 2026 12:00:31 +0000 Files and hashes: 1: 0Id9ZYia89tn9rGbVp1WccKbdLs.roa (hash: H/d3G1LlSq5Lm4RmW5/Q0ROpxkgSnJpVhWwEfjRrmCE=) 2: 4i9ivIesCHsbnVrZP6Me_46hnOo.roa (hash: qu7/9ByyUg/pGlPFs771pDMBYsdYL5/jWLiIBXBq/us=) 3: 5NyfZtZq8I_a22w9fqIDYQ8J3zo.roa (hash: ZXAkN8Owpsubs84/gjn1dQB9OdgtJ+vDayAhe4jgKik=) 4: 9bdi8ZcArF7uIVM_PWOWOKzHAwM.roa (hash: ksm5o6Brqb84qifDdWrqQOIBVSbPQo+Iqz+ko5JrdDE=) 5: AJc1n1WlM_uViiz8P-Q_ZGlrmkI.roa (hash: 5BjqoTSt8ivKeTgUMxzWvODvEYATsy/sKY0BmzBKn2k=) 6: F2qeHQTP3YKUfyoMJ2I6cHyrIBk.roa (hash: FVx/e+sO+XB2wvTGriWONMagJGCQ6hVxISJ0xlebzr0=) 7: GQccrYsGeyc_jz14ZkRPvffaEMY.roa (hash: iZxmpGm8fTch7x8Mf4u1f0OmBwCOdgCfCEjgwepuDV8=) 8: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: 1vYXMM7I270Xow9vfsLCqmOi+o7i5BC18iZMDUVTF3k=) 9: QtPx4ap949xN5arcMJRpZvFzTfM.roa (hash: KaudJcjJFvIdlbff02gWZxLZI4bRcA90hXhml9h/ITE=) 10: khYS0lYDwiX9lTkfE55JUXtp8-s.roa (hash: bmf6tC0bXLVB4qb1Vl64CHJZEDbU89NkLDTPf7Yci6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:ce:d0:00:ee:9e:9f:82:72:1b:b5:9b:27:49:ee:62:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Apr 27 12:00:31 2026 GMT Not After : Apr 28 12:00:31 2026 GMT Subject: CN=af8e11106ed9529a5548a941ddcef9165c3ec297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fa:6a:61:24:96:31:3d:e2:ae:f4:e1:ff:6a: 80:c9:98:b8:8a:9a:c6:1b:e1:44:15:57:57:f8:9b: e0:b3:6f:8b:0e:27:2f:a1:91:15:f8:c1:8a:1c:38: cf:97:9f:03:98:15:e8:ab:74:89:df:af:fd:22:7d: 0a:dc:11:64:c7:2a:38:80:88:bb:06:01:67:f0:13: fe:11:a2:7d:ab:ec:94:8d:02:e7:bf:9e:bc:33:26: c2:c0:da:85:6b:7a:24:7d:4e:44:ff:f3:17:14:7d: d9:51:c0:31:4e:ca:a4:5e:a2:2a:c5:84:bf:12:10: da:a0:a6:89:6c:ec:71:49:97:ef:71:ae:4e:a0:6e: f0:5a:28:2b:66:b8:7f:f8:b0:39:24:2f:89:60:b4: 4e:3c:21:e3:0d:58:c6:6c:e1:55:fd:98:63:6e:b9: 9a:4f:d5:d9:50:22:49:76:6c:f8:78:7e:fb:bc:65: 83:4a:2e:26:18:ff:73:e1:97:e0:fe:28:1d:c3:91: 52:ca:a2:82:d2:7c:7c:51:75:09:48:13:00:3a:a4: 5a:ff:8c:a3:07:ca:e7:d7:e9:e1:a6:8a:b3:b1:7a: 15:69:97:04:d1:08:f5:6e:6d:43:8f:ef:a9:10:8b: f2:b7:da:23:c7:b5:c8:62:69:cf:00:2c:18:ae:0c: 