
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
File: CIRls3stTp9BOjHce35suioz25Y.mft (raw, json)
Hash identifier: qSj7MNsYKr4zG/Ec3cwQRljUgV8pe8lqFtM+fP4TyLQ=
Subject key identifier: 78:DB:A5:92:9D:AD:9F:7E:22:56:69:6D:21:14:3D:D2:5E:D8:2C:86
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 019F837A4DD6A43EF813AE68F73D48FAB95E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
Manifest number: 0DC0
Signing time: Tue 21 Jul 2026 07:00:58 +0000
Manifest this update: Tue 21 Jul 2026 07:00:58 +0000
Manifest next update: Wed 22 Jul 2026 07:00:58 +0000
Files and hashes: 1: 0ASsrcIDZnw7ewpaNwG4VPlmmRQ.roa (hash: e4Bbe8kx9J+937mRPuAmB54EfUg5NEO0i53Wrek6DuQ=)
2: 1D80X6-qVIYAnOAvvrQS3ByRSj8.roa (hash: 4tsrZkox1d3v6AYzNSSWp1UU44lmigpWQW+WOHH2fOE=)
3: 3GeqF2lR4psQ6viBzLvWfiU_DKw.roa (hash: pTID3KmsjhTmWth9pwDywbq6pym6nxlRSsdR0RuW44o=)
4: 3XPriRsnrECkZ-RiN0z2mZpe4cw.roa (hash: dWhNv/YEpql87FAc9PA3+cBPtmKe44FQYidRCffkBO4=)
5: 3rljXm2FPelovuEsz9lonKQ60jw.roa (hash: mq3/ioypNdduHfMdu6OIxWXRkC670oFKXaUKL9/32QU=)
6: 4lbOoMU8vYue75lPLU273Wz0rGY.roa (hash: OKc6RjBIjQuLZxQQ8vPAven5oO4U2p+P2GxzKo6rhOE=)
7: 8AeGR_x2yGUoR-BzZ7lBLSETixo.roa (hash: ESSxA3CwqC4vvWIMRdWeDuFi/Wsf/VMkq9soSqJMlDI=)
8: ALWlDjtkuCanlBUglBYrOhOEChU.roa (hash: K7wmpstsUMavHfxPhtRlXCbDpugDG9dlFqpbywewXHk=)
9: Ag66ALejSbiH1pRxlS05WWGEZEg.roa (hash: oqQLEmI1BDc7amRlULpva3qfjUZCTdLKCNzKPu2d6tI=)
10: AuUO_2nojen66WlGiolepOvX49M.roa (hash: 8bQ2m0qspgGLeEntrk9gejaiydTwb1cwJB94m7ellzo=)
11: CIRls3stTp9BOjHce35suioz25Y.crl (hash: BO1lnp3TlUi4rQ1WDXsfL5VT0dmcltbqw91BEvFap+g=)
12: Ca8Lzw8zNfJDh1Ly0_qC-fHiM6E.roa (hash: C4RNhoeAXLEJghqWzvBuSPRqznDdmFIllRZiSPyy5uI=)
13: CiFeE-oLSQO3PEjZOrMRX3dtWbw.roa (hash: nzg9XMkO6QYtc2rGKEDL2Su5KlvnyOmtGDyQbcbez9w=)
14: ENH5Rc7fQyWjB2bbdsrHx4uVjYc.roa (hash: 83ywIsnDuxVaovsUOnYYrLb1JxlJot8bxmB1jRR+by8=)
15: FoyH-uxga7QutQZC2Zwty6QbNW4.roa (hash: hesFwTnVowJoCi86cxMfE9UyTQSH44grKS2DATmYHaU=)
16: Ojccpt6PXIjVPE6KsXsIl0xR4xg.roa (hash: qxyOGoR8Wod4FdQBMKKBbpkBt/WZQYeVXJhIKDf74AM=)
17: SaE6oyWy9mR7RyqKQqeD-3Ffwjs.roa (hash: EzQjZ/V3K+8VkrS77OJhZYbqaLqQUUV5oMi3fASt1vQ=)
18: TFc4dRXqXi6kK69a7IEbm7cQHsI.roa (hash: r9xRa0cuMKB041JBke8hZDTuXuIEHcgQ+gdhlGFiuto=)
19: W-RxV_b4H1Q0qApAgW_ZZINL5f4.roa (hash: VsS3OZqPtVzXeu3oeLIkDEifPtVcvvgiHyu0vYriLJ8=)
20: _-IzSqMyAnYeGuXF9HT2vUtVRRk.roa (hash: vztXW7011fFUdIgTt2EUpqtENMCmXjShPNnZa1ANQRc=)
21: dRzGNjF88MErNhrrQg2yz8rafv0.roa (hash: +FBAp00ZDN+iU5QU1eqzTHX3mavDuO3cm22qwXqFd98=)
22: eniv0P8LXa9GHk4FDlQMKWB7KG8.roa (hash: fdbfbdiY0hhSBBF1G2HM4gKiYEAtqxK+M5Gsam0dogo=)
23: fuQuIaHHNLm1DTGSNG2tkUjcAAo.roa (hash: O9wjiYZ3Uz6GFAlQ1mmgCR70WYFaZxlCC9recYKYjkI=)
24: h2A4IvIcxRFa1JJuHZI1sAnmrig.roa (hash: LY0M16Kx8WxVQ+952wod9DVNs/KlcrAeqPDuxhRnexQ=)
