Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
File: ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json)
Hash identifier: CyIF+oyLChG/yRny8iT93yrGOQN5Nh7Y+vAMMWACq4s=
Subject key identifier: 83:DF:E1:94:5A:44:25:54:B5:00:18:2F:BF:3D:B4:B2:4E:70:A7:5C
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial: 019D29CEDEB6C215D60F7CE871B8A8046405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
Manifest number: 181C
Signing time: Thu 26 Mar 2026 11:01:56 +0000
Manifest this update: Thu 26 Mar 2026 11:01:56 +0000
Manifest next update: Fri 27 Mar 2026 11:01:56 +0000
Files and hashes: 1: 4EqplrDV06lCRhif2tEMHft3Z9w.roa (hash: MDA/7gQCBeR21SlR0B8S+aKGXZRnN83I/YW6CNM0l3M=)
2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: kh2w6DONL04haFBkES1jy4WCbyDlEKibtmt1Ok24NYU=)
3: p4UM29YUDWHWrbkHAV81tJBbgCs.roa (hash: oM1os/f+fACahPg4Bvsa30+59M1gjbkWOEO/sAa/Tqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:de:b6:c2:15:d6:0f:7c:e8:71:b8:a8:04:64:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Validity
Not Before: Mar 26 11:01:56 2026 GMT
Not After : Mar 27 11:01:56 2026 GMT
Subject: CN=83dfe1945a442554b500182fbf3db4b24e70a75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:e3:ac:03:c6:8b:af:dc:ab:07:7d:61:bc:
7b:16:65:b7:ca:3b:00:df:03:cc:23:ef:01:50:22:
0b:cf:b9:00:ab:c1:71:5b:1e:a0:b7:f0:e0:a4:d7:
57:7f:c6:7d:78:d4:a0:ed:ef:cf:08:2b:ea:71:88:
e3:39:f4:80:0a:84:92:ab:ca:0c:79:9d:cb:57:a2:
91:f6:3a:26:7e:1f:9d:37:04:10:a5:6a:59:f8:3a:
b0:e3:04:fe:19:70:be:43:ad:e2:81:42:90:bc:02:
15:4b:fe:2c:45:8e:47:16:97:f0:3a:a0:7e:f4:33:
1d:cc:4f:ef:1e:77:a8:e5:2b:b8:b6:90:d3:c1:4b:
36:46:ae:a4:f8:c0:d5:fe:4d:b4:77:1f:d2:a1:59:
09:ea:fb:3c:f0:1b:51:41:bf:89:0e:5d:4f:4a:f8:
1e:11:a2:ef:3c:df:dc:64:db:a0:2c:a8:14:b6:e5:
65:08:26:d0:96:b8:8e:17:ea:be:bc:ab:c3:ee:d1:
5a:15:8a:21:8f:d5:86:d2:75:2e:8d:46:52:06:f8:
f9:99:76:66:2d:7a:c9:57:97:a1:ad:9c:06:14:81:
d6:71:01:04:ac:00:ce:5e:c0:52:ca:2a:98:70:81:
1b:76:1c:bf:33:ce:1c:02:e3:42:b1:65:39:59:08:
08:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DF:E1:94:5A:44:25:54:B5:00:18:2F:BF:3D:B4:B2:4E:70:A7:5C
X509v3 Authority Key Identifier:
keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ca:fb:4c:f2:89:7c:bd:e8:30:a5:a5:17:7f:f6:14:e3:ad:
d1:1f:77:36:92:33:24:47:4b:2c:06:65:28:0f:66:21:c9:f2:
81:4b:b4:84:0a:c9:9c:05:f5:0f:c8:e4:cb:8f:9f:38:84:0f:
16:bf:74:3d:6a:93:61:13:44:00:94:77:a7:db:60:b4:de:d3:
64:7d:e2:b9:e7:59:dd:ce:95:88:9a:31:50:a1:ba:89:12:b2:
f5:2c:b7:8a:ae:c9:36:38:a7:b8:e8:31:ed:e1:2d:b4:c5:3f:
98:60:a3:26:8c:e0:e7:63:e2:24:ce:b9:4b:83:37:38:08:c3:
93:10:c1:c7:ce:71:14:ad:d7:1d:5a:92:15:eb:0e:c6:87:df:
71:3d:93:f2:6f:9a:f1:84:2c:38:8b:c2:ec:ff:69:83:e2:ef:
42:ed:ae:a3:8b:20:52:d1:d8:96:38:ed:86:a4:24:3d:85:b6:
67:23:8c:4c:17:d3:97:b6:5e:ed:cc:ba:b6:a7:9b:f9:cc:20:
ad:75:72:e9:65:dd:24:9c:58:21:44:16:00:42:23:bc:3d:5b:
66:1a:e2:3a:83:cb:63:e2:99:31:e7:30:1e:0b:62:b2:4f:5c:
d6:7f:32:b3:a5:50:15:e4:cb:11:b2:9b:2f:3e:ea:e0:30:7f:
40:fc:fa:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:16:05 2026 by rpki-client