$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft File: 10cBdWTHEby9V2gKDf0A8qXQmds.mft (raw, json) Hash identifier: 1tPvAn8wGZhWEuhJpgIU4DucOr4A7uqkcnhIJxhdPhU= Subject key identifier: 0C:91:EE:CB:C0:6C:89:06:7F:A7:CB:D4:ED:14:E9:A4:EB:F5:B1:7E Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db Certificate serial: 019DC070E4815401F7CDB85B7F96DBA8C34B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft Manifest number: 197B Signing time: Fri 24 Apr 2026 17:01:57 +0000 Manifest this update: Fri 24 Apr 2026 17:01:57 +0000 Manifest next update: Sat 25 Apr 2026 17:01:57 +0000 Files and hashes: 1: 10cBdWTHEby9V2gKDf0A8qXQmds.crl (hash: HFtPKKylCfpBKouRci0NH97Q6V0LHfKmRsW90LbBqQY=) 2: 3_XuwEnK7hK05MXmz1vtfkaHSAA.roa (hash: o9siZPcWT3dVf1oD+f5/ipqIZ5M6DhvDg5nd+ba6zfw=) 3: 3rngGDt_iwfhoOnfpD1kt_StBx0.roa (hash: KjcAZXNR5n6zPZTAkslgvia87YFrMCL2teXsMct736o=) 4: 4VUm_geSRPJQwIGOeaAoFsu42EQ.roa (hash: B3ePVndHpxNK0Mu3H5cJRx+tUJcw9Q+xUJCk6fROmUU=) 5: 6vbDrANnc0Lws1NcQ-JKO66v7z0.roa (hash: x7FnjgcmwzniPl0CLMLAdYfrWNg5dDEnt8NbWXgXgQ4=) 6: E-mC0iAlIk0BNqElj570L59xiI4.roa (hash: 11beTDD0KykGX0WoUgJf8Vzp+SRqSq4zspVnh6gtlMQ=) 7: HQJmpAkNAw1AqZ0b48w_YH827nk.roa (hash: 7qIcvQ4TbN25SPRVWssmjozD9Nk/d25r5V3RF5LK48w=) 8: UuVkQuPgqTsDeNHD0WgB5nTMv8A.roa (hash: UCiMYIlZ0X9O8CD/EF/deQdiqlIkeR8UK6DAGXq5qYE=) 9: WsU0TA-x8x-AIVwWSVATXH41Db8.roa (hash: PoI0MFNsTc9HWGtTXSe9O9CouuagHdHyjAB82f5capM=) 10: b2RfWDslY-ySGKFmq3UTFYKduy0.roa (hash: 0aEcfEIIb3D7XC2fWQaWAzipVl05YpsQU97gOc5kyzc=) 11: cpt5RAgtzGqSe2tQZjdg4D2WA0E.roa (hash: 8jg9MlATBiiFNT9Izoww+SGRXHn9l5TlN9GgD/T3YlI=) 12: g2L1Ckg2PdEviCbCq66EuHwj6s4.roa (hash: yQRf9YsIGhna0i1WbIuXI9A3Q/Zoyb3HRPF/J92zU/U=) 13: iZLlfuL5fkyQViX7MDGBKRfoKw8.roa (hash: QJj4R8PSS2uz6pf5eNhL303Omh3ETXGQxx47uMXmmwA=) 14: lU6d7ePd82R1RQygYGhFImrIFTw.roa (hash: eTV3PHC8L7+q7X6AQEeyA+TbOiZwiV2Wzom3Tk1Wu5A=) 15: mr_pNb5yoRFqFtKMWG7FgP2ifyU.roa (hash: KUyylK1Gn/i/rEUpdmb4WY0ip5PHMUeW+sIt34Rv4vU=) 16: qu_5X8JHr4yqGmfR7Z4agmkCTJg.roa (hash: pp2/dCo/iehzy+EhLzTvjRa68BviBR9e8y4FWQ8IXSI=) 17: vUylfTDcwUjT9ws66e9wdAqPzcg.roa (hash: Er/JWU9dw52/OcAiPzTg3upAwzRGmCG67anIQUk/sVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Apr 2026 16:40:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:c0:70:e4:81:54:01:f7:cd:b8:5b:7f:96:db:a8:c3:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db Validity Not Before: Apr 24 17:01:57 2026 GMT Not After : Apr 25 17:01:57 2026 GMT Subject: CN=0c91eecbc06c89067fa7cbd4ed14e9a4ebf5b17e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:75:81:17:ff:1d:24:d3:1a:74:87:11:7f:37: 6e:c5:04:7e:1f:74:f9:30:30:25:26:8e:d6:2b:8f: 6f:7e:2a:e1:30:7b:35:ba:5b:4c:b2:d0:90:bb:14: 6b:62:83:8f:68:1d:b1:07:99:e9:d1:13:ad:28:ff: 0c:03:53:84:e2:e7:cf:8e:89:45:46:bb:a2:ef:4d: 46:9b:32:c7:9a:79:dd:ae:57:e7:39:d4:4c:34:72: 