$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft File: 10cBdWTHEby9V2gKDf0A8qXQmds.mft (raw, json) Hash identifier: phjgsuuDlhRoJoXVpOhlmJZ44t3BIvzJl6iZgDlIHxs= Subject key identifier: E7:4C:83:A2:42:4D:26:2C:3D:EA:06:0F:22:F5:59:B4:38:7F:52:4B Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db Certificate serial: 019D25F13895DAF6119467E8663369A5866E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft Manifest number: 192B Signing time: Wed 25 Mar 2026 17:00:58 +0000 Manifest this update: Wed 25 Mar 2026 17:00:58 +0000 Manifest next update: Thu 26 Mar 2026 17:00:58 +0000 Files and hashes: 1: 10cBdWTHEby9V2gKDf0A8qXQmds.crl (hash: VuFZQCbO3kLfbWs08ingpF0Y5x/UkgkhT99AnWDfiM8=) 2: 3_XuwEnK7hK05MXmz1vtfkaHSAA.roa (hash: o9siZPcWT3dVf1oD+f5/ipqIZ5M6DhvDg5nd+ba6zfw=) 3: 3rngGDt_iwfhoOnfpD1kt_StBx0.roa (hash: KjcAZXNR5n6zPZTAkslgvia87YFrMCL2teXsMct736o=) 4: 4VUm_geSRPJQwIGOeaAoFsu42EQ.roa (hash: B3ePVndHpxNK0Mu3H5cJRx+tUJcw9Q+xUJCk6fROmUU=) 5: 6vbDrANnc0Lws1NcQ-JKO66v7z0.roa (hash: x7FnjgcmwzniPl0CLMLAdYfrWNg5dDEnt8NbWXgXgQ4=) 6: E-mC0iAlIk0BNqElj570L59xiI4.roa (hash: 11beTDD0KykGX0WoUgJf8Vzp+SRqSq4zspVnh6gtlMQ=) 7: HQJmpAkNAw1AqZ0b48w_YH827nk.roa (hash: 7qIcvQ4TbN25SPRVWssmjozD9Nk/d25r5V3RF5LK48w=) 8: UuVkQuPgqTsDeNHD0WgB5nTMv8A.roa (hash: UCiMYIlZ0X9O8CD/EF/deQdiqlIkeR8UK6DAGXq5qYE=) 9: WsU0TA-x8x-AIVwWSVATXH41Db8.roa (hash: PoI0MFNsTc9HWGtTXSe9O9CouuagHdHyjAB82f5capM=) 10: b2RfWDslY-ySGKFmq3UTFYKduy0.roa (hash: 0aEcfEIIb3D7XC2fWQaWAzipVl05YpsQU97gOc5kyzc=) 11: cpt5RAgtzGqSe2tQZjdg4D2WA0E.roa (hash: 8jg9MlATBiiFNT9Izoww+SGRXHn9l5TlN9GgD/T3YlI=) 12: g2L1Ckg2PdEviCbCq66EuHwj6s4.roa (hash: yQRf9YsIGhna0i1WbIuXI9A3Q/Zoyb3HRPF/J92zU/U=) 13: iZLlfuL5fkyQViX7MDGBKRfoKw8.roa (hash: QJj4R8PSS2uz6pf5eNhL303Omh3ETXGQxx47uMXmmwA=) 14: lU6d7ePd82R1RQygYGhFImrIFTw.roa (hash: eTV3PHC8L7+q7X6AQEeyA+TbOiZwiV2Wzom3Tk1Wu5A=) 15: mr_pNb5yoRFqFtKMWG7FgP2ifyU.roa (hash: KUyylK1Gn/i/rEUpdmb4WY0ip5PHMUeW+sIt34Rv4vU=) 16: qu_5X8JHr4yqGmfR7Z4agmkCTJg.roa (hash: pp2/dCo/iehzy+EhLzTvjRa68BviBR9e8y4FWQ8IXSI=) 17: vUylfTDcwUjT9ws66e9wdAqPzcg.roa (hash: Er/JWU9dw52/OcAiPzTg3upAwzRGmCG67anIQUk/sVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 17:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:f1:38:95:da:f6:11:94:67:e8:66:33:69:a5:86:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db Validity Not Before: Mar 25 17:00:58 2026 GMT Not After : Mar 26 17:00:58 2026 GMT Subject: CN=e74c83a2424d262c3dea060f22f559b4387f524b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b8:2b:76:3a:e6:d3:5f:f1:65:5a:29:b4:f1: 9f:44:27:86:81:66:dc:2c:aa:a8:54:d9:8e:98:d8: aa:60:e4:f6:00:44:0e:b7:58:7e:ff:c9:3e:ad:7e: bf:cf:ce:69:38:c5:df:32:5a:4a:a9:5c:8d:12:e0: dc:3b:b2:d7:9b:96:12:f8:ee:f2:e4:8c:04:b4:86: 07:31:61:70:64:32:a6:49:d1:93:62:a8:be:29:50: 