$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft File: 10cBdWTHEby9V2gKDf0A8qXQmds.mft (raw, json) Hash identifier: sj6q86yKo8eZwwKT0/zyC9LRAusO/WU3mNmrwuCWWtU= Subject key identifier: 6C:7B:AD:90:BD:60:D6:96:52:4D:15:3B:2F:5E:8E:91:D2:30:EB:EF Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db Certificate serial: 019D99CFC13358E919E56A282B275A2B40B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft Manifest number: 1967 Signing time: Fri 17 Apr 2026 05:00:22 +0000 Manifest this update: Fri 17 Apr 2026 05:00:22 +0000 Manifest next update: Sat 18 Apr 2026 05:00:22 +0000 Files and hashes: 1: 10cBdWTHEby9V2gKDf0A8qXQmds.crl (hash: ZHYVy20vujIebR8sjzIdJO6lj0iEouPZkfUXEMSJJ3M=) 2: 3_XuwEnK7hK05MXmz1vtfkaHSAA.roa (hash: o9siZPcWT3dVf1oD+f5/ipqIZ5M6DhvDg5nd+ba6zfw=) 3: 3rngGDt_iwfhoOnfpD1kt_StBx0.roa (hash: KjcAZXNR5n6zPZTAkslgvia87YFrMCL2teXsMct736o=) 4: 4VUm_geSRPJQwIGOeaAoFsu42EQ.roa (hash: B3ePVndHpxNK0Mu3H5cJRx+tUJcw9Q+xUJCk6fROmUU=) 5: 6vbDrANnc0Lws1NcQ-JKO66v7z0.roa (hash: x7FnjgcmwzniPl0CLMLAdYfrWNg5dDEnt8NbWXgXgQ4=) 6: E-mC0iAlIk0BNqElj570L59xiI4.roa (hash: 11beTDD0KykGX0WoUgJf8Vzp+SRqSq4zspVnh6gtlMQ=) 7: HQJmpAkNAw1AqZ0b48w_YH827nk.roa (hash: 7qIcvQ4TbN25SPRVWssmjozD9Nk/d25r5V3RF5LK48w=) 8: UuVkQuPgqTsDeNHD0WgB5nTMv8A.roa (hash: UCiMYIlZ0X9O8CD/EF/deQdiqlIkeR8UK6DAGXq5qYE=) 9: WsU0TA-x8x-AIVwWSVATXH41Db8.roa (hash: PoI0MFNsTc9HWGtTXSe9O9CouuagHdHyjAB82f5capM=) 10: b2RfWDslY-ySGKFmq3UTFYKduy0.roa (hash: 0aEcfEIIb3D7XC2fWQaWAzipVl05YpsQU97gOc5kyzc=) 11: cpt5RAgtzGqSe2tQZjdg4D2WA0E.roa (hash: 8jg9MlATBiiFNT9Izoww+SGRXHn9l5TlN9GgD/T3YlI=) 12: g2L1Ckg2PdEviCbCq66EuHwj6s4.roa (hash: yQRf9YsIGhna0i1WbIuXI9A3Q/Zoyb3HRPF/J92zU/U=) 13: iZLlfuL5fkyQViX7MDGBKRfoKw8.roa (hash: QJj4R8PSS2uz6pf5eNhL303Omh3ETXGQxx47uMXmmwA=) 14: lU6d7ePd82R1RQygYGhFImrIFTw.roa (hash: eTV3PHC8L7+q7X6AQEeyA+TbOiZwiV2Wzom3Tk1Wu5A=) 15: mr_pNb5yoRFqFtKMWG7FgP2ifyU.roa (hash: KUyylK1Gn/i/rEUpdmb4WY0ip5PHMUeW+sIt34Rv4vU=) 16: qu_5X8JHr4yqGmfR7Z4agmkCTJg.roa (hash: pp2/dCo/iehzy+EhLzTvjRa68BviBR9e8y4FWQ8IXSI=) 17: vUylfTDcwUjT9ws66e9wdAqPzcg.roa (hash: Er/JWU9dw52/OcAiPzTg3upAwzRGmCG67anIQUk/sVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 05:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:cf:c1:33:58:e9:19:e5:6a:28:2b:27:5a:2b:40:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db Validity Not Before: Apr 17 05:00:22 2026 GMT Not After : Apr 18 05:00:22 2026 GMT Subject: CN=6c7bad90bd60d696524d153b2f5e8e91d230ebef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a4:69:b3:51:12:b3:1c:4d:ad:d2:9a:75:32: d8:ae:ea:30:8a:00:7d:18:0a:63:b8:78:80:eb:9b: 3b:e6:6a:ba:11:0d:86:74:df:c0:53:d3:47:28:9a: bd:d3:fa:92:f5:80:8c:57:6a:7d:8d:9c:5f:8e:d5: 68:ee:c4:e1:d2:e9:32:95:b4:00:b7:3d:f5:b4:75: f6:27:b5:eb:39:42:60:24:dc:27:37:ea:f9:1e:43: d8:49:5e:bd:93:a3:9c:11:42:0d:5d:85:2b:a6:d9: 5a:2f:7d:c9:e0:42:ba:87:13:8c:f6:c9:0d:60:91: 7f:7a:ae:00:9f:a9:aa:42:91:ff:b8:89:b8:90:ac: 63:d0:c3:f8:60:7e:71:6d:e8:13:e5:dd:76:a4:dc: 5b:29:be:dd:4d:c7:07:23:3b:29:58:41:68:94:cc: 93:f2:ab:b1:48:34:ef:a8:98:d3:0f:cb:d4:59:f3: 0a:46:e6:b5:cf:db:3c:62:12:91:e0:00:69:d8:ad: 40:21:05:30:9f:18:7e:df:8e:1e:ca:b5:ff:b8:52: ec:c8:e7:54:95:7f:0f:4e:22:6e:91:e4:bf:2a:1c: ee:23:ea:b3:ae:ae:96:54:1a:ea:be:eb:88:d4:ca: fc:b9:44:bf:b2:41:95:d7:7f:67:a0:0f:9c:b3:cf: cf:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7B:AD:90:BD:60:D6:96:52:4D:15:3B:2F:5E:8E:91:D2:30:EB:EF X509v3 Authority Key Identifier: keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:7f:b2:c6:46:53:41:cd:66:e2:30:73:02:30:e0:19:01:c5: 92:13:aa:80:cb:34:b5:42:65:98:07:49:4d:05:43:89:a5:a9: e4:8e:15:44:3a:0a:de:77:fc:7e:a4:70:90:66:96:4f:70:a1: de:72:0a:30:f8:73:fa:4b:9d:1f:37:71:35:eb:64:c5:b0:59: 28:89:1b:4d:74:69:77:87:2a:c3:f8:e4:72:6b:c6:d4:04:2f: e3:6f:20:1a:ff:62:f5:0f:11:28:29:3b:14:a8:44:af:70:da: f1:b3:9f:83:3b:2a:e2:75:b6:7a:18:ff:76:31:f4:7d:4d:49: 10:c2:6c:e6:fa:41:f4:b5:46:32:e7:eb:f7:5a:48:b7:88:da: ec:48:77:a4:94:7d:7b:a9:71:bd:f8:a2:0a:93:b4:4c:63:2e: be:a8:e7:7f:e3:11:be:5a:67:15:c1:0b:9c:41:23:74:84:33: 2a:9f:36:77:ca:9b:ea:d9:7a:1d:07:a3:a5:dd:1d:d0:13:af: 8d:2d:3a:93:e8:73:41:a2:4f:f1:7b:95:1a:b4:7a:9b:1d:9d: 1c:81:ea:4d:f7:4b:b3:ae:df:8b:7c:e1:78:4c:cc:31:04:2c: 20:5e:99:1f:48:b3:1a:a3:8f:3f:46:24:45:26:40:0b:02:df: 6d:58:c2:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2Zz8EzWOkZ5WooKydaK0C4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk MDk5ZGIwHhcNMjYwNDE3MDUwMDIyWhcNMjYwNDE4MDUwMDIyWjAzMTEwLwYDVQQD Eyg2YzdiYWQ5MGJkNjBkNjk2NTI0ZDE1M2IyZjVlOGU5MWQyMzBlYmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6Rps1ESsxxNrdKadTLYruowigB9 GApjuHiA65s75mq6EQ2GdN/AU9NHKJq90/qS9YCMV2p9jZxfjtVo7sTh0ukylbQA tz31tHX2J7XrOUJgJNwnN+r5HkPYSV69k6OcEUINXYUrptlaL33J4EK6hxOM9skN YJF/eq4An6mqQpH/uIm4kKxj0MP4YH5xbegT5d12pNxbKb7dTccHIzspWEFolMyT 8quxSDTvqJjTD8vUWfMKRua1z9s8YhKR4ABp2K1AIQUwnxh+344eyrX/uFLsyOdU lX8PTiJukeS/KhzuI+qzrq6WVBrqvuuI1Mr8uUS/skGV139noA+cs8/PLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGx7rZC9YNaWUk0VOy9ejpHSMOvvMB8GA1UdIwQY MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt NGYwZThjZTExYTdkLzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo3+yxkZT Qc1m4jBzAjDgGQHFkhOqgMs0tUJlmAdJTQVDiaWp5I4VRDoK3nf8fqRwkGaWT3Ch 3nIKMPhz+kudHzdxNetkxbBZKIkbTXRpd4cqw/jkcmvG1AQv428gGv9i9Q8RKCk7 FKhEr3Da8bOfgzsq4nW2ehj/djH0fU1JEMJs5vpB9LVGMufr91pIt4ja7Eh3pJR9 e6lxvfiiCpO0TGMuvqjnf+MRvlpnFcELnEEjdIQzKp82d8qb6tl6HQejpd0d0BOv jS06k+hzQaJP8XuVGrR6mx2dHIHqTfdLs67fi3zheEzMMQQsIF6ZH0izGqOPP0Yk RSZACwLfbVjC1Q== -----END CERTIFICATE-----Generated at Fri Apr 17 12:35:54 2026 by rpki-client