
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft
File: 1F84A2481D280DE0A103598276DB0C954193C755.mft (raw, json)
Hash identifier: jlo83X3rhALseIeOml6U5jzFM5wQRaFakheBBS+CX5w=
Subject key identifier: EA:5D:11:C9:39:FC:54:75:DE:3F:AF:2D:6E:A1:33:A4:73:09:96:EE
Authority key identifier: 1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55
Certificate issuer: /CN=1f84a2481d280de0a103598276db0c954193c755
Certificate serial: 7F542EF76CCA01F4AA7E10714325D9594BCD8DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft
Manifest number: 84
Signing time: Thu 30 Apr 2026 22:16:47 +0000
Manifest this update: Thu 30 Apr 2026 22:11:47 +0000
Manifest next update: Sat 02 May 2026 00:59:47 +0000
Files and hashes: 1: 1F84A2481D280DE0A103598276DB0C954193C755.crl (hash: UAfmDO18L8ja0/jbgsJLGNz5IhyqsWKYkNwZ9uI/erk=)
2: 3139332e32342e302e302f32342d3234203d3e203530333835.roa (hash: ZF+yUQjQ8mafUSh2s0Gf6Vv2FDEQSv7tGMKU59lfZ0Y=)
3: 3139332e32342e342e302f32342d3234203d3e20323134303235.roa (hash: +v1QY3ywM3Na8NpQTw4Tmpm5P4ulC0E6x+1GOZGs6FI=)
4: 3139332e32342e312e302f32342d3234203d3e20323134303235.roa (hash: jKZGDyyKq3h02DI7Wpr6sZVdYeHyFe7w8PzFXBoOgS0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl
rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 00:59:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:54:2e:f7:6c:ca:01:f4:aa:7e:10:71:43:25:d9:59:4b:cd:8d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f84a2481d280de0a103598276db0c954193c755
Validity
Not Before: Apr 30 22:11:47 2026 GMT
Not After : May 2 00:59:47 2026 GMT
Subject: CN=EA5D11C939FC5475DE3FAF2D6EA133A4730996EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e6:bd:b5:0e:90:2d:4b:3f:bf:18:36:6f:11:
65:86:57:6e:78:b9:a1:b2:33:a2:e1:a9:3a:99:ed:
8f:aa:31:84:e3:64:f6:86:d7:cb:67:1d:64:0d:4a:
cb:be:f4:72:ec:cf:ea:ef:b4:69:88:45:84:a7:79:
92:8a:3f:98:05:77:4a:2b:2f:91:c1:1d:98:c1:85:
5c:da:8d:23:7c:ef:0f:52:01:d0:74:a0:c2:d5:59:
c6:ff:d0:31:e1:b6:1a:52:81:86:16:2c:0a:e3:f2:
fa:b3:b6:40:c4:3f:5c:08:41:52:75:27:03:5c:89:
34:f5:e9:f7:d5:66:10:59:44:9d:5f:41:3a:f3:ed:
11:9b:bf:0b:20:17:c2:c8:59:95:da:51:97:b6:3f:
e6:36:f4:94:07:8b:0e:6f:67:f0:f2:00:ff:3c:c6:
f7:d4:e5:10:44:36:c2:73:b9:2f:93:16:48:76:ca:
1d:93:b5:e6:4d:cb:7b:a3:21:7d:56:e5:9d:e9:09:
5c:83:4d:e0:f5:e9:46:c7:b3:f2:f5:17:2f:56:96:
20:68:48:8a:b0:f1:00:ec:10:ec:23:14:f8:9b:a4:
b3:d5:2e:cb:87:d2:50:22:f4:82:de:eb:bc:30:b9:
31:2c:9b:76:b9:f7:bd:89:9d:7c:04:15:2f:24:92:
de:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5D:11:C9:39:FC:54:75:DE:3F:AF:2D:6E:A1:33:A4:73:09:96:EE
X509v3 Authority Key Identifier:
keyid:1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:12:87:14:85:d5:39:c2:55:2a:36:70:dd:91:ec:dd:72:59:
95:f1:30:17:2e:2a:ab:fb:b5:6a:1f:32:a2:89:4b:87:61:d6:
29:d9:4e:18:98:28:f4:db:2d:1c:3f:fa:dd:16:9c:7b:2b:59:
26:27:a1:8a:bd:a6:f0:47:21:67:2c:d7:fa:5e:0b:39:10:d8:
a3:1a:41:d3:eb:90:4b:27:cd:48:20:82:50:f7:dc:99:3c:99:
2c:da:34:92:cb:86:c0:cc:ad:94:46:d0:20:c1:8b:e4:71:6b:
e5:c8:ee:af:a9:91:cb:ee:9d:ee:83:f9:1c:13:69:41:e3:7c:
e3:10:7b:22:c5:bc:28:11:41:6d:9b:84:13:77:c3:5e:b8:48:
37:2c:be:96:6e:24:60:b5:41:8c:90:78:03:af:23:65:65:a2:
6e:21:ae:38:7b:0e:1f:d2:55:0a:fd:02:55:ba:e3:a7:62:ec:
a0:0c:79:29:3b:de:fb:6c:40:6f:55:3b:6e:f7:61:0d:d5:e8:
9b:16:2d:26:40:75:aa:5a:48:a4:3c:a1:4e:81:f4:89:fc:d3:
6f:30:6d:04:d9:1c:7f:2b:54:64:a0:a7:bb:a1:91:86:9f:e5:
cb:a2:f9:fc:b1:d6:ca:41:c3:4f:4e:5f:7c:34:db:04:98:9c:
f3:12:cd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 13:38:13 2026 by rpki-client