
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft
File: 1F84A2481D280DE0A103598276DB0C954193C755.mft (raw, json)
Hash identifier: Q2RjF+K8YV1EvfdcVpGA7sKZYx9y278Ml+p5aoc1hZM=
Subject key identifier: FA:FF:EF:0D:27:EB:50:AD:C5:7A:23:66:0B:F0:F8:21:D8:35:E7:45
Authority key identifier: 1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55
Certificate issuer: /CN=1f84a2481d280de0a103598276db0c954193c755
Certificate serial: 031EE113474262B10B87B3A6C55438B2972759B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft
Manifest number: CB
Signing time: Sun 21 Jun 2026 14:03:42 +0000
Manifest this update: Sun 21 Jun 2026 13:58:42 +0000
Manifest next update: Mon 22 Jun 2026 17:02:42 +0000
Files and hashes: 1: 1F84A2481D280DE0A103598276DB0C954193C755.crl (hash: BuGK2gYPEzyctJsPE6Y6sMOThNgeJ5Lnl32nzNtIHFI=)
2: 3139332e32342e342e302f32342d3234203d3e203436333730.roa (hash: BNPYbbibnrXcaaWfh8lLNxar9l/UN0FRAxH/mM14IKk=)
3: 3139332e32342e312e302f32342d3234203d3e2039333034.roa (hash: oj2cVXUcP5WPxhMAcQa5yBD7BSGBjPhZ1RQF8He2c7c=)
4: 3139332e32342e302e302f32342d3234203d3e203530333835.roa (hash: ZF+yUQjQ8mafUSh2s0Gf6Vv2FDEQSv7tGMKU59lfZ0Y=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl
rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:1e:e1:13:47:42:62:b1:0b:87:b3:a6:c5:54:38:b2:97:27:59:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f84a2481d280de0a103598276db0c954193c755
Validity
Not Before: Jun 21 13:58:42 2026 GMT
Not After : Jun 22 17:02:42 2026 GMT
Subject: CN=FAFFEF0D27EB50ADC57A23660BF0F821D835E745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:08:e5:27:86:0f:a4:a3:cc:f9:35:f2:ce:ce:
ec:89:c9:4b:a9:2a:9b:ef:89:20:58:3d:ee:7a:9e:
12:89:63:8b:84:d4:e9:90:fe:93:47:c4:60:bc:d2:
a8:d4:0a:d6:c4:ba:c8:fe:a5:61:8b:3f:88:1f:d3:
ea:2c:1b:4c:be:bc:83:93:3a:e1:01:47:7d:b5:ca:
1e:83:5c:0c:2f:b8:6c:17:f3:ef:a3:73:92:1a:f5:
05:15:04:04:06:4a:5b:7a:9c:82:7e:92:f5:ed:23:
49:15:e1:53:4b:ae:4d:32:ac:5e:b8:fc:aa:21:fc:
54:51:ac:09:c6:38:9e:50:ab:3b:dd:ff:d5:68:10:
fd:0e:b9:00:9b:3e:15:29:4c:3b:3e:c6:4a:fd:8e:
5b:32:dc:71:b3:02:dd:64:e6:77:96:61:63:1b:ec:
8a:36:ef:f7:b4:06:1c:6f:9a:96:7b:c0:24:db:04:
df:92:d9:49:a8:84:5e:d6:26:77:52:00:a0:df:f1:
c3:02:81:ab:28:0f:f7:39:14:8c:8e:44:c9:99:d9:
16:6f:df:74:e3:8c:be:b1:b1:d0:6a:73:a3:6b:d4:
b2:de:c4:ed:4c:8b:21:5b:ea:d4:1b:83:14:c1:88:
cf:eb:81:9b:31:97:14:a1:90:04:be:38:ca:ae:e8:
c2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FF:EF:0D:27:EB:50:AD:C5:7A:23:66:0B:F0:F8:21:D8:35:E7:45
X509v3 Authority Key Identifier:
keyid:1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e3:44:84:9b:82:a5:8c:37:71:02:97:31:c1:ba:b0:c7:8a:
21:fd:56:66:31:da:00:d2:ab:b6:74:58:ef:c3:1e:9b:c5:04:
47:4d:d5:ca:48:c9:00:90:43:34:11:0a:87:68:09:9e:f7:16:
73:45:3c:a2:fb:66:70:91:89:04:52:1e:1e:a2:20:6d:a3:30:
c5:85:86:01:93:a9:58:5b:69:8c:18:be:a1:b5:e4:ce:59:77:
e7:88:2a:64:a6:dc:53:2f:3d:30:5d:4b:db:f0:ec:b0:cb:3d:
f0:a3:0b:67:c2:d6:fe:cb:e6:da:ae:e3:e1:a5:bb:80:c2:25:
d5:df:6f:8c:ef:ae:da:c1:cd:0d:17:44:02:19:b5:20:9b:5c:
2c:0b:e7:0f:f1:cd:71:e1:13:33:28:8e:6c:b2:73:c9:90:ff:
cc:36:d2:e0:b3:69:d2:55:08:4b:11:aa:9d:65:87:b1:f0:14:
fc:fa:3a:ed:37:5d:c2:ee:eb:ed:6b:de:60:eb:b3:41:25:04:
3a:80:6d:72:74:54:47:f9:74:c0:03:41:65:34:3f:79:40:e6:
b1:6e:c6:3f:fb:2c:6e:38:87:de:b1:dd:98:34:76:f7:ac:11:
a9:bb:3f:e9:27:d1:38:61:97:97:c9:8f:7e:f7:3c:e5:1c:6a:
90:42:97:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 19:43:26 2026 by rpki-client