
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json)
Hash identifier: 2WjGr41OEBTD2Wdws1nExU98ZVeQkfMp0yBc7T2dZiA=
Subject key identifier: D2:FE:46:7E:22:43:36:EC:35:43:E3:3A:9D:C7:86:B5:01:A7:58:55
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 01A0CEC82398AC61A1746078E9E14FE98784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
Manifest number: 1A96
Signing time: Wed 23 Sep 2026 15:00:17 +0000
Manifest this update: Wed 23 Sep 2026 15:00:17 +0000
Manifest next update: Thu 24 Sep 2026 15:00:17 +0000
Files and hashes: 1: 8-hboCP-U8Wk9qtGn0IWpFqelRc.roa (hash: j5xldAU1MujpYVAZwSnjN9dxcpWX63Cij0SbzlZlEHU=)
2: GadZnqwNNL6vcO0uNGOaOFXO-5w.roa (hash: WPx0ZxFduASzoEDiUK1PVK0AV5w4NdVYDhxmnMrQPaw=)
3: Kt7Bb9a8NYPt2hdNoCtrivgec60.roa (hash: hZLmp4pyqAJx5mRvIALIF4vmWmI8U/uE03XVLg5S0aE=)
4: QGMHAWeIiva_ANIU0MC7CU9-6f8.roa (hash: 4G0dmujJfspfIapxR+knOukRFXWULsWgi/aWj5BdVi4=)
5: XiIbEnKjYE8MkI8g3bZKNddtCfQ.roa (hash: 969ogNKjx9JV6jK/y8xnBqcJ9Cd0T2enS1wUqhtbhGY=)
6: dGOsV8rB3n2kiiSorQ7C_OLvWso.roa (hash: CfnCuNHVj64xX3Nr1KaQqkMmG3m7OTprs4PyzRWTuhc=)
7: gsGfrYs1utK7SrtoyVPXL783bwM.roa (hash: 1zqi9F+7GRzsZKDlqyActNmPOf78TLbsfJ6f9t5J09A=)
8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: /ZTKxeFbqHhAZyNXV7gK/MyaV7sHfEBCrugm29myuec=)
9: l-WUCYIzfrmbOY4lSlHo4EHYa-0.roa (hash: wRHoNrFNfoLupFB4h8pnue6IATQIBeN3aGRRjbWhTLE=)
10: quXPd4m3roGOFCgsU-cq5zkXqMM.roa (hash: cygguz3JRfVDe2shlN+tdvmvE/mxwD8qbYQvNiz7ASQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:23:98:ac:61:a1:74:60:78:e9:e1:4f:e9:87:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Sep 23 15:00:17 2026 GMT
Not After : Sep 24 15:00:17 2026 GMT
Subject: CN=d2fe467e224336ec3543e33a9dc786b501a75855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:94:cb:a9:87:40:a4:f4:bb:1e:61:f5:8d:e1:
80:d4:27:a7:e3:65:09:37:26:86:1e:80:b1:a7:3c:
f6:c4:40:6c:e4:86:b2:7a:5e:64:a0:73:4c:c1:9a:
ff:07:15:f3:82:94:e4:b5:2f:bf:cc:98:4c:82:a7:
da:8f:e0:59:b1:11:ef:18:32:f4:18:ae:30:d5:95:
4c:71:31:6c:83:8c:2b:d4:1d:a0:ca:96:71:1c:b1:
ff:7c:fd:ab:05:47:e5:59:e1:8b:9b:f5:d1:a9:fb:
56:66:27:85:38:5d:05:0c:4e:3a:2e:9e:b3:d9:3d:
b0:3c:47:d3:3c:9c:2b:5d:24:84:cd:30:e2:76:6a:
61:62:e1:66:32:d6:43:74:97:63:8d:13:a5:11:4b:
22:87:ce:60:f3:da:e0:33:2d:dc:ce:a9:54:e2:d4:
78:2c:0f:3a:02:8e:40:b4:d5:76:67:b3:e5:aa:f0:
99:bb:5a:a1:91:50:bf:a1:ca:ce:f7:f9:87:2b:90:
9f:30:64:96:ad:1d:b2:03:22:ed:09:b5:dc:ff:66:
81:99:bd:ed:0f:87:0b:4e:13:51:c8:74:f9:ee:41:
24:44:cc:9b:1a:90:95:39:72:12:b2:ec:2d:b6:f4:
46:29:b8:55:76:8f:2a:38:cd:b4:fd:50:b5:e3:a9:
fb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FE:46:7E:22:43:36:EC:35:43:E3:3A:9D:C7:86:B5:01:A7:58:55
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:43:73:88:61:01:38:e3:fe:da:89:00:da:e7:34:18:12:2e:
65:a3:07:2f:9e:3e:20:ba:1e:c8:45:26:ab:7c:f0:fd:2d:dd:
2b:92:2e:8d:0b:83:e8:b3:b6:bf:40:2e:6a:50:17:74:3f:10:
bd:de:4a:03:50:9f:9c:26:06:23:ff:cd:15:59:85:80:4b:5b:
87:06:a3:a6:eb:01:b2:e5:81:dd:5f:1e:2c:e4:67:6b:3b:b5:
bf:0b:4c:72:5a:fc:2d:af:1b:10:0f:49:9c:86:42:cf:e4:0e:
b0:e0:70:3f:e3:1b:79:72:af:54:59:f4:46:1e:b8:11:46:b4:
fc:1b:69:2b:f9:5a:75:c9:15:8b:f3:12:27:a0:01:ff:1b:b5:
9e:e1:eb:cb:23:47:1c:3c:4b:8f:ef:42:e6:25:4f:57:d7:b8:
ff:79:1d:34:61:2d:a2:22:0b:38:d3:01:82:da:d4:73:d2:70:
35:12:79:fb:ca:cc:79:38:9c:5a:18:62:78:3e:b0:8e:38:77:
bb:e2:35:6e:42:e9:31:67:ec:f3:ff:2e:fa:3c:bb:77:36:48:
34:5b:36:e1:dd:2b:fd:c7:32:f2:2a:ff:bc:bc:ca:c2:39:5b:
c0:1b:d4:ac:f7:b8:c5:f4:72:77:39:32:02:c8:e4:e2:85:a0:
bd:fc:46:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:37:49 2026 by rpki-client