$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json) Hash identifier: MUe23M2nSZ41qDRu6QWaEQ63tXT+oNA7j+BM1aR1jbQ= Subject key identifier: F7:14:0B:36:28:26:86:F6:C2:1C:6D:67:88:DD:F0:51:2B:3C:EE:76 Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 019F90C77E3719E3F5CBE551B10E213F9C0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft Manifest number: 1617 Signing time: Thu 23 Jul 2026 21:00:20 +0000 Manifest this update: Thu 23 Jul 2026 21:00:20 +0000 Manifest next update: Fri 24 Jul 2026 21:00:20 +0000 Files and hashes: 1: 0Id9ZYia89tn9rGbVp1WccKbdLs.roa (hash: H/d3G1LlSq5Lm4RmW5/Q0ROpxkgSnJpVhWwEfjRrmCE=) 2: 4i9ivIesCHsbnVrZP6Me_46hnOo.roa (hash: qu7/9ByyUg/pGlPFs771pDMBYsdYL5/jWLiIBXBq/us=) 3: 5NyfZtZq8I_a22w9fqIDYQ8J3zo.roa (hash: ZXAkN8Owpsubs84/gjn1dQB9OdgtJ+vDayAhe4jgKik=) 4: 9bdi8ZcArF7uIVM_PWOWOKzHAwM.roa (hash: ksm5o6Brqb84qifDdWrqQOIBVSbPQo+Iqz+ko5JrdDE=) 5: AJc1n1WlM_uViiz8P-Q_ZGlrmkI.roa (hash: 5BjqoTSt8ivKeTgUMxzWvODvEYATsy/sKY0BmzBKn2k=) 6: F2qeHQTP3YKUfyoMJ2I6cHyrIBk.roa (hash: FVx/e+sO+XB2wvTGriWONMagJGCQ6hVxISJ0xlebzr0=) 7: GQccrYsGeyc_jz14ZkRPvffaEMY.roa (hash: iZxmpGm8fTch7x8Mf4u1f0OmBwCOdgCfCEjgwepuDV8=) 8: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: O8tEmQCi5TpnaNQHmta5vqOcBXMZo2uJ4YifPHSmHak=) 9: QtPx4ap949xN5arcMJRpZvFzTfM.roa (hash: KaudJcjJFvIdlbff02gWZxLZI4bRcA90hXhml9h/ITE=) 10: khYS0lYDwiX9lTkfE55JUXtp8-s.roa (hash: bmf6tC0bXLVB4qb1Vl64CHJZEDbU89NkLDTPf7Yci6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 21:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:c7:7e:37:19:e3:f5:cb:e5:51:b1:0e:21:3f:9c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Jul 23 21:00:20 2026 GMT Not After : Jul 24 21:00:20 2026 GMT Subject: CN=f7140b36282686f6c21c6d6788ddf0512b3cee76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8b:97:4c:6b:bc:44:2b:55:de:27:75:a4:98: cc:ed:35:b9:0a:22:9b:0c:d3:1b:96:f4:7a:d8:fa: e0:47:16:cb:fa:bb:df:63:b1:0a:bb:78:2d:ae:ff: c6:75:ae:85:43:ea:18:b3:bc:1d:17:7c:21:c7:3b: ff:59:89:e6:66:43:a9:b2:48:8c:51:69:aa:49:fd: 09:58:b0:0e:d9:b5:e4:f9:07:a6:d9:f3:7e:7a:2a: 2d:49:b0:f8:e0:12:09:49:63:c4:5b:24:1e:38:a4: 1a:de:11:6a:7e:0d:17:54:25:ee:f9:33:f5:8e:31: 22:d3:41:45:3a:56:81:32:41:74:e5:d9:17:16:03: 50:b7:4e:ee:42:78:b2:a8:c9:02:3c:24:74:3b:06: 4c:ef:47:8d:44:e8:25:a5:db:be:85:9a:64:81:af: dd:2c:33:26:3b:23:5c:69:4f:d9:86:f7:83:3e:e5: 