
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json)
Hash identifier: GYWUPPVqO9Q+DyRzWXoS9xZvVFQVhLr9gPPCoKu7Jpw=
Subject key identifier: 92:BE:50:86:8E:A5:CF:D4:57:E5:D5:7E:3E:F2:6F:1D:80:D8:61:AB
Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Certificate serial: 01A0CF6CECBFCF45107A2356DB7C78D8B1D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
Manifest number: 16BC
Signing time: Wed 23 Sep 2026 18:00:17 +0000
Manifest this update: Wed 23 Sep 2026 18:00:17 +0000
Manifest next update: Thu 24 Sep 2026 18:00:17 +0000
Files and hashes: 1: 0Id9ZYia89tn9rGbVp1WccKbdLs.roa (hash: H/d3G1LlSq5Lm4RmW5/Q0ROpxkgSnJpVhWwEfjRrmCE=)
2: 4i9ivIesCHsbnVrZP6Me_46hnOo.roa (hash: qu7/9ByyUg/pGlPFs771pDMBYsdYL5/jWLiIBXBq/us=)
3: 5NyfZtZq8I_a22w9fqIDYQ8J3zo.roa (hash: ZXAkN8Owpsubs84/gjn1dQB9OdgtJ+vDayAhe4jgKik=)
4: 9bdi8ZcArF7uIVM_PWOWOKzHAwM.roa (hash: ksm5o6Brqb84qifDdWrqQOIBVSbPQo+Iqz+ko5JrdDE=)
5: AJc1n1WlM_uViiz8P-Q_ZGlrmkI.roa (hash: 5BjqoTSt8ivKeTgUMxzWvODvEYATsy/sKY0BmzBKn2k=)
6: F2qeHQTP3YKUfyoMJ2I6cHyrIBk.roa (hash: FVx/e+sO+XB2wvTGriWONMagJGCQ6hVxISJ0xlebzr0=)
7: GQccrYsGeyc_jz14ZkRPvffaEMY.roa (hash: iZxmpGm8fTch7x8Mf4u1f0OmBwCOdgCfCEjgwepuDV8=)
8: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: frf9zhHCr1Dp9ePHY/B3aFadUdznKQE/tW0CX1cdOmM=)
9: QtPx4ap949xN5arcMJRpZvFzTfM.roa (hash: KaudJcjJFvIdlbff02gWZxLZI4bRcA90hXhml9h/ITE=)
10: khYS0lYDwiX9lTkfE55JUXtp8-s.roa (hash: bmf6tC0bXLVB4qb1Vl64CHJZEDbU89NkLDTPf7Yci6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6c:ec:bf:cf:45:10:7a:23:56:db:7c:78:d8:b1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Validity
Not Before: Sep 23 18:00:17 2026 GMT
Not After : Sep 24 18:00:17 2026 GMT
Subject: CN=92be50868ea5cfd457e5d57e3ef26f1d80d861ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:af:f4:0d:53:95:0d:d1:6a:ce:e6:83:53:0b:
91:bf:d1:78:66:58:51:13:ed:f6:a2:a2:6d:0c:8f:
ca:50:9f:5c:66:0a:96:a1:66:65:b2:cd:37:68:6c:
80:60:73:1d:d1:82:be:be:96:f4:a3:3b:f0:07:ff:
d0:cf:cb:06:af:54:5c:86:6a:71:da:df:9b:bd:c9:
de:0b:66:c4:85:fa:9b:c4:44:8e:28:34:9b:2c:9b:
ba:08:87:a4:e6:96:0d:a9:cb:04:e6:53:53:1e:90:
fd:07:67:e9:a8:39:c4:29:cf:ed:6a:4b:25:61:e8:
62:43:99:2c:46:72:1f:ca:3c:54:ac:f7:50:9a:55:
f2:97:63:d6:92:ca:c7:67:99:85:b1:d4:f8:5d:10:
6b:e3:52:d1:2a:e7:dd:12:38:27:5b:af:41:62:1a:
82:9a:3c:fe:b5:bb:0f:a7:e8:5b:19:bd:55:f5:c3:
21:8a:42:4f:3e:ea:bd:d4:5d:72:00:ac:6f:c0:80:
f6:4b:84:e6:88:26:9c:44:c5:6d:d5:87:10:9d:46:
