
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
File: CIRls3stTp9BOjHce35suioz25Y.mft (raw, json)
Hash identifier: gUWvSskC7ckHux7HAVQeO2fYiOblYhC+JT7pKxDfL0Y=
Subject key identifier: 62:86:81:71:27:6A:ED:2B:DD:3C:E7:4A:ED:DC:C1:BF:40:65:2F:15
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 019FA82B3AFA294398083AD5ECD4386CDB01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
Manifest number: 0DD3
Signing time: Tue 28 Jul 2026 10:00:33 +0000
Manifest this update: Tue 28 Jul 2026 10:00:33 +0000
Manifest next update: Wed 29 Jul 2026 10:00:33 +0000
Files and hashes: 1: 0ASsrcIDZnw7ewpaNwG4VPlmmRQ.roa (hash: e4Bbe8kx9J+937mRPuAmB54EfUg5NEO0i53Wrek6DuQ=)
2: 1D80X6-qVIYAnOAvvrQS3ByRSj8.roa (hash: 4tsrZkox1d3v6AYzNSSWp1UU44lmigpWQW+WOHH2fOE=)
3: 3GeqF2lR4psQ6viBzLvWfiU_DKw.roa (hash: pTID3KmsjhTmWth9pwDywbq6pym6nxlRSsdR0RuW44o=)
4: 3XPriRsnrECkZ-RiN0z2mZpe4cw.roa (hash: dWhNv/YEpql87FAc9PA3+cBPtmKe44FQYidRCffkBO4=)
5: 3rljXm2FPelovuEsz9lonKQ60jw.roa (hash: mq3/ioypNdduHfMdu6OIxWXRkC670oFKXaUKL9/32QU=)
6: 4lbOoMU8vYue75lPLU273Wz0rGY.roa (hash: OKc6RjBIjQuLZxQQ8vPAven5oO4U2p+P2GxzKo6rhOE=)
7: 8AeGR_x2yGUoR-BzZ7lBLSETixo.roa (hash: ESSxA3CwqC4vvWIMRdWeDuFi/Wsf/VMkq9soSqJMlDI=)
8: ALWlDjtkuCanlBUglBYrOhOEChU.roa (hash: K7wmpstsUMavHfxPhtRlXCbDpugDG9dlFqpbywewXHk=)
9: Ag66ALejSbiH1pRxlS05WWGEZEg.roa (hash: oqQLEmI1BDc7amRlULpva3qfjUZCTdLKCNzKPu2d6tI=)
10: AuUO_2nojen66WlGiolepOvX49M.roa (hash: 8bQ2m0qspgGLeEntrk9gejaiydTwb1cwJB94m7ellzo=)
11: CIRls3stTp9BOjHce35suioz25Y.crl (hash: BCBQDqIxVZtFVRsim8vHt9/NzlPRdVB0lJgyEWSial8=)
12: Ca8Lzw8zNfJDh1Ly0_qC-fHiM6E.roa (hash: C4RNhoeAXLEJghqWzvBuSPRqznDdmFIllRZiSPyy5uI=)
13: CiFeE-oLSQO3PEjZOrMRX3dtWbw.roa (hash: nzg9XMkO6QYtc2rGKEDL2Su5KlvnyOmtGDyQbcbez9w=)
14: ENH5Rc7fQyWjB2bbdsrHx4uVjYc.roa (hash: 83ywIsnDuxVaovsUOnYYrLb1JxlJot8bxmB1jRR+by8=)
15: FoyH-uxga7QutQZC2Zwty6QbNW4.roa (hash: hesFwTnVowJoCi86cxMfE9UyTQSH44grKS2DATmYHaU=)
16: Ojccpt6PXIjVPE6KsXsIl0xR4xg.roa (hash: qxyOGoR8Wod4FdQBMKKBbpkBt/WZQYeVXJhIKDf74AM=)
17: SaE6oyWy9mR7RyqKQqeD-3Ffwjs.roa (hash: EzQjZ/V3K+8VkrS77OJhZYbqaLqQUUV5oMi3fASt1vQ=)
18: TFc4dRXqXi6kK69a7IEbm7cQHsI.roa (hash: r9xRa0cuMKB041JBke8hZDTuXuIEHcgQ+gdhlGFiuto=)
19: W-RxV_b4H1Q0qApAgW_ZZINL5f4.roa (hash: VsS3OZqPtVzXeu3oeLIkDEifPtVcvvgiHyu0vYriLJ8=)
20: _-IzSqMyAnYeGuXF9HT2vUtVRRk.roa (hash: vztXW7011fFUdIgTt2EUpqtENMCmXjShPNnZa1ANQRc=)
21: dRzGNjF88MErNhrrQg2yz8rafv0.roa (hash: +FBAp00ZDN+iU5QU1eqzTHX3mavDuO3cm22qwXqFd98=)
22: eniv0P8LXa9GHk4FDlQMKWB7KG8.roa (hash: fdbfbdiY0hhSBBF1G2HM4gKiYEAtqxK+M5Gsam0dogo=)
23: fuQuIaHHNLm1DTGSNG2tkUjcAAo.roa (hash: O9wjiYZ3Uz6GFAlQ1mmgCR70WYFaZxlCC9recYKYjkI=)
24: h2A4IvIcxRFa1JJuHZI1sAnmrig.roa (hash: LY0M16Kx8WxVQ+952wod9DVNs/KlcrAeqPDuxhRnexQ=)
