$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json) Hash identifier: rSf2aRBIoOKbczuO0SdCYNNkr6lXY8PGwNWOV9wq6PA= Subject key identifier: 47:8A:9D:AC:EC:CC:D9:BA:FF:4B:D8:BA:7B:2D:45:3E:64:DA:BD:DD Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 019F8ED92CD3CA9C4DBCF92352B522C2CEC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft Manifest number: 19EF Signing time: Thu 23 Jul 2026 12:00:25 +0000 Manifest this update: Thu 23 Jul 2026 12:00:25 +0000 Manifest next update: Fri 24 Jul 2026 12:00:25 +0000 Files and hashes: 1: 1-QrkJ1ReezcgF73EgGbqmxSp9iE.roa (hash: RSa2cTQxNZP76zXoi1N6FVpNx/a7WiCBFEO8rdHSaGo=) 2: GadZnqwNNL6vcO0uNGOaOFXO-5w.roa (hash: WPx0ZxFduASzoEDiUK1PVK0AV5w4NdVYDhxmnMrQPaw=) 3: Kt7Bb9a8NYPt2hdNoCtrivgec60.roa (hash: hZLmp4pyqAJx5mRvIALIF4vmWmI8U/uE03XVLg5S0aE=) 4: QGMHAWeIiva_ANIU0MC7CU9-6f8.roa (hash: 4G0dmujJfspfIapxR+knOukRFXWULsWgi/aWj5BdVi4=) 5: XiIbEnKjYE8MkI8g3bZKNddtCfQ.roa (hash: 969ogNKjx9JV6jK/y8xnBqcJ9Cd0T2enS1wUqhtbhGY=) 6: dGOsV8rB3n2kiiSorQ7C_OLvWso.roa (hash: CfnCuNHVj64xX3Nr1KaQqkMmG3m7OTprs4PyzRWTuhc=) 7: gsGfrYs1utK7SrtoyVPXL783bwM.roa (hash: 1zqi9F+7GRzsZKDlqyActNmPOf78TLbsfJ6f9t5J09A=) 8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: gfhWg2puahhvxGB1CA+48fAFj219nX/GZlYvuNpJinw=) 9: l-WUCYIzfrmbOY4lSlHo4EHYa-0.roa (hash: wRHoNrFNfoLupFB4h8pnue6IATQIBeN3aGRRjbWhTLE=) 10: quXPd4m3roGOFCgsU-cq5zkXqMM.roa (hash: cygguz3JRfVDe2shlN+tdvmvE/mxwD8qbYQvNiz7ASQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 12:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8e:d9:2c:d3:ca:9c:4d:bc:f9:23:52:b5:22:c2:ce:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Jul 23 12:00:25 2026 GMT Not After : Jul 24 12:00:25 2026 GMT Subject: CN=478a9dacecccd9baff4bd8ba7b2d453e64dabddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:79:47:41:b1:0a:f7:18:8c:ef:8e:04:a1:24: 2b:4c:e6:c4:0d:bf:82:d9:9c:67:02:9d:6c:25:6b: df:0a:0c:85:31:56:55:a3:5a:e4:19:7b:65:f0:c9: e2:97:84:7c:58:d8:1d:4b:09:5c:c5:b8:ae:d4:8c: 5e:bc:e9:ba:8d:f2:bc:48:e8:a4:1d:69:f7:a0:a9: a7:0e:61:3f:1f:33:16:7e:a2:cd:0e:65:69:c2:d3: 1c:db:6e:bc:12:d8:a0:df:01:f3:45:1b:27:68:35: 21:82:a9:8a:5a:ae:0a:0d:ce:76:e3:d8:fc:5b:cd: b1:b6:eb:b3:3a:95:06:34:d9:86:23:44:f7:c5:95: 28:0d:58:80:30:2e:82:6f:da:3d:c3:74:29:7f:82: 1d:f2:e2:ca:b6:75:2c:10:4b:4a:51:23:99:cb:2d: bb:80:da:e2:8d:aa:42:ea:87:a4:b5:ae:5d:c0:a7: