Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
File: ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json)
Hash identifier: hZUN2FYL3pKWEq5E3dwsMkjVqhznPN1UG2Vnp2ehioM=
Subject key identifier: A9:72:7C:5D:8C:2E:81:4B:45:4C:A1:61:DA:B9:14:29:C5:3D:E6:32
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial: 019F8FECBB95C311E79E2E31B44905CC7005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
Manifest number: 195A
Signing time: Thu 23 Jul 2026 17:01:24 +0000
Manifest this update: Thu 23 Jul 2026 17:01:24 +0000
Manifest next update: Fri 24 Jul 2026 17:01:24 +0000
Files and hashes: 1: 4EqplrDV06lCRhif2tEMHft3Z9w.roa (hash: MDA/7gQCBeR21SlR0B8S+aKGXZRnN83I/YW6CNM0l3M=)
2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: a+IBkhfhIR58JOp1chbwMPa04+UxCmmcRF+bpsmSewk=)
3: p4UM29YUDWHWrbkHAV81tJBbgCs.roa (hash: oM1os/f+fACahPg4Bvsa30+59M1gjbkWOEO/sAa/Tqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:bb:95:c3:11:e7:9e:2e:31:b4:49:05:cc:70:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Validity
Not Before: Jul 23 17:01:24 2026 GMT
Not After : Jul 24 17:01:24 2026 GMT
Subject: CN=a9727c5d8c2e814b454ca161dab91429c53de632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:63:b7:31:d4:30:71:3e:b3:a4:4d:a3:46:76:
a8:05:f3:62:22:36:46:51:ea:89:a7:7f:d7:7e:af:
ba:c3:ad:1b:4c:3f:f0:e8:90:ca:27:40:82:d1:65:
9b:37:eb:95:c8:ab:54:80:72:34:26:b8:46:e3:7c:
c0:59:c8:37:0e:a5:fe:96:da:f4:a2:04:9d:e6:3f:
f6:82:ca:b6:c2:46:f8:a2:6f:0e:97:49:fa:0f:da:
b4:6b:f1:9a:97:6e:88:df:ca:8f:76:3c:1b:40:06:
b7:3e:8c:a3:73:25:c5:da:e4:c7:f1:98:ff:cd:68:
73:a8:0d:60:b0:60:e6:e3:b8:6f:f5:23:6a:e7:51:
a5:d4:a9:68:79:6c:63:a7:d4:4b:9a:94:c6:ae:0a:
1f:aa:cf:ef:12:68:73:c1:4e:cd:1a:51:dc:91:46:
5d:68:c0:37:9b:ef:0e:05:96:e4:83:7e:bf:14:c0:
47:a3:55:0f:b1:d3:a9:68:80:3e:80:94:ba:07:5d:
f3:c9:3f:bc:0e:fb:af:99:6e:be:b0:73:4c:ea:3e:
9f:f8:49:31:f9:a2:3d:51:ea:fd:35:86:45:17:ac:
19:ca:c1:a3:fa:e1:bf:24:6c:47:d2:82:63:64:59:
0c:aa:01:29:ee:f0:71:93:4a:10:01:25:04:cc:89:
e3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:72:7C:5D:8C:2E:81:4B:45:4C:A1:61:DA:B9:14:29:C5:3D:E6:32
X509v3 Authority Key Identifier:
keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:48:21:57:dc:d5:f0:e1:a5:16:8f:24:7b:71:1c:95:e0:be:
54:a3:58:87:63:41:32:98:92:97:e2:63:36:ed:cd:35:4c:16:
9a:58:20:81:e7:fc:11:8c:c1:47:df:02:a8:dc:e4:ce:f4:78:
ad:1c:c0:8d:83:2a:f0:fb:2a:fb:d2:2c:87:0b:ec:82:c6:a2:
70:48:c2:27:1f:67:fb:fa:8d:f9:48:90:27:ae:0e:f8:87:b6:
43:f7:42:1e:98:b8:a4:c8:3b:c0:24:7a:9a:74:80:be:be:ef:
a2:10:dc:d0:72:58:ac:91:c6:97:aa:d7:8f:7b:f0:94:45:28:
a9:66:1d:e6:7a:8a:b1:4d:59:a2:77:68:02:b2:b5:ae:e7:4d:
db:82:62:16:e6:b4:d1:94:90:cb:f2:30:19:98:09:19:09:2e:
70:6a:4b:45:84:c7:74:2f:06:f7:e5:40:98:df:27:1e:fe:a0:
7f:df:ca:29:f3:61:d4:75:41:ae:24:9f:ff:c5:11:e4:ea:f7:
89:40:cb:59:42:91:17:23:5a:63:13:68:17:b6:f9:68:15:65:
f4:3f:3b:6d:2f:34:8a:c2:b2:44:65:07:e8:a1:de:fe:8f:d4:
da:b6:04:75:2c:a1:92:33:ad:b2:c1:36:bd:b8:8b:c1:bb:5e:
7e:26:06:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:36:00 2026 by rpki-client