
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
File: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft (raw, json)
Hash identifier: r5MMByBmxRu2smE9248an1fT3RfjzQj4b+KqFTr92qo=
Subject key identifier: 62:54:48:B3:5C:20:BA:DB:DA:20:4D:46:69:5A:A8:A7:9C:C7:BB:70
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Certificate issuer: /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial: 019CAEDA0ECE6F4E22F0783B6826BC5F0BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
Manifest number: 1854
Signing time: Mon 02 Mar 2026 14:00:52 +0000
Manifest this update: Mon 02 Mar 2026 14:00:52 +0000
Manifest next update: Tue 03 Mar 2026 14:00:52 +0000
Files and hashes: 1: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl (hash: YlPK7L8suNqfYyji0GasFidZLNAxA9vhTV8qtpzrXz8=)
2: 40tYHzrdIOKM0_j4QKh_7shzx8k.roa (hash: SKNQQTkqDQxf7nvw2qRuH0Vq4RF5cs3xZPCOte7W/OA=)
3: QNpprllplAM88mMrWtN3ag177fE.roa (hash: 5dP2zjfT0bTz8XtRVCAWieBHqUYv0AqhPnTwXU8eFn4=)
4: Ss-pxg7MCUnATOQpuT8Jh8a6KnM.roa (hash: kmr+HuErFhNT7cviIumckQWDHYCPiWsB0llSSAYvKio=)
5: dkTEhcSUjmDmfcgVaKjPvVY65ho.roa (hash: CEmoGVLgn+ZeP+7mTHI7wWOP1MgXpbR4Ij+5W74s23I=)
6: fXSStTtN6IqbqkCD3E5j3kC-YHI.roa (hash: zVgHJh9lJVijMpBB+dDgMK+AGLHEUW+Je1xWignFzIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:0e:ce:6f:4e:22:f0:78:3b:68:26:bc:5f:0b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Validity
Not Before: Mar 2 14:00:52 2026 GMT
Not After : Mar 3 14:00:52 2026 GMT
Subject: CN=625448b35c20badbda204d46695aa8a79cc7bb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:a8:cd:03:49:2c:99:e5:1c:ea:56:54:04:
9b:5d:a6:d4:8e:45:97:79:12:94:0b:ff:54:7f:6d:
a6:f8:d4:47:f4:07:19:b3:af:a3:cd:7c:f0:55:b8:
e0:49:24:1f:93:9b:03:51:1f:46:f7:30:df:8c:1c:
25:b3:0a:3b:1b:43:d7:a3:04:e0:5c:80:8b:ae:e5:
c9:f9:3f:33:00:65:53:3c:d0:d6:b6:29:e0:0e:4d:
f0:25:d3:79:9e:e8:5f:0a:c9:36:c4:74:f8:b8:01:
2e:af:fa:e7:89:b4:ab:49:fb:76:b7:ab:9f:b9:7e:
e1:ae:ab:11:47:fa:82:28:31:0c:49:a8:5a:2e:8d:
a4:34:a5:86:e6:22:ee:2e:64:c7:3e:91:b5:25:e2:
38:a4:81:51:3f:30:c7:75:21:1f:40:de:51:8c:b6:
10:b6:74:6e:7e:88:bb:52:2e:b5:9c:27:57:36:24:
58:6c:7f:d2:b9:c2:89:60:3c:79:08:54:f4:e4:fb:
9f:70:06:23:a5:62:a2:94:28:73:be:f0:8e:86:33:
98:7f:09:5e:e5:5f:f0:0b:99:8e:7b:42:d9:b9:e9:
b7:e2:e4:f4:f8:89:0c:b2:9d:9e:f4:d7:35:35:13:
db:1d:c1:e3:e9:4d:e0:75:7f:0b:75:a7:60:f7:5d:
fb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:54:48:B3:5C:20:BA:DB:DA:20:4D:46:69:5A:A8:A7:9C:C7:BB:70
X509v3 Authority Key Identifier:
keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:68:0b:17:e6:22:e3:a4:12:3c:a9:38:f0:ff:63:ef:67:d4:
3e:51:78:f3:4a:14:87:f6:54:15:20:9b:f0:b9:08:9a:9f:1f:
18:29:96:98:1e:6c:f3:82:60:0f:69:b1:0e:e1:3c:32:cf:df:
b2:b3:e6:9f:de:40:01:f8:e8:10:b3:af:e6:f0:ee:b0:ef:0b:
c8:9e:79:35:e4:d8:1a:b6:46:1b:b1:7b:db:e8:81:5b:98:aa:
c3:82:de:3d:af:08:10:28:a0:23:5f:4b:c2:63:c5:54:98:ab:
3c:3c:7e:ad:3e:31:be:a0:df:e2:72:28:60:cf:8f:f7:36:00:
51:f4:8d:51:66:21:99:62:3d:39:48:91:4a:9f:df:e0:14:05:
e4:cc:c7:1e:be:f6:c0:c7:f7:f1:a5:8f:97:c4:7c:14:99:a7:
24:f9:33:5b:25:7b:d3:c5:20:28:24:39:95:8d:ff:b5:31:e8:
29:6c:78:66:f4:3a:0e:23:ea:fc:48:b1:a3:77:8e:9f:22:97:
be:74:b0:c8:18:4d:d5:09:bf:d2:78:68:df:f3:d7:fb:16:37:
1d:01:21:4e:9d:58:47:b7:9f:d5:b4:03:37:0b:8d:13:db:3c:
d8:e9:2d:76:07:51:22:46:c1:bb:89:50:f7:be:15:a8:85:44:
0c:3c:ff:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:52:44 2026 by rpki-client