
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
File: CIRls3stTp9BOjHce35suioz25Y.mft (raw, json)
Hash identifier: 2thA3C0ge/S5m4C8mMMQhx2WuWi1LgxjL9NWWmPCizQ=
Subject key identifier: A2:15:97:DD:99:DD:13:4A:28:65:71:6D:DB:42:5B:87:F7:4B:16:DC
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 01A0C444DEC7D92BF92ED78ADF27E84F08B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
Manifest number: 0E68
Signing time: Mon 21 Sep 2026 14:00:42 +0000
Manifest this update: Mon 21 Sep 2026 14:00:42 +0000
Manifest next update: Tue 22 Sep 2026 14:00:42 +0000
Files and hashes: 1: 0ASsrcIDZnw7ewpaNwG4VPlmmRQ.roa (hash: e4Bbe8kx9J+937mRPuAmB54EfUg5NEO0i53Wrek6DuQ=)
2: 1D80X6-qVIYAnOAvvrQS3ByRSj8.roa (hash: 4tsrZkox1d3v6AYzNSSWp1UU44lmigpWQW+WOHH2fOE=)
3: 3GeqF2lR4psQ6viBzLvWfiU_DKw.roa (hash: pTID3KmsjhTmWth9pwDywbq6pym6nxlRSsdR0RuW44o=)
4: 3XPriRsnrECkZ-RiN0z2mZpe4cw.roa (hash: dWhNv/YEpql87FAc9PA3+cBPtmKe44FQYidRCffkBO4=)
5: 3rljXm2FPelovuEsz9lonKQ60jw.roa (hash: mq3/ioypNdduHfMdu6OIxWXRkC670oFKXaUKL9/32QU=)
6: 4lbOoMU8vYue75lPLU273Wz0rGY.roa (hash: OKc6RjBIjQuLZxQQ8vPAven5oO4U2p+P2GxzKo6rhOE=)
7: 8AeGR_x2yGUoR-BzZ7lBLSETixo.roa (hash: ESSxA3CwqC4vvWIMRdWeDuFi/Wsf/VMkq9soSqJMlDI=)
8: ALWlDjtkuCanlBUglBYrOhOEChU.roa (hash: K7wmpstsUMavHfxPhtRlXCbDpugDG9dlFqpbywewXHk=)
9: Ag66ALejSbiH1pRxlS05WWGEZEg.roa (hash: oqQLEmI1BDc7amRlULpva3qfjUZCTdLKCNzKPu2d6tI=)
10: AuUO_2nojen66WlGiolepOvX49M.roa (hash: 8bQ2m0qspgGLeEntrk9gejaiydTwb1cwJB94m7ellzo=)
11: CIRls3stTp9BOjHce35suioz25Y.crl (hash: i8CMnFGy+DCh9sMeJ/GugI8XYu8KmNu/MPVr5BvoGd0=)
12: Ca8Lzw8zNfJDh1Ly0_qC-fHiM6E.roa (hash: C4RNhoeAXLEJghqWzvBuSPRqznDdmFIllRZiSPyy5uI=)
13: CiFeE-oLSQO3PEjZOrMRX3dtWbw.roa (hash: nzg9XMkO6QYtc2rGKEDL2Su5KlvnyOmtGDyQbcbez9w=)
14: ENH5Rc7fQyWjB2bbdsrHx4uVjYc.roa (hash: 83ywIsnDuxVaovsUOnYYrLb1JxlJot8bxmB1jRR+by8=)
15: FoyH-uxga7QutQZC2Zwty6QbNW4.roa (hash: hesFwTnVowJoCi86cxMfE9UyTQSH44grKS2DATmYHaU=)
16: Ojccpt6PXIjVPE6KsXsIl0xR4xg.roa (hash: qxyOGoR8Wod4FdQBMKKBbpkBt/WZQYeVXJhIKDf74AM=)
17: SaE6oyWy9mR7RyqKQqeD-3Ffwjs.roa (hash: EzQjZ/V3K+8VkrS77OJhZYbqaLqQUUV5oMi3fASt1vQ=)
18: TFc4dRXqXi6kK69a7IEbm7cQHsI.roa (hash: r9xRa0cuMKB041JBke8hZDTuXuIEHcgQ+gdhlGFiuto=)
