
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
File: CIRls3stTp9BOjHce35suioz25Y.mft (raw, json)
Hash identifier: RBIRYfiVRDqvHyl4f0KqSVoM8sDwyiSuhmvVkqIDv5o=
Subject key identifier: 81:97:AA:26:F1:75:34:AF:B7:33:C5:52:B3:D4:4A:B6:7F:97:68:B5
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 019E1CEB6D61C7B7035C3DC41A05F2F62517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
Manifest number: 0CFE
Signing time: Tue 12 May 2026 16:00:51 +0000
Manifest this update: Tue 12 May 2026 16:00:51 +0000
Manifest next update: Wed 13 May 2026 16:00:51 +0000
Files and hashes: 1: 0ASsrcIDZnw7ewpaNwG4VPlmmRQ.roa (hash: e4Bbe8kx9J+937mRPuAmB54EfUg5NEO0i53Wrek6DuQ=)
2: 1D80X6-qVIYAnOAvvrQS3ByRSj8.roa (hash: 4tsrZkox1d3v6AYzNSSWp1UU44lmigpWQW+WOHH2fOE=)
3: 3GeqF2lR4psQ6viBzLvWfiU_DKw.roa (hash: pTID3KmsjhTmWth9pwDywbq6pym6nxlRSsdR0RuW44o=)
4: 3XPriRsnrECkZ-RiN0z2mZpe4cw.roa (hash: dWhNv/YEpql87FAc9PA3+cBPtmKe44FQYidRCffkBO4=)
5: 3rljXm2FPelovuEsz9lonKQ60jw.roa (hash: mq3/ioypNdduHfMdu6OIxWXRkC670oFKXaUKL9/32QU=)
6: 4lbOoMU8vYue75lPLU273Wz0rGY.roa (hash: OKc6RjBIjQuLZxQQ8vPAven5oO4U2p+P2GxzKo6rhOE=)
7: 8AeGR_x2yGUoR-BzZ7lBLSETixo.roa (hash: ESSxA3CwqC4vvWIMRdWeDuFi/Wsf/VMkq9soSqJMlDI=)
8: Ag66ALejSbiH1pRxlS05WWGEZEg.roa (hash: oqQLEmI1BDc7amRlULpva3qfjUZCTdLKCNzKPu2d6tI=)
9: AuUO_2nojen66WlGiolepOvX49M.roa (hash: 8bQ2m0qspgGLeEntrk9gejaiydTwb1cwJB94m7ellzo=)
10: CIRls3stTp9BOjHce35suioz25Y.crl (hash: NTl/hvjBS1OX0oc2M5b31UgjHi++frb0RhLredWcnNY=)
11: Ca8Lzw8zNfJDh1Ly0_qC-fHiM6E.roa (hash: C4RNhoeAXLEJghqWzvBuSPRqznDdmFIllRZiSPyy5uI=)
12: CiFeE-oLSQO3PEjZOrMRX3dtWbw.roa (hash: nzg9XMkO6QYtc2rGKEDL2Su5KlvnyOmtGDyQbcbez9w=)
13: ENH5Rc7fQyWjB2bbdsrHx4uVjYc.roa (hash: 83ywIsnDuxVaovsUOnYYrLb1JxlJot8bxmB1jRR+by8=)
14: FoyH-uxga7QutQZC2Zwty6QbNW4.roa (hash: hesFwTnVowJoCi86cxMfE9UyTQSH44grKS2DATmYHaU=)
15: Ojccpt6PXIjVPE6KsXsIl0xR4xg.roa (hash: qxyOGoR8Wod4FdQBMKKBbpkBt/WZQYeVXJhIKDf74AM=)
16: SaE6oyWy9mR7RyqKQqeD-3Ffwjs.roa (hash: EzQjZ/V3K+8VkrS77OJhZYbqaLqQUUV5oMi3fASt1vQ=)
17: TFc4dRXqXi6kK69a7IEbm7cQHsI.roa (hash: r9xRa0cuMKB041JBke8hZDTuXuIEHcgQ+gdhlGFiuto=)
18: W-RxV_b4H1Q0qApAgW_ZZINL5f4.roa (hash: VsS3OZqPtVzXeu3oeLIkDEifPtVcvvgiHyu0vYriLJ8=)
19: eniv0P8LXa9GHk4FDlQMKWB7KG8.roa (hash: fdbfbdiY0hhSBBF1G2HM4gKiYEAtqxK+M5Gsam0dogo=)
20: fuQuIaHHNLm1DTGSNG2tkUjcAAo.roa (hash: O9wjiYZ3Uz6GFAlQ1mmgCR70WYFaZxlCC9recYKYjkI=)
21: h2A4IvIcxRFa1JJuHZI1sAnmrig.roa (hash: LY0M16Kx8WxVQ+952wod9DVNs/KlcrAeqPDuxhRnexQ=)
22: iI7xLboa7mEZTIbddDCXnP5vHMU.roa (hash: l1gOEktDNyT5wyXeiyrREcT0TszwTr6ef8RWw/aj+04=)
23: ig6CxLt422fb0w55Ai-BAtsyFBo.roa (hash: w2wc2g3pxBo4n+JBhdDwHszJkyLuwMN41Qa7DIdra0M=)
24: kjrIZIW45KaOyNR8g_TQidHhKxQ.roa (hash: azT5mOJbUfFEST0Ir7ouylIomcyXSpCUxWYnorkrsXI=)