38:9a:fc:33:e5:e9:78:3c:b5:10:b2:7d:1a:ff:9f:
66:5c:e0:92:c2:34:e3:b8:2e:70:0f:45:d2:c7:bf:
e7:65:06:42:62:b8:67:2b:44:92:c6:42:54:28:60:
e9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BE:50:86:8E:A5:CF:D4:57:E5:D5:7E:3E:F2:6F:1D:80:D8:61:AB
X509v3 Authority Key Identifier:
keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c3:85:35:66:20:cc:61:05:c0:a5:b7:9f:a1:5c:a4:21:f9:
5b:97:09:f7:40:78:8a:af:dd:5a:5e:b8:b5:8c:48:d6:72:d3:
e9:4b:06:5f:e9:d9:46:a7:45:f8:38:08:7a:57:50:76:9f:79:
ba:18:8d:93:c2:68:9f:bb:11:e6:47:6d:64:96:17:2a:23:b5:
09:15:74:f2:14:99:6a:cb:ce:09:a5:7d:f0:5c:a2:38:5e:23:
24:f7:fc:64:94:06:6e:67:cd:da:fe:15:27:30:57:a3:d4:93:
44:76:88:96:d4:40:4b:be:2c:33:68:b3:e7:2b:34:52:9c:d1:
00:62:76:f0:14:f5:76:ff:60:6d:03:c2:e0:1c:6d:b8:28:51:
a2:94:52:e9:72:85:3a:90:cd:af:c8:c3:5a:eb:3d:9e:de:0f:
fa:a2:70:37:cf:e5:38:60:c8:52:4f:e8:25:de:04:2f:94:69:
65:a7:bd:5c:d8:ec:fd:46:32:98:b7:ed:4c:ba:c9:1d:cc:b0:
6a:90:47:47:c7:3f:10:b3:f4:d4:47:5c:f2:57:cb:6a:1b:04:
97:b1:4d:f6:63:3c:4b:e7:43:62:90:55:97:5f:3e:de:24:25:
c8:aa:b5:40:eb:f9:b5:ae:43:69:be:ce:f3:09:d3:23:79:85:
a5:a6:67:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPbOy/z0UQeiNW23x42LHYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi
ZTU3Y2UwHhcNMjYwOTIzMTgwMDE3WhcNMjYwOTI0MTgwMDE3WjAzMTEwLwYDVQQD
Eyg5MmJlNTA4NjhlYTVjZmQ0NTdlNWQ1N2UzZWYyNmYxZDgwZDg2MWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6/0DVOVDdFqzuaDUwuRv9F4ZlhR
E+32oqJtDI/KUJ9cZgqWoWZlss03aGyAYHMd0YK+vpb0ozvwB//Qz8sGr1Rchmpx
2t+bvcneC2bEhfqbxESOKDSbLJu6CIek5pYNqcsE5lNTHpD9B2fpqDnEKc/taksl
YehiQ5ksRnIfyjxUrPdQmlXyl2PWksrHZ5mFsdT4XRBr41LRKufdEjgnW69BYhqC
mjz+tbsPp+hbGb1V9cMhikJPPuq91F1yAKxvwID2S4TmiCacRMVt1YcQnUY4mvwz
5el4PLUQsn0a/59mXOCSwjTjuC5wD0XSx7/nZQZCYrhnK0SSxkJUKGDpZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJK+UIaOpc/UV+XVfj7ybx2A2GGrMB8GA1UdIwQY
MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt
MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl
LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcOFNWYg
zGEFwKW3n6FcpCH5W5cJ90B4iq/dWl64tYxI1nLT6UsGX+nZRqdF+DgIeldQdp95
uhiNk8Jon7sR5kdtZJYXKiO1CRV08hSZasvOCaV98FyiOF4jJPf8ZJQGbmfN2v4V
JzBXo9STRHaIltRAS74sM2iz5ys0UpzRAGJ28BT1dv9gbQPC4BxtuChRopRS6XKF
OpDNr8jDWus9nt4P+qJwN8/lOGDIUk/oJd4EL5RpZae9XNjs/UYymLftTLrJHcyw
apBHR8c/ELP01Edc8lfLahsEl7FN9mM8S+dDYpBVl18+3iQlyKq1QOv5ta5Dab7O
8wnTI3mFpaZnCA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:52:07 2026 by rpki-client