$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json) Hash identifier: jsdXO25lDl0NZcLEnj/GqCqm7LWUtw7gAegr0zyYY8U= Subject key identifier: 6B:E4:EC:CA:5E:9E:5C:DC:CB:67:17:A9:84:75:BF:59:2F:C4:B4:48 Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 019D26CCA7FB0B59C4BC198977ED09E663AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft Manifest number: 14D7 Signing time: Wed 25 Mar 2026 21:00:39 +0000 Manifest this update: Wed 25 Mar 2026 21:00:39 +0000 Manifest next update: Thu 26 Mar 2026 21:00:39 +0000 Files and hashes: 1: 0Id9ZYia89tn9rGbVp1WccKbdLs.roa (hash: H/d3G1LlSq5Lm4RmW5/Q0ROpxkgSnJpVhWwEfjRrmCE=) 2: 4i9ivIesCHsbnVrZP6Me_46hnOo.roa (hash: qu7/9ByyUg/pGlPFs771pDMBYsdYL5/jWLiIBXBq/us=) 3: 5NyfZtZq8I_a22w9fqIDYQ8J3zo.roa (hash: ZXAkN8Owpsubs84/gjn1dQB9OdgtJ+vDayAhe4jgKik=) 4: 9bdi8ZcArF7uIVM_PWOWOKzHAwM.roa (hash: ksm5o6Brqb84qifDdWrqQOIBVSbPQo+Iqz+ko5JrdDE=) 5: AJc1n1WlM_uViiz8P-Q_ZGlrmkI.roa (hash: 5BjqoTSt8ivKeTgUMxzWvODvEYATsy/sKY0BmzBKn2k=) 6: F2qeHQTP3YKUfyoMJ2I6cHyrIBk.roa (hash: FVx/e+sO+XB2wvTGriWONMagJGCQ6hVxISJ0xlebzr0=) 7: GQccrYsGeyc_jz14ZkRPvffaEMY.roa (hash: iZxmpGm8fTch7x8Mf4u1f0OmBwCOdgCfCEjgwepuDV8=) 8: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: pKJRxvuq/ztZ1lyGAwkCp8wgKISaju6CqIxG1hVKFL8=) 9: QtPx4ap949xN5arcMJRpZvFzTfM.roa (hash: KaudJcjJFvIdlbff02gWZxLZI4bRcA90hXhml9h/ITE=) 10: khYS0lYDwiX9lTkfE55JUXtp8-s.roa (hash: bmf6tC0bXLVB4qb1Vl64CHJZEDbU89NkLDTPf7Yci6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:cc:a7:fb:0b:59:c4:bc:19:89:77:ed:09:e6:63:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Mar 25 21:00:39 2026 GMT Not After : Mar 26 21:00:39 2026 GMT Subject: CN=6be4ecca5e9e5cdccb6717a98475bf592fc4b448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:03:23:72:0a:bd:fe:4d:dd:9a:6f:07:06:7a: 20:b7:13:4c:b7:ef:36:c1:0f:03:f9:1c:5c:01:86: cf:fc:10:38:71:b8:0e:be:7e:c1:3f:6d:c6:9c:31: 1d:43:eb:93:b7:7b:7d:0e:6d:61:4f:45:45:1f:ee: 54:bd:95:e0:7c:66:d4:21:67:8a:e4:90:12:67:f6: ec:70:51:67:86:88:3c:d8:62:69:ac:c2:42:39:05: 05:90:f6:34:7a:f6:b2:19:85:97:58:d6:63:4c:4f: cf:7f:98:a5:e6:07:0f:bc:f7:01:d0:2f:5f:4e:00: 7c:6c:8e:e5:96:fb:71:b2:f3:40:7f:a8:41:83:f1: 6e:99:2f:92:c3:69:84:c3:51:a5:40:64:44:e0:fb: c8:6c:90:9c:b3:15:8d:18:fb:e8:b3:d7:4b:fb:52: 0e:9e:54:b5:39:15:3a:b4:9d:86:6e:ce:e9:2a:c1: 16:0b:81:91:64:bd:6e:0a:65:64:ba:80:dc:e0:6d: 