fa:45:fc:b9:75:9c:e7:2d:f3:58:8e:98:7a:79:e9: ee:eb:ac:bd:e4:74:9d:7c:8b:60:97:92:5b:0d:73: 47:39:ad:f7:c4:7a:7c:12:cf:56:e4:c7:c4:9e:c8: ca:14:28:e5:58:69:d7:4a:cf:ea:1a:37:ec:27:1d: 93:db:54:f6:d1:3c:26:62:d2:4b:83:ae:4c:1c:48: bb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8A:9D:AC:EC:CC:D9:BA:FF:4B:D8:BA:7B:2D:45:3E:64:DA:BD:DD X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:a8:05:eb:e0:13:ad:a4:13:62:ce:df:f2:1e:82:a4:7b:91: 2e:e9:a6:3e:9c:23:20:1e:57:b5:8a:2e:51:40:34:a2:64:9b: 25:be:ae:a6:e8:d1:01:27:31:18:89:b7:f1:75:36:37:46:4e: 88:93:36:c6:f9:ce:ae:c6:67:ba:bc:68:0f:f2:11:1f:8a:4f: 99:5f:4b:b4:99:ee:04:4c:65:44:97:47:de:4d:48:52:5a:05: 38:56:6b:31:9a:ab:2b:b8:d6:3d:47:9b:67:c1:c2:4b:bf:de: ab:37:9f:c5:a8:ef:09:20:a1:96:01:d6:30:f1:61:65:2d:4a: 32:35:03:b5:9c:14:93:9c:53:49:c0:de:a0:03:5d:e0:a1:9f: 31:0d:43:2e:73:c6:f0:1b:ef:6b:e7:23:b0:cf:e9:03:c2:ac: 27:26:63:6f:f2:8d:e2:ca:ab:52:e5:c0:c3:fa:76:28:bf:d0: 8c:7b:1f:aa:80:25:7b:3a:5c:e9:f6:59:48:16:da:9c:d1:6c: 94:66:5e:1a:30:e8:ad:c5:98:6a:9a:e6:d7:c4:b7:ed:b5:26: 8e:3d:9a:17:37:54:57:2a:72:b2:81:c5:52:f5:d9:7b:4b:b7: 78:96:cf:d2:94:64:b7:17:e8:6c:56:e2:74:0b:6f:a2:8a:6a: 7b:95:73:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+O2SzTypxNvPkjUrUiws7DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjYwNzIzMTIwMDI1WhcNMjYwNzI0MTIwMDI1WjAzMTEwLwYDVQQD Eyg0NzhhOWRhY2VjY2NkOWJhZmY0YmQ4YmE3YjJkNDUzZTY0ZGFiZGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnlHQbEK9xiM744EoSQrTObEDb+C 2ZxnAp1sJWvfCgyFMVZVo1rkGXtl8Mnil4R8WNgdSwlcxbiu1IxevOm6jfK8SOik HWn3oKmnDmE/HzMWfqLNDmVpwtMc2268Etig3wHzRRsnaDUhgqmKWq4KDc5249j8 W82xtuuzOpUGNNmGI0T3xZUoDViAMC6Cb9o9w3Qpf4Id8uLKtnUsEEtKUSOZyy27 gNrijapC6oekta5dwKf6Rfy5dZznLfNYjph6eenu66y95HSdfItgl5JbDXNHOa33 xHp8Es9W5MfEnsjKFCjlWGnXSs/qGjfsJx2T21T20TwmYtJLg65MHEi7zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeKnazszNm6/0vYunstRT5k2r3dMB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYagF6+AT raQTYs7f8h6CpHuRLummPpwjIB5XtYouUUA0omSbJb6upujRAScxGIm38XU2N0ZO iJM2xvnOrsZnurxoD/IRH4pPmV9LtJnuBExlRJdH3k1IUloFOFZrMZqrK7jWPUeb Z8HCS7/eqzefxajvCSChlgHWMPFhZS1KMjUDtZwUk5xTScDeoANd4KGfMQ1DLnPG 8Bvva+cjsM/pA8KsJyZjb/KN4sqrUuXAw/p2KL/QjHsfqoAlezpc6fZZSBbanNFs lGZeGjDorcWYaprm18S37bUmjj2aFzdUVypysoHFUvXZe0u3eJbP0pRktxfobFbi dAtvoopqe5VzPA== -----END CERTIFICATE-----Generated at Thu Jul 23 20:26:41 2026 by rpki-client