
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
File: 10cBdWTHEby9V2gKDf0A8qXQmds.mft (raw, json)
Hash identifier: 3GzOd5rXdF+9sEuilmrAG8VvNIF/9KUJLHuhSoIneuQ=
Subject key identifier: 79:8D:DC:72:F6:DD:F9:C2:F3:36:3C:44:BC:6D:33:C8:A1:27:B3:1A
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 019EA89BFCD310AE899115809F63CB8FB301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
Manifest number: 19F5
Signing time: Mon 08 Jun 2026 19:00:55 +0000
Manifest this update: Mon 08 Jun 2026 19:00:55 +0000
Manifest next update: Tue 09 Jun 2026 19:00:55 +0000
Files and hashes: 1: 10cBdWTHEby9V2gKDf0A8qXQmds.crl (hash: E5mZgVWXW21nQMa0StUFpV45SCHxc9zuIWh64K6yzOs=)
2: 3rngGDt_iwfhoOnfpD1kt_StBx0.roa (hash: KjcAZXNR5n6zPZTAkslgvia87YFrMCL2teXsMct736o=)
3: 4VUm_geSRPJQwIGOeaAoFsu42EQ.roa (hash: B3ePVndHpxNK0Mu3H5cJRx+tUJcw9Q+xUJCk6fROmUU=)
4: E-mC0iAlIk0BNqElj570L59xiI4.roa (hash: 11beTDD0KykGX0WoUgJf8Vzp+SRqSq4zspVnh6gtlMQ=)
5: HQJmpAkNAw1AqZ0b48w_YH827nk.roa (hash: 7qIcvQ4TbN25SPRVWssmjozD9Nk/d25r5V3RF5LK48w=)
6: UuVkQuPgqTsDeNHD0WgB5nTMv8A.roa (hash: UCiMYIlZ0X9O8CD/EF/deQdiqlIkeR8UK6DAGXq5qYE=)
7: WsU0TA-x8x-AIVwWSVATXH41Db8.roa (hash: PoI0MFNsTc9HWGtTXSe9O9CouuagHdHyjAB82f5capM=)
8: cpt5RAgtzGqSe2tQZjdg4D2WA0E.roa (hash: 8jg9MlATBiiFNT9Izoww+SGRXHn9l5TlN9GgD/T3YlI=)
9: g2L1Ckg2PdEviCbCq66EuHwj6s4.roa (hash: yQRf9YsIGhna0i1WbIuXI9A3Q/Zoyb3HRPF/J92zU/U=)
10: iZLlfuL5fkyQViX7MDGBKRfoKw8.roa (hash: QJj4R8PSS2uz6pf5eNhL303Omh3ETXGQxx47uMXmmwA=)
11: lU6d7ePd82R1RQygYGhFImrIFTw.roa (hash: eTV3PHC8L7+q7X6AQEeyA+TbOiZwiV2Wzom3Tk1Wu5A=)
12: mNyKHvh-ZzvywHbRbPxAB2YITpM.roa (hash: DMHicFuCe2CjcnqaSuEwET4bEyq4MbNuoENqwOAycio=)
13: mr_pNb5yoRFqFtKMWG7FgP2ifyU.roa (hash: KUyylK1Gn/i/rEUpdmb4WY0ip5PHMUeW+sIt34Rv4vU=)
14: qu_5X8JHr4yqGmfR7Z4agmkCTJg.roa (hash: pp2/dCo/iehzy+EhLzTvjRa68BviBR9e8y4FWQ8IXSI=)
15: vUylfTDcwUjT9ws66e9wdAqPzcg.roa (hash: Er/JWU9dw52/OcAiPzTg3upAwzRGmCG67anIQUk/sVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 14:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a8:9b:fc:d3:10:ae:89:91:15:80:9f:63:cb:8f:b3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jun 8 19:00:55 2026 GMT
Not After : Jun 9 19:00:55 2026 GMT
Subject: CN=798ddc72f6ddf9c2f3363c44bc6d33c8a127b31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:98:fb:3d:47:67:38:c6:b2:7a:9d:e9:3b:18:
18:38:97:b5:95:61:72:30:b8:e9:0c:0a:a3:27:a1:
d3:09:bb:45:c3:24:42:97:99:f6:94:be:50:38:17:
6e:79:09:54:f8:63:54:e0:a4:db:f1:30:63:ca:86:
ef:ab:42:1a:d2:4e:24:44:ca:e3:f5:c8:79:67:23:
63:99:1b:9a:1f:39:c0:af:d5:15:af:a7:ed:ac:a1:
71:ef:ec:cf:0b:43:e2:47:be:f6:d1:28:36:33:6a:
2b:e5:41:29:21:ea:cd:a4:81:86:c7:29:0a:e9:e1:
54:be:e1:bf:61:f1:e2:f9:29:cd:e1:d6:a0:bd:d3:
ff:5c:51:5d:0a:da:5c:4b:f2:15:e0:64:96:09:5a:
f5:f2:60:f7:76:5a:e8:44:d8:66:77:1f:8d:8b:a3:
00:aa:f8:43:69:4a:12:b5:c9:c3:f6:d6:9d:90:52:
5b:78:0b:e1:6b:c8:88:56:98:4d:a6:c1:6c:48:6e:
45:f0:f5:18:c7:35:e5:a0:48:93:d4:44:a5:df:84:
05:f0:69:4d:29:6e:4d:f5:25:da:3c:df:86:4f:28:
dd:37:07:9d:62:8d:bf:48:d4:f6:bd:f9:b9:2d:c9:
15:5b:3a:57:c1:8c:b8:4a:69:e8:8e:7f:47:8a:ab:
ca:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8D:DC:72:F6:DD:F9:C2:F3:36:3C:44:BC:6D:33:C8:A1:27:B3:1A
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f0:5c:4d:21:d1:89:74:cf:bf:2a:73:dd:11:10:0d:b8:29:
7c:5c:f9:0c:93:7e:78:b0:aa:13:a9:32:a1:9e:77:f9:11:99:
e1:dc:8a:66:81:36:6d:58:28:bf:1f:2e:78:ef:50:31:eb:9e:
15:6a:23:6a:60:c4:38:63:95:1f:2e:65:68:2d:82:4a:b4:b3:
d5:5f:6b:8e:63:d4:84:b3:62:5c:0e:1a:1d:20:bb:a2:6b:00:
8f:ca:0f:65:65:49:22:2c:4d:43:d0:4a:ac:63:63:a8:a6:38:
c9:e0:76:08:15:dd:53:06:e9:7e:81:6c:94:77:27:40:7d:6a:
fa:c4:bf:7d:4c:2f:83:2a:8b:9a:b5:61:4e:22:f9:04:99:f4:
5d:03:dc:5a:9a:30:7b:2c:e7:da:49:41:8a:1b:5d:36:43:14:
97:f8:72:89:62:6f:80:75:4c:3b:d5:5f:c0:06:a2:c0:93:16:
1a:95:04:1f:4f:cb:8b:f3:10:b3:4e:ea:89:58:cc:db:95:b2:
db:cb:69:80:63:4f:26:a3:c9:ff:4b:d0:c4:45:36:47:31:ab:
ba:34:c1:28:e6:91:a6:e2:28:9b:49:e7:75:9d:45:a7:2e:ca:
25:26:a7:04:8e:92:fd:d8:ec:0a:75:ff:58:b0:3e:52:04:c3:
ea:7a:08:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 23:45:43 2026 by rpki-client