
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
File: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft (raw, json)
Hash identifier: ygcZXH1xTeUrmNr40/YxHoS219Pbc9s06qb4YE0g70w=
Subject key identifier: 0C:86:85:22:23:BC:86:43:74:80:A6:25:AE:97:0A:97:A5:A6:E4:22
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Certificate issuer: /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial: 01A0D12448DDCEC1491F85DD3A109A36221F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
Manifest number: 1A78
Signing time: Thu 24 Sep 2026 02:00:11 +0000
Manifest this update: Thu 24 Sep 2026 02:00:11 +0000
Manifest next update: Fri 25 Sep 2026 02:00:11 +0000
Files and hashes: 1: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl (hash: 5FxeAVsKL88MkEvHtvXgkCzb5yqQaQSoVEGtkxR8j4E=)
2: 40tYHzrdIOKM0_j4QKh_7shzx8k.roa (hash: SKNQQTkqDQxf7nvw2qRuH0Vq4RF5cs3xZPCOte7W/OA=)
3: QNpprllplAM88mMrWtN3ag177fE.roa (hash: 5dP2zjfT0bTz8XtRVCAWieBHqUYv0AqhPnTwXU8eFn4=)
4: Ss-pxg7MCUnATOQpuT8Jh8a6KnM.roa (hash: kmr+HuErFhNT7cviIumckQWDHYCPiWsB0llSSAYvKio=)
5: dkTEhcSUjmDmfcgVaKjPvVY65ho.roa (hash: CEmoGVLgn+ZeP+7mTHI7wWOP1MgXpbR4Ij+5W74s23I=)
6: fXSStTtN6IqbqkCD3E5j3kC-YHI.roa (hash: zVgHJh9lJVijMpBB+dDgMK+AGLHEUW+Je1xWignFzIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:48:dd:ce:c1:49:1f:85:dd:3a:10:9a:36:22:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Validity
Not Before: Sep 24 02:00:11 2026 GMT
Not After : Sep 25 02:00:11 2026 GMT
Subject: CN=0c86852223bc86437480a625ae970a97a5a6e422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:63:a1:9a:45:63:b6:6d:88:0c:90:49:47:07:
3e:c0:40:70:b0:1b:01:79:92:b4:67:ae:f6:6e:37:
2d:a4:ab:7a:51:87:cd:d7:27:c5:e1:a1:b4:dc:02:
81:c7:f6:f2:7a:cd:b2:73:14:2c:5a:d0:45:ba:78:
29:45:44:f0:e8:da:cb:38:9f:77:62:f1:55:3a:3d:
f6:a1:07:29:c1:40:ec:84:e9:bf:70:9e:da:17:86:
9a:d5:d3:58:ef:1e:c8:48:5f:90:76:51:05:2e:af:
07:49:1c:e6:06:6b:fb:b8:ab:31:0f:af:24:f7:ce:
fa:3e:6a:33:c8:1e:15:b3:62:f5:a0:82:5d:d9:60:
dd:ff:b0:bb:a0:6d:af:34:98:92:1c:1c:d9:99:bb:
f1:8a:95:23:98:0f:46:e0:11:b9:ee:3e:16:c8:21:
63:e4:e6:82:f0:e8:6b:96:d8:70:c1:20:19:70:46:
f5:f5:1a:11:09:95:c2:8e:26:ec:76:d0:81:2c:40:
9a:28:d2:e4:d8:ca:96:a9:26:a3:37:52:d9:ee:bf:
82:43:0a:3e:bb:1b:c4:d3:1e:67:a1:b3:79:0c:dd:
db:f3:5b:37:ba:0d:7f:1b:79:3e:a9:86:c5:17:2a:
08:5b:43:ba:9a:ee:41:8d:29:89:09:de:e0:69:8b:
ed:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:86:85:22:23:BC:86:43:74:80:A6:25:AE:97:0A:97:A5:A6:E4:22
X509v3 Authority Key Identifier:
keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d0:05:c2:ae:ae:0e:c1:00:65:67:30:0f:69:f1:0d:0b:80:
0a:1d:a1:f4:19:d5:2f:b6:e1:2d:ad:d2:ad:20:68:72:59:ea:
16:bd:47:fe:93:d5:b5:3f:14:5a:d5:f7:6c:38:d1:3d:46:1f:
8b:e9:62:82:95:ab:ec:c5:12:83:65:5d:a8:95:0e:c7:81:d8:
d5:8a:6c:74:6e:5d:ca:ca:5a:3d:cd:61:88:e0:f3:ab:fc:fc:
91:e0:ae:16:bd:aa:83:06:cc:c8:18:15:4d:27:7f:b6:e3:74:
2c:5e:26:3b:bb:ba:13:ec:88:d4:3f:98:4b:bc:d6:1f:28:58:
48:c9:1a:f3:6c:2d:4e:98:e2:69:fd:8c:c6:63:79:48:09:2f:
cd:e6:3e:eb:14:b8:21:8e:39:bf:0a:5a:7c:2e:58:ad:c9:c1:
42:81:77:98:cb:45:49:5f:b9:a3:d9:c5:27:ec:e7:8c:38:0b:
b9:65:82:34:38:cd:8e:65:5d:42:db:ff:1d:14:0f:0e:cb:6d:
9e:d7:02:b7:42:d4:41:32:32:f4:5a:79:91:f2:c7:3c:f9:d4:
bd:50:66:c6:c6:f7:48:51:3e:da:da:3f:7a:6f:f4:15:c9:3a:
70:1a:26:f8:0c:85:d3:64:60:93:fc:f4:0f:d3:80:2f:69:8c:
5e:5b:b7:cb
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDRJEjdzsFJH4XdOhCaNiIfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ODU3ZWNmNDQxZTVlYTFkNzE4MWZlYzdlOTdlNmRiYzEy
MjBmYzIwHhcNMjYwOTI0MDIwMDExWhcNMjYwOTI1MDIwMDExWjAzMTEwLwYDVQQD
EygwYzg2ODUyMjIzYmM4NjQzNzQ4MGE2MjVhZTk3MGE5N2E1YTZlNDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2OhmkVjtm2IDJBJRwc+wEBwsBsB
eZK0Z672bjctpKt6UYfN1yfF4aG03AKBx/byes2ycxQsWtBFungpRUTw6NrLOJ93
YvFVOj32oQcpwUDshOm/cJ7aF4aa1dNY7x7ISF+QdlEFLq8HSRzmBmv7uKsxD68k
9876PmozyB4Vs2L1oIJd2WDd/7C7oG2vNJiSHBzZmbvxipUjmA9G4BG57j4WyCFj
5OaC8OhrlthwwSAZcEb19RoRCZXCjibsdtCBLECaKNLk2MqWqSajN1LZ7r+CQwo+
uxvE0x5nobN5DN3b81s3ug1/G3k+qYbFFyoIW0O6mu5BjSmJCd7gaYvtMQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAyGhSIjvIZDdICmJa6XCpelpuQiMB8GA1UdIwQY
MBaAFPiFfs9EHl6h1xgf7H6X5tvBIg/CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1JVi16MFFlWHFIWEdCX3NmcGZtMjhFaUQ4SS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYzg0OTc2LWQ1ZWEtNGU3Zi04ZWQz
LWE4OWY4MTc3NjQwNi8xLzEtSVYtejBRZVhxSFhHQl9zZnBmbTI4RWlEOEkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJhL2M4NDk3Ni1kNWVhLTRlN2YtOGVkMy1hODlmODE3NzY0
MDYvMS8xLUlWLXowUWVYcUhYR0Jfc2ZwZm0yOEVpRDhJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmNAF
wq6uDsEAZWcwD2nxDQuACh2h9BnVL7bhLa3SrSBoclnqFr1H/pPVtT8UWtX3bDjR
PUYfi+ligpWr7MUSg2VdqJUOx4HY1YpsdG5dyspaPc1hiODzq/z8keCuFr2qgwbM
yBgVTSd/tuN0LF4mO7u6E+yI1D+YS7zWHyhYSMka82wtTpjiaf2MxmN5SAkvzeY+
6xS4IY45vwpafC5YrcnBQoF3mMtFSV+5o9nFJ+znjDgLuWWCNDjNjmVdQtv/HRQP
DsttntcCt0LUQTIy9Fp5kfLHPPnUvVBmxsb3SFE+2to/em/0Fck6cBom+AyF02Rg
k/z0D9OAL2mMXlu3yw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 09:25:12 2026 by rpki-client