Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
File: ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json)
Hash identifier: ljjWkDBJqKnPtJNCLN9IT/454M/46cttrAylatE88ek=
Subject key identifier: 6B:28:72:CB:D0:C3:A3:53:A9:96:01:42:23:36:35:2B:BA:EA:D6:E2
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial: 01A14082D3813CAEE259948DB9DCEAEAE7DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
Manifest number: 1A3A
Signing time: Thu 15 Oct 2026 17:01:17 +0000
Manifest this update: Thu 15 Oct 2026 17:01:17 +0000
Manifest next update: Fri 16 Oct 2026 17:01:17 +0000
Files and hashes: 1: 4EqplrDV06lCRhif2tEMHft3Z9w.roa (hash: MDA/7gQCBeR21SlR0B8S+aKGXZRnN83I/YW6CNM0l3M=)
2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: JA0HSe3mGMfdn949xNV9bOkGSTvini4v7P6BV4Civx4=)
3: p4UM29YUDWHWrbkHAV81tJBbgCs.roa (hash: oM1os/f+fACahPg4Bvsa30+59M1gjbkWOEO/sAa/Tqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:82:d3:81:3c:ae:e2:59:94:8d:b9:dc:ea:ea:e7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Validity
Not Before: Oct 15 17:01:17 2026 GMT
Not After : Oct 16 17:01:17 2026 GMT
Subject: CN=6b2872cbd0c3a353a99601422336352bbaead6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:10:c3:8d:97:4f:0f:27:da:d5:b6:3e:98:
03:20:45:12:dd:4f:39:4a:89:c5:71:06:23:63:f8:
ec:06:1b:65:b5:de:61:d6:39:e9:d4:5b:44:bf:e8:
7b:23:71:06:8d:1f:b3:e2:b8:ce:a2:65:f8:a9:be:
c7:26:53:c7:af:d1:27:af:32:09:6b:53:38:b9:84:
32:5f:5f:ee:b0:d5:28:10:c3:9f:c6:8e:ca:29:48:
f5:1f:83:38:fe:b5:3a:6b:50:c8:08:66:be:ba:ec:
e1:69:46:eb:13:82:52:bf:fe:42:8a:5e:67:07:f2:
41:07:c6:9f:25:cd:36:e3:ae:4e:e6:b9:ab:98:fe:
e4:b6:5d:78:74:c9:bb:88:21:36:25:f8:57:e4:0b:
4c:ab:34:a9:29:86:47:6d:5c:7d:7b:e1:ae:fc:15:
64:ea:fa:81:b3:17:3d:f0:3e:37:91:cd:ab:d6:17:
02:14:a4:97:37:f8:0a:f9:00:02:d7:7d:8d:4f:7a:
a8:2e:4b:af:1c:95:3d:2c:6d:75:95:45:69:69:19:
07:b9:e3:be:da:8f:c8:96:53:fd:cc:02:fc:a0:51:
61:3d:44:72:16:57:51:f9:51:1c:ca:2e:e4:ba:41:
17:97:e8:fa:6f:d9:4e:2a:e7:62:8b:9e:f9:82:8d:
3b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:28:72:CB:D0:C3:A3:53:A9:96:01:42:23:36:35:2B:BA:EA:D6:E2
X509v3 Authority Key Identifier:
keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:68:39:75:9a:6b:38:0d:83:a9:6b:84:d8:60:69:c3:b1:9e:
28:c3:d8:ad:f0:13:80:7b:ac:2d:7a:4e:c3:2b:1d:df:39:e7:
