
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
File: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft (raw, json)
Hash identifier: UjR7mAxn84LKOaU49bjx4CK4rPOo1Z0C6yBpjy/CiJA=
Subject key identifier: 9F:93:AF:5A:C2:E5:7D:27:DA:8A:9B:AA:2B:D7:93:DE:AB:02:99:F3
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Certificate issuer: /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial: 019DA7F9843D499E8C6206C82E5E50B46BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
Manifest number: 18D5
Signing time: Sun 19 Apr 2026 23:00:40 +0000
Manifest this update: Sun 19 Apr 2026 23:00:40 +0000
Manifest next update: Mon 20 Apr 2026 23:00:40 +0000
Files and hashes: 1: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl (hash: jpAlvi9khsNBpMRPx/0qo1s4E7tpoAUvSMBOcLGS348=)
2: 40tYHzrdIOKM0_j4QKh_7shzx8k.roa (hash: SKNQQTkqDQxf7nvw2qRuH0Vq4RF5cs3xZPCOte7W/OA=)
3: QNpprllplAM88mMrWtN3ag177fE.roa (hash: 5dP2zjfT0bTz8XtRVCAWieBHqUYv0AqhPnTwXU8eFn4=)
4: Ss-pxg7MCUnATOQpuT8Jh8a6KnM.roa (hash: kmr+HuErFhNT7cviIumckQWDHYCPiWsB0llSSAYvKio=)
5: dkTEhcSUjmDmfcgVaKjPvVY65ho.roa (hash: CEmoGVLgn+ZeP+7mTHI7wWOP1MgXpbR4Ij+5W74s23I=)
6: fXSStTtN6IqbqkCD3E5j3kC-YHI.roa (hash: zVgHJh9lJVijMpBB+dDgMK+AGLHEUW+Je1xWignFzIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:f9:84:3d:49:9e:8c:62:06:c8:2e:5e:50:b4:6b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Validity
Not Before: Apr 19 23:00:40 2026 GMT
Not After : Apr 20 23:00:40 2026 GMT
Subject: CN=9f93af5ac2e57d27da8a9baa2bd793deab0299f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5e:c4:e5:83:11:c1:b1:dd:7e:c4:54:74:70:
4d:63:72:02:bb:b9:ae:fe:19:fa:94:8e:78:67:f9:
bb:1f:bd:c5:4c:99:42:bd:fa:aa:62:82:fd:3c:78:
3f:56:35:81:2d:f3:56:4d:ac:14:c7:73:c7:66:f5:
b6:29:8f:92:fe:aa:48:b6:07:65:b7:28:d8:ed:88:
cf:47:cf:10:4c:6d:cd:19:9d:e7:b3:6e:9c:85:3c:
a3:12:b8:5a:b3:f0:b8:30:07:07:39:39:01:09:d8:
aa:bf:2a:0b:32:44:b4:fc:de:d8:d0:75:40:5a:a9:
34:d0:96:48:26:34:8b:ca:6b:a5:ad:7d:ff:8c:60:
98:ad:8a:fb:01:0b:c2:89:27:66:c4:f8:6a:47:93:
e1:0e:12:ac:09:1c:11:3a:ea:e7:38:0d:6f:42:17:
25:bf:60:2f:79:29:c8:e6:5e:f8:88:a6:e2:52:f7:
25:9d:7f:cb:5b:3d:90:39:59:ce:7d:31:79:a5:1d:
b4:f5:3e:df:fe:1c:ff:01:fe:66:ae:e4:89:31:ba:
cf:5e:32:7e:6e:f7:15:31:d6:da:ff:12:3f:6e:4f:
90:91:5f:37:7f:08:fa:30:cf:a0:ab:8e:a5:1a:23:
cb:a1:24:00:00:cd:77:65:a2:9b:d7:59:40:0c:a2:
fd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:93:AF:5A:C2:E5:7D:27:DA:8A:9B:AA:2B:D7:93:DE:AB:02:99:F3
X509v3 Authority Key Identifier:
keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b2:7b:f7:e2:f4:6d:86:19:c1:b6:86:e7:53:11:3f:a9:90:
19:83:91:a4:5f:fc:f4:fc:9d:55:30:e8:0d:1d:7f:68:79:2a:
31:94:9b:96:f0:39:e0:48:d5:d3:15:81:28:3a:ba:aa:72:2f:
d9:38:f7:c1:9f:51:91:04:3f:6b:eb:94:7f:68:e3:40:59:f9:
43:dc:ec:ca:5f:a9:e9:53:9d:2e:bb:4f:3a:67:b9:24:6b:a5:
44:8f:9f:11:da:d9:63:63:27:be:59:80:fc:e2:8e:f9:10:c7:
46:da:51:90:cf:5a:e2:42:a4:c7:44:d4:18:c3:ee:e3:a8:ff:
48:39:27:1e:80:71:6d:d3:8c:5b:e9:b3:f1:08:a2:3c:3a:08:
58:bf:40:3f:69:36:5c:d9:69:3f:0d:f8:36:10:e4:55:bb:74:
29:bd:d7:99:52:ce:8f:63:d0:08:25:44:5a:a2:50:a4:7c:33:
90:5d:00:1c:98:4f:2f:b0:63:d6:dc:fb:5a:65:91:62:ee:7f:
f0:42:06:99:0a:a2:2d:d6:99:47:ee:ab:4b:29:20:75:57:b2:
65:23:11:39:bf:d3:58:fe:7d:46:cc:8b:f7:97:1e:45:10:2d:
e4:a7:6f:97:df:31:d1:6c:ed:7e:ed:11:d3:4a:41:e1:52:39:
62:3b:b8:01
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2n+YQ9SZ6MYgbILl5QtGvZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ODU3ZWNmNDQxZTVlYTFkNzE4MWZlYzdlOTdlNmRiYzEy
MjBmYzIwHhcNMjYwNDE5MjMwMDQwWhcNMjYwNDIwMjMwMDQwWjAzMTEwLwYDVQQD
Eyg5ZjkzYWY1YWMyZTU3ZDI3ZGE4YTliYWEyYmQ3OTNkZWFiMDI5OWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul7E5YMRwbHdfsRUdHBNY3ICu7mu
/hn6lI54Z/m7H73FTJlCvfqqYoL9PHg/VjWBLfNWTawUx3PHZvW2KY+S/qpItgdl
tyjY7YjPR88QTG3NGZ3ns26chTyjErhas/C4MAcHOTkBCdiqvyoLMkS0/N7Y0HVA
Wqk00JZIJjSLymulrX3/jGCYrYr7AQvCiSdmxPhqR5PhDhKsCRwROurnOA1vQhcl
v2AveSnI5l74iKbiUvclnX/LWz2QOVnOfTF5pR209T7f/hz/Af5mruSJMbrPXjJ+
bvcVMdba/xI/bk+QkV83fwj6MM+gq46lGiPLoSQAAM13ZaKb11lADKL9vQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJ+Tr1rC5X0n2oqbqivXk96rApnzMB8GA1UdIwQY
MBaAFPiFfs9EHl6h1xgf7H6X5tvBIg/CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1JVi16MFFlWHFIWEdCX3NmcGZtMjhFaUQ4SS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYzg0OTc2LWQ1ZWEtNGU3Zi04ZWQz
LWE4OWY4MTc3NjQwNi8xLzEtSVYtejBRZVhxSFhHQl9zZnBmbTI4RWlEOEkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJhL2M4NDk3Ni1kNWVhLTRlN2YtOGVkMy1hODlmODE3NzY0
MDYvMS8xLUlWLXowUWVYcUhYR0Jfc2ZwZm0yOEVpRDhJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7J7
9+L0bYYZwbaG51MRP6mQGYORpF/89PydVTDoDR1/aHkqMZSblvA54EjV0xWBKDq6
qnIv2Tj3wZ9RkQQ/a+uUf2jjQFn5Q9zsyl+p6VOdLrtPOme5JGulRI+fEdrZY2Mn
vlmA/OKO+RDHRtpRkM9a4kKkx0TUGMPu46j/SDknHoBxbdOMW+mz8QiiPDoIWL9A
P2k2XNlpPw34NhDkVbt0Kb3XmVLOj2PQCCVEWqJQpHwzkF0AHJhPL7Bj1tz7WmWR
Yu5/8EIGmQqiLdaZR+6rSykgdVeyZSMROb/TWP59RsyL95ceRRAt5Kdvl98x0Wzt
fu0R00pB4VI5Yju4AQ==
-----END CERTIFICATE-----
Generated at Mon Apr 20 03:28:48 2026 by rpki-client