$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json) Hash identifier: zB31kSzXbvxMWhan1hLU+ZdrIrZUXXB17iZ5D4+GRPc= Subject key identifier: 17:BB:51:20:7A:55:15:B7:88:BF:C9:E5:18:60:E1:43:EF:A2:C5:85 Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 019CE52395078D451522CD42890D57102265 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft Manifest number: 14B5 Signing time: Fri 13 Mar 2026 03:00:40 +0000 Manifest this update: Fri 13 Mar 2026 03:00:40 +0000 Manifest next update: Sat 14 Mar 2026 03:00:40 +0000 Files and hashes: 1: 0Id9ZYia89tn9rGbVp1WccKbdLs.roa (hash: H/d3G1LlSq5Lm4RmW5/Q0ROpxkgSnJpVhWwEfjRrmCE=) 2: 4i9ivIesCHsbnVrZP6Me_46hnOo.roa (hash: qu7/9ByyUg/pGlPFs771pDMBYsdYL5/jWLiIBXBq/us=) 3: 5NyfZtZq8I_a22w9fqIDYQ8J3zo.roa (hash: ZXAkN8Owpsubs84/gjn1dQB9OdgtJ+vDayAhe4jgKik=) 4: 9bdi8ZcArF7uIVM_PWOWOKzHAwM.roa (hash: ksm5o6Brqb84qifDdWrqQOIBVSbPQo+Iqz+ko5JrdDE=) 5: AJc1n1WlM_uViiz8P-Q_ZGlrmkI.roa (hash: 5BjqoTSt8ivKeTgUMxzWvODvEYATsy/sKY0BmzBKn2k=) 6: F2qeHQTP3YKUfyoMJ2I6cHyrIBk.roa (hash: FVx/e+sO+XB2wvTGriWONMagJGCQ6hVxISJ0xlebzr0=) 7: GQccrYsGeyc_jz14ZkRPvffaEMY.roa (hash: iZxmpGm8fTch7x8Mf4u1f0OmBwCOdgCfCEjgwepuDV8=) 8: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: fjC+OetF6rczAA6eXf1CsVYqBizGC1Oe2eK3T6TaHi4=) 9: QtPx4ap949xN5arcMJRpZvFzTfM.roa (hash: KaudJcjJFvIdlbff02gWZxLZI4bRcA90hXhml9h/ITE=) 10: khYS0lYDwiX9lTkfE55JUXtp8-s.roa (hash: bmf6tC0bXLVB4qb1Vl64CHJZEDbU89NkLDTPf7Yci6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e5:23:95:07:8d:45:15:22:cd:42:89:0d:57:10:22:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Mar 13 03:00:40 2026 GMT Not After : Mar 14 03:00:40 2026 GMT Subject: CN=17bb51207a5515b788bfc9e51860e143efa2c585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d2:e7:c8:e4:9a:78:3a:04:3e:d1:18:1f:99: e2:2c:7b:20:fb:97:69:03:37:2f:cc:fe:4f:16:25: b2:66:df:66:90:c8:37:b1:db:36:1f:e9:4a:7d:99: 6d:e0:90:05:07:18:92:d0:b7:d6:35:98:de:32:08: 06:c8:8f:bd:07:1e:e5:32:a2:f1:b5:de:33:e3:0a: 06:cc:5a:fe:38:4d:a4:21:f7:90:99:04:6b:e4:f1: a1:30:8c:02:db:74:a3:dd:11:aa:9a:97:a2:3a:d0: 11:bc:03:e6:41:aa:3a:bc:60:6f:5c:ec:d5:56:6d: 06:c1:ab:af:a8:99:12:30:0c:56:25:88:23:ac:3d: be:d7:68:16:17:ee:11:18:9f:10:fa:79:db:a7:32: 22:69:41:b9:5f:6a:80:34:e1:54:80:46:75:cb:0c: 5d:fb:24:8f:37:f8:45:b3:80:64:96:4a:a6:8e:dc: ca:b3:71:33:2a:a6:7d:5f:d1:bd:d2:c9:f9:cb:16: 