25: iI7xLboa7mEZTIbddDCXnP5vHMU.roa (hash: l1gOEktDNyT5wyXeiyrREcT0TszwTr6ef8RWw/aj+04=)
26: ig6CxLt422fb0w55Ai-BAtsyFBo.roa (hash: w2wc2g3pxBo4n+JBhdDwHszJkyLuwMN41Qa7DIdra0M=)
27: ksfyX1A66qksMi7yY2YUuYkItDI.roa (hash: Ka6tT0UzQN7PNatMEnkGYWsSHnAlF+3+njRwkEMDhP0=)
28: l4I0d-2QSNxm-8IJy9LHnheP1Lo.roa (hash: GEOYp5avEZR2sEy40QrdDcc1+R3ftqFBUw/3LTp08L8=)
29: mU500IrDA34-_DZykJnyPTlrppE.roa (hash: +vAVh1Yr0k044C+InehYRlf3YBv6rAWFpbl7IasP7yg=)
30: oaaK-SykNHj4NMtAlojIzptkrl8.roa (hash: s9ElKRoJMX78rcJ0exfOAn6uy9x5N+KQ6zeX8pI3px0=)
31: pfuka-u0WrGvOqlK-XirDGIRyv4.roa (hash: 6oF8zl5VC7iyVSE6WbnmbjA98YnQlB7pOlEhgsgUaIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:3a:fa:29:43:98:08:3a:d5:ec:d4:38:6c:db:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Jul 28 10:00:33 2026 GMT
Not After : Jul 29 10:00:33 2026 GMT
Subject: CN=62868171276aed2bdd3ce74aeddcc1bf40652f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7e:c1:78:9b:d3:dc:d2:62:c7:a0:26:9b:ca:
91:c7:07:51:e2:00:b7:a7:95:01:8a:da:b1:60:81:
f4:c9:9a:e5:05:d7:57:ec:b8:9c:09:75:3e:92:8c:
19:d7:cf:98:91:bf:47:74:35:be:3a:6b:18:9c:ef:
21:3d:d2:01:fd:07:bb:d9:a4:fc:bd:98:1a:81:28:
95:ff:f6:cf:41:1d:1f:27:0b:97:47:30:32:67:46:
b4:b3:f6:61:5d:e0:b8:dc:65:81:a3:87:b7:40:bf:
56:ba:74:c5:40:50:d3:16:62:ca:15:46:12:cd:68:
8e:dd:24:5e:b6:9d:25:55:7e:3b:2c:98:c2:fe:28:
cf:28:84:97:dc:2a:53:b3:94:6c:2a:8f:7e:ee:37:
27:6b:ce:bb:c1:0d:10:0a:62:9d:61:ea:dc:57:45:
bb:4e:a5:8d:d7:4c:7c:52:f1:53:fe:d2:ce:92:eb:
0f:a8:de:9a:42:a2:7f:e3:b4:58:03:9e:00:43:18:
8a:0e:99:fd:df:9c:df:22:4f:75:66:13:b0:e3:6f:
fb:c6:dd:7a:bb:16:48:d3:1e:f8:33:b0:12:d0:ea:
0e:a8:63:50:54:04:6c:b2:cd:24:7a:09:77:21:37:
c0:c6:c9:6d:e8:5e:7f:23:18:7b:59:ce:e1:38:56:
1c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:86:81:71:27:6A:ED:2B:DD:3C:E7:4A:ED:DC:C1:BF:40:65:2F:15
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:28:a1:4e:0e:fe:20:7d:d2:cb:1f:4e:df:6b:0f:f2:6d:a9:
3f:69:0b:d6:cb:4c:83:61:fb:96:53:b3:2e:df:f5:e5:35:80:
b0:39:8d:9a:ae:28:54:60:9d:4b:ce:c8:68:72:ba:7f:11:d4:
8f:e3:98:3e:71:10:b8:be:08:84:57:fd:ec:21:74:fb:c5:91:
5a:3d:39:d7:4e:46:02:77:88:1f:de:4a:54:6b:66:05:53:f4:
da:33:8e:96:ec:78:ff:ac:59:c0:8b:e4:10:5f:cb:7d:07:55:
da:64:6c:25:93:c4:f0:5f:a4:f3:a9:a4:4e:7a:06:d1:bb:df:
9e:e2:6d:7e:b6:75:38:d4:34:01:40:5c:f9:ef:68:cf:05:e5:
49:e5:04:7b:39:b9:11:c4:24:a9:9a:78:e8:13:76:a9:24:15:
34:47:3e:88:7d:7f:64:f8:ec:f7:20:ba:28:e6:9a:6d:74:ad:
c8:4c:28:a9:c8:b4:a5:f5:7b:e6:ff:ca:6a:ff:7a:1b:be:86:
36:67:f2:45:35:86:65:85:5c:ae:77:f8:ce:a5:26:26:a1:68:
e1:ce:af:0f:e0:7b:fe:89:c6:52:a4:1a:5e:60:cd:a2:2d:8c:
34:71:f2:ac:5a:cc:35:80:d4:1b:66:a3:30:43:c6:9d:1e:40:
e2:12:8d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:53:13 2026 by rpki-client