
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
File: 10cBdWTHEby9V2gKDf0A8qXQmds.mft (raw, json)
Hash identifier: ze7xV/oofC4D3p66hS/ZvDr2BAw7LswQ/FQ/cZ3wkEg=
Subject key identifier: 52:B6:F8:69:D6:80:7E:18:04:AF:E6:D9:1D:8B:A5:50:2F:BC:40:7B
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A0CE9118A8C78DDDFE7957AA00D6DBDC23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
Manifest number: 1B27
Signing time: Wed 23 Sep 2026 14:00:10 +0000
Manifest this update: Wed 23 Sep 2026 14:00:10 +0000
Manifest next update: Thu 24 Sep 2026 14:00:10 +0000
Files and hashes: 1: 10cBdWTHEby9V2gKDf0A8qXQmds.crl (hash: aZn5ulxbBdXrLK4UddrTO+eggko1wt1pu9YW+I1ru+Y=)
2: 2NUk4-WXGTUF0GeRTyrSDLbq3VI.roa (hash: EXU9HQQMoERyAYQurjGAOh6YNj+Rb1FRWmfk9KwEk5I=)
3: 3FpaNUsc8mcx-Ib8oSSizkRATfQ.roa (hash: ObYD8tt+7rdZBauoMipJQYsm8/hKYkl44vas1c5JeLY=)
4: 4VUm_geSRPJQwIGOeaAoFsu42EQ.roa (hash: B3ePVndHpxNK0Mu3H5cJRx+tUJcw9Q+xUJCk6fROmUU=)
5: 7VTsSzgjCruuT9D_oo_GpCePRmA.roa (hash: 2bYUaq7TmrIdQwCJpi7WU1r54hlWSNb2+szJ26QwC/w=)
6: 8vxK53_z8HYklhUFWyAkpktEuw0.roa (hash: fteTV33OleXot1hOEaY8Dm7beVaXBAoxCGUbPRMoK00=)
7: BIyVEriVirZL2G6IXmONC3j3lQM.roa (hash: 2KsgdSq3eO8pkxPOaGPnwvEW5mBPFvoUQw9KkpOW5GY=)
8: CzuedwFs6U5hTvuOKKcEDZJ3m4M.roa (hash: nr0fY8ExMvANSEMYgY5geen0UP5hnXCKbuR1OPzJBig=)
9: Dew0eb_HAG7ZDSF4NKHJadP-gkc.roa (hash: yeQjaVa1qWsFYF/Nfl2QRVridzOhdfUMldU4qSs4j9I=)
10: DwcDJC-CJaGVWf9qHcY4vwfNCUA.roa (hash: kA9UN61i21C9VPza4E7NFLe7xs0KibzhsYhJ5co5Az4=)
11: Ec6pumLbFWm-2ggg4GTIyZ5WhHI.roa (hash: BAbSE9dO4T1GnCKBKv9HoFvZtw+ItuiuepY9geBARxM=)
12: GxEm1KAYx1EaaM9vnLw4zKeoy8s.roa (hash: yKdLPkbxMhk4y0yXKwsRzEIoL/f56tRZaFXGiNAI0m4=)
13: T4lVyhCOiVnOTQ3Lg5EJjC_elNQ.roa (hash: uT4CMpYcd9PSs23MYUhP1OLu5a4ln+lpqzMRNI+3ytE=)
14: UuVkQuPgqTsDeNHD0WgB5nTMv8A.roa (hash: UCiMYIlZ0X9O8CD/EF/deQdiqlIkeR8UK6DAGXq5qYE=)
15: Y_jD6XfBGC3j1T4Uy_rcOPU_LbU.roa (hash: 3ky9pLDHWdQLzf5p8PePoy070w7qJI1DOvNViZYREg0=)
16: a6Mf22KbcVSVo6zfFVmT3svRjsA.roa (hash: PAy1Jv2hRGR0Vi2DoaVy7uOqdlSIsq+J07zQQtyu5Gk=)
17: aBfCZ03S1Y0sPluo5LBFUZWFYMc.roa (hash: Feultne/Hmjwrd1YJFj/DkrcIFBiGq7nwTwN4dvrKfs=)
18: cpt5RAgtzGqSe2tQZjdg4D2WA0E.roa (hash: 8jg9MlATBiiFNT9Izoww+SGRXHn9l5TlN9GgD/T3YlI=)
19: g2L1Ckg2PdEviCbCq66EuHwj6s4.roa (hash: yQRf9YsIGhna0i1WbIuXI9A3Q/Zoyb3HRPF/J92zU/U=)
20: i1_J0js7GSnwnFT6BQjKxFjCKAo.roa (hash: zSpyHhpf50CixxMSNhKrSqsP9AZoPmaaRWKJ+roEr9w=)
21: iXaj_kYTlkm0fAGHBa2-E20g17Q.roa (hash: eFFfAbmshTsHNFLpZKWGQ2ZVnPIvFCyKX8Nbj611da0=)
22: iZLlfuL5fkyQViX7MDGBKRfoKw8.roa (hash: QJj4R8PSS2uz6pf5eNhL303Omh3ETXGQxx47uMXmmwA=)
23: jdDMzewtBKUbLISHlFvozSRpGzc.roa (hash: o28fuwgFVqCMV9PwGcRHvq4z5m6vHXUHTWkbO6d6lCI=)
24: kfnww81EV2LKC1epnSXYA5FE04Y.roa (hash: etPZojILMkhuJnTDpOv9QrkK35LWJTKxSMDedF+KD9E=)