44:33:fa:dc:45:5b:9c:2f:6a:58:61:f3:63:8e:00: c2:f9:b4:0a:36:86:90:90:35:a5:cc:49:f0:30:c8: 36:46:8d:bd:0a:d2:dc:0b:58:81:c1:65:88:61:5c: 92:b9:97:98:e3:95:ba:55:34:c1:0a:72:b6:0c:68: fc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E4:EC:CA:5E:9E:5C:DC:CB:67:17:A9:84:75:BF:59:2F:C4:B4:48 X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:42:d4:ec:b0:61:2a:94:4e:43:33:c4:18:5b:29:18:83:28: bc:96:03:59:1b:d5:7a:ad:bd:55:2d:ea:55:53:3e:21:76:be: 7b:54:46:0b:30:82:0c:14:59:03:ab:f5:1e:f3:02:d6:cf:ff: 7f:3a:86:02:2a:45:8e:65:7b:ac:16:78:7b:84:f8:6b:0d:68: 36:b2:30:78:0c:b3:70:09:83:50:60:ec:5c:2e:29:62:d1:2a: b9:e2:a8:38:ba:91:94:ce:20:c1:a9:d9:c4:40:cb:1a:35:ca: 5e:b1:dc:0a:c5:d7:e2:d1:c0:6e:b4:34:15:73:04:20:62:48: 93:07:e0:65:95:c8:35:da:e0:ff:0a:55:e2:f9:7a:31:07:02: 14:de:88:44:09:a7:85:e0:72:b8:e2:40:e4:21:15:d6:46:96: 11:15:8d:19:66:34:0c:ad:3a:c4:39:8c:73:c0:83:2f:a3:7b: e8:9c:4f:98:08:5e:d9:df:24:94:20:9c:09:47:65:8b:e8:04: c3:3e:09:71:fb:e2:69:f4:b2:56:74:bd:f2:1d:ce:b1:b2:84: 84:50:9f:bb:03:60:38:4a:4c:9d:05:1b:21:73:cf:17:de:6d: eb:e4:4e:ba:e4:ae:00:d0:a0:f6:0d:9b:eb:94:b7:67:3f:e6: ab:30:83:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mzKf7C1nEvBmJd+0J5mOqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjYwMzI1MjEwMDM5WhcNMjYwMzI2MjEwMDM5WjAzMTEwLwYDVQQD Eyg2YmU0ZWNjYTVlOWU1Y2RjY2I2NzE3YTk4NDc1YmY1OTJmYzRiNDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QMjcgq9/k3dmm8HBnogtxNMt+82 wQ8D+RxcAYbP/BA4cbgOvn7BP23GnDEdQ+uTt3t9Dm1hT0VFH+5UvZXgfGbUIWeK 5JASZ/bscFFnhog82GJprMJCOQUFkPY0evayGYWXWNZjTE/Pf5il5gcPvPcB0C9f TgB8bI7llvtxsvNAf6hBg/FumS+Sw2mEw1GlQGRE4PvIbJCcsxWNGPvos9dL+1IO nlS1ORU6tJ2Gbs7pKsEWC4GRZL1uCmVkuoDc4G1EM/rcRVucL2pYYfNjjgDC+bQK NoaQkDWlzEnwMMg2Ro29CtLcC1iBwWWIYVySuZeY45W6VTTBCnK2DGj8wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvk7Mpenlzcy2cXqYR1v1kvxLRIMB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKkLU7LBh KpROQzPEGFspGIMovJYDWRvVeq29VS3qVVM+IXa+e1RGCzCCDBRZA6v1HvMC1s// fzqGAipFjmV7rBZ4e4T4aw1oNrIweAyzcAmDUGDsXC4pYtEqueKoOLqRlM4gwanZ xEDLGjXKXrHcCsXX4tHAbrQ0FXMEIGJIkwfgZZXINdrg/wpV4vl6MQcCFN6IRAmn heByuOJA5CEV1kaWERWNGWY0DK06xDmMc8CDL6N76JxPmAhe2d8klCCcCUdli+gE wz4JcfviafSyVnS98h3OsbKEhFCfuwNgOEpMnQUbIXPPF95t6+ROuuSuANCg9g2b 65S3Zz/mqzCDuQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:06:33 2026 by rpki-client