3e:ad:1d:58:bf:6f:d3:7b:f9:56:42:2b:31:88:89: 29:0c:39:95:15:62:59:bf:08:14:39:53:56:c8:a3: 01:f4:ac:7a:02:be:72:09:ac:e6:6b:0c:c5:55:9d: 5c:fa:12:f6:68:cc:e0:64:21:ce:dc:63:2b:2e:a2: c4:b9:3b:43:f3:e9:51:40:fc:38:a9:05:6b:eb:a0: d6:42:e5:1c:52:61:c4:64:c3:a7:5c:13:1f:8a:1b: 93:c6:dc:16:ec:e1:87:8b:41:0f:9f:d1:19:5f:6d: f7:03:70:70:61:ba:0d:e6:ca:d4:14:0d:9d:9e:c9: 4f:09:8c:97:8b:9d:6d:89:d6:63:d0:2a:fc:09:9d: 48:d4:a1:05:52:17:11:93:cd:a8:20:0d:b8:e7:8e: b3:80:76:b6:db:70:07:dc:95:4c:1b:18:f5:68:c9: 66:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:4C:83:A2:42:4D:26:2C:3D:EA:06:0F:22:F5:59:B4:38:7F:52:4B X509v3 Authority Key Identifier: keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:81:41:b4:0a:44:4f:5a:64:7a:69:48:43:c3:9c:2d:51:01: cf:78:28:84:7b:3b:e0:93:e4:4a:bd:9b:99:8b:40:67:d8:b8: 03:3d:bd:49:63:e5:cd:f3:82:0f:7e:bb:af:cd:0c:5f:3d:69: 3f:a6:91:e7:a4:26:2d:77:1b:ca:a1:f2:14:71:23:a7:d8:5f: 64:85:7c:af:b7:58:01:c5:a9:1a:f1:1d:fb:25:2e:77:df:bb: 49:12:70:69:ad:33:14:e2:66:3d:53:2a:02:e0:b5:34:79:44: 56:04:77:6c:4d:1f:21:54:87:f4:f8:af:e5:77:aa:0c:7c:67: 9b:31:fa:42:28:1b:ee:18:8b:8f:75:a5:c0:17:0f:ac:23:85: 13:23:23:de:7c:61:88:d0:32:2a:90:e0:0f:20:10:ca:e0:e8: fc:bc:f8:36:5d:af:d2:39:7f:50:77:81:28:39:5e:a6:a9:72: 4d:c0:59:a7:1a:4f:dc:15:e8:f1:d6:9d:62:7a:85:ba:e8:26: 42:fe:11:63:b2:f0:bc:70:c8:73:a0:00:83:79:fc:e0:bc:cc: 2a:57:35:19:15:e7:41:f7:17:6a:a4:10:24:99:6c:62:1a:80: c1:eb:12:7d:83:d6:80:aa:ce:14:a0:5b:eb:b5:41:ea:b5:e3: e1:c9:cd:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0l8TiV2vYRlGfoZjNppYZuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk MDk5ZGIwHhcNMjYwMzI1MTcwMDU4WhcNMjYwMzI2MTcwMDU4WjAzMTEwLwYDVQQD EyhlNzRjODNhMjQyNGQyNjJjM2RlYTA2MGYyMmY1NTliNDM4N2Y1MjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrgrdjrm01/xZVoptPGfRCeGgWbc LKqoVNmOmNiqYOT2AEQOt1h+/8k+rX6/z85pOMXfMlpKqVyNEuDcO7LXm5YS+O7y 5IwEtIYHMWFwZDKmSdGTYqi+KVA+rR1Yv2/Te/lWQisxiIkpDDmVFWJZvwgUOVNW yKMB9Kx6Ar5yCazmawzFVZ1c+hL2aMzgZCHO3GMrLqLEuTtD8+lRQPw4qQVr66DW QuUcUmHEZMOnXBMfihuTxtwW7OGHi0EPn9EZX233A3BwYboN5srUFA2dnslPCYyX i51tidZj0Cr8CZ1I1KEFUhcRk82oIA24546zgHa223AH3JVMGxj1aMlmXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdMg6JCTSYsPeoGDyL1WbQ4f1JLMB8GA1UdIwQY MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt NGYwZThjZTExYTdkLzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIFBtApE T1pkemlIQ8OcLVEBz3gohHs74JPkSr2bmYtAZ9i4Az29SWPlzfOCD367r80MXz1p P6aR56QmLXcbyqHyFHEjp9hfZIV8r7dYAcWpGvEd+yUud9+7SRJwaa0zFOJmPVMq AuC1NHlEVgR3bE0fIVSH9Piv5XeqDHxnmzH6Qigb7hiLj3WlwBcPrCOFEyMj3nxh iNAyKpDgDyAQyuDo/Lz4Nl2v0jl/UHeBKDlepqlyTcBZpxpP3BXo8dadYnqFuugm Qv4RY7LwvHDIc6AAg3n84LzMKlc1GRXnQfcXaqQQJJlsYhqAwesSfYPWgKrOFKBb 67VB6rXj4cnN+A== -----END CERTIFICATE-----Generated at Thu Mar 26 04:39:38 2026 by rpki-client