$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft File: 10cBdWTHEby9V2gKDf0A8qXQmds.mft (raw, json) Hash identifier: 3q78pGlI8ask0riRjUi9sqzMpZ2nUM7BfBLxs44ghq0= Subject key identifier: C4:5B:28:5E:F3:B8:65:20:11:75:EC:B0:B6:88:BE:74:2E:D9:AA:74 Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db Certificate serial: 019CD6C30B575C37EB23C7B86F0F4361C95D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft Manifest number: 1902 Signing time: Tue 10 Mar 2026 08:00:32 +0000 Manifest this update: Tue 10 Mar 2026 08:00:32 +0000 Manifest next update: Wed 11 Mar 2026 08:00:32 +0000 Files and hashes: 1: 10cBdWTHEby9V2gKDf0A8qXQmds.crl (hash: gxZdb2Z8oPGZRMc7IUrEiCrmOJ1WWFmrb/CU4wY3pd8=) 2: 3_XuwEnK7hK05MXmz1vtfkaHSAA.roa (hash: o9siZPcWT3dVf1oD+f5/ipqIZ5M6DhvDg5nd+ba6zfw=) 3: 3rngGDt_iwfhoOnfpD1kt_StBx0.roa (hash: KjcAZXNR5n6zPZTAkslgvia87YFrMCL2teXsMct736o=) 4: 4VUm_geSRPJQwIGOeaAoFsu42EQ.roa (hash: B3ePVndHpxNK0Mu3H5cJRx+tUJcw9Q+xUJCk6fROmUU=) 5: 6vbDrANnc0Lws1NcQ-JKO66v7z0.roa (hash: x7FnjgcmwzniPl0CLMLAdYfrWNg5dDEnt8NbWXgXgQ4=) 6: E-mC0iAlIk0BNqElj570L59xiI4.roa (hash: 11beTDD0KykGX0WoUgJf8Vzp+SRqSq4zspVnh6gtlMQ=) 7: HQJmpAkNAw1AqZ0b48w_YH827nk.roa (hash: 7qIcvQ4TbN25SPRVWssmjozD9Nk/d25r5V3RF5LK48w=) 8: UuVkQuPgqTsDeNHD0WgB5nTMv8A.roa (hash: UCiMYIlZ0X9O8CD/EF/deQdiqlIkeR8UK6DAGXq5qYE=) 9: WsU0TA-x8x-AIVwWSVATXH41Db8.roa (hash: PoI0MFNsTc9HWGtTXSe9O9CouuagHdHyjAB82f5capM=) 10: b2RfWDslY-ySGKFmq3UTFYKduy0.roa (hash: 0aEcfEIIb3D7XC2fWQaWAzipVl05YpsQU97gOc5kyzc=) 11: cpt5RAgtzGqSe2tQZjdg4D2WA0E.roa (hash: 8jg9MlATBiiFNT9Izoww+SGRXHn9l5TlN9GgD/T3YlI=) 12: g2L1Ckg2PdEviCbCq66EuHwj6s4.roa (hash: yQRf9YsIGhna0i1WbIuXI9A3Q/Zoyb3HRPF/J92zU/U=) 13: iZLlfuL5fkyQViX7MDGBKRfoKw8.roa (hash: QJj4R8PSS2uz6pf5eNhL303Omh3ETXGQxx47uMXmmwA=) 14: lU6d7ePd82R1RQygYGhFImrIFTw.roa (hash: eTV3PHC8L7+q7X6AQEeyA+TbOiZwiV2Wzom3Tk1Wu5A=) 15: mr_pNb5yoRFqFtKMWG7FgP2ifyU.roa (hash: KUyylK1Gn/i/rEUpdmb4WY0ip5PHMUeW+sIt34Rv4vU=) 16: qu_5X8JHr4yqGmfR7Z4agmkCTJg.roa (hash: pp2/dCo/iehzy+EhLzTvjRa68BviBR9e8y4FWQ8IXSI=) 17: vUylfTDcwUjT9ws66e9wdAqPzcg.roa (hash: Er/JWU9dw52/OcAiPzTg3upAwzRGmCG67anIQUk/sVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Mar 2026 06:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:d6:c3:0b:57:5c:37:eb:23:c7:b8:6f:0f:43:61:c9:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db Validity Not Before: Mar 10 08:00:32 2026 GMT Not After : Mar 11 08:00:32 2026 GMT Subject: CN=c45b285ef3b865201175ecb0b688be742ed9aa74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a2:8f:64:84:28:c1:aa:ee:d6:c9:60:7f:8a: 87:76:90:5c:97:26:15:d0:6d:a4:00:d9:56:a1:bd: bd:2d:69:9b:59:8b:30:35:e7:37:1a:32:4c:c6:c2: 41:24:98:cf:86:49:30:fd:ec:40:ba:6f:91:aa:f7: d5:eb:38:d2:28:b2:8e:1c:83:4a:0d:6e:ff:13:87: f0:9f:0d:7e:ff:4f:5d:9c:68:05:fb:13:95:a6:81: 