Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
File: ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json)
Hash identifier: rCeqUD83UZUxMMUsjNYj3E4BKesQWv/wz8j1f0bgJrM=
Subject key identifier: C1:BD:E6:6B:D5:5A:13:FE:BC:87:7D:21:47:B6:48:EB:23:10:F2:FD
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial: 019E30731F9938301397A7B61ABF58847E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
Manifest number: 18A4
Signing time: Sat 16 May 2026 11:01:51 +0000
Manifest this update: Sat 16 May 2026 11:01:51 +0000
Manifest next update: Sun 17 May 2026 11:01:51 +0000
Files and hashes: 1: 4EqplrDV06lCRhif2tEMHft3Z9w.roa (hash: MDA/7gQCBeR21SlR0B8S+aKGXZRnN83I/YW6CNM0l3M=)
2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: HaS3k/U6EZRoxNyf6O0jTg6s5iD7+3U/Gx8ogzF4vhM=)
3: p4UM29YUDWHWrbkHAV81tJBbgCs.roa (hash: oM1os/f+fACahPg4Bvsa30+59M1gjbkWOEO/sAa/Tqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:73:1f:99:38:30:13:97:a7:b6:1a:bf:58:84:7e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Validity
Not Before: May 16 11:01:51 2026 GMT
Not After : May 17 11:01:51 2026 GMT
Subject: CN=c1bde66bd55a13febc877d2147b648eb2310f2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:10:2e:5e:ff:7f:9d:e4:49:6d:aa:f5:51:21:
f5:6d:06:74:cf:aa:f2:9f:d2:32:30:71:3b:41:ea:
1d:ca:7f:3f:0c:0a:14:de:cb:5f:ed:54:27:fe:23:
87:89:5f:92:39:7e:3e:69:24:e5:4a:77:04:bc:7b:
d5:53:de:f0:f3:24:e8:70:65:51:6b:33:b3:f1:cd:
09:51:fc:43:8a:aa:4e:80:85:fa:1d:05:2d:80:ee:
a6:15:25:23:f1:86:fc:00:2a:00:53:08:05:1a:95:
5a:a4:94:2f:74:be:ad:ca:35:e8:d7:a2:4e:5c:09:
37:eb:ba:97:38:f8:cf:ff:c4:ef:1b:7f:2b:8b:5a:
f8:3d:83:3f:16:0b:e8:9d:ae:c1:67:8c:30:36:be:
fb:7e:ad:88:fc:37:dc:6c:ea:c9:22:db:b8:30:bd:
5c:59:c8:76:fe:31:84:41:90:00:b3:1c:ed:d4:5d:
0e:80:b7:7e:f7:88:a1:57:93:fe:72:e4:92:18:d2:
68:bc:41:99:0c:1e:c8:bd:fb:b6:bc:44:76:ba:09:
5e:65:f9:4f:08:92:4d:cd:d6:a9:c9:e5:fc:bb:b1:
7f:74:f2:49:16:a9:cb:a5:fa:39:11:a5:6b:99:26:
2d:54:dc:95:87:4a:93:79:31:fb:c2:83:08:c6:b0:
8c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BD:E6:6B:D5:5A:13:FE:BC:87:7D:21:47:B6:48:EB:23:10:F2:FD
X509v3 Authority Key Identifier:
keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:85:b0:88:82:72:e1:af:07:90:5d:5f:b1:8e:9a:78:38:a4:
81:75:9a:a0:b4:23:99:04:75:c9:de:af:aa:21:43:da:98:84:
11:3b:d9:90:b1:03:8a:eb:bf:ad:a7:d8:b5:7e:87:96:70:7c:
af:86:09:12:e4:fb:51:df:00:1b:4f:76:f1:f2:02:a9:74:de:
05:a4:1c:9e:6c:57:91:e5:a1:1c:4a:8a:ff:81:fa:e6:1e:94:
83:6a:94:5b:c7:86:6d:d7:24:59:c2:b6:d6:f1:2a:60:97:fe:
fd:1a:ac:fd:5d:e2:99:0d:67:a8:dc:c6:f2:ff:60:27:5e:4e:
50:5e:d6:eb:1d:7c:16:71:5c:aa:8e:0f:2c:fe:d6:3c:d3:5a:
7e:f3:9f:2a:03:bd:16:a5:ea:83:9a:47:dd:05:b5:af:ca:c7:
12:1d:96:44:fd:9e:56:35:3a:db:1a:33:da:4f:20:c7:2a:f5:
01:3c:8e:cf:74:3b:1d:6e:8a:c1:67:65:57:d4:61:a6:eb:39:
05:7f:0e:ef:32:47:82:60:48:67:de:a8:e3:ee:3e:05:cb:94:
20:aa:21:36:68:d0:71:ae:3d:2a:ff:c4:0d:01:5c:6f:ca:9d:
4b:8e:01:b6:2f:56:ad:66:19:a8:c4:e6:bc:0f:4d:3f:45:cb:
52:f8:13:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:38:23 2026 by rpki-client