$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json) Hash identifier: LaMWwMJ9O6O80xE9iDVVNLMnYGjLyeIR52vOtz6YZdY= Subject key identifier: 9F:70:B7:B1:FE:C6:0C:36:A9:11:3A:A6:0A:93:2B:65:E5:4D:45:CE Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 019E1DFEA7CE8195E81D7975276E11775BC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft Manifest number: 1557 Signing time: Tue 12 May 2026 21:01:28 +0000 Manifest this update: Tue 12 May 2026 21:01:28 +0000 Manifest next update: Wed 13 May 2026 21:01:28 +0000 Files and hashes: 1: 0Id9ZYia89tn9rGbVp1WccKbdLs.roa (hash: H/d3G1LlSq5Lm4RmW5/Q0ROpxkgSnJpVhWwEfjRrmCE=) 2: 4i9ivIesCHsbnVrZP6Me_46hnOo.roa (hash: qu7/9ByyUg/pGlPFs771pDMBYsdYL5/jWLiIBXBq/us=) 3: 5NyfZtZq8I_a22w9fqIDYQ8J3zo.roa (hash: ZXAkN8Owpsubs84/gjn1dQB9OdgtJ+vDayAhe4jgKik=) 4: 9bdi8ZcArF7uIVM_PWOWOKzHAwM.roa (hash: ksm5o6Brqb84qifDdWrqQOIBVSbPQo+Iqz+ko5JrdDE=) 5: AJc1n1WlM_uViiz8P-Q_ZGlrmkI.roa (hash: 5BjqoTSt8ivKeTgUMxzWvODvEYATsy/sKY0BmzBKn2k=) 6: F2qeHQTP3YKUfyoMJ2I6cHyrIBk.roa (hash: FVx/e+sO+XB2wvTGriWONMagJGCQ6hVxISJ0xlebzr0=) 7: GQccrYsGeyc_jz14ZkRPvffaEMY.roa (hash: iZxmpGm8fTch7x8Mf4u1f0OmBwCOdgCfCEjgwepuDV8=) 8: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: GdX31qD71eVLCHW/60Nyd7dnCRhrh12+oJPQ97W9Sb8=) 9: QtPx4ap949xN5arcMJRpZvFzTfM.roa (hash: KaudJcjJFvIdlbff02gWZxLZI4bRcA90hXhml9h/ITE=) 10: khYS0lYDwiX9lTkfE55JUXtp8-s.roa (hash: bmf6tC0bXLVB4qb1Vl64CHJZEDbU89NkLDTPf7Yci6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:fe:a7:ce:81:95:e8:1d:79:75:27:6e:11:77:5b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: May 12 21:01:28 2026 GMT Not After : May 13 21:01:28 2026 GMT Subject: CN=9f70b7b1fec60c36a9113aa60a932b65e54d45ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8b:29:2d:fa:55:a9:d9:c8:a4:96:9e:d6:87: 22:96:b2:de:13:d3:47:1f:ba:00:04:5a:6f:f6:dd: 63:01:2a:e4:16:1d:88:e2:44:f9:f8:e6:a6:f7:89: 59:a1:21:c2:45:e8:01:0e:2a:42:cc:c3:dc:5e:83: 40:6b:b9:e2:b5:8f:af:c2:3a:94:5e:91:a0:96:9e: 2f:66:21:65:34:fe:de:17:0b:1c:73:1f:81:f9:5c: 82:a3:88:20:bb:86:3b:4e:df:d8:a3:de:57:9f:50: a0:63:59:bf:4c:c3:eb:7e:60:41:28:15:a4:d8:1d: 51:88:13:e6:db:5b:ab:b0:23:98:3b:02:ac:2a:9a: 7a:5b:71:94:85:75:3b:02:d7:70:2a:37:d4:cc:8d: ac:13:4d:35:ec:7c:76:74:4f:e8:7e:e1:d8:8b:02: 9f:40:d1:e5:40:62:c8:59:92:20:4f:bd:d1:bf:38: 41:f6:42:89:2a:2a:9c:d9:06:ef:88:91:25:b7:b1: