
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
File: 10cBdWTHEby9V2gKDf0A8qXQmds.mft (raw, json)
Hash identifier: aI/1LDyA/jfnabJlTqvEWZ/LaeZOS7kiVNQNrlLHDvc=
Subject key identifier: CD:53:4A:EB:30:E6:3F:BC:1A:66:EB:F5:14:72:95:60:E8:A0:ED:73
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A0D07F75A7648ADB29735B5F322E93EF4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
Manifest number: 1B28
Signing time: Wed 23 Sep 2026 23:00:08 +0000
Manifest this update: Wed 23 Sep 2026 23:00:08 +0000
Manifest next update: Thu 24 Sep 2026 23:00:08 +0000
Files and hashes: 1: 10cBdWTHEby9V2gKDf0A8qXQmds.crl (hash: ljCSj9HnjKsOO9gtcsgqXg48pSk1e0OVKVcsjpyHtQo=)
2: 2NUk4-WXGTUF0GeRTyrSDLbq3VI.roa (hash: EXU9HQQMoERyAYQurjGAOh6YNj+Rb1FRWmfk9KwEk5I=)
3: 3FpaNUsc8mcx-Ib8oSSizkRATfQ.roa (hash: ObYD8tt+7rdZBauoMipJQYsm8/hKYkl44vas1c5JeLY=)
4: 4VUm_geSRPJQwIGOeaAoFsu42EQ.roa (hash: B3ePVndHpxNK0Mu3H5cJRx+tUJcw9Q+xUJCk6fROmUU=)
5: 7VTsSzgjCruuT9D_oo_GpCePRmA.roa (hash: 2bYUaq7TmrIdQwCJpi7WU1r54hlWSNb2+szJ26QwC/w=)
6: 8vxK53_z8HYklhUFWyAkpktEuw0.roa (hash: fteTV33OleXot1hOEaY8Dm7beVaXBAoxCGUbPRMoK00=)
7: BIyVEriVirZL2G6IXmONC3j3lQM.roa (hash: 2KsgdSq3eO8pkxPOaGPnwvEW5mBPFvoUQw9KkpOW5GY=)
8: CzuedwFs6U5hTvuOKKcEDZJ3m4M.roa (hash: nr0fY8ExMvANSEMYgY5geen0UP5hnXCKbuR1OPzJBig=)
9: Dew0eb_HAG7ZDSF4NKHJadP-gkc.roa (hash: yeQjaVa1qWsFYF/Nfl2QRVridzOhdfUMldU4qSs4j9I=)
10: DwcDJC-CJaGVWf9qHcY4vwfNCUA.roa (hash: kA9UN61i21C9VPza4E7NFLe7xs0KibzhsYhJ5co5Az4=)
11: Ec6pumLbFWm-2ggg4GTIyZ5WhHI.roa (hash: BAbSE9dO4T1GnCKBKv9HoFvZtw+ItuiuepY9geBARxM=)
12: GxEm1KAYx1EaaM9vnLw4zKeoy8s.roa (hash: yKdLPkbxMhk4y0yXKwsRzEIoL/f56tRZaFXGiNAI0m4=)
13: T4lVyhCOiVnOTQ3Lg5EJjC_elNQ.roa (hash: uT4CMpYcd9PSs23MYUhP1OLu5a4ln+lpqzMRNI+3ytE=)
14: UuVkQuPgqTsDeNHD0WgB5nTMv8A.roa (hash: UCiMYIlZ0X9O8CD/EF/deQdiqlIkeR8UK6DAGXq5qYE=)
15: Y_jD6XfBGC3j1T4Uy_rcOPU_LbU.roa (hash: 3ky9pLDHWdQLzf5p8PePoy070w7qJI1DOvNViZYREg0=)
16: a6Mf22KbcVSVo6zfFVmT3svRjsA.roa (hash: PAy1Jv2hRGR0Vi2DoaVy7uOqdlSIsq+J07zQQtyu5Gk=)
17: aBfCZ03S1Y0sPluo5LBFUZWFYMc.roa (hash: Feultne/Hmjwrd1YJFj/DkrcIFBiGq7nwTwN4dvrKfs=)
18: cpt5RAgtzGqSe2tQZjdg4D2WA0E.roa (hash: 8jg9MlATBiiFNT9Izoww+SGRXHn9l5TlN9GgD/T3YlI=)
19: g2L1Ckg2PdEviCbCq66EuHwj6s4.roa (hash: yQRf9YsIGhna0i1WbIuXI9A3Q/Zoyb3HRPF/J92zU/U=)
20: i1_J0js7GSnwnFT6BQjKxFjCKAo.roa (hash: zSpyHhpf50CixxMSNhKrSqsP9AZoPmaaRWKJ+roEr9w=)
21: iXaj_kYTlkm0fAGHBa2-E20g17Q.roa (hash: eFFfAbmshTsHNFLpZKWGQ2ZVnPIvFCyKX8Nbj611da0=)
22: iZLlfuL5fkyQViX7MDGBKRfoKw8.roa (hash: QJj4R8PSS2uz6pf5eNhL303Omh3ETXGQxx47uMXmmwA=)
23: jdDMzewtBKUbLISHlFvozSRpGzc.roa (hash: o28fuwgFVqCMV9PwGcRHvq4z5m6vHXUHTWkbO6d6lCI=)
24: kfnww81EV2LKC1epnSXYA5FE04Y.roa (hash: etPZojILMkhuJnTDpOv9QrkK35LWJTKxSMDedF+KD9E=)
