$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft File: 10cBdWTHEby9V2gKDf0A8qXQmds.mft (raw, json) Hash identifier: mXftm1nfMWYC5P6KMaoe1JtPfNQgvBgCeG9COwsBqO4= Subject key identifier: 56:F2:8F:4D:D0:77:39:DF:B7:1F:03:01:C6:E1:39:C3:01:71:D3:37 Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db Certificate serial: 019CAA5931F60E5835D5AAD0F3539BA7AB48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft Manifest number: 18EB Signing time: Sun 01 Mar 2026 17:01:38 +0000 Manifest this update: Sun 01 Mar 2026 17:01:38 +0000 Manifest next update: Mon 02 Mar 2026 17:01:38 +0000 Files and hashes: 1: 10cBdWTHEby9V2gKDf0A8qXQmds.crl (hash: +JmZnUvD+CnABgotRFcbDlZKp/TAW3cPdO5Z8LvUcV4=) 2: 3_XuwEnK7hK05MXmz1vtfkaHSAA.roa (hash: o9siZPcWT3dVf1oD+f5/ipqIZ5M6DhvDg5nd+ba6zfw=) 3: 3rngGDt_iwfhoOnfpD1kt_StBx0.roa (hash: KjcAZXNR5n6zPZTAkslgvia87YFrMCL2teXsMct736o=) 4: 4VUm_geSRPJQwIGOeaAoFsu42EQ.roa (hash: B3ePVndHpxNK0Mu3H5cJRx+tUJcw9Q+xUJCk6fROmUU=) 5: 6vbDrANnc0Lws1NcQ-JKO66v7z0.roa (hash: x7FnjgcmwzniPl0CLMLAdYfrWNg5dDEnt8NbWXgXgQ4=) 6: E-mC0iAlIk0BNqElj570L59xiI4.roa (hash: 11beTDD0KykGX0WoUgJf8Vzp+SRqSq4zspVnh6gtlMQ=) 7: HQJmpAkNAw1AqZ0b48w_YH827nk.roa (hash: 7qIcvQ4TbN25SPRVWssmjozD9Nk/d25r5V3RF5LK48w=) 8: UuVkQuPgqTsDeNHD0WgB5nTMv8A.roa (hash: UCiMYIlZ0X9O8CD/EF/deQdiqlIkeR8UK6DAGXq5qYE=) 9: WsU0TA-x8x-AIVwWSVATXH41Db8.roa (hash: PoI0MFNsTc9HWGtTXSe9O9CouuagHdHyjAB82f5capM=) 10: b2RfWDslY-ySGKFmq3UTFYKduy0.roa (hash: 0aEcfEIIb3D7XC2fWQaWAzipVl05YpsQU97gOc5kyzc=) 11: cpt5RAgtzGqSe2tQZjdg4D2WA0E.roa (hash: 8jg9MlATBiiFNT9Izoww+SGRXHn9l5TlN9GgD/T3YlI=) 12: g2L1Ckg2PdEviCbCq66EuHwj6s4.roa (hash: yQRf9YsIGhna0i1WbIuXI9A3Q/Zoyb3HRPF/J92zU/U=) 13: iZLlfuL5fkyQViX7MDGBKRfoKw8.roa (hash: QJj4R8PSS2uz6pf5eNhL303Omh3ETXGQxx47uMXmmwA=) 14: lU6d7ePd82R1RQygYGhFImrIFTw.roa (hash: eTV3PHC8L7+q7X6AQEeyA+TbOiZwiV2Wzom3Tk1Wu5A=) 15: mr_pNb5yoRFqFtKMWG7FgP2ifyU.roa (hash: KUyylK1Gn/i/rEUpdmb4WY0ip5PHMUeW+sIt34Rv4vU=) 16: qu_5X8JHr4yqGmfR7Z4agmkCTJg.roa (hash: pp2/dCo/iehzy+EhLzTvjRa68BviBR9e8y4FWQ8IXSI=) 17: vUylfTDcwUjT9ws66e9wdAqPzcg.roa (hash: Er/JWU9dw52/OcAiPzTg3upAwzRGmCG67anIQUk/sVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 17:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:59:31:f6:0e:58:35:d5:aa:d0:f3:53:9b:a7:ab:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db Validity Not Before: Mar 1 17:01:38 2026 GMT Not After : Mar 2 17:01:38 2026 GMT Subject: CN=56f28f4dd07739dfb71f0301c6e139c30171d337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8e:a0:9b:e0:80:ca:8c:83:c0:4e:c8:45:20: 8b:69:72:54:0a:4c:78:8c:1e:2d:59:26:03:d7:c8: 9d:5d:cb:84:0f:a5:e9:ab:e9:b4:01:9a:d9:98:c5: 2b:17:aa:dd:90:c0:5a:7b:3a:b8:79:b1:67:fc:6c: fb:6e:3e:68:4c:fb:f2:40:09:d6:fa:23:34:a3:4e: 6f:00:66:5f:27:9f:be:93:95:45:7f:7e:cf:01:91: 