$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json) Hash identifier: FmK4sT5TfGhfNWFtgF0MvVGHlUCGamk5TQZL5E9WPJY= Subject key identifier: CF:3A:1E:3C:3C:EA:30:9D:D0:5C:F4:F0:3D:77:03:BD:A8:A0:21:B8 Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 019D26CCB416A3BED02498E26BDD7D370DA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft Manifest number: 18B0 Signing time: Wed 25 Mar 2026 21:00:42 +0000 Manifest this update: Wed 25 Mar 2026 21:00:42 +0000 Manifest next update: Thu 26 Mar 2026 21:00:42 +0000 Files and hashes: 1: 1-QrkJ1ReezcgF73EgGbqmxSp9iE.roa (hash: RSa2cTQxNZP76zXoi1N6FVpNx/a7WiCBFEO8rdHSaGo=) 2: GadZnqwNNL6vcO0uNGOaOFXO-5w.roa (hash: WPx0ZxFduASzoEDiUK1PVK0AV5w4NdVYDhxmnMrQPaw=) 3: Kt7Bb9a8NYPt2hdNoCtrivgec60.roa (hash: hZLmp4pyqAJx5mRvIALIF4vmWmI8U/uE03XVLg5S0aE=) 4: QGMHAWeIiva_ANIU0MC7CU9-6f8.roa (hash: 4G0dmujJfspfIapxR+knOukRFXWULsWgi/aWj5BdVi4=) 5: XiIbEnKjYE8MkI8g3bZKNddtCfQ.roa (hash: 969ogNKjx9JV6jK/y8xnBqcJ9Cd0T2enS1wUqhtbhGY=) 6: dGOsV8rB3n2kiiSorQ7C_OLvWso.roa (hash: CfnCuNHVj64xX3Nr1KaQqkMmG3m7OTprs4PyzRWTuhc=) 7: gsGfrYs1utK7SrtoyVPXL783bwM.roa (hash: 1zqi9F+7GRzsZKDlqyActNmPOf78TLbsfJ6f9t5J09A=) 8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: e2v3FdlXEyqYEXvhXCxSkFuI2ChHUdSJq4PpxDNL9eI=) 9: l-WUCYIzfrmbOY4lSlHo4EHYa-0.roa (hash: wRHoNrFNfoLupFB4h8pnue6IATQIBeN3aGRRjbWhTLE=) 10: quXPd4m3roGOFCgsU-cq5zkXqMM.roa (hash: cygguz3JRfVDe2shlN+tdvmvE/mxwD8qbYQvNiz7ASQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 21:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:cc:b4:16:a3:be:d0:24:98:e2:6b:dd:7d:37:0d:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Mar 25 21:00:42 2026 GMT Not After : Mar 26 21:00:42 2026 GMT Subject: CN=cf3a1e3c3cea309dd05cf4f03d7703bda8a021b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f4:ea:88:07:8b:aa:16:1f:ec:9e:7a:1e:0e: 0d:5f:d7:b7:ca:44:df:ee:72:11:c9:e1:ac:37:8a: f9:38:0e:33:5e:85:a0:53:cd:9e:cc:ef:b9:a1:df: 65:ac:d2:ff:fb:1b:f5:ea:16:84:bb:e0:00:d5:2b: e1:98:9c:9a:94:c7:98:34:ab:df:8a:15:23:6d:09: 1f:37:73:ff:25:35:f2:75:63:88:ce:3a:e8:42:7a: 78:62:6c:55:6f:2d:6a:4f:80:fe:82:a8:32:c2:6e: 92:c6:50:fd:9b:07:2d:5f:4e:4c:96:7c:42:fa:17: 3d:6a:4d:ff:55:7d:c8:09:47:5f:94:05:65:00:86: 9c:b7:52:1b:cf:35:cb:63:8d:e9:b0:22:5a:0c:81: 01:3e:6a:33:d1:c8:6e:3a:b0:63:ab:65:40:71:52: fc:72:2e:22:8a:09:21:68:85:47:3b:ea:c6:b6:a6: