
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
File: ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json)
Hash identifier: R2ZL+MOsiCQfdDtNf4tZkh/soPX7GhkIl1c89Gf8O60=
Subject key identifier: 89:35:36:14:86:A8:BD:93:78:9D:FF:5C:17:97:FC:7B:E2:94:39:E0
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial: 01A001DCDD5442379C8427374BF9F68C16B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
Manifest number: 1995
Signing time: Fri 14 Aug 2026 20:00:46 +0000
Manifest this update: Fri 14 Aug 2026 20:00:46 +0000
Manifest next update: Sat 15 Aug 2026 20:00:46 +0000
Files and hashes: 1: 4EqplrDV06lCRhif2tEMHft3Z9w.roa (hash: MDA/7gQCBeR21SlR0B8S+aKGXZRnN83I/YW6CNM0l3M=)
2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: WAUnnSlSne4/r6+Nk3FaK6Am4GlZTri5hh4RJr2p/MU=)
3: p4UM29YUDWHWrbkHAV81tJBbgCs.roa (hash: oM1os/f+fACahPg4Bvsa30+59M1gjbkWOEO/sAa/Tqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:dd:54:42:37:9c:84:27:37:4b:f9:f6:8c:16:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Validity
Not Before: Aug 14 20:00:46 2026 GMT
Not After : Aug 15 20:00:46 2026 GMT
Subject: CN=8935361486a8bd93789dff5c1797fc7be29439e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2a:e8:08:ad:c5:0e:e2:82:a2:31:dd:27:cc:
76:2f:b6:87:fe:ba:4f:df:d8:d4:75:d5:06:8e:e4:
dd:92:8d:1c:84:eb:d9:95:3f:9b:31:66:2a:56:6a:
a5:df:7e:52:21:00:bf:18:f1:f5:9e:f6:61:f8:39:
fe:55:9b:45:3d:e9:65:7c:95:8c:1f:c2:f2:64:3a:
ed:b8:e1:61:0c:31:36:65:a0:f3:d1:ea:4c:b2:51:
f3:e1:71:ba:92:e3:69:af:9f:4e:49:38:41:bb:7d:
1b:e3:69:19:68:de:56:b8:ba:bd:62:63:90:30:29:
51:2d:e7:04:d3:14:9c:42:e8:a4:4d:6b:d0:67:1b:
a8:48:8e:dd:08:26:7f:1b:9e:d7:6b:36:27:79:da:
cf:da:d0:33:0e:60:a1:44:45:fa:c2:cc:cd:f4:1b:
d5:d6:f8:3e:30:2c:03:6e:bc:74:60:16:0f:1a:e6:
56:ae:6b:b6:23:bf:e9:c7:5b:72:71:b9:a3:01:e9:
fb:50:ce:45:a1:46:42:c9:c5:b4:50:fb:08:1a:0f:
04:44:09:45:de:79:9e:5f:ab:a8:7c:3c:e5:d0:9c:
58:67:8a:8c:81:1d:ae:8c:11:35:28:e8:2f:ad:1c:
db:a9:ae:e6:40:2b:0f:fa:9f:2d:a0:3a:9c:6d:3f:
5f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:35:36:14:86:A8:BD:93:78:9D:FF:5C:17:97:FC:7B:E2:94:39:E0
X509v3 Authority Key Identifier:
keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ce:69:99:72:14:e9:c7:4f:d1:95:9c:a4:4a:db:3d:56:c4:
c4:fe:44:b9:c4:88:1a:24:92:e0:fa:84:9a:ec:28:27:f1:3f:
1e:ec:f6:39:e4:b8:d2:f2:85:e7:d4:21:46:b8:b7:92:e8:43:
9d:f3:53:b7:cc:67:bf:33:f0:1a:fa:21:2d:b7:9e:bc:77:c1:
37:90:b6:da:c6:6f:d5:59:e3:62:db:1d:86:00:68:7b:48:63:
d6:8a:0a:9f:c2:1b:65:f1:ee:7c:c0:b7:5b:43:6b:37:07:65:
da:54:a7:3b:63:98:4d:34:85:9d:b8:70:c6:20:e1:7b:54:94:
0b:2d:e2:a2:08:08:11:23:97:a6:39:5f:a2:4b:c4:08:5c:bb:
90:6f:44:b5:b3:76:cf:c2:e8:c4:d0:07:f3:86:91:e8:2b:1c:
00:ae:fc:d2:28:7d:3c:05:7a:cb:cd:8c:59:bf:c7:8f:dc:f5:
5d:3e:27:cd:d7:df:b8:23:42:e3:d4:57:e4:f3:03:ba:77:7d:
f0:27:4c:44:58:2d:08:b9:4a:51:89:6c:ff:3b:2a:a5:3d:9c:
2f:ae:17:f3:97:ae:59:29:52:60:b7:64:2b:80:6d:c1:04:2a:
28:db:0e:18:38:0e:ec:19:68:b0:34:b9:41:91:0e:81:a4:4b:
93:bb:e5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:20:28 2026 by rpki-client