
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
File: ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json)
Hash identifier: LbYvEAGqF93iPPStqp9+5cL4RJkmiixZC1VzkfbYpdU=
Subject key identifier: E2:3F:41:7D:E8:AE:95:AE:88:75:76:45:AE:D9:9F:E1:BB:2F:60:D5
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 01A072F1DF72630B6BCD308D21F3AF273E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
Manifest number: 1A9C
Signing time: Sat 05 Sep 2026 19:00:49 +0000
Manifest this update: Sat 05 Sep 2026 19:00:49 +0000
Manifest next update: Sun 06 Sep 2026 19:00:49 +0000
Files and hashes: 1: 1-1BIMeBNcdXRbBNswP7KTxnlaNw.roa (hash: XOTeJ0cuUnQcT0tnl60mfbUFfprJlHgG/H5vYJdFjiM=)
2: 1-IfIeAFwEYZYt1AbAaJ3ANXh6ug.roa (hash: OEQJozfIVE+wz/wi8qbg6CK+tB+DGXWVAhUVGFc8xNg=)
3: 1W3BSwVG-h7UZlkgwu2hlwiy8YA.roa (hash: Fu4OZcK7zm2ud74FBJ+MpudFzFh4S7/e94Cue8aAGCc=)
4: 2MDP90gwIl_EWMQjgZlpg454Ip4.roa (hash: nd7zyXuxf38jWPMB3bAoKGO1cSR8h6SDS15Yno0Q0rk=)
5: 31zbye1HoJ0ws1Eh6tN1mKqtLis.roa (hash: KmX0t9KENmI6tfPFla1LDdY+IdArcnbdHHSlZkTV5jQ=)
6: 4V-9xblXh3p4hsMcELpD2FlsUlA.roa (hash: kRr8MpAPoenaKhVsIA64eElM5LVWHVB6/SUqnX6gbUI=)
7: 5Utp3I9pSTiaAdIgsLekd1EY7HM.roa (hash: kWtVz2PVP/1t1NLqnBcfGWT7QBTWMOHR3VTXM1hEX4Q=)
8: 67NPNnvEQ5HB8sJH7z0dUe6Gw40.roa (hash: L8+iE4412JG/GqWOxLjJAzwI6Ft8pIvwH1MR+Hkkdb4=)
9: 87uWXXeS50J42uFFc7bzdF0ivAE.roa (hash: rWcMBkk1AN0QzgpUjsusl3Dc5VIi4za/ojWf/PquanI=)
10: 9VNosHGj56snz30vc3qvzEoSPXo.roa (hash: mWldzN63chLvyzqhSlJl48JtjaWtMR4osvAFDD6Aybs=)
11: CdethGpZm2QuoSVJ4aiwMMYTk0Y.roa (hash: YIGg3I4hDg7BBUgcAz3JoVCk5c+QEE4qX20+BQrMq5s=)
12: E7gVR0qJHj_FrMEXG4Yo1G8ig-8.roa (hash: cyGASec5FeaBbarjWYsO54pBqOVobPBGS0ac9+UHUHc=)
13: EwZq0Wt1O9SveXRnrufcdCq3340.roa (hash: zBk7sAJtzOLS7Fsio/tcoHCXbNOE2x6tTTfHvwTzYdI=)
14: IjU4DCvco1H_BuxEmdM0i3N9AiY.roa (hash: IcI+UuAYue3QiGRJF1n3ivgYYn4aRUMwuNTnE3mK5xc=)
15: LPwI5fzITGqUU5gQD6RQhLychw4.roa (hash: thvb3WWBCkuBh6Qux8xtS7MFGQzIZ761rYppztcjvK0=)
16: MxzqwWMUSsptURJMzavxSHfUO8w.roa (hash: poWnPXle6XHD8AxyCDLX0yoA7QSiBEOVvbwg5OVZcvQ=)
17: N2FCQYbf7oikjwWt145FrEyeXnc.roa (hash: gP0inurJmLCIjOkRMs8jx3kflFBSnD7htxoeUwgsN5Y=)
18: NCOWApM6XRQVHGsAiRAmRViwcqA.roa (hash: HtaRQ8HXrrZOFEYkvwEaA5J1ye5R+BKpmmuVr4iFI0Q=)
19: OK28gHpIcyQTj8SN4SiY-5CVhhc.roa (hash: kgnBWkf2v4+4RUEkxH+z4XaXAROP1D5YzoEWysnTtWM=)
20: P8rBCs2H7HxpxtlvaoFTbqVkHsU.roa (hash: Qm44ePgg82K36X8yasC1ueusZGoMnFdEjkvoWJ3eT58=)
21: PJaNnDg9JeWzm2cGeqEs7HLDP2U.roa (hash: 4JSDHei9iGsFkeICAhGO6H9mT0Tu5LPmJvZL+xdQYuM=)
22: PWnRwbK2MqG8Diozy6kB8JyTkxw.roa (hash: V6RM58J4sVw4RCDq9KuKXPbXpQS4tW8cKXcNjNGjG8w=)
23: Rw8rV7EtLHiqh-bwyfCLoxeGGXU.roa (hash: sS9rOcEm3gHPDxUG0F08OZoN9aNma6XaWO6OWPz4OaQ=)
24: SOof68gdgSTczI_uQV673uF4Cb0.roa (hash: Hr0tUJM0+JDGQQ8+iqx7PAB6O78jSVwToEN9B6dj4IE=)
25: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: CEpgAClc4RrNYZ/KQDztutJl50Hvp558M7YtuN4Kgj0=)
