
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
File: ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json)
Hash identifier: maR1vfSThj877DqqQB4nOomzR8bFoQjozI4AZmsFavU=
Subject key identifier: E4:34:DE:85:88:8B:BE:E1:ED:59:18:DB:C6:D8:E3:FF:F0:16:8C:14
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 019DB16B4D4C994DF2077B51E83782EFFE4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
Manifest number: 192B
Signing time: Tue 21 Apr 2026 19:01:32 +0000
Manifest this update: Tue 21 Apr 2026 19:01:32 +0000
Manifest next update: Wed 22 Apr 2026 19:01:32 +0000
Files and hashes: 1: 1-1BIMeBNcdXRbBNswP7KTxnlaNw.roa (hash: XOTeJ0cuUnQcT0tnl60mfbUFfprJlHgG/H5vYJdFjiM=)
2: 1-IfIeAFwEYZYt1AbAaJ3ANXh6ug.roa (hash: OEQJozfIVE+wz/wi8qbg6CK+tB+DGXWVAhUVGFc8xNg=)
3: 1W3BSwVG-h7UZlkgwu2hlwiy8YA.roa (hash: Fu4OZcK7zm2ud74FBJ+MpudFzFh4S7/e94Cue8aAGCc=)
4: 2MDP90gwIl_EWMQjgZlpg454Ip4.roa (hash: nd7zyXuxf38jWPMB3bAoKGO1cSR8h6SDS15Yno0Q0rk=)
5: 31zbye1HoJ0ws1Eh6tN1mKqtLis.roa (hash: KmX0t9KENmI6tfPFla1LDdY+IdArcnbdHHSlZkTV5jQ=)
6: 5Utp3I9pSTiaAdIgsLekd1EY7HM.roa (hash: kWtVz2PVP/1t1NLqnBcfGWT7QBTWMOHR3VTXM1hEX4Q=)
7: 87uWXXeS50J42uFFc7bzdF0ivAE.roa (hash: rWcMBkk1AN0QzgpUjsusl3Dc5VIi4za/ojWf/PquanI=)
8: 9VNosHGj56snz30vc3qvzEoSPXo.roa (hash: mWldzN63chLvyzqhSlJl48JtjaWtMR4osvAFDD6Aybs=)
9: CdethGpZm2QuoSVJ4aiwMMYTk0Y.roa (hash: YIGg3I4hDg7BBUgcAz3JoVCk5c+QEE4qX20+BQrMq5s=)
10: E7gVR0qJHj_FrMEXG4Yo1G8ig-8.roa (hash: cyGASec5FeaBbarjWYsO54pBqOVobPBGS0ac9+UHUHc=)
11: EwZq0Wt1O9SveXRnrufcdCq3340.roa (hash: zBk7sAJtzOLS7Fsio/tcoHCXbNOE2x6tTTfHvwTzYdI=)
12: IjU4DCvco1H_BuxEmdM0i3N9AiY.roa (hash: IcI+UuAYue3QiGRJF1n3ivgYYn4aRUMwuNTnE3mK5xc=)
13: LPwI5fzITGqUU5gQD6RQhLychw4.roa (hash: thvb3WWBCkuBh6Qux8xtS7MFGQzIZ761rYppztcjvK0=)
14: N2FCQYbf7oikjwWt145FrEyeXnc.roa (hash: gP0inurJmLCIjOkRMs8jx3kflFBSnD7htxoeUwgsN5Y=)
15: NCOWApM6XRQVHGsAiRAmRViwcqA.roa (hash: HtaRQ8HXrrZOFEYkvwEaA5J1ye5R+BKpmmuVr4iFI0Q=)
16: OK28gHpIcyQTj8SN4SiY-5CVhhc.roa (hash: kgnBWkf2v4+4RUEkxH+z4XaXAROP1D5YzoEWysnTtWM=)
17: P8rBCs2H7HxpxtlvaoFTbqVkHsU.roa (hash: Qm44ePgg82K36X8yasC1ueusZGoMnFdEjkvoWJ3eT58=)
18: PJaNnDg9JeWzm2cGeqEs7HLDP2U.roa (hash: 4JSDHei9iGsFkeICAhGO6H9mT0Tu5LPmJvZL+xdQYuM=)
19: PWnRwbK2MqG8Diozy6kB8JyTkxw.roa (hash: V6RM58J4sVw4RCDq9KuKXPbXpQS4tW8cKXcNjNGjG8w=)
20: Rw8rV7EtLHiqh-bwyfCLoxeGGXU.roa (hash: sS9rOcEm3gHPDxUG0F08OZoN9aNma6XaWO6OWPz4OaQ=)
21: SOof68gdgSTczI_uQV673uF4Cb0.roa (hash: Hr0tUJM0+JDGQQ8+iqx7PAB6O78jSVwToEN9B6dj4IE=)
22: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: BY0TT5v9YY3CZe7YPFTRNXiUEpsOEOQMjL0iA/CUsuc=)
23: fRqO_uDc374Erw8HQ_D2GcdMKuU.roa (hash: /VvxLlJ95Psy66m2lY1bhU6v57I1clxnkrKUA4W37Zk=)