70:8f:06:c5:d5:fa:cb:68:55:34:a2:e2:25:98:2b: b2:e2:b3:f9:dd:bd:78:48:4a:1e:d3:99:56:d4:e0: b5:0b:29:02:9b:cc:47:b5:d1:c4:12:91:12:d1:93: da:f4:6e:73:c8:5c:49:f7:10:13:8c:05:e8:b6:e3: e3:1c:8e:a6:48:3e:f1:53:5e:50:e0:03:88:30:06: c5:18:4b:b2:b2:f1:93:6b:6a:a6:80:95:7e:84:ea: 86:00:81:f3:b9:ab:03:7a:05:d9:9b:9f:0e:31:ef: 80:93:59:ed:05:e8:e8:f2:c8:6f:3e:0d:67:7e:4a: e5:54:d1:28:71:70:5b:44:cd:ed:b6:ec:da:48:e6: 82:52:a8:9b:c6:25:1f:01:99:f3:15:6d:df:97:be: 23:a6:6e:21:9d:a2:2f:70:00:8f:1b:33:3c:e4:33: 56:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F2:8F:4D:D0:77:39:DF:B7:1F:03:01:C6:E1:39:C3:01:71:D3:37 X509v3 Authority Key Identifier: keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:12:92:21:ab:4d:03:0d:34:f8:da:80:50:e0:07:c0:8b:57: b6:79:dd:57:81:7b:45:27:c8:6e:ea:de:58:d0:16:cc:2c:85: 81:f5:3f:2e:f1:ca:8d:f6:cd:49:c8:f7:19:31:1d:9e:47:67: 90:e3:c5:a3:4b:21:74:3d:97:a3:86:a1:8f:02:e3:8d:ad:8b: 89:64:ec:ba:d0:e3:bc:da:2c:95:a3:fd:79:af:02:c5:cd:49: 31:2c:2a:7a:a9:7e:60:4b:c6:dc:e6:cc:6e:d2:07:e4:ca:23: c5:dd:83:eb:f4:cc:93:da:5c:66:94:f2:6d:82:15:11:f5:7f: 53:71:5c:b6:63:e0:a4:99:88:26:54:76:23:72:cb:44:14:09: 13:1b:96:34:ad:b4:4b:0b:af:87:ca:97:a7:6b:97:2c:61:82: 89:78:4c:a5:be:55:d1:90:aa:96:8f:b6:b1:5c:f3:2b:d3:53: fc:7f:cc:94:55:98:b7:32:42:06:ba:21:fa:c7:8b:1a:cb:32: 40:a4:1a:8b:91:5f:7e:db:0f:91:ad:86:f7:6e:ec:cd:5c:a7: 76:2e:59:45:ef:4a:c3:ae:3e:45:1f:b2:4e:28:ab:0b:c4:52: 39:f8:9d:6d:f8:8b:bf:03:0d:4b:1b:d5:2b:0e:0b:e4:b9:07: ec:d3:c6:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqWTH2Dlg11arQ81Obp6tIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk MDk5ZGIwHhcNMjYwMzAxMTcwMTM4WhcNMjYwMzAyMTcwMTM4WjAzMTEwLwYDVQQD Eyg1NmYyOGY0ZGQwNzczOWRmYjcxZjAzMDFjNmUxMzljMzAxNzFkMzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Y6gm+CAyoyDwE7IRSCLaXJUCkx4 jB4tWSYD18idXcuED6Xpq+m0AZrZmMUrF6rdkMBaezq4ebFn/Gz7bj5oTPvyQAnW +iM0o05vAGZfJ5++k5VFf37PAZFwjwbF1frLaFU0ouIlmCuy4rP53b14SEoe05lW 1OC1CykCm8xHtdHEEpES0ZPa9G5zyFxJ9xATjAXotuPjHI6mSD7xU15Q4AOIMAbF GEuysvGTa2qmgJV+hOqGAIHzuasDegXZm58OMe+Ak1ntBejo8shvPg1nfkrlVNEo cXBbRM3ttuzaSOaCUqibxiUfAZnzFW3fl74jpm4hnaIvcACPGzM85DNWdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbyj03Qdznftx8DAcbhOcMBcdM3MB8GA1UdIwQY MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt NGYwZThjZTExYTdkLzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRKSIatN Aw00+NqAUOAHwItXtnndV4F7RSfIbureWNAWzCyFgfU/LvHKjfbNScj3GTEdnkdn kOPFo0shdD2Xo4ahjwLjja2LiWTsutDjvNoslaP9ea8Cxc1JMSwqeql+YEvG3ObM btIH5Mojxd2D6/TMk9pcZpTybYIVEfV/U3FctmPgpJmIJlR2I3LLRBQJExuWNK20 Swuvh8qXp2uXLGGCiXhMpb5V0ZCqlo+2sVzzK9NT/H/MlFWYtzJCBroh+seLGssy QKQai5FfftsPka2G927szVyndi5ZRe9Kw64+RR+yTiirC8RSOfidbfiLvwMNSxvV Kw4L5LkH7NPGZg== -----END CERTIFICATE-----Generated at Mon Mar 2 02:15:10 2026 by rpki-client