
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
File: ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json)
Hash identifier: pPDIVaM3g9tO3nFcAF6REcCRYQ5ZIkEtDrbSmoSA5WI=
Subject key identifier: 9F:2F:E4:BD:BC:2B:84:62:9F:AF:33:A5:6C:56:C8:36:84:D0:EE:F0
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 019D9850AB176170C0F9BB1858BB918231DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
Manifest number: 191E
Signing time: Thu 16 Apr 2026 22:01:56 +0000
Manifest this update: Thu 16 Apr 2026 22:01:56 +0000
Manifest next update: Fri 17 Apr 2026 22:01:56 +0000
Files and hashes: 1: 1-1BIMeBNcdXRbBNswP7KTxnlaNw.roa (hash: XOTeJ0cuUnQcT0tnl60mfbUFfprJlHgG/H5vYJdFjiM=)
2: 1-IfIeAFwEYZYt1AbAaJ3ANXh6ug.roa (hash: OEQJozfIVE+wz/wi8qbg6CK+tB+DGXWVAhUVGFc8xNg=)
3: 1W3BSwVG-h7UZlkgwu2hlwiy8YA.roa (hash: Fu4OZcK7zm2ud74FBJ+MpudFzFh4S7/e94Cue8aAGCc=)
4: 2MDP90gwIl_EWMQjgZlpg454Ip4.roa (hash: nd7zyXuxf38jWPMB3bAoKGO1cSR8h6SDS15Yno0Q0rk=)
5: 31zbye1HoJ0ws1Eh6tN1mKqtLis.roa (hash: KmX0t9KENmI6tfPFla1LDdY+IdArcnbdHHSlZkTV5jQ=)
6: 5Utp3I9pSTiaAdIgsLekd1EY7HM.roa (hash: kWtVz2PVP/1t1NLqnBcfGWT7QBTWMOHR3VTXM1hEX4Q=)
7: 87uWXXeS50J42uFFc7bzdF0ivAE.roa (hash: rWcMBkk1AN0QzgpUjsusl3Dc5VIi4za/ojWf/PquanI=)
8: 9VNosHGj56snz30vc3qvzEoSPXo.roa (hash: mWldzN63chLvyzqhSlJl48JtjaWtMR4osvAFDD6Aybs=)
9: CdethGpZm2QuoSVJ4aiwMMYTk0Y.roa (hash: YIGg3I4hDg7BBUgcAz3JoVCk5c+QEE4qX20+BQrMq5s=)
10: E7gVR0qJHj_FrMEXG4Yo1G8ig-8.roa (hash: cyGASec5FeaBbarjWYsO54pBqOVobPBGS0ac9+UHUHc=)
11: EwZq0Wt1O9SveXRnrufcdCq3340.roa (hash: zBk7sAJtzOLS7Fsio/tcoHCXbNOE2x6tTTfHvwTzYdI=)
12: IjU4DCvco1H_BuxEmdM0i3N9AiY.roa (hash: IcI+UuAYue3QiGRJF1n3ivgYYn4aRUMwuNTnE3mK5xc=)
13: LPwI5fzITGqUU5gQD6RQhLychw4.roa (hash: thvb3WWBCkuBh6Qux8xtS7MFGQzIZ761rYppztcjvK0=)
14: N2FCQYbf7oikjwWt145FrEyeXnc.roa (hash: gP0inurJmLCIjOkRMs8jx3kflFBSnD7htxoeUwgsN5Y=)
15: NCOWApM6XRQVHGsAiRAmRViwcqA.roa (hash: HtaRQ8HXrrZOFEYkvwEaA5J1ye5R+BKpmmuVr4iFI0Q=)
16: OK28gHpIcyQTj8SN4SiY-5CVhhc.roa (hash: kgnBWkf2v4+4RUEkxH+z4XaXAROP1D5YzoEWysnTtWM=)
17: P8rBCs2H7HxpxtlvaoFTbqVkHsU.roa (hash: Qm44ePgg82K36X8yasC1ueusZGoMnFdEjkvoWJ3eT58=)
18: PJaNnDg9JeWzm2cGeqEs7HLDP2U.roa (hash: 4JSDHei9iGsFkeICAhGO6H9mT0Tu5LPmJvZL+xdQYuM=)
19: PWnRwbK2MqG8Diozy6kB8JyTkxw.roa (hash: V6RM58J4sVw4RCDq9KuKXPbXpQS4tW8cKXcNjNGjG8w=)
20: Rw8rV7EtLHiqh-bwyfCLoxeGGXU.roa (hash: sS9rOcEm3gHPDxUG0F08OZoN9aNma6XaWO6OWPz4OaQ=)
21: SOof68gdgSTczI_uQV673uF4Cb0.roa (hash: Hr0tUJM0+JDGQQ8+iqx7PAB6O78jSVwToEN9B6dj4IE=)
22: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: HNs9dUXepZWMEdPTO/BegTCIvBfRKgeyY8GL6rYgcZE=)
23: fRqO_uDc374Erw8HQ_D2GcdMKuU.roa (hash: /VvxLlJ95Psy66m2lY1bhU6v57I1clxnkrKUA4W37Zk=)