4b:c9:32:2a:45:3b:2a:3e:8e:a8:75:8f:f0:d3:31: 2a:ec:a6:4d:16:ac:51:5b:b7:54:73:1c:3f:61:67: 12:3e:1f:cd:76:58:cf:3f:dc:c3:04:04:06:e9:b1: 58:b0:77:89:72:96:8f:51:0c:f4:5e:d0:75:44:70: 81:09:ae:e1:d3:19:54:90:e6:f0:8d:65:0f:26:b7: a8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:14:0B:36:28:26:86:F6:C2:1C:6D:67:88:DD:F0:51:2B:3C:EE:76 X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b1:b2:48:cc:2f:ed:0f:b9:7f:d0:7f:fd:e2:8d:76:d7:6f: 9b:2a:47:fb:9b:ee:41:d9:e4:f4:5c:ca:12:6f:87:41:73:cb: 6e:ea:81:08:9d:9e:ac:11:81:a6:4d:10:38:91:f3:4d:2a:56: 40:1b:84:ab:36:90:ae:b3:77:40:9a:f8:2f:3c:d5:66:c9:6c: 2d:16:82:e9:0b:31:85:f7:92:85:c7:0c:7f:e2:2b:26:0a:d6: 71:a7:94:24:12:74:f8:15:28:3b:29:97:3c:18:dc:6c:c6:c4: 2f:de:69:02:a9:a0:49:96:73:1f:5f:1a:a2:cf:08:a2:c6:6f: 42:ca:84:88:a6:1e:04:7f:7d:30:af:69:f7:a0:bb:7f:c1:51: 62:1f:fa:66:1f:e9:2c:a9:6c:4f:09:82:1a:69:9a:25:7c:57: e5:e0:2f:00:f9:8e:af:fc:89:f7:fb:6d:d9:87:c5:4c:92:f5: e7:3a:f0:7b:94:6b:19:51:b1:d4:25:cc:77:98:58:b3:90:86: 2a:7d:65:c1:c1:23:c3:82:38:23:c0:fc:26:95:e0:e9:9f:bc: a9:74:33:6a:37:dc:0b:ba:cf:ed:42:1e:01:fb:7f:7b:9c:be: 4a:49:77:be:dd:d9:26:93:00:b5:9f:23:33:0d:4f:32:9b:4d: af:e4:b0:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Qx343GeP1y+VRsQ4hP5wLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjYwNzIzMjEwMDIwWhcNMjYwNzI0MjEwMDIwWjAzMTEwLwYDVQQD EyhmNzE0MGIzNjI4MjY4NmY2YzIxYzZkNjc4OGRkZjA1MTJiM2NlZTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYuXTGu8RCtV3id1pJjM7TW5CiKb DNMblvR62PrgRxbL+rvfY7EKu3gtrv/Gda6FQ+oYs7wdF3whxzv/WYnmZkOpskiM UWmqSf0JWLAO2bXk+Qem2fN+eiotSbD44BIJSWPEWyQeOKQa3hFqfg0XVCXu+TP1 jjEi00FFOlaBMkF05dkXFgNQt07uQniyqMkCPCR0OwZM70eNROglpdu+hZpkga/d LDMmOyNcaU/ZhveDPuVLyTIqRTsqPo6odY/w0zEq7KZNFqxRW7dUcxw/YWcSPh/N dljPP9zDBAQG6bFYsHeJcpaPUQz0XtB1RHCBCa7h0xlUkObwjWUPJreo6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcUCzYoJob2whxtZ4jd8FErPO52MB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirGySMwv 7Q+5f9B//eKNdtdvmypH+5vuQdnk9FzKEm+HQXPLbuqBCJ2erBGBpk0QOJHzTSpW QBuEqzaQrrN3QJr4LzzVZslsLRaC6QsxhfeShccMf+IrJgrWcaeUJBJ0+BUoOymX PBjcbMbEL95pAqmgSZZzH18aos8IosZvQsqEiKYeBH99MK9p96C7f8FRYh/6Zh/p LKlsTwmCGmmaJXxX5eAvAPmOr/yJ9/tt2YfFTJL15zrwe5RrGVGx1CXMd5hYs5CG Kn1lwcEjw4I4I8D8JpXg6Z+8qXQzajfcC7rP7UIeAft/e5y+Skl3vt3ZJpMAtZ8j Mw1PMptNr+SwOg== -----END CERTIFICATE-----Generated at Fri Jul 24 04:15:53 2026 by rpki-client