Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
File: ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json)
Hash identifier: N+zolAyLVTxIL+5uJtrLNES1amHXT74RQcyQm9P6Kvw=
Subject key identifier: 7F:E3:55:18:B4:8E:7B:FF:0F:12:98:56:C9:9B:38:43:D5:B9:FF:A4
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial: 019D3752900B4E6457B071A368354AEE6CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 02:00:50 +0000
Manifest this update: Sun 29 Mar 2026 02:00:50 +0000
Manifest next update: Mon 30 Mar 2026 02:00:50 +0000
Files and hashes: 1: 4EqplrDV06lCRhif2tEMHft3Z9w.roa (hash: MDA/7gQCBeR21SlR0B8S+aKGXZRnN83I/YW6CNM0l3M=)
2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: HpKXJbv0rlPj2BELhqHGjy1JxQmHt/JsaYZo9hA7Onw=)
3: p4UM29YUDWHWrbkHAV81tJBbgCs.roa (hash: oM1os/f+fACahPg4Bvsa30+59M1gjbkWOEO/sAa/Tqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:90:0b:4e:64:57:b0:71:a3:68:35:4a:ee:6c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Validity
Not Before: Mar 29 02:00:50 2026 GMT
Not After : Mar 30 02:00:50 2026 GMT
Subject: CN=7fe35518b48e7bff0f129856c99b3843d5b9ffa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:20:bb:ce:b8:80:ef:61:a8:a6:bf:5e:9f:
6f:a1:54:08:7e:92:3f:00:94:80:43:4c:d6:cc:5a:
17:84:1f:64:cb:50:ef:ea:83:7a:fa:5b:51:73:6f:
44:8a:2b:49:86:31:25:ec:92:4b:d1:f4:e4:20:e1:
1e:06:fc:6e:56:85:14:01:5d:3c:82:0c:23:81:bf:
73:1e:2b:5f:60:29:23:81:50:b5:17:c2:ff:68:a4:
3a:80:e9:1b:8d:36:6b:de:ea:25:9a:3e:25:09:2b:
e4:99:bb:82:3e:90:25:dc:73:71:38:25:30:70:ca:
3e:4a:64:78:05:c5:8c:71:c9:db:2d:11:01:6f:2e:
41:27:5d:7e:37:f8:9a:d0:db:7b:56:27:4d:1b:89:
97:3f:8a:0d:8c:94:33:2d:ac:c8:f0:69:71:69:9a:
1c:82:91:ac:25:54:cd:10:39:d1:e9:ef:17:84:d9:
06:e3:f6:43:02:01:77:b3:0f:7f:1e:c3:ef:cc:71:
46:ba:2c:83:da:10:92:b3:f1:54:2c:9b:cb:d2:3a:
b6:62:26:78:41:9d:20:93:3d:12:f5:61:4d:e4:aa:
33:d2:a0:02:d0:b1:da:d6:ee:19:c4:50:fd:8e:3d:
e7:9d:45:57:c4:ff:7f:0c:19:cf:84:b7:8d:7e:93:
a1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E3:55:18:B4:8E:7B:FF:0F:12:98:56:C9:9B:38:43:D5:B9:FF:A4
X509v3 Authority Key Identifier:
keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d8:89:57:2e:7f:4b:8c:d9:f3:7f:65:ed:89:19:27:40:b1:
40:23:fd:e2:13:d0:b2:eb:65:ba:fa:cc:c9:d0:0a:a4:79:1f:
b9:cf:5f:6d:d4:a8:76:4a:df:f4:82:53:ce:f6:cb:ea:a7:70:
d1:ff:fa:2e:ec:82:78:31:30:f0:12:51:d1:f8:61:19:69:ce:
8a:3c:0e:6f:d9:f1:20:e5:fa:00:0f:c3:c2:61:de:29:b2:b4:
bd:18:5b:7b:e6:65:17:af:8c:ad:eb:90:45:b0:aa:dd:34:92:
61:11:7e:d4:c1:e2:29:9e:af:91:95:5f:0c:0e:2e:76:f5:77:
e1:8d:a8:ff:c9:67:7a:01:c2:65:45:c8:b7:1d:19:ac:91:60:
e7:71:4d:38:b8:21:31:5f:e5:97:e4:e9:0f:44:82:25:d6:fb:
0b:3b:40:cb:4e:aa:17:42:0a:a9:26:90:a7:5a:af:48:72:07:
bb:e0:9d:54:d9:17:c1:51:11:58:39:4c:34:b8:bc:35:6f:32:
8f:77:36:c9:cf:86:65:7b:ee:74:51:d2:9a:6c:63:7e:2f:ae:
b3:2a:20:f0:ab:e4:0f:71:d3:c6:33:92:87:3b:dc:9a:dd:77:
f5:9c:82:f4:17:39:a9:70:7a:a6:bd:5a:75:31:f1:31:71:3c:
69:cd:64:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:57 2026 by rpki-client