91:34:64:54:8d:56:89:57:28:a5:00:f5:b5:62:38:85:96:60:
a1:7e:6e:51:e4:ca:c5:35:91:a8:16:7b:8a:ad:95:9c:59:47:
cc:1a:db:f4:57:c1:01:a1:bb:2a:97:d1:1d:b5:ca:1c:e9:ba:
36:ac:12:a1:36:3c:47:16:70:3f:aa:b3:43:9a:bb:9c:ca:94:
c7:9b:ad:16:59:78:f5:fe:cd:b0:25:28:ae:ac:e1:67:ad:07:
ec:e6:4e:12:07:c1:b8:1d:e1:5d:e2:dc:c1:d1:0b:e0:7d:29:
ae:f5:3f:7b:f3:f6:09:da:05:c3:04:87:2f:68:f8:8e:a1:72:
64:f4:b9:e0:fa:55:e0:c6:b1:11:ee:96:8e:02:7f:50:d2:65:
11:7c:c7:d2:82:cd:87:2c:a5:84:b2:31:19:b1:aa:93:a0:7b:
47:9e:e3:ab:d9:54:2d:a3:6a:8f:7b:b0:ad:a1:c5:df:f7:a4:
ce:69:fa:51:68:cf:05:c0:e8:08:1b:a3:38:6f:99:76:3f:46:
2f:5b:4e:01:1e:1b:d1:26:37:fd:57:bd:2e:44:c7:0b:a7:b8:
88:79:62:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAgtOBPK7iWZSNudzq6uffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMTE0MDBkNTQ4ZmEyMWFmODE5YTBjNmUyM2U3N2E2MDEy
ZWI1ZTkwHhcNMjYxMDE1MTcwMTE3WhcNMjYxMDE2MTcwMTE3WjAzMTEwLwYDVQQD
Eyg2YjI4NzJjYmQwYzNhMzUzYTk5NjAxNDIyMzM2MzUyYmJhZWFkNmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYIQw42XTw8n2tW2PpgDIEUS3U85
SonFcQYjY/jsBhtltd5h1jnp1FtEv+h7I3EGjR+z4rjOomX4qb7HJlPHr9EnrzIJ
a1M4uYQyX1/usNUoEMOfxo7KKUj1H4M4/rU6a1DICGa+uuzhaUbrE4JSv/5Cil5n
B/JBB8afJc02465O5rmrmP7ktl14dMm7iCE2JfhX5AtMqzSpKYZHbVx9e+Gu/BVk
6vqBsxc98D43kc2r1hcCFKSXN/gK+QAC132NT3qoLkuvHJU9LG11lUVpaRkHueO+
2o/IllP9zAL8oFFhPURyFldR+VEcyi7kukEXl+j6b9lOKudii575go07xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsocsvQw6NTqZYBQiM2NSu66tbiMB8GA1UdIwQY
MBaAFAARQA1Uj6Ia+BmgxuI+d6YBLrXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUJGQURWU1BvaHI0R2FERzRqNTNwZ0V1dGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81MmRhYWItNjgyOS00NWZhLTk2N2Ut
MDFmNDYwNmM2NWVjLzEvQUJGQURWU1BvaHI0R2FERzRqNTNwZ0V1dGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81MmRhYWItNjgyOS00NWZhLTk2N2UtMDFmNDYwNmM2NWVj
LzEvQUJGQURWU1BvaHI0R2FERzRqNTNwZ0V1dGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2g5dZpr
OA2DqWuE2GBpw7GeKMPYrfATgHusLXpOwysd3znnkTRkVI1WiVcopQD1tWI4hZZg
oX5uUeTKxTWRqBZ7iq2VnFlHzBrb9FfBAaG7KpfRHbXKHOm6NqwSoTY8RxZwP6qz
Q5q7nMqUx5utFll49f7NsCUorqzhZ60H7OZOEgfBuB3hXeLcwdEL4H0prvU/e/P2
CdoFwwSHL2j4jqFyZPS54PpV4MaxEe6WjgJ/UNJlEXzH0oLNhyylhLIxGbGqk6B7
R57jq9lULaNqj3uwraHF3/ekzmn6UWjPBcDoCBujOG+Zdj9GL1tOAR4b0SY3/Ve9
LkTHC6e4iHli4w==
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:33:16 2026 by rpki-client