9a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8E:11:10:6E:D9:52:9A:55:48:A9:41:DD:CE:F9:16:5C:3E:C2:97 X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:85:68:ba:e6:55:2e:da:83:f8:d3:2f:6a:8c:1f:ff:1a:78: 50:e3:16:eb:82:4e:ce:41:71:b4:c7:63:48:a9:62:65:97:ef: e5:32:60:ef:fa:f6:e5:b1:f0:46:e6:4f:3b:f9:77:ca:b1:9f: fd:36:96:13:38:08:ad:22:64:c6:d5:a4:41:dc:c6:41:86:aa: fb:a6:a5:aa:1e:91:2b:59:f3:0c:e3:bb:1c:8d:d5:d8:d8:74: 2f:6e:90:1f:cc:72:7b:45:ae:d9:1f:e6:f1:ee:c7:d5:ac:ec: 9a:77:20:da:fb:2c:fb:30:e1:9a:c4:f1:04:81:8f:1c:f8:7e: 4f:56:73:ff:c2:50:b4:9e:26:2c:44:38:d5:38:2a:b2:9f:66: 1f:be:39:4d:91:37:e5:2e:8b:50:1a:4a:04:76:34:e7:e4:93: 4e:7d:5d:97:3f:4b:de:14:4c:68:37:63:6e:74:e6:32:7d:c8: 20:a6:f4:d0:48:e8:6e:04:22:88:46:c0:ec:8f:16:d9:0a:13: 5e:51:f8:3b:63:d9:f1:f3:8e:19:42:bf:c1:e7:a6:28:fe:70: 20:29:e7:4a:73:39:77:df:84:13:dd:61:b9:5a:7e:dd:6c:ab: d0:1d:42:23:1b:66:c4:97:ed:bc:87:20:f1:99:c2:1b:7c:6b: 36:ad:5d:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3O0ADunp+Cchu1mydJ7mLeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjYwNDI3MTIwMDMxWhcNMjYwNDI4MTIwMDMxWjAzMTEwLwYDVQQD EyhhZjhlMTExMDZlZDk1MjlhNTU0OGE5NDFkZGNlZjkxNjVjM2VjMjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfpqYSSWMT3irvTh/2qAyZi4iprG G+FEFVdX+Jvgs2+LDicvoZEV+MGKHDjPl58DmBXoq3SJ36/9In0K3BFkxyo4gIi7 BgFn8BP+EaJ9q+yUjQLnv568MybCwNqFa3okfU5E//MXFH3ZUcAxTsqkXqIqxYS/ EhDaoKaJbOxxSZfvca5OoG7wWigrZrh/+LA5JC+JYLROPCHjDVjGbOFV/Zhjbrma T9XZUCJJdmz4eH77vGWDSi4mGP9z4Zfg/igdw5FSyqKC0nx8UXUJSBMAOqRa/4yj B8rn1+nhpoqzsXoVaZcE0Qj1bm1Dj++pEIvyt9ojx7XIYmnPACwYrgyaVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+OERBu2VKaVUipQd3O+RZcPsKXMB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4VouuZV LtqD+NMvaowf/xp4UOMW64JOzkFxtMdjSKliZZfv5TJg7/r25bHwRuZPO/l3yrGf /TaWEzgIrSJkxtWkQdzGQYaq+6alqh6RK1nzDOO7HI3V2Nh0L26QH8xye0Wu2R/m 8e7H1azsmncg2vss+zDhmsTxBIGPHPh+T1Zz/8JQtJ4mLEQ41Tgqsp9mH745TZE3 5S6LUBpKBHY05+STTn1dlz9L3hRMaDdjbnTmMn3IIKb00EjobgQiiEbA7I8W2QoT XlH4O2PZ8fOOGUK/weemKP5wICnnSnM5d9+EE91huVp+3Wyr0B1CIxtmxJftvIcg 8ZnCG3xrNq1dQg== -----END CERTIFICATE-----Generated at Mon Apr 27 14:53:34 2026 by rpki-client