$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json) Hash identifier: svSzg4BKww2YSnsTOsNbsrpH90V4lQmfClhRn4V0Xvw= Subject key identifier: 82:3D:B1:4C:CA:9B:A2:DF:DE:BC:5C:F3:6A:31:E4:19:45:E5:40:B8 Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 01A0D15B8FD8C47DBA2D56CE799E5DCA76D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft Manifest number: 16BD Signing time: Thu 24 Sep 2026 03:00:33 +0000 Manifest this update: Thu 24 Sep 2026 03:00:33 +0000 Manifest next update: Fri 25 Sep 2026 03:00:33 +0000 Files and hashes: 1: 0Id9ZYia89tn9rGbVp1WccKbdLs.roa (hash: H/d3G1LlSq5Lm4RmW5/Q0ROpxkgSnJpVhWwEfjRrmCE=) 2: 4i9ivIesCHsbnVrZP6Me_46hnOo.roa (hash: qu7/9ByyUg/pGlPFs771pDMBYsdYL5/jWLiIBXBq/us=) 3: 5NyfZtZq8I_a22w9fqIDYQ8J3zo.roa (hash: ZXAkN8Owpsubs84/gjn1dQB9OdgtJ+vDayAhe4jgKik=) 4: 9bdi8ZcArF7uIVM_PWOWOKzHAwM.roa (hash: ksm5o6Brqb84qifDdWrqQOIBVSbPQo+Iqz+ko5JrdDE=) 5: AJc1n1WlM_uViiz8P-Q_ZGlrmkI.roa (hash: 5BjqoTSt8ivKeTgUMxzWvODvEYATsy/sKY0BmzBKn2k=) 6: F2qeHQTP3YKUfyoMJ2I6cHyrIBk.roa (hash: FVx/e+sO+XB2wvTGriWONMagJGCQ6hVxISJ0xlebzr0=) 7: GQccrYsGeyc_jz14ZkRPvffaEMY.roa (hash: iZxmpGm8fTch7x8Mf4u1f0OmBwCOdgCfCEjgwepuDV8=) 8: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: A/Hv8d+d1mAz2gruFfucj+QuC2teapWhhekPzMkqjbE=) 9: QtPx4ap949xN5arcMJRpZvFzTfM.roa (hash: KaudJcjJFvIdlbff02gWZxLZI4bRcA90hXhml9h/ITE=) 10: khYS0lYDwiX9lTkfE55JUXtp8-s.roa (hash: bmf6tC0bXLVB4qb1Vl64CHJZEDbU89NkLDTPf7Yci6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 03:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d1:5b:8f:d8:c4:7d:ba:2d:56:ce:79:9e:5d:ca:76:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Sep 24 03:00:33 2026 GMT Not After : Sep 25 03:00:33 2026 GMT Subject: CN=823db14cca9ba2dfdebc5cf36a31e41945e540b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e0:00:cc:76:41:ac:60:98:6b:d3:a4:e5:4b: 73:fd:c0:cd:5d:ce:43:07:1a:bf:b2:01:bb:d3:e5: 8c:99:cc:81:58:46:31:9f:b4:b1:72:43:a7:35:63: e3:ef:7d:b6:41:17:e4:c4:74:8a:88:1a:dc:d0:d3: 1c:1a:d6:51:ec:e9:f0:4f:02:72:22:8d:9d:61:fc: a9:2a:60:b6:b4:ae:bc:db:e8:bf:49:0e:32:73:54: e0:da:1d:a0:b2:5f:12:f7:5d:f2:c8:ec:ab:ef:03: a6:6d:35:84:e3:4b:ff:47:7b:4e:2e:ce:12:09:73: de:ed:15:09:90:ea:3b:e7:88:3c:47:c9:eb:58:9d: 7d:39:97:2f:b3:a4:f1:f4:51:bd:a0:b2:56:73:8c: 28:c3:40:1a:bd:9a:23:e4:6d:cb:3b:fc:d5:92:8b: f2:db:4d:bc:66:6b:36:66:b0:6c:94:24:4d:04:e3: