$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft File: 10cBdWTHEby9V2gKDf0A8qXQmds.mft (raw, json) Hash identifier: 2sjdZFS4fph43kHO7QvdLTpat6eLJpCYc5LyBjdIKZQ= Subject key identifier: 18:C2:70:7C:31:9D:99:6D:0F:2A:5C:2A:AA:5D:E2:C9:2B:86:C4:89 Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db Certificate serial: 019E1F11998DAEB17D5CA4756E24F9A46E37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft Manifest number: 19AC Signing time: Wed 13 May 2026 02:01:47 +0000 Manifest this update: Wed 13 May 2026 02:01:47 +0000 Manifest next update: Thu 14 May 2026 02:01:47 +0000 Files and hashes: 1: 10cBdWTHEby9V2gKDf0A8qXQmds.crl (hash: jRkBi9jSwAdJdGM/BkKuWHCCsfkI+oxEcmK+MAXTTFI=) 2: 3_XuwEnK7hK05MXmz1vtfkaHSAA.roa (hash: o9siZPcWT3dVf1oD+f5/ipqIZ5M6DhvDg5nd+ba6zfw=) 3: 3rngGDt_iwfhoOnfpD1kt_StBx0.roa (hash: KjcAZXNR5n6zPZTAkslgvia87YFrMCL2teXsMct736o=) 4: 4VUm_geSRPJQwIGOeaAoFsu42EQ.roa (hash: B3ePVndHpxNK0Mu3H5cJRx+tUJcw9Q+xUJCk6fROmUU=) 5: 6vbDrANnc0Lws1NcQ-JKO66v7z0.roa (hash: x7FnjgcmwzniPl0CLMLAdYfrWNg5dDEnt8NbWXgXgQ4=) 6: E-mC0iAlIk0BNqElj570L59xiI4.roa (hash: 11beTDD0KykGX0WoUgJf8Vzp+SRqSq4zspVnh6gtlMQ=) 7: HQJmpAkNAw1AqZ0b48w_YH827nk.roa (hash: 7qIcvQ4TbN25SPRVWssmjozD9Nk/d25r5V3RF5LK48w=) 8: UuVkQuPgqTsDeNHD0WgB5nTMv8A.roa (hash: UCiMYIlZ0X9O8CD/EF/deQdiqlIkeR8UK6DAGXq5qYE=) 9: WsU0TA-x8x-AIVwWSVATXH41Db8.roa (hash: PoI0MFNsTc9HWGtTXSe9O9CouuagHdHyjAB82f5capM=) 10: b2RfWDslY-ySGKFmq3UTFYKduy0.roa (hash: 0aEcfEIIb3D7XC2fWQaWAzipVl05YpsQU97gOc5kyzc=) 11: cpt5RAgtzGqSe2tQZjdg4D2WA0E.roa (hash: 8jg9MlATBiiFNT9Izoww+SGRXHn9l5TlN9GgD/T3YlI=) 12: g2L1Ckg2PdEviCbCq66EuHwj6s4.roa (hash: yQRf9YsIGhna0i1WbIuXI9A3Q/Zoyb3HRPF/J92zU/U=) 13: iZLlfuL5fkyQViX7MDGBKRfoKw8.roa (hash: QJj4R8PSS2uz6pf5eNhL303Omh3ETXGQxx47uMXmmwA=) 14: lU6d7ePd82R1RQygYGhFImrIFTw.roa (hash: eTV3PHC8L7+q7X6AQEeyA+TbOiZwiV2Wzom3Tk1Wu5A=) 15: mr_pNb5yoRFqFtKMWG7FgP2ifyU.roa (hash: KUyylK1Gn/i/rEUpdmb4WY0ip5PHMUeW+sIt34Rv4vU=) 16: qu_5X8JHr4yqGmfR7Z4agmkCTJg.roa (hash: pp2/dCo/iehzy+EhLzTvjRa68BviBR9e8y4FWQ8IXSI=) 17: vUylfTDcwUjT9ws66e9wdAqPzcg.roa (hash: Er/JWU9dw52/OcAiPzTg3upAwzRGmCG67anIQUk/sVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1f:11:99:8d:ae:b1:7d:5c:a4:75:6e:24:f9:a4:6e:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db Validity Not Before: May 13 02:01:47 2026 GMT Not After : May 14 02:01:47 2026 GMT Subject: CN=18c2707c319d996d0f2a5c2aaa5de2c92b86c489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fb:a0:af:08:f4:b1:71:3c:d3:b4:1f:fa:03: 5d:c6:05:ef:e5:9b:1d:4c:48:3b:32:23:7b:f4:d7: 0f:2b:0f:13:c0:ae:52:60:ed:0c:7b:40:a7:3f:17: 91:47:3b:4b:d4:42:de:83:90:c7:33:2b:49:80:85: ae:51:30:0b:ba:31:b5:34:be:84:92:f2:75:07:f4: 3e:10:08:54:0e:7d:06:a5:84:8e:13:6e:3b:7a:fb: 5b:39:d1:33:e5:f0:59:d0:1b:13:60:1c:07:e6:32: 