25: ksfyX1A66qksMi7yY2YUuYkItDI.roa (hash: Ka6tT0UzQN7PNatMEnkGYWsSHnAlF+3+njRwkEMDhP0=)
26: l4I0d-2QSNxm-8IJy9LHnheP1Lo.roa (hash: GEOYp5avEZR2sEy40QrdDcc1+R3ftqFBUw/3LTp08L8=)
27: mU500IrDA34-_DZykJnyPTlrppE.roa (hash: +vAVh1Yr0k044C+InehYRlf3YBv6rAWFpbl7IasP7yg=)
28: oaaK-SykNHj4NMtAlojIzptkrl8.roa (hash: s9ElKRoJMX78rcJ0exfOAn6uy9x5N+KQ6zeX8pI3px0=)
29: pfuka-u0WrGvOqlK-XirDGIRyv4.roa (hash: 6oF8zl5VC7iyVSE6WbnmbjA98YnQlB7pOlEhgsgUaIs=)
30: tpvfXEACkV14koJNtMfPTqgi_FI.roa (hash: EfZdc30FGwxWmYElAs13ngXxxxQnDLgipgf5zCu6o1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:6d:61:c7:b7:03:5c:3d:c4:1a:05:f2:f6:25:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: May 12 16:00:51 2026 GMT
Not After : May 13 16:00:51 2026 GMT
Subject: CN=8197aa26f17534afb733c552b3d44ab67f9768b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:3a:06:61:ef:dc:a0:15:5c:8b:b2:b2:8e:
5b:61:42:69:1f:34:1c:e5:07:f1:e4:18:ff:7a:cb:
3e:c0:bd:f7:0d:f5:ae:aa:e1:21:d1:33:2c:4d:0c:
c4:e1:c3:4f:35:87:ff:4f:a4:64:24:89:00:40:58:
63:9f:10:6b:54:b7:ce:e7:49:1d:cc:34:97:6c:be:
61:49:19:63:e6:d0:9e:53:6c:a3:92:f3:34:fb:9c:
3f:f7:5a:60:23:f4:62:dd:15:45:9f:83:08:e8:9e:
11:68:4d:cb:c1:16:bf:29:76:8b:58:bc:21:00:10:
17:f4:03:a4:90:e9:ff:cb:11:dd:c6:75:08:85:c1:
86:58:b6:1d:d4:66:dd:26:38:01:f4:b8:4c:0c:c2:
d9:62:06:e5:d1:a5:24:a4:26:ae:6f:33:fb:6c:ce:
35:bf:c7:bc:2d:d1:14:18:a8:a8:a7:2f:db:92:88:
e1:48:cc:a8:eb:fd:43:31:4a:d8:6a:43:2d:e8:0e:
64:80:74:f3:77:53:c6:e9:a7:f6:fe:17:49:4c:81:
4a:d2:66:42:56:1a:06:9d:3c:09:2a:2d:e0:3f:00:
d6:6f:22:ea:7f:32:3d:33:13:77:9d:ec:24:48:94:
77:63:f5:75:a9:29:0b:93:a2:6a:f9:18:af:b0:0a:
82:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:97:AA:26:F1:75:34:AF:B7:33:C5:52:B3:D4:4A:B6:7F:97:68:B5
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:9b:1a:96:85:3e:9b:d2:74:ed:4f:aa:f4:c7:47:25:92:13:
0f:6a:74:12:0d:00:36:b7:63:bb:ce:9c:e9:ac:1c:80:28:53:
6a:f8:85:0c:65:13:6e:ac:27:9a:02:aa:7c:10:d8:c9:20:61:
37:70:b7:97:6e:f2:68:63:ad:0a:3c:f3:b4:af:95:54:e7:80:
07:b5:b2:0c:47:f5:d8:97:92:76:e7:e4:4b:07:52:c3:e6:4e:
8a:b2:eb:48:fd:30:80:c8:98:84:a6:3e:38:3e:ac:38:fe:d1:
5a:2f:5d:24:4c:47:72:a7:67:0c:14:8d:00:3a:27:59:29:26:
63:5c:80:56:a4:2b:ac:0c:07:ce:c1:93:c5:76:f5:49:27:88:
70:e8:6d:27:c1:6b:d7:9a:26:e0:e5:38:1e:c8:44:17:ab:21:
3b:94:30:a5:79:71:8a:aa:2e:d7:db:6a:7d:3b:b2:69:54:ed:
4e:d3:78:3f:ac:5c:a3:02:2a:58:d4:86:80:dd:f7:08:da:0c:
81:60:0b:ef:04:f2:91:1b:e1:7c:e7:9a:a4:0b:82:4b:73:bf:
fc:4e:5d:c8:7a:a4:5d:12:09:68:c3:f0:07:0b:55:85:8c:ea:
55:73:f2:4c:f4:da:3e:ef:c1:28:5f:41:1f:2c:7d:a1:df:2b:
98:5a:d7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:53:05 2026 by rpki-client