a1:e1:b4:ad:73:da:72:70:a0:de:53:5e:d3:2b:e3: 6b:b7:47:bc:55:29:24:21:db:4e:f6:ad:d0:46:cb: 19:13:dc:4f:5c:5c:6a:c3:a7:03:a7:ba:b5:87:eb: 29:78:62:7e:01:8a:7e:88:0d:56:ce:f3:2f:4b:c7: 2b:2d:7d:33:93:74:e7:3f:dc:e4:c6:5d:ef:c3:b7: 33:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3D:B1:4C:CA:9B:A2:DF:DE:BC:5C:F3:6A:31:E4:19:45:E5:40:B8 X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:9f:36:d9:ea:ac:cd:2a:14:e7:51:4d:ca:28:ec:8b:44:95: e1:60:34:71:a4:f4:64:7a:ce:26:73:85:f4:31:b6:08:80:5c: 36:61:68:7c:c8:0a:3e:2f:75:a3:89:77:f6:df:3a:91:24:a3: cb:cb:da:b3:5c:08:b7:1c:48:03:ed:fc:b8:ac:73:ee:a9:f2: be:64:a9:46:e3:8d:d1:7e:f6:0f:7d:b2:6f:9a:c1:e2:c4:8a: 41:f7:65:7d:54:ba:f8:3c:e1:bb:33:2f:08:51:fe:a7:aa:f8: 5b:63:77:7b:f5:6a:7e:64:76:64:c1:d5:bc:b1:0f:fa:bd:8c: 70:f3:c2:be:a7:33:ac:27:6a:64:8a:b8:6b:b7:e8:83:0e:43: d5:0e:f5:56:eb:4b:7a:74:3e:8f:0c:da:d2:8b:19:4c:f7:56: 5e:ce:3e:6a:fe:4a:14:4f:a4:b6:b5:6a:d6:f4:fa:5e:e2:65: 87:75:01:fd:25:84:8a:63:91:3a:d1:07:62:93:d1:06:41:68: 40:5c:4c:74:ef:7d:95:26:0f:63:2d:2c:6f:45:88:5b:90:94: 3d:60:6b:81:4b:4f:c1:7a:1c:13:3b:26:ef:4e:ab:b3:ed:aa: f0:a5:40:08:73:a5:e4:d9:4f:23:5e:34:58:a4:0a:c7:10:24: 76:1f:86:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDRW4/YxH26LVbOeZ5dynbUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjYwOTI0MDMwMDMzWhcNMjYwOTI1MDMwMDMzWjAzMTEwLwYDVQQD Eyg4MjNkYjE0Y2NhOWJhMmRmZGViYzVjZjM2YTMxZTQxOTQ1ZTU0MGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+AAzHZBrGCYa9Ok5Utz/cDNXc5D Bxq/sgG70+WMmcyBWEYxn7SxckOnNWPj7322QRfkxHSKiBrc0NMcGtZR7OnwTwJy Io2dYfypKmC2tK682+i/SQ4yc1Tg2h2gsl8S913yyOyr7wOmbTWE40v/R3tOLs4S CXPe7RUJkOo754g8R8nrWJ19OZcvs6Tx9FG9oLJWc4wow0AavZoj5G3LO/zVkovy 2028Zms2ZrBslCRNBOOh4bStc9pycKDeU17TK+Nrt0e8VSkkIdtO9q3QRssZE9xP XFxqw6cDp7q1h+speGJ+AYp+iA1WzvMvS8crLX0zk3TnP9zkxl3vw7czIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFII9sUzKm6Lf3rxc82ox5BlF5UC4MB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5822eqs zSoU51FNyijsi0SV4WA0caT0ZHrOJnOF9DG2CIBcNmFofMgKPi91o4l39t86kSSj y8vas1wItxxIA+38uKxz7qnyvmSpRuON0X72D32yb5rB4sSKQfdlfVS6+DzhuzMv CFH+p6r4W2N3e/VqfmR2ZMHVvLEP+r2McPPCvqczrCdqZIq4a7fogw5D1Q71VutL enQ+jwza0osZTPdWXs4+av5KFE+ktrVq1vT6XuJlh3UB/SWEimOROtEHYpPRBkFo QFxMdO99lSYPYy0sb0WIW5CUPWBrgUtPwXocEzsm706rs+2q8KVACHOl5NlPI140 WKQKxxAkdh+GGA== -----END CERTIFICATE-----Generated at Thu Sep 24 10:52:43 2026 by rpki-client