84:b2:10:a9:42:58:88:b2:f7:88:0b:14:d8:08:0a: 8c:87:21:50:ab:8a:91:dd:95:14:f3:23:79:3d:6a: be:ef:0a:33:02:80:1d:78:9a:ea:91:1e:51:8b:2f: 6d:cc:a8:6c:83:6a:d8:7a:ae:a8:00:35:84:14:c9: 8f:0f:cc:5f:77:55:4f:c1:8f:72:2c:6f:d2:0a:ea: 05:77:ca:6b:fd:e6:a4:30:4d:6f:99:cd:80:e4:d2: 1c:78:a9:19:77:58:81:88:3d:e7:69:cc:8e:06:23: e7:8e:6a:af:17:93:69:25:df:c2:57:8b:b0:53:d2: e5:32:4b:3b:c7:c5:35:7b:9a:d9:66:ff:7f:b2:e3: ff:ca:9f:ba:53:ef:59:68:aa:c1:a4:d3:58:e4:6e: 8a:84:28:3e:ac:7c:c3:f8:39:8f:82:87:cf:b3:69: 46:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5B:28:5E:F3:B8:65:20:11:75:EC:B0:B6:88:BE:74:2E:D9:AA:74 X509v3 Authority Key Identifier: keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:13:72:45:ff:58:58:43:58:59:de:54:4b:b4:46:7f:28:ea: 84:91:d6:6f:d2:6b:87:83:dc:91:1b:67:ec:1b:9d:13:f8:c2: f7:5a:d5:f7:a8:a0:ba:a4:9b:e1:8e:76:39:37:de:eb:7d:52: 9b:d3:0b:e5:b6:74:a1:34:0c:4c:81:6c:45:4c:3e:40:bb:5b: 83:54:af:5b:8a:f6:22:48:42:fa:12:2d:f0:cf:a8:87:85:b4: 96:fd:6b:10:c3:d8:48:17:06:cf:84:3f:a3:90:e2:00:0a:1a: 82:98:2f:ee:41:10:2c:7b:6d:4f:81:bc:86:88:0c:ea:f0:52: f6:7e:29:a2:f1:b1:53:e5:3a:f4:4b:c8:48:a0:5c:6a:02:e1: 9a:ad:98:b6:9c:0c:e3:e9:66:c9:c6:d4:28:e4:69:b5:59:5d: 13:05:da:a5:00:83:85:cf:87:cf:39:d1:52:e6:dd:f9:2b:e3: 62:92:36:67:05:17:c2:d2:85:a2:ec:97:d1:f2:75:f5:3b:5b: 12:9c:58:88:da:71:ca:30:d5:76:f0:3a:29:57:14:b8:6e:b3: f0:3f:8e:05:d7:30:ca:4b:32:b3:cb:40:5a:6b:04:94:0b:c3: 62:e3:e8:5e:b4:d8:22:fa:87:76:3b:69:f4:c3:f2:c5:e4:21: a7:95:c9:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzWwwtXXDfrI8e4bw9DYcldMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk MDk5ZGIwHhcNMjYwMzEwMDgwMDMyWhcNMjYwMzExMDgwMDMyWjAzMTEwLwYDVQQD EyhjNDViMjg1ZWYzYjg2NTIwMTE3NWVjYjBiNjg4YmU3NDJlZDlhYTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKKPZIQowaru1slgf4qHdpBclyYV 0G2kANlWob29LWmbWYswNec3GjJMxsJBJJjPhkkw/exAum+RqvfV6zjSKLKOHINK DW7/E4fwnw1+/09dnGgF+xOVpoGEshCpQliIsveICxTYCAqMhyFQq4qR3ZUU8yN5 PWq+7wozAoAdeJrqkR5Riy9tzKhsg2rYeq6oADWEFMmPD8xfd1VPwY9yLG/SCuoF d8pr/eakME1vmc2A5NIceKkZd1iBiD3nacyOBiPnjmqvF5NpJd/CV4uwU9LlMks7 x8U1e5rZZv9/suP/yp+6U+9ZaKrBpNNY5G6KhCg+rHzD+DmPgofPs2lGxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRbKF7zuGUgEXXssLaIvnQu2ap0MB8GA1UdIwQY MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt NGYwZThjZTExYTdkLzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhNyRf9Y WENYWd5US7RGfyjqhJHWb9Jrh4PckRtn7BudE/jC91rV96iguqSb4Y52OTfe631S m9ML5bZ0oTQMTIFsRUw+QLtbg1SvW4r2IkhC+hIt8M+oh4W0lv1rEMPYSBcGz4Q/ o5DiAAoagpgv7kEQLHttT4G8hogM6vBS9n4povGxU+U69EvISKBcagLhmq2YtpwM 4+lmycbUKORptVldEwXapQCDhc+HzznRUubd+SvjYpI2ZwUXwtKFouyX0fJ19Ttb EpxYiNpxyjDVdvA6KVcUuG6z8D+OBdcwyksys8tAWmsElAvDYuPoXrTYIvqHdjtp 9MPyxeQhp5XJfg== -----END CERTIFICATE-----Generated at Tue Mar 10 13:21:17 2026 by rpki-client