25: lU6d7ePd82R1RQygYGhFImrIFTw.roa (hash: eTV3PHC8L7+q7X6AQEeyA+TbOiZwiV2Wzom3Tk1Wu5A=)
26: ntLrxfVyT3EF_HfYFDgSLQIEq5Y.roa (hash: yq11gq+saeIJh+XRctBRBjtBTL9vZCS0Lnel9O9f6gc=)
27: p5QtUDUOXRCHEi75VPDwcQNdTZk.roa (hash: X0pIlV9euFff1IdP2cwi41n9OTYkfNV7NgihjfP7w30=)
28: pfQIQtiw0hOQzwiCesi0AjLHapA.roa (hash: ddrH7oWf6HnIwFuplBpVDYvI9f1Yddg87dSy0YKuWKY=)
29: qu_5X8JHr4yqGmfR7Z4agmkCTJg.roa (hash: pp2/dCo/iehzy+EhLzTvjRa68BviBR9e8y4FWQ8IXSI=)
30: ruttGwJwbYzo0AN2TP7_UYRcvt0.roa (hash: ux9A3sQEvBRGsHRw6v0ITVj2Q7MxjWLzu1hZ7TwrQkg=)
31: u3esaBXBz_RESktIeiAEj3TrmBk.roa (hash: DuycQcWpRKbKJrZyI5uvefnqxfPTZjiagmu1zINJPpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:18:a8:c7:8d:dd:fe:79:57:aa:00:d6:db:dc:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Sep 23 14:00:10 2026 GMT
Not After : Sep 24 14:00:10 2026 GMT
Subject: CN=52b6f869d6807e1804afe6d91d8ba5502fbc407b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:59:e6:93:52:ea:60:c8:71:ab:38:e9:52:
25:01:38:23:91:3e:3e:cd:b6:29:44:72:b8:2c:ff:
ef:99:d8:f2:d4:e8:cf:60:28:a9:e8:93:f6:2c:55:
d1:c6:a6:17:c8:93:20:9f:15:8f:f4:fd:ef:94:f9:
a2:38:66:d2:23:92:59:6d:2e:de:2c:b5:36:55:e3:
6d:6f:f7:80:05:6b:85:a4:59:ba:4e:5c:e7:0b:90:
a9:e4:f6:0f:f0:ff:a9:cf:a1:7d:16:d2:a6:38:e6:
be:61:68:4f:58:01:ca:b2:f2:a9:ef:da:64:67:cd:
05:b5:5d:39:fc:2a:b3:2d:dd:e8:d3:13:fc:84:ea:
b6:10:30:83:23:a8:0d:5b:be:d6:02:cd:15:1a:82:
19:35:a2:8a:cb:15:86:53:fa:2a:dd:0c:1c:59:1f:
37:76:47:ac:f9:c4:d4:65:99:78:da:3d:e5:77:cf:
6a:c2:39:26:cc:43:e9:d7:62:f8:10:85:4d:5d:c6:
82:39:5f:40:1a:ef:05:52:6d:11:ea:44:a0:ce:94:
61:6d:8a:74:10:cf:54:34:98:11:6c:f8:ca:ba:6a:
f7:b3:fd:e6:0b:2c:33:95:98:e5:35:d8:e8:b9:83:
a3:c6:0a:fa:c1:5f:36:86:62:94:0f:5f:ac:20:c7:
01:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B6:F8:69:D6:80:7E:18:04:AF:E6:D9:1D:8B:A5:50:2F:BC:40:7B
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c2:3a:2d:bc:42:42:02:13:3e:59:69:35:fe:ba:1f:6c:bd:
ad:c0:67:9b:a3:2e:07:0c:7e:2f:62:a9:a5:9c:d0:66:36:42:
f6:02:6f:4c:2f:5e:b9:b1:ef:d1:1d:53:cd:f5:4a:b7:3f:3b:
f1:37:f2:1a:a0:76:85:8b:2f:8e:2f:87:ed:d1:87:65:16:1b:
03:26:21:0a:57:cc:36:d5:42:88:48:cf:42:a9:f2:87:ce:17:
5a:1f:ee:c6:f2:e3:65:4e:a5:56:d0:cb:46:d2:ee:30:23:73:
eb:7f:a1:e1:bf:4c:4e:3a:e6:60:6f:c0:9d:7c:1a:71:a0:a0:
68:fc:fb:03:e3:6b:d0:35:ae:18:6b:77:6a:23:34:ce:cb:9f:
88:43:9d:1e:8b:c2:7a:5e:88:b3:1a:44:6b:61:df:a7:5b:de:
ca:8b:4a:83:12:13:b8:fe:bf:e8:5d:91:24:6b:15:4f:96:c6:
e7:42:1b:e4:7c:8d:8c:c3:6f:a0:8f:53:21:07:fe:63:1f:f4:
e1:ee:f0:2d:85:e0:37:d7:e5:de:e6:be:bc:4e:bc:c4:c4:11:
a4:4a:45:13:56:d0:9e:bb:fa:8c:8c:82:62:8c:49:31:fb:b0:
6d:dc:2b:fa:6b:06:e7:0a:ba:63:f2:f5:e4:e4:25:57:56:d8:
2b:6b:f5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:51:30 2026 by rpki-client