26: fRqO_uDc374Erw8HQ_D2GcdMKuU.roa (hash: /VvxLlJ95Psy66m2lY1bhU6v57I1clxnkrKUA4W37Zk=)
27: hLrAoq7RjC1ZGqXHogD2wBYgwxw.roa (hash: i213vpxqv6sYX5VvcgsgIL3t01XOl6AvFdjwzS3yUxM=)
28: i2MIJHCwSpBCL98yRJRNxiadOCQ.roa (hash: NzVv0Rz1C/xQLakl+NDDtdVuf7W9qk8hfPDVuUBImnU=)
29: jtTG-jKD8OSKOGMXnrAukF2vE_M.roa (hash: +I6zU/baCmnYzZ9rbIW59191EldxdJsWs1MvOP34C8k=)
30: nEWYMu_4NA4MfkJsquDKi_gTHjg.roa (hash: V1qAtqQ6ngIEaA6kqCH4JVaIMgBM1SY6PJyH/obtL1M=)
31: qUwK9s2mmBLTPQlCS2E3qnCndLo.roa (hash: dl9QrW5kzVjvXWRYqlw9UrndrhoQTxzNmZ6VZwh8ncM=)
32: upydEV0ODv-v9FNJbhEvu18F0-I.roa (hash: VtfCIO/Gdxc9uNwon4WUJ3pKbdYHJr5iyQxDnmDVVgE=)
33: vqnq2rv-6PMsbDy5k3RKwL2xw98.roa (hash: 5AhTA+RnVsEo/k44da/diRTwbIz60x7AY2p3h1jDzvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:72:f1:df:72:63:0b:6b:cd:30:8d:21:f3:af:27:3e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Sep 5 19:00:49 2026 GMT
Not After : Sep 6 19:00:49 2026 GMT
Subject: CN=e23f417de8ae95ae88757645aed99fe1bb2f60d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:f0:b6:63:52:8a:2c:ae:20:32:82:26:d6:
6b:c5:f4:68:33:75:49:05:5d:e3:8d:8e:98:09:39:
ba:bc:ca:a2:dd:5e:25:df:42:62:63:fb:23:bc:45:
31:e7:5b:36:3b:4d:eb:6a:1f:7b:ce:57:c8:29:0f:
df:85:1d:5b:ab:91:26:5c:95:af:7d:41:8a:1c:69:
69:c3:7b:f7:0b:f8:6b:b9:91:50:25:eb:3b:6e:f5:
1a:e1:f4:64:3b:9f:76:a7:74:0e:ab:a2:66:59:f1:
a1:d8:71:46:32:40:30:8a:0c:16:29:53:6c:bb:28:
f9:8c:98:96:a9:87:b3:16:cb:b0:d0:d7:06:d0:5f:
b6:2c:04:c4:ee:07:10:6c:73:82:db:a5:e8:7b:1e:
8b:e0:69:14:14:ed:d1:31:1b:43:a8:e1:a1:ef:2f:
93:df:b2:30:fa:a8:0d:0e:50:37:aa:02:b8:f9:8c:
86:2a:be:c7:60:cf:49:7b:6b:f1:2a:ec:b2:80:f1:
b7:99:26:d4:1f:48:7d:b6:bd:86:c8:aa:78:d3:e9:
f9:8c:ba:a5:ea:a7:1c:03:41:37:7b:bd:a3:7c:48:
29:c4:1b:a7:4b:61:d5:ac:ca:fc:72:6b:16:e7:33:
44:c8:d1:e0:68:12:14:8f:a3:94:69:89:00:5c:09:
14:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3F:41:7D:E8:AE:95:AE:88:75:76:45:AE:D9:9F:E1:BB:2F:60:D5
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d5:d1:2e:85:9d:0e:70:84:40:11:29:3d:f6:f8:2c:97:4c:
c1:60:e2:94:bb:bf:f9:c4:63:4f:21:0f:03:d5:57:29:44:e4:
fe:cc:1e:ea:61:8b:76:7f:68:f8:df:6c:25:f4:9d:9d:af:40:
59:71:d6:95:c3:95:26:34:ce:ad:10:d2:2c:ca:18:bb:da:86:
31:6a:bc:85:3a:54:9a:2f:f4:af:c1:e4:5e:b0:3f:71:d2:f0:
38:27:5d:b4:59:c0:f7:56:50:92:3f:58:bd:95:0c:dc:97:00:
62:34:d8:57:04:9c:9e:2c:4b:47:f5:59:51:10:c7:11:2d:7b:
1e:6d:81:cb:56:c9:5e:9c:5d:4b:6a:09:66:aa:ef:3b:95:07:
d8:11:17:6b:95:db:da:dc:ca:d1:46:01:02:5c:74:73:54:4b:
cc:a6:6a:e2:1a:2b:e3:e3:87:48:3b:f6:eb:a6:40:ff:b2:a9:
3c:19:a2:e5:25:1b:05:f2:3c:01:10:04:81:ac:b1:3d:77:39:
68:63:45:29:72:20:1a:2f:39:ff:d5:24:c2:70:b7:d7:cc:fc:
4c:07:6a:b7:d1:f9:4c:b6:b3:9a:26:df:14:cb:bc:0f:d6:1d:
84:b8:d2:d9:34:e2:62:58:54:3c:80:41:c2:79:0a:c8:80:03:
34:9c:93:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 6 02:12:26 2026 by rpki-client