86:e7:f4:49:8b:6c:97:4f:34:09:85:51:09:50:da: cc:f2:4b:57:0a:19:5d:54:87:ce:84:61:48:2b:1e: 86:ef:fe:4c:af:2f:66:2c:ab:28:4a:db:6a:f5:53: ff:57:21:d6:ec:a6:f9:e9:f7:cc:99:d4:05:5e:5e: 68:5e:f2:57:b5:90:ce:66:27:e5:1f:04:29:4d:13: bb:ef:60:5d:d5:37:56:a2:de:b0:f7:89:b0:47:72: 5e:79:96:0f:46:0b:b9:e4:13:36:17:72:4d:c5:30: 19:a0:0c:29:bb:e9:0a:6a:8b:ea:4e:0a:43:ea:2e: e4:df:02:80:27:ee:1a:b4:08:5f:43:e7:a7:25:70: 73:9c:9a:ee:37:04:19:7a:f8:b7:d5:32:0b:cd:08: e5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C2:70:7C:31:9D:99:6D:0F:2A:5C:2A:AA:5D:E2:C9:2B:86:C4:89 X509v3 Authority Key Identifier: keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a1:99:f6:f2:f1:a7:69:4c:e4:31:ef:db:32:23:7e:3a:a4: 7c:92:b9:78:7f:31:50:62:ae:9d:3f:fb:eb:01:dc:6d:1b:3b: 24:8a:8f:6a:53:20:58:ea:9d:f4:c8:6e:1a:1a:7c:9c:d0:d9: e4:bc:b5:c9:76:bc:8f:49:66:16:a3:ef:ca:73:9e:78:bf:4e: 68:be:e5:0d:4f:d7:26:91:20:8e:5e:bf:4d:b1:34:1b:3b:f0: 22:e9:99:4a:d5:cf:dd:ea:1e:1c:d2:e4:0d:2b:f9:aa:ce:48: 68:5e:0f:68:54:bb:a5:6a:30:50:11:67:1a:46:fa:fa:20:45: 7c:9e:ff:5c:ec:ca:65:ac:0f:a9:b7:87:c0:27:22:c5:2b:dc: 0c:30:07:10:f5:6b:df:86:b6:a5:0d:78:98:ca:fa:20:58:42: 1e:78:2d:20:36:ca:9a:ac:14:da:30:54:ad:96:0c:b1:1f:52: a8:2a:d2:91:d4:75:b5:35:31:be:b9:a4:de:a2:24:e7:5e:fd: 89:46:17:9c:b7:5d:f0:13:dd:35:e3:8a:d1:22:c5:e1:f6:1d: 00:e0:26:72:0f:c0:c2:79:3b:c6:5e:d7:61:2f:dd:d3:5b:b5: 42:33:4e:a5:f8:b1:7a:f9:01:dc:ad:1e:2f:14:24:8b:47:f4: 1d:6f:60:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4fEZmNrrF9XKR1biT5pG43MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk MDk5ZGIwHhcNMjYwNTEzMDIwMTQ3WhcNMjYwNTE0MDIwMTQ3WjAzMTEwLwYDVQQD EygxOGMyNzA3YzMxOWQ5OTZkMGYyYTVjMmFhYTVkZTJjOTJiODZjNDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPugrwj0sXE807Qf+gNdxgXv5Zsd TEg7MiN79NcPKw8TwK5SYO0Me0CnPxeRRztL1ELeg5DHMytJgIWuUTALujG1NL6E kvJ1B/Q+EAhUDn0GpYSOE247evtbOdEz5fBZ0BsTYBwH5jKG5/RJi2yXTzQJhVEJ UNrM8ktXChldVIfOhGFIKx6G7/5Mry9mLKsoSttq9VP/VyHW7Kb56ffMmdQFXl5o XvJXtZDOZiflHwQpTRO772Bd1TdWot6w94mwR3JeeZYPRgu55BM2F3JNxTAZoAwp u+kKaovqTgpD6i7k3wKAJ+4atAhfQ+enJXBznJruNwQZevi31TILzQjlDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjCcHwxnZltDypcKqpd4skrhsSJMB8GA1UdIwQY MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt NGYwZThjZTExYTdkLzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnaGZ9vLx p2lM5DHv2zIjfjqkfJK5eH8xUGKunT/76wHcbRs7JIqPalMgWOqd9MhuGhp8nNDZ 5Ly1yXa8j0lmFqPvynOeeL9OaL7lDU/XJpEgjl6/TbE0GzvwIumZStXP3eoeHNLk DSv5qs5IaF4PaFS7pWowUBFnGkb6+iBFfJ7/XOzKZawPqbeHwCcixSvcDDAHEPVr 34a2pQ14mMr6IFhCHngtIDbKmqwU2jBUrZYMsR9SqCrSkdR1tTUxvrmk3qIk5179 iUYXnLdd8BPdNeOK0SLF4fYdAOAmcg/Awnk7xl7XYS/d01u1QjNOpfixevkB3K0e LxQki0f0HW9g1Q== -----END CERTIFICATE-----Generated at Wed May 13 05:02:55 2026 by rpki-client