Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
File: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft (raw, json)
Hash identifier: JIo0IQUYbLYmoLrFuXLEHrnLfMfB+jL6TtyIF0QkJqM=
Subject key identifier: C7:1A:24:F3:0E:23:A4:89:94:82:91:BB:1E:8C:5A:6E:63:4C:40:6C
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Certificate issuer: /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial: 01A0D8DEA946E68B2064C8CF2E82C4593670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
Manifest number: 1A7C
Signing time: Fri 25 Sep 2026 14:01:05 +0000
Manifest this update: Fri 25 Sep 2026 14:01:05 +0000
Manifest next update: Sat 26 Sep 2026 14:01:05 +0000
Files and hashes: 1: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl (hash: wsa9mkEBwCyV1Z+T0a+N5eSMPFwOdrBiPIChFjL+yUo=)
2: 40tYHzrdIOKM0_j4QKh_7shzx8k.roa (hash: SKNQQTkqDQxf7nvw2qRuH0Vq4RF5cs3xZPCOte7W/OA=)
3: QNpprllplAM88mMrWtN3ag177fE.roa (hash: 5dP2zjfT0bTz8XtRVCAWieBHqUYv0AqhPnTwXU8eFn4=)
4: Ss-pxg7MCUnATOQpuT8Jh8a6KnM.roa (hash: kmr+HuErFhNT7cviIumckQWDHYCPiWsB0llSSAYvKio=)
5: dkTEhcSUjmDmfcgVaKjPvVY65ho.roa (hash: CEmoGVLgn+ZeP+7mTHI7wWOP1MgXpbR4Ij+5W74s23I=)
6: fXSStTtN6IqbqkCD3E5j3kC-YHI.roa (hash: zVgHJh9lJVijMpBB+dDgMK+AGLHEUW+Je1xWignFzIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:a9:46:e6:8b:20:64:c8:cf:2e:82:c4:59:36:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Validity
Not Before: Sep 25 14:01:05 2026 GMT
Not After : Sep 26 14:01:05 2026 GMT
Subject: CN=c71a24f30e23a489948291bb1e8c5a6e634c406c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a4:74:10:6b:69:7b:01:1c:75:ee:2f:2a:58:
53:be:26:03:03:b7:ee:f3:b0:78:8b:fc:38:75:37:
ab:ec:cb:a4:9e:91:bb:06:09:81:2b:cf:3e:8b:9c:
c1:f8:89:61:6c:a0:85:56:74:15:94:75:55:a3:1f:
4d:66:64:d8:51:62:c0:de:0a:3d:27:08:ad:5e:e2:
26:6c:c7:06:83:10:27:4e:a6:5e:30:41:84:8d:71:
c4:3b:8d:c6:95:a8:0d:2f:19:22:b4:43:9b:86:eb:
ef:c3:62:92:fb:3d:58:06:14:3b:03:a7:f4:56:95:
64:c6:60:f3:12:89:b9:ea:ed:7f:46:51:e6:a3:72:
38:1f:92:af:06:71:77:70:78:27:3b:66:2a:95:f5:
e6:7b:f5:7d:93:5b:ee:9e:cc:05:79:fe:0e:8b:8d:
bd:e7:55:1a:5b:55:5e:03:90:5f:c8:74:5a:fc:be:
d9:99:cd:8b:0c:b3:2f:3f:b0:d7:00:c8:f4:55:d5:
bf:db:00:43:fe:4e:e7:e7:4a:c0:a4:12:bb:f6:62:
87:17:2d:81:b4:ac:4e:b4:6d:7a:bb:0f:83:a1:f8:
6f:71:ea:5f:65:f5:e2:9d:4b:58:e9:52:c5:8e:63:
c6:3c:54:ce:44:5e:87:a1:e4:19:01:dc:2b:04:68:
80:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1A:24:F3:0E:23:A4:89:94:82:91:BB:1E:8C:5A:6E:63:4C:40:6C
X509v3 Authority Key Identifier:
keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:51:65:af:90:8c:58:4b:f8:c5:0e:9d:c7:57:ba:2d:36:83:
52:9f:60:6f:82:b1:7d:0d:13:96:77:86:1b:33:3e:49:4a:94:
22:0e:2a:ab:8d:1e:7b:94:8d:bb:5e:46:fa:44:f7:87:68:76:
45:08:54:09:6a:80:97:38:e7:db:9c:36:ba:ee:b4:40:30:d3:
bb:a1:3b:bb:ae:17:f2:11:6b:2f:e7:35:f7:0b:d0:91:76:00:
00:4b:ff:8e:b5:62:77:12:76:a6:23:e8:1f:c9:59:23:43:36:
9c:aa:a2:a2:7d:98:50:d8:59:99:f7:c4:f8:e9:d8:45:24:85:
f6:5a:c0:b6:a8:7e:b2:84:9e:6f:7b:11:00:91:4f:7e:31:8a:
58:0b:17:88:76:6e:e4:19:cf:af:1a:97:bc:2e:45:6a:c3:1a:
f3:de:cf:05:32:d7:b5:44:95:67:fe:43:a1:15:ae:2f:e6:12:
fd:0b:c4:57:09:53:d4:02:5f:c7:57:0a:fa:2b:27:a9:54:d7:
39:eb:cc:a2:c5:3b:f4:3c:b7:4a:50:7a:51:4a:86:ef:94:2d:
9a:05:de:c2:f1:d6:3f:b5:96:2c:d0:ce:e9:fb:ab:70:d6:f7:
b2:f7:2b:e4:64:8f:ae:87:44:d3:c4:fe:ea:07:d8:b1:de:eb:
68:be:ee:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:08:53 2026 by rpki-client