Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
File: ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json)
Hash identifier: AJc0EYX6xnhTnPH8GTpf4VBnXmq2ht819OhAxLFyIYk=
Subject key identifier: 02:98:AD:44:04:2D:C0:8B:C4:89:D8:6F:13:1F:E5:C0:14:A6:99:5F
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial: 019FA9076FFD5E2D7047814CDB5A58513B64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
Manifest number: 1967
Signing time: Tue 28 Jul 2026 14:01:04 +0000
Manifest this update: Tue 28 Jul 2026 14:01:04 +0000
Manifest next update: Wed 29 Jul 2026 14:01:04 +0000
Files and hashes: 1: 4EqplrDV06lCRhif2tEMHft3Z9w.roa (hash: MDA/7gQCBeR21SlR0B8S+aKGXZRnN83I/YW6CNM0l3M=)
2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: zbHsfEcN7HZeIxB3NZYwFH16SJrde2/d+kG6H4K2n/E=)
3: p4UM29YUDWHWrbkHAV81tJBbgCs.roa (hash: oM1os/f+fACahPg4Bvsa30+59M1gjbkWOEO/sAa/Tqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:6f:fd:5e:2d:70:47:81:4c:db:5a:58:51:3b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Validity
Not Before: Jul 28 14:01:04 2026 GMT
Not After : Jul 29 14:01:04 2026 GMT
Subject: CN=0298ad44042dc08bc489d86f131fe5c014a6995f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:af:cd:85:43:0b:fc:4a:08:49:39:07:70:bb:
f8:e4:2b:82:2c:7f:32:c5:03:2c:e3:b9:a0:8e:da:
1b:27:b2:04:f5:64:2b:2a:1f:f4:2c:b8:18:f5:3f:
19:68:58:0e:7a:97:f7:09:c1:02:15:7d:2f:de:43:
f5:33:63:22:21:f0:bc:07:3c:d6:34:e0:4d:49:c5:
26:df:da:a8:f1:0b:55:3f:35:62:a6:84:95:84:0e:
18:8b:29:50:58:1c:17:fc:6d:2d:0e:91:2d:66:e4:
e8:52:90:21:d0:1d:56:7a:c3:a3:2b:dd:5d:ca:f6:
66:95:da:8a:13:fc:e4:da:5f:2d:78:a5:65:66:31:
b0:e1:31:3a:86:38:60:a2:f1:c4:d8:ab:10:d3:a2:
0a:e9:2d:ea:5d:dc:64:0e:2f:7f:2d:6f:75:61:28:
93:e6:68:72:d4:80:d1:fa:a4:29:42:ee:61:7f:97:
f7:a1:d4:5a:5b:e1:99:86:1d:ae:01:5c:50:c1:f2:
1a:47:d3:04:0d:53:53:69:2f:e2:a0:57:78:60:a0:
53:9f:f8:ff:22:c1:89:fc:15:0d:9b:ad:10:23:6e:
3a:03:ea:05:78:b9:c8:81:2d:92:9a:1e:3a:27:0b:
49:9d:df:c6:81:04:af:54:d8:dd:73:5a:a1:20:74:
e6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:98:AD:44:04:2D:C0:8B:C4:89:D8:6F:13:1F:E5:C0:14:A6:99:5F
X509v3 Authority Key Identifier:
keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:80:37:0f:2e:ef:d4:db:e9:6d:a3:53:76:26:d3:2f:b9:7f:
e4:db:83:37:2d:65:e1:3d:42:9f:25:46:38:8d:67:c8:e4:da:
7b:e4:2e:fa:e8:63:a2:fb:a4:fb:3f:86:80:1d:9c:bc:bd:a5:
05:8f:4c:af:3a:17:ff:b1:71:13:70:5d:11:ff:69:76:67:63:
06:a9:8f:8f:58:41:81:be:41:51:a2:57:72:d3:f9:b1:f8:82:
20:2b:ef:42:a5:0b:e8:01:80:10:ca:d5:73:4f:bb:2d:ed:59:
03:fc:86:09:ae:ad:a2:2a:49:18:12:f2:75:d6:bb:3d:2f:50:
17:66:d2:cb:da:32:af:01:f6:89:2e:0d:12:03:a6:6d:33:9c:
76:6d:f6:fb:2d:db:34:8b:b0:76:49:c1:22:c2:6d:f6:76:e5:
c6:46:7a:da:78:50:65:b9:2a:1c:3d:db:63:79:8c:29:e5:0d:
4d:a5:03:ab:28:ee:ab:82:58:97:cf:30:ef:fd:c2:d5:46:ae:
b6:3f:3c:fe:ef:48:1a:dd:d1:43:6f:39:02:14:12:33:ec:b2:
94:e2:b0:22:5a:9a:76:76:22:bb:f5:c6:2d:61:6f:1f:92:af:
7f:ad:9e:98:21:32:56:6f:38:12:f9:06:c3:59:b7:2d:af:56:
88:c1:5b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:35 2026 by rpki-client