25: lU6d7ePd82R1RQygYGhFImrIFTw.roa (hash: eTV3PHC8L7+q7X6AQEeyA+TbOiZwiV2Wzom3Tk1Wu5A=)
26: ntLrxfVyT3EF_HfYFDgSLQIEq5Y.roa (hash: yq11gq+saeIJh+XRctBRBjtBTL9vZCS0Lnel9O9f6gc=)
27: p5QtUDUOXRCHEi75VPDwcQNdTZk.roa (hash: X0pIlV9euFff1IdP2cwi41n9OTYkfNV7NgihjfP7w30=)
28: pfQIQtiw0hOQzwiCesi0AjLHapA.roa (hash: ddrH7oWf6HnIwFuplBpVDYvI9f1Yddg87dSy0YKuWKY=)
29: qu_5X8JHr4yqGmfR7Z4agmkCTJg.roa (hash: pp2/dCo/iehzy+EhLzTvjRa68BviBR9e8y4FWQ8IXSI=)
30: ruttGwJwbYzo0AN2TP7_UYRcvt0.roa (hash: ux9A3sQEvBRGsHRw6v0ITVj2Q7MxjWLzu1hZ7TwrQkg=)
31: u3esaBXBz_RESktIeiAEj3TrmBk.roa (hash: DuycQcWpRKbKJrZyI5uvefnqxfPTZjiagmu1zINJPpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:75:a7:64:8a:db:29:73:5b:5f:32:2e:93:ef:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Sep 23 23:00:08 2026 GMT
Not After : Sep 24 23:00:08 2026 GMT
Subject: CN=cd534aeb30e63fbc1a66ebf514729560e8a0ed73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c1:ea:8c:ab:a6:f5:52:1b:10:c9:2c:0c:ea:
b3:dc:d0:6f:72:8d:37:70:16:9e:b9:a0:6b:5e:3f:
d3:6d:cf:d0:f9:00:af:0d:04:63:7c:3b:3d:a7:24:
15:1c:b7:f3:d1:63:6d:8e:64:ff:4b:12:c9:64:83:
26:5d:7e:74:48:10:16:35:fe:50:d2:49:da:a8:00:
ee:73:fe:38:41:75:48:fb:2d:48:37:42:8a:4e:76:
43:e4:b8:b8:5b:2c:06:19:e8:1e:b5:d3:9c:a6:3d:
b0:dc:a0:e6:57:a3:0e:08:1f:27:0b:e9:a0:21:9b:
3c:da:31:af:34:56:00:6b:e6:10:23:5b:77:5c:63:
e0:d6:f2:32:7d:a9:f9:8c:95:fa:b1:bb:c0:92:9d:
bb:b1:6f:01:13:44:1e:b6:29:4d:ea:f9:9e:28:25:
65:8e:2a:41:99:b6:fd:a4:d1:de:b1:dd:04:0f:5d:
98:92:6b:1d:01:1e:2d:62:73:48:86:5b:e4:b7:e8:
7b:ae:3c:15:84:28:ab:3f:ab:40:b8:53:f8:f3:0c:
b1:8f:0e:9e:ae:64:ce:cc:7c:10:cf:73:5f:c1:28:
9d:02:d5:1c:b1:d3:2f:68:b2:65:b3:4f:8f:1a:b1:
e1:59:e0:2f:cf:e2:a0:7c:be:f4:7f:a7:ff:48:cd:
c7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:53:4A:EB:30:E6:3F:BC:1A:66:EB:F5:14:72:95:60:E8:A0:ED:73
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f9:c7:54:28:b0:ef:31:c9:c7:2d:1f:41:fa:d5:39:c5:7f:
32:2c:28:8c:02:4f:90:5a:06:04:19:19:4e:9b:3f:e7:d0:04:
d4:5a:f2:c4:21:8e:37:b4:0a:84:8d:3e:bb:6d:14:9c:50:f4:
d2:d6:e0:1f:99:c7:e3:4a:ac:a3:0b:30:03:2c:4a:27:6a:60:
51:ee:73:e1:1a:cc:a2:1c:f4:59:21:bd:bd:e8:74:b0:86:ca:
d4:e1:8f:3d:16:f0:5b:40:77:13:d6:5d:52:31:86:22:c0:38:
56:bf:26:d0:dc:c1:f7:40:08:9a:90:80:7c:f6:46:4e:10:7d:
e4:67:9a:ba:aa:0f:58:9f:90:4e:50:be:35:f8:64:0a:f8:c8:
5e:21:1e:8c:d9:1f:29:05:25:be:6b:43:9f:5b:73:f8:03:a5:
18:39:6b:50:00:30:8e:da:92:de:a0:3d:2f:4d:5c:80:cd:26:
a6:6d:63:1d:48:91:02:4a:55:40:6d:ea:7f:05:27:96:54:30:
6c:39:39:ad:d4:26:69:d6:73:b5:52:00:36:6a:70:34:24:18:
74:be:a6:86:e0:1e:21:59:ee:1a:fc:9c:62:8a:90:7d:a8:a4:
62:0a:1e:50:e0:a1:d7:a0:79:12:d9:9a:0d:8c:de:02:1d:53:
96:6b:3b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:05:47 2026 by rpki-client