f3:53:b9:bc:78:53:5c:c6:7f:4e:a2:45:04:ae:a4: 1c:f4:37:8b:3c:3b:85:b0:8e:f8:32:bb:13:62:8e: 90:72:8d:1a:aa:c1:e1:e4:a7:4b:1c:cf:41:64:31: 07:0a:91:a2:e0:82:47:d9:a3:5c:af:e5:4d:13:1f: 27:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:70:B7:B1:FE:C6:0C:36:A9:11:3A:A6:0A:93:2B:65:E5:4D:45:CE X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:25:b8:5c:b0:19:0e:ae:27:e9:dd:a6:d2:38:50:77:08:a1: 22:2c:6a:65:e6:93:c5:c4:35:d9:29:03:10:49:28:3a:55:56: 27:d5:02:34:0c:f3:cc:c9:e7:19:1c:e1:93:a5:6c:df:6c:ed: da:7e:86:99:31:4a:1f:b4:26:14:74:72:25:2c:87:74:56:e9: 46:c5:1d:38:b9:ef:ed:68:53:d9:bf:f6:ae:a9:8a:b5:35:ee: 0f:26:19:38:a5:92:28:d0:be:7d:64:26:1d:3f:8b:77:07:12: 53:9a:26:6a:31:ed:d3:db:81:a0:51:0f:cd:78:6d:da:01:a2: bb:bf:a1:2d:03:54:f8:19:fe:51:b6:72:3f:43:aa:16:c0:9f: 17:d8:53:f3:33:29:f4:05:04:8c:8d:80:b9:96:cf:f4:a6:a6: 3a:53:88:81:49:87:41:28:9e:c8:43:17:41:f3:8e:bd:6b:e9: 2f:62:9b:1a:68:c7:0a:72:c7:36:fa:ef:a9:56:47:6d:e0:c9: 11:0a:6f:5c:db:9c:83:b9:7f:7c:b6:e9:0f:bc:8b:b8:22:01: ea:ec:aa:2c:9a:be:f4:22:88:b6:31:47:ba:be:86:30:20:2f: 39:e6:95:c2:02:8e:58:51:aa:d9:e1:76:75:a8:f1:f3:21:31: b2:52:06:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4d/qfOgZXoHXl1J24Rd1vBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjYwNTEyMjEwMTI4WhcNMjYwNTEzMjEwMTI4WjAzMTEwLwYDVQQD Eyg5ZjcwYjdiMWZlYzYwYzM2YTkxMTNhYTYwYTkzMmI2NWU1NGQ0NWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYspLfpVqdnIpJae1ocilrLeE9NH H7oABFpv9t1jASrkFh2I4kT5+Oam94lZoSHCRegBDipCzMPcXoNAa7nitY+vwjqU XpGglp4vZiFlNP7eFwsccx+B+VyCo4ggu4Y7Tt/Yo95Xn1CgY1m/TMPrfmBBKBWk 2B1RiBPm21ursCOYOwKsKpp6W3GUhXU7AtdwKjfUzI2sE0017Hx2dE/ofuHYiwKf QNHlQGLIWZIgT73RvzhB9kKJKiqc2QbviJElt7HzU7m8eFNcxn9OokUErqQc9DeL PDuFsI74MrsTYo6Qco0aqsHh5KdLHM9BZDEHCpGi4IJH2aNcr+VNEx8nVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9wt7H+xgw2qRE6pgqTK2XlTUXOMB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiW4XLAZ Dq4n6d2m0jhQdwihIixqZeaTxcQ12SkDEEkoOlVWJ9UCNAzzzMnnGRzhk6Vs32zt 2n6GmTFKH7QmFHRyJSyHdFbpRsUdOLnv7WhT2b/2rqmKtTXuDyYZOKWSKNC+fWQm HT+LdwcSU5omajHt09uBoFEPzXht2gGiu7+hLQNU+Bn+UbZyP0OqFsCfF9hT8zMp 9AUEjI2AuZbP9KamOlOIgUmHQSieyEMXQfOOvWvpL2KbGmjHCnLHNvrvqVZHbeDJ EQpvXNucg7l/fLbpD7yLuCIB6uyqLJq+9CKItjFHur6GMCAvOeaVwgKOWFGq2eF2 dajx8yExslIGcw== -----END CERTIFICATE-----Generated at Wed May 13 01:09:54 2026 by rpki-client