19: W-RxV_b4H1Q0qApAgW_ZZINL5f4.roa (hash: VsS3OZqPtVzXeu3oeLIkDEifPtVcvvgiHyu0vYriLJ8=)
20: dRzGNjF88MErNhrrQg2yz8rafv0.roa (hash: +FBAp00ZDN+iU5QU1eqzTHX3mavDuO3cm22qwXqFd98=)
21: eniv0P8LXa9GHk4FDlQMKWB7KG8.roa (hash: fdbfbdiY0hhSBBF1G2HM4gKiYEAtqxK+M5Gsam0dogo=)
22: fuQuIaHHNLm1DTGSNG2tkUjcAAo.roa (hash: O9wjiYZ3Uz6GFAlQ1mmgCR70WYFaZxlCC9recYKYjkI=)
23: h2A4IvIcxRFa1JJuHZI1sAnmrig.roa (hash: LY0M16Kx8WxVQ+952wod9DVNs/KlcrAeqPDuxhRnexQ=)
24: iI7xLboa7mEZTIbddDCXnP5vHMU.roa (hash: l1gOEktDNyT5wyXeiyrREcT0TszwTr6ef8RWw/aj+04=)
25: ig6CxLt422fb0w55Ai-BAtsyFBo.roa (hash: w2wc2g3pxBo4n+JBhdDwHszJkyLuwMN41Qa7DIdra0M=)
26: ksfyX1A66qksMi7yY2YUuYkItDI.roa (hash: Ka6tT0UzQN7PNatMEnkGYWsSHnAlF+3+njRwkEMDhP0=)
27: l4I0d-2QSNxm-8IJy9LHnheP1Lo.roa (hash: GEOYp5avEZR2sEy40QrdDcc1+R3ftqFBUw/3LTp08L8=)
28: mU500IrDA34-_DZykJnyPTlrppE.roa (hash: +vAVh1Yr0k044C+InehYRlf3YBv6rAWFpbl7IasP7yg=)
29: pfuka-u0WrGvOqlK-XirDGIRyv4.roa (hash: 6oF8zl5VC7iyVSE6WbnmbjA98YnQlB7pOlEhgsgUaIs=)
30: x4y5JxDrafwxKhlG-r82-29DIO4.roa (hash: 76ZeinJEZXAt5CMu/llzcYQkuoMHqW1kwWUZsBr+knU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:de:c7:d9:2b:f9:2e:d7:8a:df:27:e8:4f:08:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Sep 21 14:00:42 2026 GMT
Not After : Sep 22 14:00:42 2026 GMT
Subject: CN=a21597dd99dd134a2865716ddb425b87f74b16dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cb:97:3e:15:c8:86:96:c4:d8:80:9f:d2:86:
4b:9b:9e:52:73:b8:0a:3c:44:df:b3:45:35:90:ca:
e3:17:f8:a7:2d:02:cf:3e:7e:34:91:d8:36:0c:5d:
21:fb:96:e6:1d:01:fe:2b:f1:29:6b:f2:59:34:c8:
24:6e:c9:be:e4:d3:b0:48:e8:ae:1f:db:e4:12:e7:
ff:e3:1b:43:31:48:b8:4f:14:c1:46:f4:89:f5:14:
eb:17:03:d6:0c:8b:e3:e8:f0:9b:1e:60:22:42:99:
93:c2:8e:66:07:0c:3d:ff:c0:e7:9f:de:81:7c:4a:
c6:0f:51:4e:8f:13:5f:fa:10:5b:6e:a5:47:b3:b2:
b6:a2:d2:e0:ed:a5:9d:51:81:e2:05:80:78:03:5b:
c3:e9:a5:9c:04:a2:8c:07:5c:b2:6c:62:ad:b8:23:
27:e1:70:2f:39:60:10:c0:65:82:a5:2d:8a:e6:3a:
a6:af:9c:21:96:ce:58:72:a6:6c:8f:4c:87:50:c5:
2b:16:11:72:b2:87:d1:f5:41:f2:70:53:4e:7d:ff:
6a:16:0a:94:9a:fe:be:ce:7f:42:bc:3b:5d:96:af:
e9:84:be:15:36:aa:82:bb:9b:ff:59:62:93:3a:0b:
51:71:46:e4:9e:44:f7:d5:39:ef:d6:f3:a1:71:aa:
07:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:15:97:DD:99:DD:13:4A:28:65:71:6D:DB:42:5B:87:F7:4B:16:DC
