Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
File: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft (raw, json)
Hash identifier: /TMFrhyGFMocNbKzriKtHXtp7NCdNYrZ3r2p9NaYPvQ=
Subject key identifier: 96:33:56:7F:D9:99:9B:7E:75:CA:2A:91:8E:C3:72:37:BE:E3:E5:F0
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Certificate issuer: /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial: 019D2884CB51102F025F6BA47587BC0B4B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
Manifest number: 1893
Signing time: Thu 26 Mar 2026 05:01:24 +0000
Manifest this update: Thu 26 Mar 2026 05:01:24 +0000
Manifest next update: Fri 27 Mar 2026 05:01:24 +0000
Files and hashes: 1: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl (hash: i+ZPEAkbW1VWCaXJ4IFeUK+oU5ldSCC31JgYi9m3MNc=)
2: 40tYHzrdIOKM0_j4QKh_7shzx8k.roa (hash: SKNQQTkqDQxf7nvw2qRuH0Vq4RF5cs3xZPCOte7W/OA=)
3: QNpprllplAM88mMrWtN3ag177fE.roa (hash: 5dP2zjfT0bTz8XtRVCAWieBHqUYv0AqhPnTwXU8eFn4=)
4: Ss-pxg7MCUnATOQpuT8Jh8a6KnM.roa (hash: kmr+HuErFhNT7cviIumckQWDHYCPiWsB0llSSAYvKio=)
5: dkTEhcSUjmDmfcgVaKjPvVY65ho.roa (hash: CEmoGVLgn+ZeP+7mTHI7wWOP1MgXpbR4Ij+5W74s23I=)
6: fXSStTtN6IqbqkCD3E5j3kC-YHI.roa (hash: zVgHJh9lJVijMpBB+dDgMK+AGLHEUW+Je1xWignFzIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:cb:51:10:2f:02:5f:6b:a4:75:87:bc:0b:4b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Validity
Not Before: Mar 26 05:01:24 2026 GMT
Not After : Mar 27 05:01:24 2026 GMT
Subject: CN=9633567fd9999b7e75ca2a918ec37237bee3e5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c2:85:34:9f:8f:9f:5f:3c:95:09:50:4a:50:
5c:c2:37:2c:d0:55:c5:b8:e4:a1:a7:af:17:38:77:
d6:9b:13:2e:24:0f:23:90:c0:f5:94:72:ef:da:4d:
23:3c:48:1d:0f:7a:11:c6:6d:23:d9:27:72:07:8a:
00:6c:73:19:f5:2d:9b:4a:24:db:65:63:79:dc:cb:
ba:13:46:12:df:a8:de:41:bf:27:60:fd:84:90:a9:
ac:1e:ab:60:50:05:5b:7a:68:d6:05:35:69:82:65:
57:27:94:85:b1:e0:33:0f:c5:a3:0b:2c:34:46:04:
d8:02:47:f0:f6:85:47:37:5d:d3:7f:f5:7e:d2:71:
92:8f:ce:c0:6c:63:d5:0c:a9:74:6f:01:43:70:eb:
96:c1:a8:74:3a:ab:44:ec:5f:f3:65:12:52:3e:da:
a8:97:07:5a:06:67:89:ce:31:84:f4:e4:ab:9a:27:
be:ba:45:d0:cd:c8:54:4b:b3:22:59:cc:8a:8e:9e:
94:1f:ee:91:87:08:62:5e:68:dd:93:32:47:5e:3f:
36:e8:be:6e:9d:d6:33:44:84:49:1e:e0:2d:fb:a5:
e4:26:11:3a:92:47:ae:69:ca:0e:bd:c0:0f:af:87:
66:95:b6:85:4e:1b:5d:46:d6:ca:a4:22:a2:39:8f:
83:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:33:56:7F:D9:99:9B:7E:75:CA:2A:91:8E:C3:72:37:BE:E3:E5:F0
X509v3 Authority Key Identifier:
keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:81:d4:f8:33:b3:3d:04:b9:cb:ec:b4:c1:ca:e2:51:9e:d0:
78:b7:5e:9b:6f:27:14:43:03:ba:10:1c:04:91:2c:03:50:e1:
47:a3:6c:14:07:30:6c:70:27:af:d7:66:70:a1:36:ae:92:6a:
91:7b:4b:26:70:9a:fa:17:cb:19:90:56:cb:cb:3c:a8:5d:63:
71:41:54:65:89:5f:33:d3:b3:94:d4:2b:de:49:cb:5a:4c:6c:
fd:05:c2:50:ae:09:a6:7c:40:28:d8:ba:2c:48:f6:4d:08:9a:
c7:46:95:4d:fb:c1:71:96:5f:9e:4a:0f:91:8a:e8:c6:dc:77:
84:0f:96:e4:97:64:03:9e:38:a0:f2:c9:c9:26:33:f3:92:89:
67:b2:08:d3:84:1f:4c:b3:5f:40:e5:89:a7:a2:6e:4f:ac:a7:
d5:1a:fd:75:66:05:98:48:3d:16:1f:74:6e:c0:79:00:3f:a7:
4d:bc:6d:82:55:ee:ff:5f:c9:ba:89:2b:f1:65:29:88:63:ba:
ac:9b:5f:42:78:48:ee:84:40:5f:6f:ff:48:c5:ca:4d:fb:42:
af:dd:46:36:30:1f:e7:e3:9a:2b:98:a0:d0:74:2a:f4:7f:8b:
e0:65:c7:b6:1c:d0:0f:0b:26:3d:81:49:23:44:86:8c:3b:72:
5b:30:f6:4e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0ohMtREC8CX2ukdYe8C0uZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ODU3ZWNmNDQxZTVlYTFkNzE4MWZlYzdlOTdlNmRiYzEy
MjBmYzIwHhcNMjYwMzI2MDUwMTI0WhcNMjYwMzI3MDUwMTI0WjAzMTEwLwYDVQQD
Eyg5NjMzNTY3ZmQ5OTk5YjdlNzVjYTJhOTE4ZWMzNzIzN2JlZTNlNWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8KFNJ+Pn188lQlQSlBcwjcs0FXF
uOShp68XOHfWmxMuJA8jkMD1lHLv2k0jPEgdD3oRxm0j2SdyB4oAbHMZ9S2bSiTb
ZWN53Mu6E0YS36jeQb8nYP2EkKmsHqtgUAVbemjWBTVpgmVXJ5SFseAzD8WjCyw0
RgTYAkfw9oVHN13Tf/V+0nGSj87AbGPVDKl0bwFDcOuWwah0OqtE7F/zZRJSPtqo
lwdaBmeJzjGE9OSrmie+ukXQzchUS7MiWcyKjp6UH+6RhwhiXmjdkzJHXj826L5u
ndYzRIRJHuAt+6XkJhE6kkeuacoOvcAPr4dmlbaFThtdRtbKpCKiOY+D0QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJYzVn/ZmZt+dcoqkY7Dcje+4+XwMB8GA1UdIwQY
MBaAFPiFfs9EHl6h1xgf7H6X5tvBIg/CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1JVi16MFFlWHFIWEdCX3NmcGZtMjhFaUQ4SS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYzg0OTc2LWQ1ZWEtNGU3Zi04ZWQz
LWE4OWY4MTc3NjQwNi8xLzEtSVYtejBRZVhxSFhHQl9zZnBmbTI4RWlEOEkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJhL2M4NDk3Ni1kNWVhLTRlN2YtOGVkMy1hODlmODE3NzY0
MDYvMS8xLUlWLXowUWVYcUhYR0Jfc2ZwZm0yOEVpRDhJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4HU
+DOzPQS5y+y0wcriUZ7QeLdem28nFEMDuhAcBJEsA1DhR6NsFAcwbHAnr9dmcKE2
rpJqkXtLJnCa+hfLGZBWy8s8qF1jcUFUZYlfM9OzlNQr3knLWkxs/QXCUK4JpnxA
KNi6LEj2TQiax0aVTfvBcZZfnkoPkYroxtx3hA+W5JdkA544oPLJySYz85KJZ7II
04QfTLNfQOWJp6JuT6yn1Rr9dWYFmEg9Fh90bsB5AD+nTbxtglXu/1/Juokr8WUp
iGO6rJtfQnhI7oRAX2//SMXKTftCr91GNjAf5+OaK5ig0HQq9H+L4GXHthzQDwsm
PYFJI0SGjDtyWzD2Tg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:10:49 2026 by rpki-client