Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
File: ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json)
Hash identifier: zRTmTR5PP2Edk22G+v1jFnBDazFgpi50SjGTHNX49Y4=
Subject key identifier: 5C:8F:18:B3:04:42:D6:32:28:DE:5B:AF:4D:B9:CE:3F:9C:9A:46:AD
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial: 019CAC46978F2BF69B264DBC61586903FAA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
Manifest number: 17DB
Signing time: Mon 02 Mar 2026 02:00:33 +0000
Manifest this update: Mon 02 Mar 2026 02:00:33 +0000
Manifest next update: Tue 03 Mar 2026 02:00:33 +0000
Files and hashes: 1: 4EqplrDV06lCRhif2tEMHft3Z9w.roa (hash: MDA/7gQCBeR21SlR0B8S+aKGXZRnN83I/YW6CNM0l3M=)
2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: 0By653u0zbHGr5m7LH2uAHttHHF8fqyqU2f7tGnFIZI=)
3: p4UM29YUDWHWrbkHAV81tJBbgCs.roa (hash: oM1os/f+fACahPg4Bvsa30+59M1gjbkWOEO/sAa/Tqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:97:8f:2b:f6:9b:26:4d:bc:61:58:69:03:fa:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Validity
Not Before: Mar 2 02:00:33 2026 GMT
Not After : Mar 3 02:00:33 2026 GMT
Subject: CN=5c8f18b30442d63228de5baf4db9ce3f9c9a46ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0a:5f:05:fa:88:e3:0c:77:a5:23:19:22:85:
d8:b7:6a:4e:12:ed:e0:c4:97:36:a5:60:cd:a2:19:
3a:5e:14:35:2a:9d:fe:c1:20:aa:b2:40:3f:db:ec:
1a:cf:35:6f:f1:11:24:20:6e:25:8a:74:30:dc:64:
bd:b4:06:3c:74:1b:96:c8:6b:45:dd:f9:d9:79:ff:
4d:1b:34:9c:d1:e7:03:ea:14:b6:89:92:12:1d:8c:
c0:3e:ba:64:db:ad:6e:96:d8:94:6c:31:03:fe:b1:
ef:af:50:a0:f3:32:60:a6:08:6d:83:08:93:24:46:
a9:d9:de:44:6a:58:be:6f:39:3e:55:f5:f8:1e:42:
26:24:41:eb:24:d3:03:f5:d3:8c:eb:b1:cf:21:a8:
2b:d8:62:9b:6e:66:a7:53:9e:71:ec:95:a7:14:f9:
a4:08:ad:be:62:65:e8:d4:ce:39:6d:1e:fc:37:af:
64:2e:01:3d:7b:2f:d9:77:41:08:09:01:25:a0:2a:
44:52:af:fe:8a:45:60:d8:16:fe:15:3b:f6:3e:99:
a6:e7:08:1e:c5:fc:2d:4d:23:d3:08:2c:ce:c9:76:
4e:96:8c:dd:f1:4f:43:05:94:27:2f:2e:70:04:5a:
99:3e:b9:ed:80:63:99:55:bc:26:ad:26:09:05:c7:
97:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8F:18:B3:04:42:D6:32:28:DE:5B:AF:4D:B9:CE:3F:9C:9A:46:AD
X509v3 Authority Key Identifier:
keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:51:49:57:bf:a7:0b:4b:06:2f:7d:4e:13:20:ea:cb:2f:31:
8d:c2:ba:ea:68:1c:17:8c:94:b9:db:d5:92:9e:55:19:67:e9:
1b:df:4d:9e:bd:3f:da:5c:62:27:2c:24:18:84:71:b6:d8:0f:
9a:b7:f7:06:39:98:0a:6a:b3:b3:09:18:8c:a6:c3:85:bf:5e:
58:61:e5:2e:6d:18:99:3e:d5:22:62:54:cf:42:28:05:0c:32:
12:62:2a:ee:ff:66:54:65:2e:46:31:df:d2:d9:27:de:c5:f9:
98:06:78:bc:6d:b1:b4:2d:04:99:b5:c5:7d:d4:c1:b9:4d:7f:
8d:ad:3b:ad:7f:c4:f4:7f:1a:e4:20:7b:08:1c:e2:c4:ac:85:
78:86:a1:39:90:d0:3f:15:30:67:fd:11:48:fd:4b:4b:92:84:
8a:2f:87:5b:39:fd:11:73:55:ce:66:7b:67:25:0b:72:ff:dd:
10:03:35:1d:40:27:7f:46:b9:50:bc:85:af:64:d6:89:2e:59:
db:2c:9b:cb:f6:7a:5a:21:20:57:4e:fe:b6:a7:78:b9:21:3d:
8a:5d:05:bc:04:e8:d6:ee:22:a2:49:da:f8:58:91:7f:1b:0c:
9a:77:db:57:86:26:e0:12:f4:da:7a:f1:2b:4d:1e:4b:ef:c2:
e9:34:f3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:59:17 2026 by rpki-client