e7:db:b0:a6:10:0a:e8:a6:bb:0f:fd:d2:1a:e5:9d: 6f:b3:97:9e:53:d2:b6:81:10:f9:9b:1b:9e:7b:b5: da:a3:9f:9f:86:d0:29:5d:72:2f:15:93:4d:14:e8: bc:51:36:cf:91:1c:73:79:79:1c:74:e2:63:8d:ca: 1d:1e:1c:d3:07:ab:3e:9b:cd:35:19:30:03:91:9d: de:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3A:1E:3C:3C:EA:30:9D:D0:5C:F4:F0:3D:77:03:BD:A8:A0:21:B8 X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:6b:0c:97:ef:59:ea:4d:c8:19:ad:b8:e8:5a:1d:72:b6:d5: 69:36:ec:b3:f0:81:59:9e:30:15:93:c5:fa:cd:6a:91:46:f9: a8:c4:15:81:79:b3:03:77:71:ef:db:54:27:d0:8c:e1:9b:8a: 40:2c:89:46:7b:3a:91:a9:4a:e2:54:65:5d:a7:e1:77:ae:44: ae:1b:4a:74:7f:cd:a0:a6:4e:e4:86:bd:40:05:32:a5:b6:3f: f8:34:05:bb:47:f9:ce:0e:bc:c5:9a:4b:d4:74:c3:f3:7e:03: c7:7e:3d:95:50:44:8d:67:99:15:c2:44:d1:ae:1c:66:e8:b4: 43:b2:52:59:a8:03:45:5c:56:55:96:60:ac:81:76:39:57:2d: f5:4c:53:59:d6:79:07:e2:39:44:c2:5e:fb:77:dc:a9:2d:98: f5:3e:d8:1a:7b:24:ea:6f:4f:2e:bc:10:6b:4f:dd:05:e8:cb: 1f:22:b1:36:d8:72:15:c6:ff:4e:39:1f:d8:2d:3d:4f:ba:ac: 14:54:a2:94:56:d9:50:9d:66:9d:d7:29:8a:f4:da:c5:25:14: ab:b8:b1:bc:0c:ed:a5:0f:50:60:08:07:cb:50:93:12:df:21: ad:12:c9:b4:45:e1:7f:ba:30:52:fe:b1:07:32:3b:c5:78:a7: 30:c5:06:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mzLQWo77QJJjia919Nw2jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjYwMzI1MjEwMDQyWhcNMjYwMzI2MjEwMDQyWjAzMTEwLwYDVQQD EyhjZjNhMWUzYzNjZWEzMDlkZDA1Y2Y0ZjAzZDc3MDNiZGE4YTAyMWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPTqiAeLqhYf7J56Hg4NX9e3ykTf 7nIRyeGsN4r5OA4zXoWgU82ezO+5od9lrNL/+xv16haEu+AA1SvhmJyalMeYNKvf ihUjbQkfN3P/JTXydWOIzjroQnp4YmxVby1qT4D+gqgywm6SxlD9mwctX05MlnxC +hc9ak3/VX3ICUdflAVlAIact1IbzzXLY43psCJaDIEBPmoz0chuOrBjq2VAcVL8 ci4iigkhaIVHO+rGtqbn27CmEAroprsP/dIa5Z1vs5eeU9K2gRD5mxuee7Xao5+f htApXXIvFZNNFOi8UTbPkRxzeXkcdOJjjcodHhzTB6s+m801GTADkZ3erwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM86Hjw86jCd0Fz08D13A72ooCG4MB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWsMl+9Z 6k3IGa246FodcrbVaTbss/CBWZ4wFZPF+s1qkUb5qMQVgXmzA3dx79tUJ9CM4ZuK QCyJRns6kalK4lRlXafhd65ErhtKdH/NoKZO5Ia9QAUypbY/+DQFu0f5zg68xZpL 1HTD834Dx349lVBEjWeZFcJE0a4cZui0Q7JSWagDRVxWVZZgrIF2OVct9UxTWdZ5 B+I5RMJe+3fcqS2Y9T7YGnsk6m9PLrwQa0/dBejLHyKxNthyFcb/Tjkf2C09T7qs FFSilFbZUJ1mndcpivTaxSUUq7ixvAztpQ9QYAgHy1CTEt8hrRLJtEXhf7owUv6x BzI7xXinMMUGHQ== -----END CERTIFICATE-----Generated at Thu Mar 26 08:42:34 2026 by rpki-client