Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
File: ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json)
Hash identifier: DUI6NvUo296g0A3OXmM2a90qPrLeI11Pz3FsFZrOGUQ=
Subject key identifier: 3C:2C:D7:D9:9D:EC:C8:4D:41:38:D0:62:2F:7D:EE:2E:55:11:13:45
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial: 019E1D22A827A5311A32DD9C9685FE71548A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
Manifest number: 189A
Signing time: Tue 12 May 2026 17:01:10 +0000
Manifest this update: Tue 12 May 2026 17:01:10 +0000
Manifest next update: Wed 13 May 2026 17:01:10 +0000
Files and hashes: 1: 4EqplrDV06lCRhif2tEMHft3Z9w.roa (hash: MDA/7gQCBeR21SlR0B8S+aKGXZRnN83I/YW6CNM0l3M=)
2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: jzvlHH91MwtlhBYZqNbnI65Ox8uumg13lwblgrXhghA=)
3: p4UM29YUDWHWrbkHAV81tJBbgCs.roa (hash: oM1os/f+fACahPg4Bvsa30+59M1gjbkWOEO/sAa/Tqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:a8:27:a5:31:1a:32:dd:9c:96:85:fe:71:54:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Validity
Not Before: May 12 17:01:10 2026 GMT
Not After : May 13 17:01:10 2026 GMT
Subject: CN=3c2cd7d99decc84d4138d0622f7dee2e55111345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:67:8f:6a:db:ad:f0:31:66:f6:94:46:93:
2d:57:49:b0:d2:77:f9:c4:f3:48:f2:36:81:e7:e3:
b8:3c:b5:75:cc:26:9f:be:31:cc:f6:7a:f5:c8:97:
db:b1:f0:6a:8c:44:9b:84:4b:72:75:69:53:9c:02:
dc:1c:24:f1:0e:c3:98:df:46:de:77:a4:72:ab:97:
6d:cc:2b:9f:71:51:e7:b5:f3:a4:7e:23:c5:69:a6:
e0:e2:38:b3:11:30:46:64:cd:ef:e4:51:66:a0:a0:
4f:dc:62:8f:e7:36:e9:30:55:a0:6a:27:1f:81:8a:
9b:b7:55:87:3e:8d:35:ae:d3:a8:88:aa:a2:7c:85:
1d:16:4d:fd:3f:a1:a0:cd:ff:4e:6e:87:67:62:3d:
52:8b:ee:f4:77:2a:e9:7f:15:95:cd:fc:e5:1e:cc:
13:bc:8c:d4:93:fe:29:6c:68:26:e3:90:76:34:cc:
3b:3c:42:c4:e1:ee:93:62:62:43:da:6f:19:33:08:
45:98:41:df:4a:55:ec:c8:23:e7:70:42:a5:40:2a:
cf:5b:25:02:3b:39:53:b2:1b:fe:a8:b2:88:e8:fd:
80:84:c2:e5:99:29:94:cc:a9:91:61:f7:ec:24:42:
ef:b1:70:21:63:a0:db:be:74:2a:84:cf:f5:2e:7b:
52:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2C:D7:D9:9D:EC:C8:4D:41:38:D0:62:2F:7D:EE:2E:55:11:13:45
X509v3 Authority Key Identifier:
keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3e:21:b1:c2:0c:da:cb:ed:55:86:24:fa:e6:34:00:ab:11:
f7:c0:ef:1c:b3:bc:a7:0e:bc:82:d4:e4:07:cd:9d:14:1c:d4:
b4:d9:33:7f:4e:54:04:2c:54:bc:d0:5a:78:6f:65:ec:3a:9e:
32:3e:33:67:94:12:71:9f:65:1b:af:8d:68:b3:70:b2:96:39:
a2:a2:1f:e0:ef:e9:55:f6:c0:39:b8:0f:f3:c5:31:93:73:0a:
6b:87:c3:ed:cc:bf:f7:a4:c3:f2:db:e8:07:27:d9:64:6d:d1:
af:20:0c:a8:8b:ce:80:c2:39:03:dc:51:b5:44:ba:71:1b:47:
6b:ef:73:f5:4d:08:ed:08:3e:3a:0a:a0:17:91:4e:4d:ba:d3:
bb:f9:cd:f4:52:92:fd:14:e2:6f:31:e4:ea:c0:95:d9:60:ca:
e4:40:5b:d3:bb:32:5a:97:82:20:0e:c5:b4:df:4d:b8:c8:18:
53:42:a7:56:c5:5f:d1:ff:da:f0:73:5b:43:0a:95:e0:09:e7:
2b:e9:ff:d3:0a:06:2e:ae:40:25:f5:81:57:45:7c:77:a6:60:
10:a5:76:25:37:d0:bb:31:be:0c:6b:cf:6c:eb:9c:29:d7:db:
93:30:38:48:26:9f:10:ac:39:38:e1:ae:4e:be:7a:91:e9:37:
54:9f:85:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:03 2026 by rpki-client