$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json) Hash identifier: kv0gKCXqGDJrWt9s9kKmJkQZhC3YW8k/lvZ5yAoHaOw= Subject key identifier: 68:E9:32:B5:2B:19:DB:F7:28:37:08:2A:9A:DB:E1:28:25:77:3C:21 Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 01A089E80A54B7CBC1917031FB1D44B44465 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft Manifest number: 1698 Signing time: Thu 10 Sep 2026 06:01:20 +0000 Manifest this update: Thu 10 Sep 2026 06:01:20 +0000 Manifest next update: Fri 11 Sep 2026 06:01:20 +0000 Files and hashes: 1: 0Id9ZYia89tn9rGbVp1WccKbdLs.roa (hash: H/d3G1LlSq5Lm4RmW5/Q0ROpxkgSnJpVhWwEfjRrmCE=) 2: 4i9ivIesCHsbnVrZP6Me_46hnOo.roa (hash: qu7/9ByyUg/pGlPFs771pDMBYsdYL5/jWLiIBXBq/us=) 3: 5NyfZtZq8I_a22w9fqIDYQ8J3zo.roa (hash: ZXAkN8Owpsubs84/gjn1dQB9OdgtJ+vDayAhe4jgKik=) 4: 9bdi8ZcArF7uIVM_PWOWOKzHAwM.roa (hash: ksm5o6Brqb84qifDdWrqQOIBVSbPQo+Iqz+ko5JrdDE=) 5: AJc1n1WlM_uViiz8P-Q_ZGlrmkI.roa (hash: 5BjqoTSt8ivKeTgUMxzWvODvEYATsy/sKY0BmzBKn2k=) 6: F2qeHQTP3YKUfyoMJ2I6cHyrIBk.roa (hash: FVx/e+sO+XB2wvTGriWONMagJGCQ6hVxISJ0xlebzr0=) 7: GQccrYsGeyc_jz14ZkRPvffaEMY.roa (hash: iZxmpGm8fTch7x8Mf4u1f0OmBwCOdgCfCEjgwepuDV8=) 8: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: v9ZBrdm3/7VGGS4EBPGf1QM4x71XvyVDJ/GpUEiZhBU=) 9: QtPx4ap949xN5arcMJRpZvFzTfM.roa (hash: KaudJcjJFvIdlbff02gWZxLZI4bRcA90hXhml9h/ITE=) 10: khYS0lYDwiX9lTkfE55JUXtp8-s.roa (hash: bmf6tC0bXLVB4qb1Vl64CHJZEDbU89NkLDTPf7Yci6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 06:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:89:e8:0a:54:b7:cb:c1:91:70:31:fb:1d:44:b4:44:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Sep 10 06:01:20 2026 GMT Not After : Sep 11 06:01:20 2026 GMT Subject: CN=68e932b52b19dbf72837082a9adbe12825773c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e2:06:91:04:dd:f1:87:8a:ac:ba:21:a5:1b: 41:a2:1b:94:26:42:29:05:64:96:41:ac:2f:82:33: 06:fe:9b:82:e0:e1:5c:5f:ba:69:8f:08:f6:82:98: d7:23:12:f5:b0:8e:81:ef:e5:f2:3b:1c:b2:43:61: 44:d7:01:ee:97:c8:7e:1e:a7:f5:7a:37:10:cc:e0: 7c:fa:5f:af:e3:60:2b:d8:90:db:b1:80:4c:b3:70: c9:c6:1a:1a:f7:bf:3a:bb:ce:71:a7:d5:48:b0:e8: bd:88:de:18:ae:00:ef:de:9d:73:7b:5b:18:38:70: ef:62:4b:20:89:6b:49:52:c5:db:2c:47:62:1e:00: 22:6b:f9:e5:52:50:2e:9a:e5:27:94:37:a4:5d:a7: bb:1e:5b:9d:b9:73:5d:8b:f5:61:c7:25:12:d7:c8: 7c:04:4d:53:ec:79:aa:80:0f:3e:da:28:4e:44:07: