
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
File: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft (raw, json)
Hash identifier: qGjQS1Ld9oJMjGIsxU8EKy72pN9WyDRBEOK0aItiwB0=
Subject key identifier: 38:0A:F1:AD:0E:8D:0A:61:22:E6:CE:76:DA:CD:F2:1C:F4:47:D8:C4
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Certificate issuer: /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial: 019F84FA69C2C01DDE2E65FB2D3F13216DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
Manifest number: 19CC
Signing time: Tue 21 Jul 2026 14:00:31 +0000
Manifest this update: Tue 21 Jul 2026 14:00:31 +0000
Manifest next update: Wed 22 Jul 2026 14:00:31 +0000
Files and hashes: 1: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl (hash: Kez2e/agu+m+ATOKH56MZppC6ibo6tOm4EFM53ZVV8c=)
2: 40tYHzrdIOKM0_j4QKh_7shzx8k.roa (hash: SKNQQTkqDQxf7nvw2qRuH0Vq4RF5cs3xZPCOte7W/OA=)
3: QNpprllplAM88mMrWtN3ag177fE.roa (hash: 5dP2zjfT0bTz8XtRVCAWieBHqUYv0AqhPnTwXU8eFn4=)
4: Ss-pxg7MCUnATOQpuT8Jh8a6KnM.roa (hash: kmr+HuErFhNT7cviIumckQWDHYCPiWsB0llSSAYvKio=)
5: dkTEhcSUjmDmfcgVaKjPvVY65ho.roa (hash: CEmoGVLgn+ZeP+7mTHI7wWOP1MgXpbR4Ij+5W74s23I=)
6: fXSStTtN6IqbqkCD3E5j3kC-YHI.roa (hash: zVgHJh9lJVijMpBB+dDgMK+AGLHEUW+Je1xWignFzIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fa:69:c2:c0:1d:de:2e:65:fb:2d:3f:13:21:6d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Validity
Not Before: Jul 21 14:00:31 2026 GMT
Not After : Jul 22 14:00:31 2026 GMT
Subject: CN=380af1ad0e8d0a6122e6ce76dacdf21cf447d8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:1c:93:65:b6:50:d8:d6:d6:6c:2b:81:6a:
61:05:ee:34:20:a8:07:23:04:3e:9d:45:4b:6a:44:
83:70:63:e6:3b:46:41:57:e1:42:83:24:f7:e2:f8:
b0:3f:ea:f3:89:33:0f:a7:aa:5b:9b:ce:85:15:bd:
61:51:96:4d:7f:3d:27:64:c0:13:7f:b4:5b:1e:fd:
9d:64:a7:06:23:bc:f3:e5:9e:3b:e2:a8:87:78:53:
00:b6:7d:1f:bf:f3:37:be:97:08:cb:30:ba:ba:57:
04:be:55:07:9e:42:61:5a:da:82:27:bb:f8:62:d0:
f2:db:9a:5e:c1:a9:d3:93:7a:d4:79:38:ce:12:49:
8f:88:45:ca:dd:ac:1d:83:16:ed:4e:2f:78:c7:99:
ed:b0:6d:ed:cc:ed:95:17:f9:47:8c:a9:72:0e:b3:
0a:6f:3c:70:c0:d9:0f:b4:61:ae:ee:a1:09:95:74:
ab:2c:c6:d5:9a:e6:79:b1:49:e0:67:b8:8a:dd:9a:
cc:a5:51:42:e7:66:35:00:b4:3b:5e:77:6e:0f:0b:
6c:24:8a:1d:d9:72:ca:ba:ff:f6:85:0b:dd:7e:8f:
d8:84:68:9a:c4:59:a8:cd:74:22:7e:41:94:59:27:
e1:e4:22:34:1d:bc:f4:5f:de:c8:ab:f5:a8:47:43:
8e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0A:F1:AD:0E:8D:0A:61:22:E6:CE:76:DA:CD:F2:1C:F4:47:D8:C4
X509v3 Authority Key Identifier:
keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:8f:02:f6:44:52:0f:e6:e5:6b:73:99:d5:98:b7:f3:7d:db:
a7:25:3b:d9:0b:fc:27:32:5d:14:61:f9:bf:8a:a1:df:1d:8b:
bb:1f:9b:0b:91:bd:82:12:f5:e8:d3:74:9c:12:59:b5:a9:cf:
31:64:1d:2c:5c:08:99:a3:ad:78:6b:66:10:ed:3f:87:3f:b2:
37:5a:fb:e0:4a:5b:55:58:28:42:fa:f4:21:00:e9:e8:5e:7e:
dd:8a:27:99:e7:d5:3d:8f:d6:a2:b7:f7:29:dd:ef:81:96:be:
44:fc:00:bc:4d:ae:c0:7c:11:23:57:3e:8a:63:f0:6e:69:bc:
f9:e7:f3:39:5c:c8:df:86:2b:e7:89:12:93:bd:48:b2:b7:9b:
5b:6c:33:94:38:8c:cf:1b:e3:0f:8e:b0:8d:0d:e2:ab:ff:ea:
0d:f6:a6:88:89:53:d2:d1:93:a9:ce:c6:2c:eb:32:7e:49:6a:
68:d9:d4:5a:c4:f7:38:b7:64:3a:12:65:c8:e9:31:ae:a9:8d:
ce:10:da:35:b8:1f:c4:27:d5:29:db:c4:12:d0:b7:e7:0d:43:
7f:64:f1:53:37:5b:84:27:81:94:b3:f3:97:38:45:7c:53:66:
9b:80:bf:25:06:40:d5:1a:9c:ae:10:b9:6b:55:e0:ad:da:ff:
b5:27:84:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:26:57 2026 by rpki-client