Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
File: idaknSMAf7sSRxkvu3vZgus3M18.mft (raw, json)
Hash identifier: UYmlqsxaDFrpl/liAyU58KEzbIk9EA2ucWSLfVOf2fA=
Subject key identifier: 20:30:ED:C4:2C:D7:89:48:CC:9D:25:49:B3:2F:BE:75:94:23:80:B4
Authority key identifier: 89:D6:A4:9D:23:00:7F:BB:12:47:19:2F:BB:7B:D9:82:EB:37:33:5F
Certificate issuer: /CN=89d6a49d23007fbb1247192fbb7bd982eb37335f
Certificate serial: 019FA14E22CC5ECD3947F25839445AE0D9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
Manifest number: 04D4
Signing time: Mon 27 Jul 2026 02:01:20 +0000
Manifest this update: Mon 27 Jul 2026 02:01:20 +0000
Manifest next update: Tue 28 Jul 2026 02:01:20 +0000
Files and hashes: 1: Af_5rqEWBhs_t_5t3ubsN4ME7qQ.roa (hash: US3yyitysBySkBj1duM7uaT/kHoh5Ro/nrveWTewP9E=)
2: idaknSMAf7sSRxkvu3vZgus3M18.crl (hash: uIO5ded1Qpob8fP4ELx1dQUH3JV+8G9WCEIsv0I4sT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4e:22:cc:5e:cd:39:47:f2:58:39:44:5a:e0:d9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d6a49d23007fbb1247192fbb7bd982eb37335f
Validity
Not Before: Jul 27 02:01:20 2026 GMT
Not After : Jul 28 02:01:20 2026 GMT
Subject: CN=2030edc42cd78948cc9d2549b32fbe75942380b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:fc:b7:2d:9c:dc:72:bd:27:4c:8c:61:9e:
48:e8:a0:31:ff:b2:5a:03:a8:69:19:c5:6c:bc:37:
c7:00:81:0d:2b:78:97:8e:55:97:78:e1:37:e3:c6:
93:3d:6a:50:d1:52:fa:a1:19:52:0d:b1:96:07:4f:
18:11:a8:d0:f3:67:e2:1d:c4:94:64:c6:2b:5b:34:
46:bf:6d:bc:e1:e7:30:fe:3b:f2:85:73:8e:7d:32:
68:8a:1c:1a:cc:1c:c0:e2:15:76:05:af:6f:f1:f0:
c7:c2:fb:c1:2d:f5:af:97:59:8a:f0:bc:ef:de:3a:
c4:e0:e0:d4:d1:1a:76:a7:40:65:e2:e2:6f:85:59:
0c:61:37:43:57:15:53:78:38:50:45:82:85:2d:cb:
d5:6c:8b:6a:6f:5f:2a:7c:72:28:3a:68:66:8a:e3:
26:f1:4b:69:7a:e3:89:b1:01:9a:06:ee:d4:7c:bd:
bc:0a:5f:99:72:da:a7:1b:4b:13:b2:ba:10:55:fb:
83:a4:cb:9e:5e:f5:c4:33:4c:d6:41:a3:12:0b:42:
0b:f8:70:25:a8:82:51:eb:5e:01:27:cf:09:9b:24:
a8:2d:56:e5:2c:61:ea:99:c8:0c:d7:5a:ec:19:80:
ea:f4:ac:5e:84:73:58:7c:45:15:ee:7c:c2:4e:ee:
62:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:30:ED:C4:2C:D7:89:48:CC:9D:25:49:B3:2F:BE:75:94:23:80:B4
X509v3 Authority Key Identifier:
keyid:89:D6:A4:9D:23:00:7F:BB:12:47:19:2F:BB:7B:D9:82:EB:37:33:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ab:e2:e9:c2:e0:9f:9f:b2:71:71:9a:13:45:76:c3:2c:43:
56:e2:ab:82:44:24:2f:11:ff:3b:4e:ce:eb:48:a8:aa:ad:4e:
74:28:7e:b2:a4:a1:3e:25:44:af:3f:5d:46:00:3b:3f:37:9b:
23:56:9e:e8:f2:8d:85:06:14:3b:24:07:0c:0f:57:ba:2a:52:
e2:58:73:f3:75:54:d1:0a:d7:62:76:91:66:24:c3:60:14:68:
e6:e7:ae:90:8e:f4:f8:9e:cf:0a:46:f3:c6:d2:56:b2:c1:ab:
bc:79:96:3a:ce:4f:e5:73:7d:e9:c7:4f:c5:7f:b4:6d:65:f3:
c3:43:12:7b:a9:e1:34:2e:e9:88:15:0c:93:2c:73:44:26:69:
b6:b2:34:6a:9b:b3:e5:67:a2:01:c5:6f:ea:b6:3d:75:85:42:
a9:2d:1b:fa:9f:d0:71:68:f2:23:22:13:89:a5:40:7c:03:5f:
8e:f7:d4:69:1e:06:bf:e3:7d:d9:c0:2a:b0:a4:a2:61:0b:13:
c3:6c:08:8c:21:84:ca:c7:aa:02:02:ae:82:fc:a7:dd:2a:2b:
56:3e:c7:c0:72:09:ca:de:5b:03:6c:17:c9:fd:d0:64:57:56:
70:1a:f4:22:4a:33:b1:1b:d2:95:21:53:c0:1f:0e:e1:92:ef:
94:e4:8b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:47:34 2026 by rpki-client