Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
File: ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json)
Hash identifier: sRFE9Q7hqf4ffmn5vQyeroNRnMRsRQMAyF9c73QGB4M=
Subject key identifier: EB:E9:2C:71:DB:05:84:D6:46:1C:31:8A:31:71:D2:5E:29:CC:80:3B
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial: 019EBD6BEF5A257FBFFED87F66C288C59435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
Manifest number: 18ED
Signing time: Fri 12 Jun 2026 20:00:27 +0000
Manifest this update: Fri 12 Jun 2026 20:00:27 +0000
Manifest next update: Sat 13 Jun 2026 20:00:27 +0000
Files and hashes: 1: 4EqplrDV06lCRhif2tEMHft3Z9w.roa (hash: MDA/7gQCBeR21SlR0B8S+aKGXZRnN83I/YW6CNM0l3M=)
2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: abUP2fCMnQOsk8XkAlQYGdbq6HcGnhAfdcoawv60Kj8=)
3: p4UM29YUDWHWrbkHAV81tJBbgCs.roa (hash: oM1os/f+fACahPg4Bvsa30+59M1gjbkWOEO/sAa/Tqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:6b:ef:5a:25:7f:bf:fe:d8:7f:66:c2:88:c5:94:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Validity
Not Before: Jun 12 20:00:27 2026 GMT
Not After : Jun 13 20:00:27 2026 GMT
Subject: CN=ebe92c71db0584d6461c318a3171d25e29cc803b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:24:9d:d6:d8:6b:30:30:d6:30:40:f1:cf:17:
fa:23:66:c9:9e:4c:df:2c:50:35:de:26:94:f7:64:
4e:26:e8:33:b0:62:26:f6:42:1a:66:18:ef:f9:3e:
5c:80:20:ee:00:f7:dd:70:33:68:25:8d:6a:19:8b:
7c:d8:fd:93:57:e3:73:95:08:45:e0:dd:89:bf:a6:
c3:f0:e4:2d:c1:0f:5e:19:6a:28:04:66:9d:15:7b:
04:c6:ae:a3:98:4f:aa:1d:19:89:42:2a:bd:a6:84:
7d:d0:40:6f:0e:40:67:97:80:86:a9:13:90:be:1d:
20:ff:a6:71:79:1c:3f:3f:8d:81:fc:52:a1:e1:97:
ea:9c:47:9c:50:99:b6:c1:4c:41:e3:b8:0e:a4:16:
6b:1f:d0:20:53:6e:e8:c5:83:d2:41:50:a7:b2:c1:
12:a0:44:f8:18:29:90:e3:7d:39:5c:27:e0:64:75:
c4:9f:d9:25:ea:a3:04:cc:76:e2:12:b3:a1:bc:40:
cb:3f:3a:9c:3a:e3:e8:14:16:11:83:f0:cf:9c:d0:
ee:4d:58:a6:f8:17:20:3d:3d:19:2a:04:c2:67:bd:
31:62:02:c1:40:0f:68:30:f7:a1:90:35:79:f5:56:
65:a6:5f:5d:1f:f9:60:b7:ae:07:01:3e:9a:a7:d5:
c5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E9:2C:71:DB:05:84:D6:46:1C:31:8A:31:71:D2:5E:29:CC:80:3B
X509v3 Authority Key Identifier:
keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6f:59:4b:3a:d5:66:3a:7a:c0:b0:32:0b:56:e7:14:ea:b4:
d9:e4:8c:4c:30:4b:2d:c9:6f:a9:f0:ad:2f:c5:5e:59:f8:85:
0b:51:8d:08:16:b1:fd:81:b8:7f:02:8e:a6:96:36:2e:31:22:
de:5a:0e:88:48:1e:78:80:ef:97:43:e9:ac:33:64:30:bb:8d:
b0:95:89:46:28:92:7e:45:1f:dd:b1:31:53:d8:5a:82:26:e3:
b9:69:89:5e:90:7d:9b:4a:0a:69:4a:a4:bf:04:5d:35:94:a1:
ae:39:46:ac:bc:f9:88:42:da:33:14:45:4e:d2:02:a3:24:00:
5c:40:7c:37:d3:44:2d:38:8a:53:6a:0e:22:aa:5e:64:49:81:
7a:15:6a:36:17:03:5f:81:f5:df:74:af:d1:ea:55:72:12:50:
63:61:cb:d1:30:04:94:25:c3:2f:85:f0:c3:a2:89:e4:17:23:
73:04:da:71:b7:9a:aa:6d:9e:e4:6b:bf:bb:ce:95:6c:e8:18:
09:b2:a1:64:db:fc:3b:34:33:b8:92:c8:49:3d:70:e3:ba:59:
a1:5c:ad:26:46:88:ed:30:ea:10:25:17:2e:83:f4:1d:09:d5:
23:27:4e:95:0f:dd:78:12:b6:b6:d1:95:21:1b:0a:b8:70:82:
9b:72:33:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:50:36 2026 by rpki-client