54:7f:b1:71:b5:85:f9:63:1c:5c:d5:5f:9d:22:1e: ec:b3:c1:48:fe:7e:4b:e4:5f:92:7c:98:2c:fd:d8: 2d:f0:c8:4e:45:d3:a5:44:14:8d:85:2e:11:b4:4e: ed:68:aa:ad:05:53:2a:13:64:6d:0a:08:5e:99:d0: d9:1e:10:5d:f1:df:c8:69:1d:05:31:0d:0c:eb:4f: 36:da:dd:23:a9:5c:12:b6:75:14:2f:17:22:2c:c0: e9:de:1c:9e:af:69:cc:fb:f7:65:a1:30:bb:0f:3f: 2b:9a:82:80:e3:b0:3c:31:92:7b:d7:02:9b:4d:28: c4:3a:b2:4b:9e:78:4b:27:af:5c:4b:c1:ee:7b:91: cb:00:e1:4d:1c:5e:f1:13:04:2b:50:02:0a:1f:55: 61:b7:e7:a8:1e:66:23:2b:64:5c:8f:fc:e7:07:18: f4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:91:EE:CB:C0:6C:89:06:7F:A7:CB:D4:ED:14:E9:A4:EB:F5:B1:7E X509v3 Authority Key Identifier: keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:36:ea:b8:a6:d6:c0:17:d6:11:be:1c:21:d8:be:0a:20:24: 33:4c:b3:a8:d1:b6:5f:3f:c4:b6:97:d2:13:2c:34:15:a0:87: 17:48:d1:4c:1b:0f:5c:85:5b:d8:83:d6:a7:2e:15:0c:5b:30: 45:b8:ba:ba:61:69:71:21:a7:77:87:c3:44:67:3b:83:84:cc: e7:91:1a:be:90:73:08:08:05:9d:52:56:71:f9:3d:96:0b:7d: ba:9f:73:89:6a:63:e4:4c:c2:06:ef:67:c6:7a:74:60:6d:29: 91:62:c6:ff:dc:9a:2d:73:68:c9:0e:94:5d:2c:b5:85:06:54: ed:66:29:8d:d3:f1:43:c8:0f:cd:33:fe:d1:ce:ad:f9:c8:f4: 97:3b:48:ae:32:59:c3:f4:79:82:fe:69:d6:96:d6:76:97:4a: b1:18:73:1e:75:15:54:04:dc:82:db:46:98:6a:f0:20:77:a9: 3e:07:4d:4e:f7:89:76:fd:28:e0:b3:a0:4c:29:0a:ee:e2:f6: 7b:ae:d4:a7:00:19:f7:78:35:ee:b9:1a:b1:11:4e:20:af:07: 50:69:f1:17:e9:1d:05:85:49:1a:bd:54:f4:8a:a6:4d:d7:9f: 89:cd:b4:b0:99:ff:61:c3:50:9d:f3:4d:70:3c:7c:c2:f3:bb: be:bf:df:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3AcOSBVAH3zbhbf5bbqMNLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk MDk5ZGIwHhcNMjYwNDI0MTcwMTU3WhcNMjYwNDI1MTcwMTU3WjAzMTEwLwYDVQQD EygwYzkxZWVjYmMwNmM4OTA2N2ZhN2NiZDRlZDE0ZTlhNGViZjViMTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nWBF/8dJNMadIcRfzduxQR+H3T5 MDAlJo7WK49vfirhMHs1ultMstCQuxRrYoOPaB2xB5np0ROtKP8MA1OE4ufPjolF Rrui701GmzLHmnndrlfnOdRMNHJUf7FxtYX5Yxxc1V+dIh7ss8FI/n5L5F+SfJgs /dgt8MhORdOlRBSNhS4RtE7taKqtBVMqE2RtCghemdDZHhBd8d/IaR0FMQ0M6082 2t0jqVwStnUULxciLMDp3hyer2nM+/dloTC7Dz8rmoKA47A8MZJ71wKbTSjEOrJL nnhLJ69cS8Hue5HLAOFNHF7xEwQrUAIKH1Vht+eoHmYjK2Rcj/znBxj0aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyR7svAbIkGf6fL1O0U6aTr9bF+MB8GA1UdIwQY MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt NGYwZThjZTExYTdkLzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzbquKbW wBfWEb4cIdi+CiAkM0yzqNG2Xz/EtpfSEyw0FaCHF0jRTBsPXIVb2IPWpy4VDFsw Rbi6umFpcSGnd4fDRGc7g4TM55EavpBzCAgFnVJWcfk9lgt9up9ziWpj5EzCBu9n xnp0YG0pkWLG/9yaLXNoyQ6UXSy1hQZU7WYpjdPxQ8gPzTP+0c6t+cj0lztIrjJZ w/R5gv5p1pbWdpdKsRhzHnUVVATcgttGmGrwIHepPgdNTveJdv0o4LOgTCkK7uL2 e67UpwAZ93g17rkasRFOIK8HUGnxF+kdBYVJGr1U9IqmTdefic20sJn/YcNQnfNN cDx8wvO7vr/fHw== -----END CERTIFICATE-----Generated at Fri Apr 24 19:18:48 2026 by rpki-client