24: hLrAoq7RjC1ZGqXHogD2wBYgwxw.roa (hash: i213vpxqv6sYX5VvcgsgIL3t01XOl6AvFdjwzS3yUxM=)
25: hf-LXtiPSASNfLU-opAc0imYKDc.roa (hash: PJYOakcn0oxNr7y/9yoGBcKD4KrbPhwTqw8RW0ojmKE=)
26: i2MIJHCwSpBCL98yRJRNxiadOCQ.roa (hash: NzVv0Rz1C/xQLakl+NDDtdVuf7W9qk8hfPDVuUBImnU=)
27: jtTG-jKD8OSKOGMXnrAukF2vE_M.roa (hash: +I6zU/baCmnYzZ9rbIW59191EldxdJsWs1MvOP34C8k=)
28: nEWYMu_4NA4MfkJsquDKi_gTHjg.roa (hash: V1qAtqQ6ngIEaA6kqCH4JVaIMgBM1SY6PJyH/obtL1M=)
29: pe68YeSBz3e5uy7r7bbOmGgL7EE.roa (hash: w8rsCAdGW4/9JqYBKY1otlqFhCY3uTORdfSVn2mblPE=)
30: vqnq2rv-6PMsbDy5k3RKwL2xw98.roa (hash: 5AhTA+RnVsEo/k44da/diRTwbIz60x7AY2p3h1jDzvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:6b:4d:4c:99:4d:f2:07:7b:51:e8:37:82:ef:fe:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Apr 21 19:01:32 2026 GMT
Not After : Apr 22 19:01:32 2026 GMT
Subject: CN=e434de85888bbee1ed5918dbc6d8e3fff0168c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9f:0a:37:ee:e9:38:ea:bf:01:05:9a:59:b7:
8d:c6:d5:04:d2:32:18:19:62:5c:7f:28:cf:d2:4a:
7e:bf:f1:f6:92:72:7c:96:33:c6:ed:12:a5:6e:a0:
75:2d:2a:42:ed:cf:27:9b:ad:ad:36:1e:e4:64:e5:
69:82:74:75:5f:13:62:08:d8:6e:24:b2:a2:93:cb:
48:6d:b2:ca:af:71:27:b1:08:ed:eb:59:76:7a:1e:
4a:54:dd:0c:f0:c2:4b:a8:05:89:7d:28:79:62:2f:
c9:ed:64:b0:c6:cc:b5:e4:4a:d5:fe:10:2e:2f:7e:
6f:d4:24:4c:52:3c:1c:ea:38:e5:99:62:2d:43:cd:
9b:e6:ed:a4:c5:d3:f2:38:58:9e:b3:f6:eb:ae:1f:
b3:0c:f9:1d:2a:8c:35:53:d3:e1:47:cb:e3:50:f0:
05:7f:49:88:df:c8:48:0f:e1:36:b9:8c:41:94:d9:
c9:73:63:29:42:ee:c2:d6:6a:d7:b8:a6:e2:c4:a5:
da:87:02:67:e5:6e:df:15:2f:26:4d:db:3c:e7:7e:
e6:31:63:f3:20:8e:e1:13:1a:47:d0:e7:b9:90:40:
60:ca:59:df:69:2e:26:a1:b3:af:6a:69:e0:89:59:
cf:2f:1d:7e:f4:a6:26:27:bd:bf:a0:2e:56:14:c0:
e8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:34:DE:85:88:8B:BE:E1:ED:59:18:DB:C6:D8:E3:FF:F0:16:8C:14
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e4:86:f3:8e:7a:f8:44:6b:c9:22:4c:f9:a4:c6:f3:94:bd:
9f:ef:5d:d0:64:5a:ae:5a:9b:e7:93:e0:0e:e1:17:ee:bf:1d:
95:10:c6:71:94:6a:3e:c2:b3:ff:a7:e7:1f:95:0f:36:c3:69:
d7:73:56:90:9b:83:ff:84:20:ad:7a:30:cf:81:b7:cf:ff:86:
94:b9:c8:ee:b9:4f:7b:5e:56:11:fe:e0:7f:a9:21:b7:30:d4:
27:79:7a:6c:c2:7b:e2:4c:bb:2c:ee:64:d6:b1:28:da:70:bc:
9e:09:ce:55:0c:d7:e3:af:11:73:8e:c1:ee:e1:db:9b:91:1e:
2e:47:9e:17:18:cc:c4:fe:64:da:ed:0e:24:45:a1:3d:22:d0:
6d:8d:88:2e:7e:6f:8e:2e:51:90:55:84:7e:11:f0:21:00:6b:
83:78:4d:be:7a:8e:41:19:b3:8b:5b:ab:8c:07:55:bb:2b:e9:
87:a9:8f:ea:fc:f5:e0:ff:fe:da:77:6a:7f:ef:3d:5b:a3:8b:
b6:01:e2:44:9c:56:e7:83:f0:63:70:dd:82:85:2e:de:a2:47:
aa:4b:91:af:c9:97:84:67:95:a2:f2:dc:30:7c:d6:33:7d:63:
d6:d9:47:8d:6a:c2:20:50:f4:e6:33:40:9c:5d:28:e3:88:9c:
e7:a2:27:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:36:18 2026 by rpki-client