$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft File: 10cBdWTHEby9V2gKDf0A8qXQmds.mft (raw, json) Hash identifier: HmYpTypqVsSl1hTOnwNir0FAgEb22kEqJdtbjGJts8I= Subject key identifier: 1E:E8:53:6E:CD:AA:14:CC:D2:EF:BB:10:6D:24:D0:E0:CC:33:6A:BA Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db Certificate serial: 019DA37920595EBD0F7A13B6552DB2982493 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft Manifest number: 196C Signing time: Sun 19 Apr 2026 02:01:57 +0000 Manifest this update: Sun 19 Apr 2026 02:01:57 +0000 Manifest next update: Mon 20 Apr 2026 02:01:57 +0000 Files and hashes: 1: 10cBdWTHEby9V2gKDf0A8qXQmds.crl (hash: pIU7FTs9Cnjn6CQm3kRBVYIjPdq82lBVeybtIrdk3Ac=) 2: 3_XuwEnK7hK05MXmz1vtfkaHSAA.roa (hash: o9siZPcWT3dVf1oD+f5/ipqIZ5M6DhvDg5nd+ba6zfw=) 3: 3rngGDt_iwfhoOnfpD1kt_StBx0.roa (hash: KjcAZXNR5n6zPZTAkslgvia87YFrMCL2teXsMct736o=) 4: 4VUm_geSRPJQwIGOeaAoFsu42EQ.roa (hash: B3ePVndHpxNK0Mu3H5cJRx+tUJcw9Q+xUJCk6fROmUU=) 5: 6vbDrANnc0Lws1NcQ-JKO66v7z0.roa (hash: x7FnjgcmwzniPl0CLMLAdYfrWNg5dDEnt8NbWXgXgQ4=) 6: E-mC0iAlIk0BNqElj570L59xiI4.roa (hash: 11beTDD0KykGX0WoUgJf8Vzp+SRqSq4zspVnh6gtlMQ=) 7: HQJmpAkNAw1AqZ0b48w_YH827nk.roa (hash: 7qIcvQ4TbN25SPRVWssmjozD9Nk/d25r5V3RF5LK48w=) 8: UuVkQuPgqTsDeNHD0WgB5nTMv8A.roa (hash: UCiMYIlZ0X9O8CD/EF/deQdiqlIkeR8UK6DAGXq5qYE=) 9: WsU0TA-x8x-AIVwWSVATXH41Db8.roa (hash: PoI0MFNsTc9HWGtTXSe9O9CouuagHdHyjAB82f5capM=) 10: b2RfWDslY-ySGKFmq3UTFYKduy0.roa (hash: 0aEcfEIIb3D7XC2fWQaWAzipVl05YpsQU97gOc5kyzc=) 11: cpt5RAgtzGqSe2tQZjdg4D2WA0E.roa (hash: 8jg9MlATBiiFNT9Izoww+SGRXHn9l5TlN9GgD/T3YlI=) 12: g2L1Ckg2PdEviCbCq66EuHwj6s4.roa (hash: yQRf9YsIGhna0i1WbIuXI9A3Q/Zoyb3HRPF/J92zU/U=) 13: iZLlfuL5fkyQViX7MDGBKRfoKw8.roa (hash: QJj4R8PSS2uz6pf5eNhL303Omh3ETXGQxx47uMXmmwA=) 14: lU6d7ePd82R1RQygYGhFImrIFTw.roa (hash: eTV3PHC8L7+q7X6AQEeyA+TbOiZwiV2Wzom3Tk1Wu5A=) 15: mr_pNb5yoRFqFtKMWG7FgP2ifyU.roa (hash: KUyylK1Gn/i/rEUpdmb4WY0ip5PHMUeW+sIt34Rv4vU=) 16: qu_5X8JHr4yqGmfR7Z4agmkCTJg.roa (hash: pp2/dCo/iehzy+EhLzTvjRa68BviBR9e8y4FWQ8IXSI=) 17: vUylfTDcwUjT9ws66e9wdAqPzcg.roa (hash: Er/JWU9dw52/OcAiPzTg3upAwzRGmCG67anIQUk/sVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:79:20:59:5e:bd:0f:7a:13:b6:55:2d:b2:98:24:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db Validity Not Before: Apr 19 02:01:57 2026 GMT Not After : Apr 20 02:01:57 2026 GMT Subject: CN=1ee8536ecdaa14ccd2efbb106d24d0e0cc336aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8b:40:24:57:7e:4b:d6:44:b8:2b:03:77:6f: 2e:5a:25:4a:2a:ca:63:23:cf:25:54:a8:07:a5:41: 49:f4:7e:eb:a3:3c:a4:d6:8f:26:64:8b:1e:bd:8f: 10:89:68:b2:db:8a:c6:eb:18:07:83:74:f0:49:32: bb:1c:6a:50:0e:b2:07:04:7b:cd:e2:5c:d5:00:97: 06:5f:0c:ab:ac:9d:c9:be:27:fb:d4:97:47:60:0e: 8b:e7:9d:44:49:8e:bb:e9:11:8b:28:16:7a:cf:8e: 