Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
File: ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json)
Hash identifier: OVr+Wg7Rz/mcy1L2XKzgZ44BwJZanlKXLzNUq8TUbnk=
Subject key identifier: B0:3E:76:03:5F:57:CA:AE:E6:B4:C4:06:ED:2C:70:0D:63:4D:DC:D9
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial: 01A0CE91352C2DEF87BED3F2A73C415C5237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
Manifest number: 19FF
Signing time: Wed 23 Sep 2026 14:00:17 +0000
Manifest this update: Wed 23 Sep 2026 14:00:17 +0000
Manifest next update: Thu 24 Sep 2026 14:00:17 +0000
Files and hashes: 1: 4EqplrDV06lCRhif2tEMHft3Z9w.roa (hash: MDA/7gQCBeR21SlR0B8S+aKGXZRnN83I/YW6CNM0l3M=)
2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: JurA8xjzY0ewfCI0YCs01mCJzwBdxxnQrRXS6/GgJ18=)
3: p4UM29YUDWHWrbkHAV81tJBbgCs.roa (hash: oM1os/f+fACahPg4Bvsa30+59M1gjbkWOEO/sAa/Tqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:35:2c:2d:ef:87:be:d3:f2:a7:3c:41:5c:52:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Validity
Not Before: Sep 23 14:00:17 2026 GMT
Not After : Sep 24 14:00:17 2026 GMT
Subject: CN=b03e76035f57caaee6b4c406ed2c700d634ddcd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:68:74:0b:28:77:9c:e3:01:1d:16:5f:87:
00:b0:4e:11:5b:01:53:e0:ad:9d:0e:8a:b6:2f:ef:
fd:2d:76:e7:94:e5:28:2e:f0:3a:21:bb:fa:d8:72:
36:b8:d4:24:ca:bc:c1:e6:ba:b8:fe:cc:87:7b:25:
10:65:19:4e:35:f3:5c:73:0d:57:c7:58:e1:b0:d1:
54:76:30:fd:9f:d2:bb:da:48:75:7b:52:e2:34:02:
9d:8b:20:fa:b4:d0:a1:6d:3e:25:ce:57:aa:a8:55:
85:da:7b:b9:66:06:2d:ed:fe:9f:f8:b3:38:d6:c3:
ed:20:34:86:fe:66:e0:81:09:21:b9:f6:c7:01:d8:
20:fa:5a:c3:f9:f8:c8:6a:cf:4f:95:42:7b:66:3a:
50:3c:43:e6:67:87:d8:5e:6b:12:b6:19:61:c3:53:
f7:5b:cd:45:85:8b:3e:2f:94:2f:4e:8a:36:c6:78:
fb:aa:3f:7b:e0:47:dd:46:01:0b:3b:70:40:be:40:
c8:4b:09:15:1d:59:9d:4b:66:3d:5a:fd:16:4c:ad:
68:27:3c:d0:67:27:71:3f:9e:ae:0d:5e:75:63:57:
5e:52:40:47:36:97:12:d2:1d:9e:63:42:c0:14:92:
b1:1b:3a:49:6c:66:d2:6b:c1:ce:e0:b4:ce:49:67:
a2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3E:76:03:5F:57:CA:AE:E6:B4:C4:06:ED:2C:70:0D:63:4D:DC:D9
X509v3 Authority Key Identifier:
keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:6f:11:13:c4:c6:c2:96:94:84:fb:62:e8:ad:3b:be:36:43:
b6:5c:6f:ec:29:35:d7:2d:2a:49:0e:63:1f:96:23:e0:28:70:
30:7c:3a:23:55:f7:a1:4f:af:eb:c8:c2:ad:d9:10:67:02:4a:
1b:ac:93:4b:38:8a:e9:f8:bb:7f:87:3a:6f:bd:71:a0:16:b0:
d4:2a:50:16:c1:94:63:cc:ea:be:e7:79:51:11:f0:f2:27:f2:
59:54:23:3f:1f:82:6c:ca:1c:90:44:e2:81:d3:b4:44:44:0b:
95:df:77:70:fa:e5:d8:71:03:fe:4f:56:92:6c:8a:3b:63:61:
f8:f7:a8:16:87:a1:cb:a3:f0:d5:71:54:c8:6a:cd:cc:22:5c:
9c:f4:ca:ce:b7:44:6e:79:e5:a7:a6:30:3a:01:e7:2c:f5:e0:
90:86:2f:3e:70:b6:4b:31:4e:63:45:37:51:9e:59:8a:64:56:
b5:5d:83:2e:63:d2:14:e3:39:8b:12:69:88:47:e1:f9:7e:34:
f9:c9:4d:63:a1:9b:6a:96:60:7e:c4:6c:a0:e4:fe:a3:8c:f9:
8d:eb:17:c9:f8:6e:95:b9:fa:d5:d1:7e:ce:69:87:eb:bb:ea:
af:7a:1c:18:98:23:bd:8c:ac:22:1a:c7:ef:62:6d:9d:53:6b:
28:3a:31:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:55:42 2026 by rpki-client