ab:74:53:e4:81:da:c5:16:b4:a1:b7:f6:c8:de:65: 31:14:bf:81:5a:a7:48:a2:2b:a9:62:2d:34:ef:fa: 12:a5:1a:b2:45:45:c5:b2:c1:82:a4:c3:1d:43:d2: f2:88:ea:af:71:e8:2e:b9:c4:05:56:9f:6d:1b:8c: ba:d6:36:e8:eb:a3:5b:1d:10:05:37:12:c9:69:04: e5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E9:32:B5:2B:19:DB:F7:28:37:08:2A:9A:DB:E1:28:25:77:3C:21 X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:8e:35:95:64:88:d0:42:84:26:44:1a:db:9a:86:40:ea:e6: ec:08:8d:9a:c2:02:37:50:82:9d:4d:56:9d:1a:ce:e4:77:62: 52:50:5e:67:60:15:15:bb:00:63:28:5f:8e:76:e0:b9:95:a2: f1:22:94:91:92:95:29:48:ca:46:ae:b8:62:ac:08:99:5a:1c: 71:7e:44:cd:b4:e6:5e:cc:d4:9d:5e:d4:56:e7:99:49:17:2e: cc:fa:b7:6f:c2:6b:0b:88:1b:7d:5c:dc:aa:33:6e:aa:c3:fe: 3b:77:bd:a1:99:84:69:80:5d:91:39:5a:44:19:8b:ce:93:f2: 68:75:e4:60:14:2c:b7:13:35:04:15:6b:7a:5f:07:f3:14:fa: 0a:ee:9a:d7:d4:dc:36:dc:e9:1b:79:10:27:b8:76:dd:cb:80: 3a:04:3a:eb:34:f6:2e:52:c4:19:c1:ad:92:72:88:2d:1c:25: 40:59:5a:4f:72:2d:ce:d5:df:e6:e5:f0:7e:80:56:9d:79:a7: ab:05:69:43:98:41:36:2d:f3:1e:dd:c2:70:1e:41:94:94:cb: 09:9d:91:6a:89:67:8b:88:c6:71:dd:02:57:e2:90:04:d4:33: d7:eb:74:6c:39:de:47:d3:46:21:21:80:bc:ce:f6:43:35:93: 03:32:f7:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCJ6ApUt8vBkXAx+x1EtERlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjYwOTEwMDYwMTIwWhcNMjYwOTExMDYwMTIwWjAzMTEwLwYDVQQD Eyg2OGU5MzJiNTJiMTlkYmY3MjgzNzA4MmE5YWRiZTEyODI1NzczYzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeIGkQTd8YeKrLohpRtBohuUJkIp BWSWQawvgjMG/puC4OFcX7ppjwj2gpjXIxL1sI6B7+XyOxyyQ2FE1wHul8h+Hqf1 ejcQzOB8+l+v42Ar2JDbsYBMs3DJxhoa9786u85xp9VIsOi9iN4YrgDv3p1ze1sY OHDvYksgiWtJUsXbLEdiHgAia/nlUlAumuUnlDekXae7HluduXNdi/VhxyUS18h8 BE1T7HmqgA8+2ihORAerdFPkgdrFFrSht/bI3mUxFL+BWqdIoiupYi007/oSpRqy RUXFssGCpMMdQ9LyiOqvceguucQFVp9tG4y61jbo66NbHRAFNxLJaQTlVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjpMrUrGdv3KDcIKprb4SgldzwhMB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM441lWSI 0EKEJkQa25qGQOrm7AiNmsICN1CCnU1WnRrO5HdiUlBeZ2AVFbsAYyhfjnbguZWi 8SKUkZKVKUjKRq64YqwImVoccX5EzbTmXszUnV7UVueZSRcuzPq3b8JrC4gbfVzc qjNuqsP+O3e9oZmEaYBdkTlaRBmLzpPyaHXkYBQstxM1BBVrel8H8xT6Cu6a19Tc NtzpG3kQJ7h23cuAOgQ66zT2LlLEGcGtknKILRwlQFlaT3ItztXf5uXwfoBWnXmn qwVpQ5hBNi3zHt3CcB5BlJTLCZ2Raolni4jGcd0CV+KQBNQz1+t0bDneR9NGISGA vM72QzWTAzL35w== -----END CERTIFICATE-----Generated at Thu Sep 10 10:47:01 2026 by rpki-client