Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
File: ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json)
Hash identifier: TAgvRMek43rt37ZdBZcWELbr2bx0rPKsuseHpWxd5Jg=
Subject key identifier: 9F:CD:D4:3D:B2:A4:14:A6:F8:D3:5B:4D:E7:51:82:2E:B0:1D:7D:8B
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial: 01A1C3D52DDFFA6B025FAD195D08F79095A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
Manifest number: 1A7E
Signing time: Tue 10 Nov 2026 05:01:30 +0000
Manifest this update: Tue 10 Nov 2026 05:01:30 +0000
Manifest next update: Wed 11 Nov 2026 05:01:30 +0000
Files and hashes: 1: 4EqplrDV06lCRhif2tEMHft3Z9w.roa (hash: MDA/7gQCBeR21SlR0B8S+aKGXZRnN83I/YW6CNM0l3M=)
2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: 6b2GZ17Cjgp3i5mTP+74xMrYIg1J9vbipuiv59N3DeM=)
3: p4UM29YUDWHWrbkHAV81tJBbgCs.roa (hash: oM1os/f+fACahPg4Bvsa30+59M1gjbkWOEO/sAa/Tqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 05:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c3:d5:2d:df:fa:6b:02:5f:ad:19:5d:08:f7:90:95:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Validity
Not Before: Nov 10 05:01:30 2026 GMT
Not After : Nov 11 05:01:30 2026 GMT
Subject: CN=9fcdd43db2a414a6f8d35b4de751822eb01d7d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7e:e1:4c:9b:92:db:e5:9e:37:cb:1a:5d:de:
fa:1c:78:47:84:28:2a:59:22:84:9f:79:1a:ff:5e:
5a:90:78:18:f5:61:d8:2e:54:6c:e0:00:f0:91:a9:
7f:bf:0d:5d:ed:c5:81:01:8b:db:e2:72:f5:3b:36:
e2:9f:e4:18:2e:b4:a0:7b:49:bd:a6:f1:37:6e:64:
75:99:88:5c:f1:ce:37:83:cd:f9:44:e1:68:58:b8:
af:bf:cb:1b:7c:b0:6c:2f:a6:a3:4d:da:00:3a:00:
a3:a9:0f:8b:79:72:18:ea:a8:ae:60:8f:cd:e8:a7:
fc:56:56:37:c5:d1:3f:75:41:3e:b3:38:9d:10:71:
fb:58:71:f5:c9:72:af:7a:4b:7e:1c:06:51:3e:cb:
b3:6a:28:c7:99:db:14:69:5e:55:e3:29:85:ef:8e:
d7:99:4b:b8:b7:1c:02:c6:ab:e7:c4:e3:62:80:2e:
62:a4:5a:2e:79:02:9d:6f:0b:9b:67:98:72:5f:88:
32:90:66:3f:b1:97:3e:6a:08:5c:d9:4f:4e:f3:36:
e9:3f:e0:ed:c6:be:12:77:1f:f6:c3:f7:8f:62:e2:
1e:ff:ae:6c:50:70:68:00:7a:62:f9:7e:d1:a3:e8:
10:73:7d:8f:8d:9c:c0:b8:fb:be:c7:15:7f:51:80:
64:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CD:D4:3D:B2:A4:14:A6:F8:D3:5B:4D:E7:51:82:2E:B0:1D:7D:8B
X509v3 Authority Key Identifier:
keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:75:48:24:2d:9b:ff:e3:01:2c:f5:f2:45:2a:b4:c6:b4:a6:
96:db:07:67:ed:f3:ed:17:46:91:d7:67:83:58:a9:b0:18:25:
c5:16:c1:69:27:95:4b:7b:1e:e3:ca:42:71:67:f3:ed:9b:02:
66:51:13:53:28:11:62:ef:c9:23:8d:6b:d6:86:62:06:b0:4d:
65:22:3d:26:f9:bf:29:7b:40:a9:25:d6:a0:8d:b4:a0:4c:d8:
ab:f6:f2:62:73:e1:18:ec:cf:bc:ba:11:ac:f2:04:be:eb:ea:
16:ec:98:2e:41:8c:17:a5:59:c9:96:cd:d9:04:ae:72:a1:cd:
c8:50:1a:bc:d1:6a:79:c0:34:b4:59:41:55:e6:56:ca:20:e4:
01:d8:43:db:69:fa:71:50:4a:98:fa:30:57:2d:43:0b:e4:12:
56:f4:a5:34:cc:b8:2a:d4:e7:66:87:d0:a5:48:5d:66:4b:21:
2c:59:c1:0e:24:76:27:91:57:5e:4e:f7:f1:12:0a:f9:91:19:
7e:23:4b:c0:36:9f:9a:76:0a:ee:ec:52:e1:1e:72:aa:f2:46:
26:73:88:37:b3:b2:85:47:02:dd:7f:a0:d8:b6:82:cd:ef:e3:
d1:14:7e:7d:80:00:85:d0:e4:dd:54:ec:72:e7:a1:db:cf:de:
7e:75:c6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 14:15:46 2026 by rpki-client