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:cc:b9:c1:a3:26:5f:be:18:a3:a8:ef:9a:62:a2:0a:44:7a:
41:92:10:76:a7:f3:35:c9:a0:3f:80:b9:26:ae:f5:3d:e1:5f:
3c:bc:f2:b4:52:a9:53:c3:02:01:c1:4a:ab:a9:1b:32:88:50:
40:87:e1:28:c2:8b:e2:10:6e:05:69:ca:9e:20:e9:47:10:8d:
de:61:5c:33:b9:c1:0e:19:aa:3d:e4:d4:93:24:5f:21:06:12:
6a:73:bb:bc:63:48:d3:60:20:93:f7:4d:1b:c1:e1:3a:dc:42:
97:62:13:bd:c9:1b:a3:67:55:00:d5:59:fe:c7:48:38:df:a9:
ee:e9:af:d7:f4:51:80:65:e2:78:30:a0:b0:78:bc:18:5c:41:
62:2b:4d:ea:f1:4b:0b:d6:27:8b:b8:98:56:9b:fd:64:8e:d4:
f2:28:fb:ca:c2:03:de:08:c6:a8:3d:af:e2:e1:56:6b:84:5e:
24:a3:70:ef:4d:a2:42:65:bb:cf:14:1c:d5:75:02:f7:59:a4:
b6:11:8d:89:1c:fd:25:df:77:3d:d1:e0:d5:dc:7b:2b:13:67:
d9:2d:74:7e:74:18:25:aa:ae:75:e7:09:08:c0:e6:5a:14:4f:
ce:f3:37:70:f8:2b:4a:e1:40:11:40:aa:f6:06:7e:c1:d4:99:
20:e8:10:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDERN7H2Sv5LteK3yfoTwiwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz
M2RiOTYwHhcNMjYwOTIxMTQwMDQyWhcNMjYwOTIyMTQwMDQyWjAzMTEwLwYDVQQD
EyhhMjE1OTdkZDk5ZGQxMzRhMjg2NTcxNmRkYjQyNWI4N2Y3NGIxNmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MuXPhXIhpbE2ICf0oZLm55Sc7gK
PETfs0U1kMrjF/inLQLPPn40kdg2DF0h+5bmHQH+K/Epa/JZNMgkbsm+5NOwSOiu
H9vkEuf/4xtDMUi4TxTBRvSJ9RTrFwPWDIvj6PCbHmAiQpmTwo5mBww9/8Dnn96B
fErGD1FOjxNf+hBbbqVHs7K2otLg7aWdUYHiBYB4A1vD6aWcBKKMB1yybGKtuCMn
4XAvOWAQwGWCpS2K5jqmr5whls5YcqZsj0yHUMUrFhFysofR9UHycFNOff9qFgqU
mv6+zn9CvDtdlq/phL4VNqqCu5v/WWKTOgtRcUbknkT31Tnv1vOhcaoHVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIVl92Z3RNKKGVxbdtCW4f3SxbcMB8GA1UdIwQY
MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt
MmM3MDg2ZmRlZDkzLzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz
LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANcy5waMm
X74Yo6jvmmKiCkR6QZIQdqfzNcmgP4C5Jq71PeFfPLzytFKpU8MCAcFKq6kbMohQ
QIfhKMKL4hBuBWnKniDpRxCN3mFcM7nBDhmqPeTUkyRfIQYSanO7vGNI02Agk/dN
G8HhOtxCl2ITvckbo2dVANVZ/sdION+p7umv1/RRgGXieDCgsHi8GFxBYitN6vFL
C9Yni7iYVpv9ZI7U8ij7ysID3gjGqD2v4uFWa4ReJKNw702iQmW7zxQc1XUC91mk
thGNiRz9Jd93PdHg1dx7KxNn2S10fnQYJaqudecJCMDmWhRPzvM3cPgrSuFAEUCq
9gZ+wdSZIOgQlQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:23:43 2026 by rpki-client