Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
File: idaknSMAf7sSRxkvu3vZgus3M18.mft (raw, json)
Hash identifier: zAHOBiEV0HWL3wYkFwvAz4CHv00UlyrMUZAPlUytx8c=
Subject key identifier: 0C:F2:65:3B:78:2C:C1:9B:84:78:2B:9B:36:04:32:63:5B:CB:4A:55
Authority key identifier: 89:D6:A4:9D:23:00:7F:BB:12:47:19:2F:BB:7B:D9:82:EB:37:33:5F
Certificate issuer: /CN=89d6a49d23007fbb1247192fbb7bd982eb37335f
Certificate serial: 019FAAF55E55ACA8D129500A258FE6B69F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
Manifest number: 04D9
Signing time: Tue 28 Jul 2026 23:00:34 +0000
Manifest this update: Tue 28 Jul 2026 23:00:34 +0000
Manifest next update: Wed 29 Jul 2026 23:00:34 +0000
Files and hashes: 1: Af_5rqEWBhs_t_5t3ubsN4ME7qQ.roa (hash: US3yyitysBySkBj1duM7uaT/kHoh5Ro/nrveWTewP9E=)
2: idaknSMAf7sSRxkvu3vZgus3M18.crl (hash: 5gBu9PaT1tlf+0HQF9c8RXQzdQtDqiqXGEKgVX81pIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:5e:55:ac:a8:d1:29:50:0a:25:8f:e6:b6:9f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d6a49d23007fbb1247192fbb7bd982eb37335f
Validity
Not Before: Jul 28 23:00:34 2026 GMT
Not After : Jul 29 23:00:34 2026 GMT
Subject: CN=0cf2653b782cc19b84782b9b360432635bcb4a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b4:d1:85:bb:77:2a:2f:52:58:69:d8:d3:da:
ef:57:37:5d:5b:cb:03:b7:a7:66:b5:70:4a:53:6d:
e7:4e:b5:89:dd:83:71:ee:48:1d:f2:5e:c9:a6:e4:
a5:62:e2:56:25:9f:aa:c0:45:29:48:d9:be:91:af:
97:b6:fc:3c:e2:ad:23:a6:1e:fc:e2:fa:3e:02:be:
9e:d1:a1:d6:5b:69:4a:ec:9d:5f:56:c7:36:c6:3e:
37:7a:a9:2a:dd:86:5c:7e:9b:cb:7f:2c:de:f4:3c:
26:72:85:b9:ca:bb:5d:3c:f7:31:07:2a:22:09:da:
e5:94:08:5a:26:3f:00:b7:b3:60:dc:86:dc:f0:ed:
b6:74:c9:78:00:15:9a:34:06:85:8e:73:4f:8b:fc:
37:0a:52:6d:7e:06:c3:47:93:c4:ee:9f:c3:8a:d7:
56:d9:17:7e:62:76:2f:1e:46:aa:7d:44:1a:f6:e3:
03:7d:a7:4b:61:dd:21:f9:42:2b:8d:b5:01:be:b0:
1c:a5:8e:16:0a:70:55:36:71:4f:62:cc:a5:87:f4:
83:f0:48:52:12:de:4c:e1:ef:b8:78:3d:4a:79:9c:
11:d7:40:27:50:6e:c3:d3:ab:26:f2:fe:b6:61:71:
01:1a:78:44:f6:6c:d3:87:51:da:df:0d:a0:bb:3e:
e6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F2:65:3B:78:2C:C1:9B:84:78:2B:9B:36:04:32:63:5B:CB:4A:55
X509v3 Authority Key Identifier:
keyid:89:D6:A4:9D:23:00:7F:BB:12:47:19:2F:BB:7B:D9:82:EB:37:33:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:da:d9:31:cb:f3:a8:64:92:e8:70:e2:5f:b6:09:d0:6b:c1:
87:4f:12:c4:61:fb:8a:68:23:55:76:ec:d2:c5:42:f6:3b:58:
b4:46:e1:71:15:a8:01:86:3c:0f:c9:59:35:3c:e4:aa:8d:27:
8e:9b:09:8f:e4:e2:27:05:89:f8:50:e1:23:89:94:4c:cb:f0:
70:b5:dc:47:b3:de:c7:19:be:da:00:92:e4:6e:b8:cc:80:25:
1f:74:b4:db:18:27:48:16:e2:5f:7c:4d:23:ce:e6:23:5d:ae:
77:3e:2d:6f:eb:6d:17:7d:db:ca:59:50:f9:a4:bd:21:1d:94:
eb:b6:3b:bf:2b:c3:d9:2f:a3:b0:3b:6f:65:c9:c9:fe:fa:10:
e5:e3:df:14:59:fd:fa:e4:9f:ec:c2:0c:0b:04:83:1d:33:48:
54:42:c3:22:2e:7c:ad:e8:48:0c:5f:5e:08:fb:a6:96:26:c6:
e8:53:0d:10:08:f8:97:9e:ca:ca:4a:1e:f6:8f:df:ea:b2:99:
bc:96:d7:74:3a:4d:e9:b0:bb:7c:ea:52:f6:ec:34:74:64:46:
ee:7f:ac:b6:b4:9a:a1:4c:8f:ee:6d:ae:73:e6:bc:12:fa:ac:
e7:c2:76:9e:46:62:4e:31:ea:5a:2a:97:e4:87:05:c4:76:96:
ea:e7:26:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:40:20 2026 by rpki-client