1d:16:36:3a:00:88:c2:8d:9d:eb:af:e4:48:06:58: 1e:52:91:98:24:a3:33:09:92:ae:63:af:aa:6c:ea: f9:4b:ec:e8:32:c4:02:87:c9:ee:63:c4:4f:58:81: 72:0d:ff:fe:36:eb:50:ac:e1:70:5b:7a:2e:0d:f4: 8c:66:97:5d:cb:9f:06:9f:ad:0f:1c:71:7f:ee:ea: 20:ef:3f:71:ea:7f:ed:f7:a3:44:a7:de:c1:e8:d5: 9e:78:26:56:8a:1e:1e:55:fb:e4:40:3f:95:df:00: 4e:9d:fb:04:ff:54:fd:c3:54:ea:f0:89:b5:d2:05: 2f:91:7e:53:8a:88:a4:c5:58:ab:d3:57:49:9d:52: 42:74:c2:5d:3a:38:cd:e5:f0:0f:3f:4f:eb:e1:c6: 3a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E8:53:6E:CD:AA:14:CC:D2:EF:BB:10:6D:24:D0:E0:CC:33:6A:BA X509v3 Authority Key Identifier: keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:0e:98:20:29:89:70:1f:d5:92:d9:62:1f:ca:e1:5c:c6:bf: 56:ba:1f:2a:10:88:6c:b5:85:d9:fc:53:8b:0c:f8:28:15:dc: 3c:06:c9:56:70:c3:92:77:01:37:e8:98:c7:da:3a:37:ba:4d: a7:c8:09:5d:86:2e:a2:fa:e3:ba:79:66:ca:b1:6e:f8:5b:ad: 09:6e:40:53:96:84:bc:75:5a:fd:a6:cc:20:7b:d8:df:68:a7: 14:95:16:ca:b7:79:e2:e1:8e:e5:5e:1a:e3:08:c4:32:a3:a2: e3:78:1f:a4:72:ab:cd:c1:98:f1:36:94:aa:8d:62:7d:52:ae: a7:d3:23:83:d0:9d:24:21:8c:43:65:06:de:90:31:24:3e:74: 96:3c:ae:c1:80:91:e9:ef:a5:c2:d4:d2:f2:60:75:d3:1a:94: 06:bf:7e:d4:c6:59:9f:a1:42:83:5b:59:b2:bc:e5:32:d0:67: d4:ce:16:35:99:57:16:43:01:0c:22:d5:e4:cf:a9:23:13:0b: cd:81:e4:4b:ef:3c:1d:88:7e:98:02:b0:02:4a:a2:a0:04:9b: 9b:eb:07:b7:39:fe:59:93:38:97:84:b4:bb:4b:bb:6c:80:05: ad:05:4d:3f:4b:e3:6c:6d:e6:72:25:14:c3:63:91:b5:fc:b3: a7:36:db:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2jeSBZXr0PehO2VS2ymCSTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk MDk5ZGIwHhcNMjYwNDE5MDIwMTU3WhcNMjYwNDIwMDIwMTU3WjAzMTEwLwYDVQQD EygxZWU4NTM2ZWNkYWExNGNjZDJlZmJiMTA2ZDI0ZDBlMGNjMzM2YWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtotAJFd+S9ZEuCsDd28uWiVKKspj I88lVKgHpUFJ9H7rozyk1o8mZIsevY8QiWiy24rG6xgHg3TwSTK7HGpQDrIHBHvN 4lzVAJcGXwyrrJ3Jvif71JdHYA6L551ESY676RGLKBZ6z44dFjY6AIjCjZ3rr+RI BlgeUpGYJKMzCZKuY6+qbOr5S+zoMsQCh8nuY8RPWIFyDf/+NutQrOFwW3ouDfSM Zpddy58Gn60PHHF/7uog7z9x6n/t96NEp97B6NWeeCZWih4eVfvkQD+V3wBOnfsE /1T9w1Tq8Im10gUvkX5TioikxVir01dJnVJCdMJdOjjN5fAPP0/r4cY6NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7oU27NqhTM0u+7EG0k0ODMM2q6MB8GA1UdIwQY MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt NGYwZThjZTExYTdkLzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgA6YICmJ cB/VktliH8rhXMa/VrofKhCIbLWF2fxTiwz4KBXcPAbJVnDDkncBN+iYx9o6N7pN p8gJXYYuovrjunlmyrFu+FutCW5AU5aEvHVa/abMIHvY32inFJUWyrd54uGO5V4a 4wjEMqOi43gfpHKrzcGY8TaUqo1ifVKup9Mjg9CdJCGMQ2UG3pAxJD50ljyuwYCR 6e+lwtTS8mB10xqUBr9+1MZZn6FCg1tZsrzlMtBn1M4WNZlXFkMBDCLV5M+pIxML zYHkS+88HYh+mAKwAkqioASbm+sHtzn+WZM4l4S0u0u7bIAFrQVNP0vjbG3mciUU w2ORtfyzpzbb0Q== -----END CERTIFICATE-----Generated at Sun Apr 19 09:31:57 2026 by rpki-client