$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json) Hash identifier: aw1YsqNt1Pv1UssQjtJtr4qQlPj2mdmPfaDZVcv8qWM= Subject key identifier: 68:33:CE:13:86:8F:BC:3F:F1:B7:1B:0D:F6:8E:97:FD:BB:53:5B:7A Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 019FA03AA0CCFDEB423AEAE9B63AC237B921 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft Manifest number: 161F Signing time: Sun 26 Jul 2026 21:00:24 +0000 Manifest this update: Sun 26 Jul 2026 21:00:24 +0000 Manifest next update: Mon 27 Jul 2026 21:00:24 +0000 Files and hashes: 1: 0Id9ZYia89tn9rGbVp1WccKbdLs.roa (hash: H/d3G1LlSq5Lm4RmW5/Q0ROpxkgSnJpVhWwEfjRrmCE=) 2: 4i9ivIesCHsbnVrZP6Me_46hnOo.roa (hash: qu7/9ByyUg/pGlPFs771pDMBYsdYL5/jWLiIBXBq/us=) 3: 5NyfZtZq8I_a22w9fqIDYQ8J3zo.roa (hash: ZXAkN8Owpsubs84/gjn1dQB9OdgtJ+vDayAhe4jgKik=) 4: 9bdi8ZcArF7uIVM_PWOWOKzHAwM.roa (hash: ksm5o6Brqb84qifDdWrqQOIBVSbPQo+Iqz+ko5JrdDE=) 5: AJc1n1WlM_uViiz8P-Q_ZGlrmkI.roa (hash: 5BjqoTSt8ivKeTgUMxzWvODvEYATsy/sKY0BmzBKn2k=) 6: F2qeHQTP3YKUfyoMJ2I6cHyrIBk.roa (hash: FVx/e+sO+XB2wvTGriWONMagJGCQ6hVxISJ0xlebzr0=) 7: GQccrYsGeyc_jz14ZkRPvffaEMY.roa (hash: iZxmpGm8fTch7x8Mf4u1f0OmBwCOdgCfCEjgwepuDV8=) 8: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: XT5w5klgoG4g8t/Ja1qqi3y9kSjtf9CQsKRd9m3xPWw=) 9: QtPx4ap949xN5arcMJRpZvFzTfM.roa (hash: KaudJcjJFvIdlbff02gWZxLZI4bRcA90hXhml9h/ITE=) 10: khYS0lYDwiX9lTkfE55JUXtp8-s.roa (hash: bmf6tC0bXLVB4qb1Vl64CHJZEDbU89NkLDTPf7Yci6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 21:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a0:3a:a0:cc:fd:eb:42:3a:ea:e9:b6:3a:c2:37:b9:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Jul 26 21:00:24 2026 GMT Not After : Jul 27 21:00:24 2026 GMT Subject: CN=6833ce13868fbc3ff1b71b0df68e97fdbb535b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7e:ca:04:44:e2:1e:21:47:16:3b:36:04:d0: 91:28:95:a2:02:05:de:1b:e3:3b:bc:1f:31:9f:3f: d1:43:d7:04:6d:e7:ce:c5:a0:02:58:63:c8:67:78: df:c1:ed:40:70:fc:e7:e7:86:1b:76:6b:ec:14:7f: 73:04:9f:2f:45:bb:04:df:9b:d7:d6:93:e9:c2:2a: 97:e2:f1:3d:25:21:3e:b3:63:4c:6c:6c:66:f2:03: d5:5c:7b:da:5e:a2:4c:b1:3c:4a:75:8f:70:dc:f2: 91:9b:78:79:5d:bb:6b:14:7e:71:c7:20:58:4c:3e: c5:26:fc:f3:d5:9a:6e:57:99:b8:e5:34:ce:6d:78: c0:56:27:bb:d9:54:cc:46:88:05:cc:02:09:c9:f2: a7:a3:a6:10:78:e7:16:8b:81:87:26:18:37:c8:43: 1e:0b:1e:6d:b3:7f:65:26:a9:40:56:fe:81:f1:6e: 