Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
File: ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json)
Hash identifier: IF57dgViBnKLZmB5Sp5lgeZ9WbPKt2OwBA9NLezYBCo=
Subject key identifier: BC:A3:F1:5F:35:CE:78:69:AC:E2:8C:7A:44:A3:5B:2A:2B:01:FB:53
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial: 019D97E26855F7FD21504805379F6DDD20ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
Manifest number: 1855
Signing time: Thu 16 Apr 2026 20:01:30 +0000
Manifest this update: Thu 16 Apr 2026 20:01:30 +0000
Manifest next update: Fri 17 Apr 2026 20:01:30 +0000
Files and hashes: 1: 4EqplrDV06lCRhif2tEMHft3Z9w.roa (hash: MDA/7gQCBeR21SlR0B8S+aKGXZRnN83I/YW6CNM0l3M=)
2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: SPzFzIHDSYEByWKsX8bvtJ4Nk3QBrXIdKHhNL6ENoIA=)
3: p4UM29YUDWHWrbkHAV81tJBbgCs.roa (hash: oM1os/f+fACahPg4Bvsa30+59M1gjbkWOEO/sAa/Tqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:68:55:f7:fd:21:50:48:05:37:9f:6d:dd:20:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Validity
Not Before: Apr 16 20:01:30 2026 GMT
Not After : Apr 17 20:01:30 2026 GMT
Subject: CN=bca3f15f35ce7869ace28c7a44a35b2a2b01fb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2f:ae:34:44:df:a7:ad:46:54:ac:ab:fd:86:
23:53:9e:cb:3a:f3:06:b4:55:02:89:8e:8e:6f:7d:
aa:75:21:8f:e7:55:31:d2:e7:ac:c8:e0:9b:9c:59:
dc:2a:85:89:eb:8b:3d:05:b8:d7:c7:cf:cc:2c:1f:
9a:2d:b5:5c:dc:96:82:dc:12:c0:4f:b8:e6:3a:c5:
5c:9c:1f:d4:b8:16:92:d5:f2:83:69:21:74:1d:d9:
84:1f:e0:9c:03:c6:bf:f2:2a:46:11:c5:0b:2f:1e:
da:61:17:83:5a:7d:fa:8f:b1:e9:fe:ed:4c:f3:85:
f6:81:09:7a:b1:c2:3d:f6:fe:89:41:9f:e0:f4:06:
57:e9:09:bd:72:0c:e8:f9:f1:f6:56:10:c2:9f:23:
a0:d3:f9:a3:c8:2c:eb:db:74:86:df:c3:27:b6:d1:
99:c6:ee:86:5f:1b:b6:67:ed:82:78:15:b9:23:b9:
bf:4e:a2:41:54:02:46:5b:d8:b2:c4:d2:e6:88:40:
6f:bf:74:82:cf:2e:2e:10:76:33:e6:fc:8a:68:e8:
2a:38:80:31:b5:10:6c:de:e0:6f:3d:a5:0c:5e:ad:
fd:2b:7c:91:c5:a0:a1:73:dc:7f:30:35:fb:3d:4e:
70:0e:31:9a:50:56:c1:96:11:14:0d:63:ef:5f:6c:
8a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A3:F1:5F:35:CE:78:69:AC:E2:8C:7A:44:A3:5B:2A:2B:01:FB:53
X509v3 Authority Key Identifier:
keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:9c:aa:57:ee:0a:9c:70:2f:46:28:8f:77:58:6f:d6:14:62:
28:6a:c2:3c:fe:20:83:56:72:23:7e:c9:67:f4:7b:62:fe:b6:
3a:07:ba:76:1e:db:89:13:7e:4e:5f:ec:c7:72:49:fd:09:55:
92:09:67:e0:c7:ea:06:aa:ab:6b:b4:5c:9e:54:30:d7:2e:f0:
5d:04:98:22:c1:13:f4:f6:38:2e:69:3b:06:c0:21:a3:a6:db:
a5:e9:9d:21:31:b7:54:3b:c8:bd:a6:23:1a:ca:c5:3d:62:1f:
7e:ab:7d:ce:a8:7d:cc:ee:60:7e:ae:e6:21:30:be:14:ac:5a:
c7:d7:f3:a4:29:a8:ba:65:50:c9:fa:7f:e2:d5:1f:01:96:ee:
5a:95:2e:6a:86:85:79:04:2f:cd:d4:6a:8d:a4:69:9b:e4:00:
a1:b7:49:24:38:82:a5:f4:3b:e2:78:57:6c:7c:31:13:4a:6b:
1b:6f:8f:c3:45:ee:e4:b9:e8:a8:3d:96:40:d4:c6:5c:b5:e7:
39:87:32:64:05:7b:6c:8f:3b:a4:60:e6:6c:3b:2e:eb:8e:68:
25:51:17:58:e6:3d:e5:06:00:29:ee:d5:20:d8:a1:bb:3c:e1:
83:ea:68:db:57:96:e6:ed:75:e8:df:3b:2a:af:20:b9:32:32:
d0:b3:da:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:19:53 2026 by rpki-client