
Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft
File: 1F84A2481D280DE0A103598276DB0C954193C755.mft (raw, json)
Hash identifier: 4HpO2DBve3jIq3JsfhPgF0AuWj6O4hZp9lIPpn8Y/ac=
Subject key identifier: 5E:28:55:D2:3F:65:CC:6E:B1:37:9A:4A:0D:1C:25:8F:6A:73:D4:17
Authority key identifier: 1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55
Certificate issuer: /CN=1f84a2481d280de0a103598276db0c954193c755
Certificate serial: 3D1718F8F9B24F6946088ABE08229487669F10C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft
Manifest number: 0193
Signing time: Sun 15 Nov 2026 08:15:17 +0000
Manifest this update: Sun 15 Nov 2026 08:10:17 +0000
Manifest next update: Mon 16 Nov 2026 12:11:17 +0000
Files and hashes: 1: 3139332e32342e302e302f32342d3234203d3e203530333835.roa (hash: ZF+yUQjQ8mafUSh2s0Gf6Vv2FDEQSv7tGMKU59lfZ0Y=)
2: 1F84A2481D280DE0A103598276DB0C954193C755.crl (hash: i7Pqc15Sxa6N41lcXlSJmhvCyOdPNlxC6iqVxaJGuy8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl
rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:17:18:f8:f9:b2:4f:69:46:08:8a:be:08:22:94:87:66:9f:10:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f84a2481d280de0a103598276db0c954193c755
Validity
Not Before: Nov 15 08:10:17 2026 GMT
Not After : Nov 16 12:11:17 2026 GMT
Subject: CN=5E2855D23F65CC6EB1379A4A0D1C258F6A73D417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:68:32:42:c0:0e:1a:92:c5:7c:14:2d:fc:da:
04:f9:78:93:7d:48:61:8e:5c:99:4e:dd:60:b3:8d:
c4:0d:9f:02:fe:a8:c1:2d:d2:f7:4d:79:48:b8:70:
a8:a5:64:11:de:e5:2f:c4:cf:3b:07:97:2a:7a:56:
d4:cd:3a:5d:3a:c1:61:de:9e:7d:5d:db:e0:0c:69:
ca:f9:29:b1:45:8f:4a:b9:8d:a9:ce:2e:f6:c8:ec:
f9:0f:01:f3:c5:4f:d1:c6:5f:11:a0:a3:e2:96:85:
b4:63:d5:1f:cf:e4:50:5c:dd:5a:66:aa:74:68:e9:
49:c9:a1:02:4a:0a:2e:33:e1:70:4d:b1:62:23:f8:
03:50:cd:69:2e:fb:9a:c0:81:11:6f:42:3a:6b:0e:
d6:0e:81:f3:23:6f:11:c0:d5:99:c1:9b:61:4a:00:
28:79:ea:75:46:d2:d0:16:4d:8a:35:0f:17:43:53:
40:59:44:3a:02:3e:14:ff:f3:19:f5:d0:bc:b2:c5:
1c:56:0e:0a:ea:54:8b:83:92:e3:0d:6a:d3:00:93:
9a:f5:27:25:c2:8e:42:db:ec:9f:c0:5f:84:8e:40:
4a:dd:7e:69:65:7d:13:fd:66:12:3e:bb:c9:47:ca:
e1:f9:0c:9d:e4:40:54:74:8d:43:b0:3e:71:74:10:
11:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:28:55:D2:3F:65:CC:6E:B1:37:9A:4A:0D:1C:25:8F:6A:73:D4:17
X509v3 Authority Key Identifier:
keyid:1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:fb:2c:60:55:31:61:ba:43:1a:c5:b6:d8:d4:af:47:8b:54:
33:64:d2:b1:f5:82:04:ba:b1:29:88:a4:39:2a:fa:40:94:ee:
89:5d:c5:25:a0:b1:9f:56:47:70:b2:ae:33:97:b0:8c:b6:14:
8b:b3:73:d3:10:61:64:2e:25:8d:cf:61:21:9e:3a:e3:90:2d:
f1:c6:32:75:a8:a2:db:91:07:11:39:2b:b5:15:8f:a9:56:93:
72:62:90:dd:4d:13:9b:29:ad:76:d6:56:83:05:00:00:76:30:
11:ac:a2:31:a5:89:db:1c:2a:e3:e8:07:09:5b:d7:b8:f7:e8:
e6:51:ac:c6:96:86:73:4c:8a:8d:1c:e0:31:e2:49:b7:4f:c4:
e8:95:1d:e8:57:9a:28:ec:f1:eb:74:51:58:76:0c:9f:b3:24:
91:86:c7:d6:27:4d:ac:cb:b6:34:eb:0e:27:3c:ef:c2:02:d3:
5d:0b:80:98:c4:68:21:53:7f:50:58:bc:4f:60:16:42:f1:d0:
16:7c:d9:b8:de:e8:c0:eb:4f:58:ae:3a:76:36:9b:03:8d:43:
e1:ce:31:8a:de:fc:a7:a0:20:cf:18:69:2e:00:55:84:66:cd:
88:c6:05:f0:08:8b:5a:82:dc:27:e1:53:43:21:6b:be:0d:ac:
6c:15:10:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:32:43 2026 by rpki-client