
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json)
Hash identifier: 4Hg2oCwu0EqDUahDNSoTTowxgH2/AlxOfCyTA5i3hu8=
Subject key identifier: AB:86:A1:A7:09:B2:2D:0C:60:94:7A:E8:68:73:C6:AE:AC:D3:C6:5A
Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Certificate serial: 01A1DBDD2A081D3E411B5D2C0B5925BAA784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
Manifest number: 1747
Signing time: Sat 14 Nov 2026 21:01:06 +0000
Manifest this update: Sat 14 Nov 2026 21:01:06 +0000
Manifest next update: Sun 15 Nov 2026 21:01:06 +0000
Files and hashes: 1: 0Id9ZYia89tn9rGbVp1WccKbdLs.roa (hash: H/d3G1LlSq5Lm4RmW5/Q0ROpxkgSnJpVhWwEfjRrmCE=)
2: 4i9ivIesCHsbnVrZP6Me_46hnOo.roa (hash: qu7/9ByyUg/pGlPFs771pDMBYsdYL5/jWLiIBXBq/us=)
3: 5NyfZtZq8I_a22w9fqIDYQ8J3zo.roa (hash: ZXAkN8Owpsubs84/gjn1dQB9OdgtJ+vDayAhe4jgKik=)
4: 9bdi8ZcArF7uIVM_PWOWOKzHAwM.roa (hash: ksm5o6Brqb84qifDdWrqQOIBVSbPQo+Iqz+ko5JrdDE=)
5: AJc1n1WlM_uViiz8P-Q_ZGlrmkI.roa (hash: 5BjqoTSt8ivKeTgUMxzWvODvEYATsy/sKY0BmzBKn2k=)
6: F2qeHQTP3YKUfyoMJ2I6cHyrIBk.roa (hash: FVx/e+sO+XB2wvTGriWONMagJGCQ6hVxISJ0xlebzr0=)
7: GQccrYsGeyc_jz14ZkRPvffaEMY.roa (hash: iZxmpGm8fTch7x8Mf4u1f0OmBwCOdgCfCEjgwepuDV8=)
8: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: Qmdf7THXgoYUWX3K9u2cXAOWKLUYXxdZMEnhfyg2B2Q=)
9: QtPx4ap949xN5arcMJRpZvFzTfM.roa (hash: KaudJcjJFvIdlbff02gWZxLZI4bRcA90hXhml9h/ITE=)
10: khYS0lYDwiX9lTkfE55JUXtp8-s.roa (hash: bmf6tC0bXLVB4qb1Vl64CHJZEDbU89NkLDTPf7Yci6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:dd:2a:08:1d:3e:41:1b:5d:2c:0b:59:25:ba:a7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Validity
Not Before: Nov 14 21:01:06 2026 GMT
Not After : Nov 15 21:01:06 2026 GMT
Subject: CN=ab86a1a709b22d0c60947ae86873c6aeacd3c65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:57:0b:37:cc:10:3e:a4:1b:05:90:b9:ad:9c:
e0:db:05:c5:89:a7:70:e8:ca:87:5f:04:24:26:a7:
b5:fe:c8:01:35:f4:1e:31:52:5a:5a:47:14:ec:43:
27:26:5a:d9:6e:9d:a5:75:45:d1:17:0f:42:91:93:
fe:86:b1:ba:7f:a7:6e:87:61:c9:14:de:e1:04:94:
f8:ed:28:9c:0a:75:cf:57:f2:60:d8:12:60:75:01:
32:e3:59:49:2f:a5:07:8f:de:96:63:58:d1:aa:6d:
ba:35:97:0f:ca:bd:d4:02:72:c1:d5:9e:71:65:a1:
93:b2:e9:a1:54:c8:4f:51:63:9f:0c:81:40:04:29:
b1:61:a7:e3:72:bc:d1:26:6d:a6:de:5e:19:a9:b0:
a6:9a:a8:8a:ae:ce:7c:a0:5a:eb:68:62:9a:7f:aa:
b7:a2:f4:44:e1:d0:bb:2d:1a:b3:64:37:6f:de:f3:
18:43:8d:4a:97:91:f1:7a:bd:7c:6f:66:62:f2:c4:
52:b1:e8:db:4f:5a:2d:dc:3e:f8:6c:d1:e2:1f:62:
d8:38:d3:bb:23:73:95:12:68:95:97:48:19:e3:4a:
d2:b0:1c:51:cf:44:b2:8d:15:75:7b:fd:6a:fb:79:
74:e8:fa:36:7e:97:53:c9:a5:38:5a:66:90:a7:2f:
2c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:86:A1:A7:09:B2:2D:0C:60:94:7A:E8:68:73:C6:AE:AC:D3:C6:5A
X509v3 Authority Key Identifier:
keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:db:e9:43:9f:5b:ad:b4:23:b6:82:78:98:60:86:8b:42:56:
c3:eb:fb:38:a3:91:9f:8d:97:fa:59:2b:56:db:a3:ee:e0:b9:
80:0d:d2:00:62:42:10:7c:06:87:0e:c7:66:9a:2d:03:2b:a5:
da:c6:dc:72:d1:2e:a7:0f:db:07:e3:98:56:d8:14:65:33:fb:
d8:64:44:aa:be:a8:e2:25:10:fe:a7:51:8b:6b:1a:60:d1:80:
89:50:7c:ef:41:36:2b:23:0c:cf:f3:be:f9:39:3b:9e:db:9b:
b5:b7:01:62:ee:38:4a:ad:34:9f:5e:ba:90:0c:b7:1f:b4:db:
d6:6b:21:99:d4:a2:42:47:15:0d:2a:55:a9:a7:1f:68:ca:30:
df:e2:4c:92:f7:ed:52:cb:87:a2:d5:66:c0:77:7f:c6:80:90:
96:8f:05:9e:77:96:83:15:07:68:fe:e9:e1:5f:1b:2c:42:83:
90:e3:fc:69:9f:8d:c3:83:14:38:d8:fa:04:24:bc:14:32:28:
ee:fa:1a:4c:06:c9:87:b7:c6:69:a5:04:73:0a:84:c1:e9:a5:
45:92:d4:a5:e9:aa:95:43:16:a8:18:94:3d:bc:ab:cc:43:93:
01:ae:de:37:a9:6a:e6:f1:5c:3b:58:da:68:37:6f:3a:2c:a8:
59:3d:7b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:30:38 2026 by rpki-client