
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
File: 10cBdWTHEby9V2gKDf0A8qXQmds.mft (raw, json)
Hash identifier: 7WyLPInxCqZcXGXEl//htXAfjlFxjXi66t8F/mOdQk8=
Subject key identifier: CC:B0:4C:7B:4B:88:B6:66:40:59:99:6A:89:45:A9:42:B5:A8:4D:AA
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 019EBDD99ED0F20DD0985822C3E6446D99AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
Manifest number: 1A00
Signing time: Fri 12 Jun 2026 22:00:16 +0000
Manifest this update: Fri 12 Jun 2026 22:00:16 +0000
Manifest next update: Sat 13 Jun 2026 22:00:16 +0000
Files and hashes: 1: 10cBdWTHEby9V2gKDf0A8qXQmds.crl (hash: u1zdwstmBF1Vxc3zteI+SDq+oVOEjNTPn2Z9zAXChEs=)
2: 3rngGDt_iwfhoOnfpD1kt_StBx0.roa (hash: KjcAZXNR5n6zPZTAkslgvia87YFrMCL2teXsMct736o=)
3: 4VUm_geSRPJQwIGOeaAoFsu42EQ.roa (hash: B3ePVndHpxNK0Mu3H5cJRx+tUJcw9Q+xUJCk6fROmUU=)
4: E-mC0iAlIk0BNqElj570L59xiI4.roa (hash: 11beTDD0KykGX0WoUgJf8Vzp+SRqSq4zspVnh6gtlMQ=)
5: HQJmpAkNAw1AqZ0b48w_YH827nk.roa (hash: 7qIcvQ4TbN25SPRVWssmjozD9Nk/d25r5V3RF5LK48w=)
6: UuVkQuPgqTsDeNHD0WgB5nTMv8A.roa (hash: UCiMYIlZ0X9O8CD/EF/deQdiqlIkeR8UK6DAGXq5qYE=)
7: WsU0TA-x8x-AIVwWSVATXH41Db8.roa (hash: PoI0MFNsTc9HWGtTXSe9O9CouuagHdHyjAB82f5capM=)
8: cpt5RAgtzGqSe2tQZjdg4D2WA0E.roa (hash: 8jg9MlATBiiFNT9Izoww+SGRXHn9l5TlN9GgD/T3YlI=)
9: g2L1Ckg2PdEviCbCq66EuHwj6s4.roa (hash: yQRf9YsIGhna0i1WbIuXI9A3Q/Zoyb3HRPF/J92zU/U=)
10: iZLlfuL5fkyQViX7MDGBKRfoKw8.roa (hash: QJj4R8PSS2uz6pf5eNhL303Omh3ETXGQxx47uMXmmwA=)
11: lU6d7ePd82R1RQygYGhFImrIFTw.roa (hash: eTV3PHC8L7+q7X6AQEeyA+TbOiZwiV2Wzom3Tk1Wu5A=)
12: mNyKHvh-ZzvywHbRbPxAB2YITpM.roa (hash: DMHicFuCe2CjcnqaSuEwET4bEyq4MbNuoENqwOAycio=)
13: mr_pNb5yoRFqFtKMWG7FgP2ifyU.roa (hash: KUyylK1Gn/i/rEUpdmb4WY0ip5PHMUeW+sIt34Rv4vU=)
14: qu_5X8JHr4yqGmfR7Z4agmkCTJg.roa (hash: pp2/dCo/iehzy+EhLzTvjRa68BviBR9e8y4FWQ8IXSI=)
15: vUylfTDcwUjT9ws66e9wdAqPzcg.roa (hash: Er/JWU9dw52/OcAiPzTg3upAwzRGmCG67anIQUk/sVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:d9:9e:d0:f2:0d:d0:98:58:22:c3:e6:44:6d:99:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jun 12 22:00:16 2026 GMT
Not After : Jun 13 22:00:16 2026 GMT
Subject: CN=ccb04c7b4b88b6664059996a8945a942b5a84daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1c:1e:18:15:65:cf:d9:4a:4c:ff:5c:76:c1:
7e:15:c3:47:3a:bd:be:55:c7:05:ce:92:37:91:ae:
80:40:50:b7:70:a2:69:74:50:1c:cf:0d:a5:fa:ab:
30:d8:04:44:5b:43:fe:4b:69:a2:f9:48:78:37:77:
f3:1b:b2:fd:21:50:0e:e6:f9:cc:44:5d:a1:2b:53:
8a:0b:dc:7f:09:b5:0a:ec:05:b0:22:03:04:8a:0c:
74:f7:2a:fc:1e:c4:5e:a1:c0:8c:20:3b:6d:d8:78:
1c:0a:e5:08:7b:0b:e5:ab:b4:14:14:e4:e0:7a:2d:
dc:ff:bc:d4:35:5e:a1:93:1e:be:d2:63:8b:da:7c:
7d:e3:41:d7:4c:b2:2e:19:a0:2d:7f:94:b3:55:c7:
02:8a:8a:ec:c8:a0:a1:75:60:3b:10:36:2a:3c:df:
b5:0d:77:cc:b5:a5:ae:60:9c:e9:76:a3:7a:4b:cd:
33:ff:13:a6:ce:6d:79:db:18:ac:81:c5:a2:5a:a8:
5d:70:44:2a:b7:2e:48:f3:fc:e7:ac:81:44:9f:3b:
be:d7:41:54:88:e3:ca:18:81:00:48:79:4b:c1:3a:
67:05:4d:6f:c9:28:19:78:9c:00:e0:8c:fc:a5:8a:
76:e1:08:f1:09:e6:4b:a8:37:0f:3a:69:f8:9e:93:
62:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B0:4C:7B:4B:88:B6:66:40:59:99:6A:89:45:A9:42:B5:A8:4D:AA
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fa:e1:ec:97:7a:82:e3:ff:43:87:21:10:d5:5d:a7:f6:71:
c3:45:24:e8:a6:7c:d1:68:48:f6:f5:b9:a6:38:17:6d:90:12:
ae:65:10:14:61:ca:7f:f1:63:79:89:b0:41:e5:54:5e:a4:ca:
39:ef:23:e9:b4:2e:48:3c:c8:96:f8:8b:db:2a:26:9c:aa:ca:
e1:9a:78:21:80:ff:a9:36:12:c3:bb:85:d9:67:00:4c:d3:ff:
e8:9d:db:06:d1:1a:4c:63:d8:4e:75:e6:4a:8c:9d:c6:59:5d:
53:0c:a6:42:3b:0b:b2:1b:a8:8b:84:df:fd:fe:bb:f5:6d:3b:
d5:94:3d:8a:2e:3b:d5:26:30:03:3f:87:ef:3e:21:8a:1a:37:
40:e0:3f:07:2b:59:bd:a2:e8:60:48:e9:13:25:1b:64:d5:42:
e6:a6:da:4f:b2:f9:a5:bc:79:b6:5b:11:9c:f0:f8:79:37:85:
76:64:63:df:8a:be:18:be:a9:c3:0c:34:ad:0e:37:5a:43:1b:
16:5a:f1:a4:c5:81:b7:15:73:36:80:ca:a5:cb:c4:f9:77:06:
56:3d:da:86:3f:d9:29:97:8d:f5:f4:d4:f7:95:80:31:66:ab:
fb:6b:35:ac:a5:fb:9e:c1:fd:5a:0b:be:be:d9:43:55:e8:be:
5c:ac:3c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:52 2026 by rpki-client