24: hLrAoq7RjC1ZGqXHogD2wBYgwxw.roa (hash: i213vpxqv6sYX5VvcgsgIL3t01XOl6AvFdjwzS3yUxM=)
25: hf-LXtiPSASNfLU-opAc0imYKDc.roa (hash: PJYOakcn0oxNr7y/9yoGBcKD4KrbPhwTqw8RW0ojmKE=)
26: i2MIJHCwSpBCL98yRJRNxiadOCQ.roa (hash: NzVv0Rz1C/xQLakl+NDDtdVuf7W9qk8hfPDVuUBImnU=)
27: jtTG-jKD8OSKOGMXnrAukF2vE_M.roa (hash: +I6zU/baCmnYzZ9rbIW59191EldxdJsWs1MvOP34C8k=)
28: nEWYMu_4NA4MfkJsquDKi_gTHjg.roa (hash: V1qAtqQ6ngIEaA6kqCH4JVaIMgBM1SY6PJyH/obtL1M=)
29: pe68YeSBz3e5uy7r7bbOmGgL7EE.roa (hash: w8rsCAdGW4/9JqYBKY1otlqFhCY3uTORdfSVn2mblPE=)
30: vqnq2rv-6PMsbDy5k3RKwL2xw98.roa (hash: 5AhTA+RnVsEo/k44da/diRTwbIz60x7AY2p3h1jDzvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:ab:17:61:70:c0:f9:bb:18:58:bb:91:82:31:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Apr 16 22:01:56 2026 GMT
Not After : Apr 17 22:01:56 2026 GMT
Subject: CN=9f2fe4bdbc2b84629faf33a56c56c83684d0eef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:a8:17:2f:c0:79:f3:68:0b:0d:43:ad:34:
43:80:dc:db:a5:21:32:1b:88:63:76:46:60:e7:60:
6a:61:fc:7e:e1:da:16:9a:b0:d8:eb:e0:82:55:f7:
29:4f:19:89:87:bc:42:a3:d0:f4:fd:f7:db:57:ce:
e5:1c:47:06:33:6d:6e:c5:cb:88:9c:75:35:eb:82:
03:5b:33:61:7e:70:de:67:ad:c3:14:d6:99:2e:a9:
d6:5c:9b:83:ac:5a:c5:44:b9:42:fd:fd:9b:58:e1:
64:7f:b9:ec:7e:5f:a6:78:49:d8:cd:4a:57:e3:17:
1f:c3:ad:c0:ac:b1:f8:8d:cc:4d:f6:95:dc:4f:75:
12:27:be:71:4e:53:b1:85:1a:c9:26:ce:d3:d2:fc:
49:b4:97:8a:62:bb:ec:f7:d1:e3:6d:8d:d0:50:5d:
4b:44:d8:e5:d7:41:4c:af:8a:ad:78:88:09:41:5e:
90:a1:d9:77:c9:51:b7:07:eb:d6:fe:1d:c7:9f:0a:
9c:3a:51:81:b2:ad:22:7d:eb:e9:74:a6:80:d2:77:
5c:fd:fc:85:92:ff:9a:ca:f9:15:11:77:ca:33:30:
70:ac:c9:56:0e:6b:c9:ec:8c:9c:4b:92:41:b9:31:
af:71:89:31:e0:5a:f8:f3:43:38:ab:78:1e:e7:b5:
79:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2F:E4:BD:BC:2B:84:62:9F:AF:33:A5:6C:56:C8:36:84:D0:EE:F0
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ca:fd:7f:c8:38:e9:f2:2d:5a:74:cf:c2:07:3d:59:d8:d9:
8b:ef:ab:57:6a:e8:4d:6b:46:b5:5a:43:e5:ce:8f:2f:bb:2b:
04:83:4f:65:a5:b5:21:4c:28:d5:5d:91:e0:fe:2e:7a:50:d8:
da:39:b6:b3:4b:5e:4f:f0:1f:2b:75:82:2c:6b:34:93:6f:fa:
04:96:45:40:0e:49:c8:74:59:b4:9c:7a:ad:c5:4b:bb:1f:f6:
47:23:5e:9e:28:9b:a8:03:81:f5:a6:eb:d0:89:d2:fb:c5:9f:
fd:1f:74:2a:23:06:76:8a:04:a3:ea:44:29:be:a2:36:9e:6f:
dc:78:17:74:e1:aa:d2:79:6c:61:2c:08:d6:20:bd:a5:e9:60:
88:f2:91:27:3d:6e:99:57:42:85:79:81:d6:7f:b0:73:b5:c8:
80:1a:82:d7:35:d8:07:bb:e8:85:79:42:24:19:8b:4c:31:32:
c4:5e:18:a8:eb:9c:c2:10:bb:f6:09:25:12:09:df:10:cf:e0:
d3:58:16:ec:ae:17:77:f3:4f:bd:35:78:bc:9e:56:f2:c2:9a:
d5:37:4f:1f:64:64:85:14:fb:fd:e5:c5:14:9a:d3:a7:70:d7:
3b:ee:bd:b4:f7:76:0b:dc:88:ae:83:d4:e1:5b:27:a4:3b:1f:
bf:05:d3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:27:07 2026 by rpki-client