25: iI7xLboa7mEZTIbddDCXnP5vHMU.roa (hash: l1gOEktDNyT5wyXeiyrREcT0TszwTr6ef8RWw/aj+04=)
26: ig6CxLt422fb0w55Ai-BAtsyFBo.roa (hash: w2wc2g3pxBo4n+JBhdDwHszJkyLuwMN41Qa7DIdra0M=)
27: ksfyX1A66qksMi7yY2YUuYkItDI.roa (hash: Ka6tT0UzQN7PNatMEnkGYWsSHnAlF+3+njRwkEMDhP0=)
28: l4I0d-2QSNxm-8IJy9LHnheP1Lo.roa (hash: GEOYp5avEZR2sEy40QrdDcc1+R3ftqFBUw/3LTp08L8=)
29: mU500IrDA34-_DZykJnyPTlrppE.roa (hash: +vAVh1Yr0k044C+InehYRlf3YBv6rAWFpbl7IasP7yg=)
30: oaaK-SykNHj4NMtAlojIzptkrl8.roa (hash: s9ElKRoJMX78rcJ0exfOAn6uy9x5N+KQ6zeX8pI3px0=)
31: pfuka-u0WrGvOqlK-XirDGIRyv4.roa (hash: 6oF8zl5VC7iyVSE6WbnmbjA98YnQlB7pOlEhgsgUaIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:7a:4d:d6:a4:3e:f8:13:ae:68:f7:3d:48:fa:b9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Jul 21 07:00:58 2026 GMT
Not After : Jul 22 07:00:58 2026 GMT
Subject: CN=78dba5929dad9f7e2256696d21143dd25ed82c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0c:33:2e:89:c4:49:ed:f4:b1:91:e6:b7:34:
2b:a4:5a:00:0f:65:87:32:79:4e:7a:db:41:81:e4:
02:13:d0:46:8f:83:55:61:d0:ad:82:e2:a1:82:c6:
db:66:85:ac:df:89:e7:c4:b1:7a:5d:dd:f6:02:19:
67:cc:27:88:5e:eb:b6:2a:2f:b5:7b:14:5c:f4:42:
1c:a2:16:b6:56:05:32:bc:fb:8e:ce:3f:7c:30:ac:
7f:5f:20:40:7f:d3:a9:e8:95:e3:d6:8c:2b:fd:7f:
7b:82:d3:d2:dd:cd:d0:d3:6e:d8:03:11:21:f3:51:
40:dd:7c:4c:bf:0a:a2:e2:14:fb:72:d9:0c:ad:c4:
a3:ac:63:bf:9e:d9:db:dd:fc:9c:98:a6:27:85:61:
03:d0:9e:1f:e1:35:31:43:76:fd:8f:04:c1:42:22:
a0:70:23:51:35:35:b3:00:a9:b9:4f:e5:55:39:d2:
72:46:8f:95:88:99:8c:de:8f:4f:fc:ce:5c:18:30:
7f:cc:70:6e:07:62:fb:cc:8b:34:e8:8f:a9:6c:40:
ab:59:7a:70:d9:3e:43:29:02:2b:c1:6e:17:f3:e8:
1a:b6:54:40:44:98:a5:13:23:6d:58:ab:96:fa:df:
04:1b:3b:4a:25:08:d8:18:7b:1a:a9:9a:d5:67:fd:
29:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DB:A5:92:9D:AD:9F:7E:22:56:69:6D:21:14:3D:D2:5E:D8:2C:86
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:14:73:c4:e1:22:88:cd:58:60:5c:9c:26:30:87:12:f3:42:
8b:a0:ef:d7:f3:e4:a3:1b:78:55:d0:89:dc:af:3f:42:86:02:
75:30:cc:0b:11:13:7c:62:68:34:ef:7d:28:2a:3f:a1:4a:36:
03:40:04:e2:33:3d:3a:60:68:36:bd:dc:3d:95:b2:8e:51:ca:
aa:b8:50:c2:4e:0f:c7:28:d7:78:62:38:61:5d:11:44:54:b7:
a5:a3:62:bf:b3:0e:dc:5d:c6:22:aa:cc:68:65:53:b3:b4:01:
df:dd:d1:83:cc:09:67:84:41:ff:d6:b5:89:b7:c7:f4:66:b8:
a6:6b:c5:34:f8:74:f1:48:0c:01:33:31:22:e5:00:a2:ef:f6:
2c:94:02:e1:0d:2c:43:6b:86:aa:de:13:8c:2c:54:34:9a:3b:
8a:2e:ff:99:53:8a:72:4c:34:27:ff:8d:e7:cb:20:fd:90:26:
83:56:e1:e1:06:0e:31:fa:fb:92:bb:db:0a:4c:b4:a6:e2:02:
e4:96:7a:0e:e9:90:de:b6:77:6c:26:c0:77:a6:6e:81:d0:1d:
a7:b2:f8:02:89:77:ce:65:f8:4e:e1:a8:e4:59:4f:f5:be:37:
3b:41:e0:a9:96:c1:1a:17:ac:1f:3f:b6:a8:87:05:72:10:98:
97:ed:ef:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:03:04 2026 by rpki-client