Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
File: idaknSMAf7sSRxkvu3vZgus3M18.mft (raw, json)
Hash identifier: 9c3WkbpM8zzJv3rktobAEIlE0ITBxw4pg4u8mm+v5M0=
Subject key identifier: 09:CE:97:AE:F9:83:12:D2:C0:92:1B:65:49:2A:6A:68:BB:A1:01:4F
Authority key identifier: 89:D6:A4:9D:23:00:7F:BB:12:47:19:2F:BB:7B:D9:82:EB:37:33:5F
Certificate issuer: /CN=89d6a49d23007fbb1247192fbb7bd982eb37335f
Certificate serial: 01A0D26EDB4C0065B04AE9C59B5405ECD071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
Manifest number: 0572
Signing time: Thu 24 Sep 2026 08:01:15 +0000
Manifest this update: Thu 24 Sep 2026 08:01:15 +0000
Manifest next update: Fri 25 Sep 2026 08:01:15 +0000
Files and hashes: 1: Af_5rqEWBhs_t_5t3ubsN4ME7qQ.roa (hash: US3yyitysBySkBj1duM7uaT/kHoh5Ro/nrveWTewP9E=)
2: idaknSMAf7sSRxkvu3vZgus3M18.crl (hash: v38LycUn/4b4UGVaZvpIQL2OI0Czzp6+PoikfPoIqg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:db:4c:00:65:b0:4a:e9:c5:9b:54:05:ec:d0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d6a49d23007fbb1247192fbb7bd982eb37335f
Validity
Not Before: Sep 24 08:01:15 2026 GMT
Not After : Sep 25 08:01:15 2026 GMT
Subject: CN=09ce97aef98312d2c0921b65492a6a68bba1014f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9e:40:5b:13:8c:aa:3b:f5:30:ee:55:94:c0:
71:e6:6c:21:74:3d:e6:99:14:c7:77:1c:bd:19:2e:
0d:ca:e6:81:6c:27:6e:46:19:fa:a9:56:f6:ac:64:
5d:13:5f:2e:92:02:a5:01:52:51:e3:d6:7e:ea:f5:
ba:e8:55:96:bf:4c:58:e4:ab:86:8a:a9:86:ee:d7:
c1:6b:00:31:76:56:b4:e7:13:7d:71:61:28:bb:bc:
de:cb:18:36:e6:37:e4:f5:6d:39:c5:03:66:68:e6:
b6:c6:99:0f:5d:9a:d5:76:be:94:b2:3d:e4:5c:1f:
cb:ed:35:7f:d7:c7:bb:ea:ac:f3:08:b7:ec:b7:ae:
25:39:82:ca:f4:8b:a7:22:7a:0c:e0:d3:57:86:ec:
44:dc:50:8d:c1:45:00:92:51:cf:68:54:92:17:c1:
86:fe:4b:0f:da:e4:78:57:cf:a9:cb:ad:01:4f:90:
27:71:48:a4:35:ed:fc:4d:45:a9:ad:be:7d:e6:97:
ab:02:a5:c3:ab:08:6a:43:5b:8e:12:23:48:7e:04:
74:9a:60:6e:8f:bf:5e:f5:c0:e8:13:d8:67:7a:87:
f6:91:4e:aa:32:fd:33:c0:16:bd:c1:ce:38:cc:78:
00:c5:d4:87:d5:48:f4:31:77:39:50:38:0d:88:47:
3d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CE:97:AE:F9:83:12:D2:C0:92:1B:65:49:2A:6A:68:BB:A1:01:4F
X509v3 Authority Key Identifier:
keyid:89:D6:A4:9D:23:00:7F:BB:12:47:19:2F:BB:7B:D9:82:EB:37:33:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6d:70:f5:d3:06:56:37:0b:2d:b7:3d:86:7b:11:8f:96:7a:
82:9b:67:5a:7f:32:62:99:8b:d0:f8:e6:92:5a:48:c1:de:ad:
70:57:fe:d3:d4:70:6d:82:60:47:34:ce:d0:d9:3f:66:13:c8:
09:55:d3:02:83:4a:3d:d4:e5:02:13:41:e4:70:59:ce:7f:bc:
9c:ee:f6:8b:e4:11:9d:dc:e7:ef:fa:ff:f5:76:af:27:21:df:
15:eb:c6:47:de:0e:b1:c1:da:dd:61:68:d5:ec:72:c1:50:39:
08:4b:dd:1e:8e:3d:a1:55:68:c2:0c:fd:44:20:90:73:fe:1c:
dd:23:6e:7c:18:de:19:fb:1b:0e:7e:d1:fe:33:ae:fb:38:8f:
01:4a:1a:3b:22:d6:c1:6b:10:e6:7c:44:cd:c9:47:9b:fa:20:
68:50:45:bf:ab:14:fd:53:1b:2f:6a:4d:0d:d4:38:2c:1f:f0:
79:e0:1a:f3:d0:c5:33:74:a5:6c:ac:ff:fb:85:c8:a9:f3:fd:
3c:5a:7b:8e:43:e1:aa:5a:33:c4:b3:23:07:4c:28:d9:f0:b7:
03:7e:91:7d:20:0d:0f:c1:d0:6a:c9:94:3f:34:03:7b:64:86:
41:31:5a:3f:75:d3:b1:9b:9d:25:d6:ed:e3:b5:5b:72:49:57:
dd:83:35:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:59:43 2026 by rpki-client