35:88:c6:64:db:f0:a8:5c:48:6a:1a:42:3e:9f:28: 0d:c9:eb:c1:35:68:6e:10:87:4c:18:91:70:aa:59: 44:9b:0a:11:c7:b9:96:50:ca:f9:5c:ca:89:09:7c: 68:62:ed:19:a7:9a:3d:ec:74:31:c2:92:f9:7b:f8: c4:2e:ed:f9:51:85:af:75:73:e9:e5:db:87:4e:a7: fc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:33:CE:13:86:8F:BC:3F:F1:B7:1B:0D:F6:8E:97:FD:BB:53:5B:7A X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:8c:9e:4e:61:62:9f:68:ae:92:11:16:ef:16:24:fd:41:8b: 0d:73:f4:7d:41:9c:97:df:b3:6e:16:d0:9e:d4:ab:9e:58:ad: ee:40:6a:e3:ba:a4:fe:ed:e4:f5:ce:14:45:dd:3a:c2:2d:b6: f4:e2:7b:e8:c8:d4:ed:2b:b8:03:a5:39:a6:fe:a8:e3:a9:c7: 2a:28:1e:1e:da:3b:d5:57:95:9f:77:97:67:c9:3f:92:fa:77: 17:37:72:df:dc:da:ba:ad:cb:db:c0:22:c7:25:91:ac:38:e0: f5:ea:e9:3a:0c:c9:f1:e0:15:c9:a4:4b:84:cd:4e:12:9b:c8: 7c:50:ed:05:dd:ef:18:82:53:6d:f7:28:03:58:3a:93:c0:a4: fb:7d:88:46:13:6d:b0:01:de:af:36:2f:25:a1:fe:29:b8:a8: a4:82:7c:46:49:31:9e:22:09:c8:bb:25:d7:f0:33:17:fc:4c: 9a:6a:c7:92:40:b1:13:a1:7f:3f:47:60:25:30:e2:d5:7d:43: 97:36:27:ec:3c:39:89:5c:f2:22:06:48:07:1a:e7:6d:25:31: 74:87:e2:69:72:eb:ae:f8:98:a2:83:da:fb:0d:b4:30:82:06: 8d:d3:14:51:df:fb:44:cb:5c:88:38:a5:47:6d:5f:65:2c:1d: da:24:8a:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+gOqDM/etCOurptjrCN7khMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjYwNzI2MjEwMDI0WhcNMjYwNzI3MjEwMDI0WjAzMTEwLwYDVQQD Eyg2ODMzY2UxMzg2OGZiYzNmZjFiNzFiMGRmNjhlOTdmZGJiNTM1YjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA137KBETiHiFHFjs2BNCRKJWiAgXe G+M7vB8xnz/RQ9cEbefOxaACWGPIZ3jfwe1AcPzn54YbdmvsFH9zBJ8vRbsE35vX 1pPpwiqX4vE9JSE+s2NMbGxm8gPVXHvaXqJMsTxKdY9w3PKRm3h5XbtrFH5xxyBY TD7FJvzz1ZpuV5m45TTObXjAVie72VTMRogFzAIJyfKno6YQeOcWi4GHJhg3yEMe Cx5ts39lJqlAVv6B8W41iMZk2/CoXEhqGkI+nygNyevBNWhuEIdMGJFwqllEmwoR x7mWUMr5XMqJCXxoYu0Zp5o97HQxwpL5e/jELu35UYWvdXPp5duHTqf8xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgzzhOGj7w/8bcbDfaOl/27U1t6MB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeoyeTmFi n2iukhEW7xYk/UGLDXP0fUGcl9+zbhbQntSrnlit7kBq47qk/u3k9c4URd06wi22 9OJ76MjU7Su4A6U5pv6o46nHKigeHto71VeVn3eXZ8k/kvp3Fzdy39zauq3L28Ai xyWRrDjg9erpOgzJ8eAVyaRLhM1OEpvIfFDtBd3vGIJTbfcoA1g6k8Ck+32IRhNt sAHerzYvJaH+KbiopIJ8RkkxniIJyLsl1/AzF/xMmmrHkkCxE6F/P0dgJTDi1X1D lzYn7Dw5iVzyIgZIBxrnbSUxdIfiaXLrrviYooPa+w20MIIGjdMUUd/7RMtciDil R21fZSwd2iSKIg== -----END CERTIFICATE-----Generated at Mon Jul 27 02:02:59 2026 by rpki-client