74:4b:4e:9c:68:a4:dc:30:04:38:de:49:fb:e4:2e: c7:3a:43:66:7d:a9:c3:b9:24:6c:63:07:ce:82:ca: 31:f1:00:e6:32:05:21:21:79:96:be:44:70:9b:87: 43:1e:d5:9a:17:3b:7b:9e:a8:b8:a3:8b:16:bf:3b: 25:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BB:51:20:7A:55:15:B7:88:BF:C9:E5:18:60:E1:43:EF:A2:C5:85 X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:4c:dc:6e:d3:3c:6e:27:85:a9:fc:fb:51:fb:eb:9b:17:d8: 9b:39:99:16:e5:2b:ec:38:b2:26:5b:3a:a6:ee:62:62:c0:93: 4f:66:78:50:bb:26:f7:f4:70:67:82:2d:06:c8:05:87:17:5d: a7:ce:da:f2:56:7a:1f:a2:45:c9:1e:90:91:49:b5:0b:38:b9: 65:21:90:5c:55:c6:e0:18:fe:f0:8c:9a:45:25:5b:37:30:4a: 9c:4f:14:4c:3e:79:39:2a:6a:59:99:c4:6f:33:4e:cd:30:e5: be:f8:11:38:00:c8:ff:61:09:59:da:a5:de:45:b0:5b:93:79: e7:53:27:18:87:60:c4:76:fd:d0:5f:52:36:f8:44:81:5d:78: 64:f3:fe:a4:b3:84:fa:a6:6f:df:c6:34:c6:77:78:f3:3a:ff: f6:d7:a2:bd:b7:72:b2:cc:e6:3f:6c:61:d2:6f:2b:61:fe:15: f2:b0:97:e0:22:97:29:8e:40:79:40:0a:5f:67:c7:10:08:f6: bb:a3:13:6c:2b:27:ad:18:d0:ef:8b:ac:e6:d4:53:ab:3d:be: e7:ca:7d:b5:5d:61:9d:85:81:70:d9:c1:fa:d0:fb:a2:89:03: 46:3d:b9:78:4c:52:16:f9:88:cc:29:8e:a1:07:fc:8a:56:46: 47:93:76:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzlI5UHjUUVIs1CiQ1XECJlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjYwMzEzMDMwMDQwWhcNMjYwMzE0MDMwMDQwWjAzMTEwLwYDVQQD EygxN2JiNTEyMDdhNTUxNWI3ODhiZmM5ZTUxODYwZTE0M2VmYTJjNTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09LnyOSaeDoEPtEYH5niLHsg+5dp AzcvzP5PFiWyZt9mkMg3sds2H+lKfZlt4JAFBxiS0LfWNZjeMggGyI+9Bx7lMqLx td4z4woGzFr+OE2kIfeQmQRr5PGhMIwC23Sj3RGqmpeiOtARvAPmQao6vGBvXOzV Vm0GwauvqJkSMAxWJYgjrD2+12gWF+4RGJ8Q+nnbpzIiaUG5X2qANOFUgEZ1ywxd +ySPN/hFs4BklkqmjtzKs3EzKqZ9X9G90sn5yxZ0S06caKTcMAQ43kn75C7HOkNm fanDuSRsYwfOgsox8QDmMgUhIXmWvkRwm4dDHtWaFzt7nqi4o4sWvzslDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBe7USB6VRW3iL/J5Rhg4UPvosWFMB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUzcbtM8 bieFqfz7UfvrmxfYmzmZFuUr7DiyJls6pu5iYsCTT2Z4ULsm9/RwZ4ItBsgFhxdd p87a8lZ6H6JFyR6QkUm1Czi5ZSGQXFXG4Bj+8IyaRSVbNzBKnE8UTD55OSpqWZnE bzNOzTDlvvgROADI/2EJWdql3kWwW5N551MnGIdgxHb90F9SNvhEgV14ZPP+pLOE +qZv38Y0xnd48zr/9teivbdysszmP2xh0m8rYf4V8rCX4CKXKY5AeUAKX2fHEAj2 u6MTbCsnrRjQ74us5tRTqz2+58p9tV1hnYWBcNnB+tD7ookDRj25eExSFvmIzCmO oQf8ilZGR5N26Q== -----END CERTIFICATE-----Generated at Fri Mar 13 09:28:42 2026 by rpki-client