Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
File: ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json)
Hash identifier: blIGLPfR3aMScWzcv8ZO55CSKZbKBwSZQ2C8RO5OfTM=
Subject key identifier: 84:3F:1B:22:4D:BF:08:5A:06:BE:74:3A:47:A6:08:6D:89:AA:7F:0C
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial: 01A0C2FB656585112E817E4911C3D85158A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
Manifest number: 19F9
Signing time: Mon 21 Sep 2026 08:00:50 +0000
Manifest this update: Mon 21 Sep 2026 08:00:50 +0000
Manifest next update: Tue 22 Sep 2026 08:00:50 +0000
Files and hashes: 1: 4EqplrDV06lCRhif2tEMHft3Z9w.roa (hash: MDA/7gQCBeR21SlR0B8S+aKGXZRnN83I/YW6CNM0l3M=)
2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: ucSTADb2ixCQtbWGGx2QMowos4RGNOG/b+BzbxQqr/w=)
3: p4UM29YUDWHWrbkHAV81tJBbgCs.roa (hash: oM1os/f+fACahPg4Bvsa30+59M1gjbkWOEO/sAa/Tqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:65:65:85:11:2e:81:7e:49:11:c3:d8:51:58:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Validity
Not Before: Sep 21 08:00:50 2026 GMT
Not After : Sep 22 08:00:50 2026 GMT
Subject: CN=843f1b224dbf085a06be743a47a6086d89aa7f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:a0:57:44:22:40:9e:64:11:54:19:5b:dc:
98:46:b7:37:8e:51:4b:de:c6:47:70:22:58:33:cf:
6b:b6:c7:fc:5b:37:7b:1c:0c:ff:c7:9f:97:6d:77:
e1:4c:7b:14:ca:01:22:c9:f2:0e:67:56:15:9f:f5:
38:3f:40:91:6c:13:25:af:71:96:c8:97:49:80:30:
1a:15:51:3d:b1:89:62:f5:a3:e6:3a:6d:09:bd:a4:
57:55:b6:74:a9:76:e6:ab:ca:d8:16:92:98:d0:29:
00:b9:d5:ab:f0:de:f7:31:bf:88:0a:21:96:e3:45:
0a:82:d8:8e:b6:31:86:aa:2b:16:a9:a5:f3:8d:28:
63:c8:13:69:e7:38:b6:83:d4:15:be:f4:83:ff:8e:
f9:30:49:9c:06:bc:91:87:33:19:ed:ba:cb:3e:b4:
d5:04:42:ee:1a:30:46:42:d0:c9:6b:fd:ca:a8:71:
32:ac:ed:c8:26:01:83:60:84:10:59:5a:16:43:db:
29:26:33:ea:9a:21:8c:f1:70:e2:db:c0:d9:de:31:
e1:80:47:fb:9a:1f:ca:2c:b1:00:90:9c:cf:0b:e3:
1c:52:ca:8e:01:44:dc:6a:1b:b7:78:81:cb:2c:d3:
fa:10:aa:4a:f1:5f:e2:fe:21:83:28:a0:04:ff:7a:
a5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3F:1B:22:4D:BF:08:5A:06:BE:74:3A:47:A6:08:6D:89:AA:7F:0C
X509v3 Authority Key Identifier:
keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:77:c9:e7:95:e8:96:1a:8a:5c:c2:28:ef:40:08:40:50:a1:
2f:77:4f:b6:11:b0:eb:57:b0:ac:f2:5b:e9:55:50:f7:51:a7:
29:e7:5a:dd:23:18:c9:1a:bf:5a:b4:f3:4c:9d:a3:fb:a0:04:
5f:c9:8f:22:f6:bf:7c:67:0b:07:91:91:ef:6d:f2:49:c2:b0:
ac:91:a0:60:7e:ed:f9:d7:a7:32:10:45:da:f6:b0:c0:a2:e1:
64:6d:41:94:33:0f:fa:63:0a:d5:15:05:b3:d8:11:c7:0b:f1:
9c:0b:70:c6:49:c8:30:1a:b3:b5:6a:b3:7a:b1:51:9d:0b:15:
bb:6b:3b:88:a0:d9:c0:49:4e:d6:04:fb:21:aa:de:90:5d:9b:
38:3e:57:11:c5:a7:e2:20:1b:a3:45:99:af:46:03:9d:d4:91:
ec:5f:08:2b:d1:3c:d6:df:80:47:6e:f2:16:92:a6:dc:13:d8:
68:be:59:10:c4:a4:13:e0:55:19:f9:a8:32:1d:23:4d:16:7d:
c7:e0:4b:64:57:e7:24:11:75:6e:01:27:73:a9:7c:66:c1:31:
f3:90:cf:1b:15:bf:d0:32:e4:a4:bf:64:26:15:03:92:94:a6:
9f:06:dc:a6:b7:b3:bc:33:08:50:38:cb:2c:39:20:f1:06:10:
ed:db:0b:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDC+2VlhREugX5JEcPYUVihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMTE0MDBkNTQ4ZmEyMWFmODE5YTBjNmUyM2U3N2E2MDEy
ZWI1ZTkwHhcNMjYwOTIxMDgwMDUwWhcNMjYwOTIyMDgwMDUwWjAzMTEwLwYDVQQD
Eyg4NDNmMWIyMjRkYmYwODVhMDZiZTc0M2E0N2E2MDg2ZDg5YWE3ZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbKgV0QiQJ5kEVQZW9yYRrc3jlFL
3sZHcCJYM89rtsf8Wzd7HAz/x5+XbXfhTHsUygEiyfIOZ1YVn/U4P0CRbBMlr3GW
yJdJgDAaFVE9sYli9aPmOm0JvaRXVbZ0qXbmq8rYFpKY0CkAudWr8N73Mb+ICiGW
40UKgtiOtjGGqisWqaXzjShjyBNp5zi2g9QVvvSD/475MEmcBryRhzMZ7brLPrTV
BELuGjBGQtDJa/3KqHEyrO3IJgGDYIQQWVoWQ9spJjPqmiGM8XDi28DZ3jHhgEf7
mh/KLLEAkJzPC+McUsqOAUTcahu3eIHLLNP6EKpK8V/i/iGDKKAE/3qlcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQ/GyJNvwhaBr50OkemCG2Jqn8MMB8GA1UdIwQY
MBaAFAARQA1Uj6Ia+BmgxuI+d6YBLrXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUJGQURWU1BvaHI0R2FERzRqNTNwZ0V1dGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81MmRhYWItNjgyOS00NWZhLTk2N2Ut
MDFmNDYwNmM2NWVjLzEvQUJGQURWU1BvaHI0R2FERzRqNTNwZ0V1dGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81MmRhYWItNjgyOS00NWZhLTk2N2UtMDFmNDYwNmM2NWVj
LzEvQUJGQURWU1BvaHI0R2FERzRqNTNwZ0V1dGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3fJ55Xo
lhqKXMIo70AIQFChL3dPthGw61ewrPJb6VVQ91GnKeda3SMYyRq/WrTzTJ2j+6AE
X8mPIva/fGcLB5GR723yScKwrJGgYH7t+denMhBF2vawwKLhZG1BlDMP+mMK1RUF
s9gRxwvxnAtwxknIMBqztWqzerFRnQsVu2s7iKDZwElO1gT7IarekF2bOD5XEcWn
4iAbo0WZr0YDndSR7F8IK9E81t+AR27yFpKm3BPYaL5ZEMSkE+BVGfmoMh0jTRZ9
x+BLZFfnJBF1bgEnc6l8ZsEx85DPGxW/0DLkpL9kJhUDkpSmnwbcprezvDMIUDjL
LDkg8QYQ7dsLLA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:59:03 2026 by rpki-client