Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
File: idaknSMAf7sSRxkvu3vZgus3M18.mft (raw, json)
Hash identifier: 6zbuGG2/9DYEpLcrcNTY0bITlxHlf0Jahqlm2ocSo5A=
Subject key identifier: 23:53:55:E7:13:C5:8B:A0:D6:C8:A9:FD:56:C3:E1:5C:94:55:62:71
Authority key identifier: 89:D6:A4:9D:23:00:7F:BB:12:47:19:2F:BB:7B:D9:82:EB:37:33:5F
Certificate issuer: /CN=89d6a49d23007fbb1247192fbb7bd982eb37335f
Certificate serial: 01A1822C22B00CCED193F9A68A70EAC6BD56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
Manifest number: 05CD
Signing time: Wed 28 Oct 2026 11:01:32 +0000
Manifest this update: Wed 28 Oct 2026 11:01:32 +0000
Manifest next update: Thu 29 Oct 2026 11:01:32 +0000
Files and hashes: 1: Af_5rqEWBhs_t_5t3ubsN4ME7qQ.roa (hash: US3yyitysBySkBj1duM7uaT/kHoh5Ro/nrveWTewP9E=)
2: idaknSMAf7sSRxkvu3vZgus3M18.crl (hash: u8MGJQ1sNgmeWo/DK+TorvpbqPHQAW8Wvp0ZLIB08OA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2c:22:b0:0c:ce:d1:93:f9:a6:8a:70:ea:c6:bd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d6a49d23007fbb1247192fbb7bd982eb37335f
Validity
Not Before: Oct 28 11:01:32 2026 GMT
Not After : Oct 29 11:01:32 2026 GMT
Subject: CN=235355e713c58ba0d6c8a9fd56c3e15c94556271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:55:15:1a:59:1d:cc:76:72:d3:d6:1b:cf:ec:
cd:c2:ab:c1:e0:1f:e1:e8:18:70:35:1a:d0:46:f8:
0b:ec:a8:5f:6f:09:7c:9a:0b:f3:ac:02:1e:2c:8b:
43:51:40:44:c2:97:7c:e3:06:e4:78:83:9e:f2:2e:
06:aa:40:e4:1d:b1:e5:bf:8d:88:8f:e0:92:23:fd:
76:9a:b8:9b:f7:ea:6e:9d:e6:61:db:20:42:89:dd:
8b:f9:03:8a:02:54:00:fd:2b:a8:e2:2b:ca:02:2d:
0d:1c:7a:50:23:a0:51:15:ad:9a:e4:ad:56:5f:ae:
39:fa:33:32:f3:3e:b2:0d:84:63:8c:9c:4a:5d:d4:
66:c0:46:e9:ff:d2:72:50:84:ec:f3:c1:f1:a1:2f:
51:68:26:e1:a7:11:0d:b2:14:92:20:0c:40:96:d0:
f1:2c:2c:59:5d:37:2f:c0:ba:f6:8b:16:ce:9a:3d:
ed:85:50:df:fc:cc:a5:a5:4f:87:da:68:02:00:63:
82:d9:fa:d2:94:fc:be:67:a9:7d:42:e8:5c:a5:b9:
ae:53:42:95:ae:c1:79:1a:5e:d0:72:78:bc:be:0b:
89:db:df:87:e6:f9:ca:49:4b:69:f0:0f:b4:f3:f0:
25:46:ad:3f:49:a0:e8:e5:94:5f:f5:44:50:dd:73:
47:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:53:55:E7:13:C5:8B:A0:D6:C8:A9:FD:56:C3:E1:5C:94:55:62:71
X509v3 Authority Key Identifier:
keyid:89:D6:A4:9D:23:00:7F:BB:12:47:19:2F:BB:7B:D9:82:EB:37:33:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d9:bd:37:4f:56:fc:d2:46:83:4b:38:cd:83:ba:68:99:5b:
b9:a2:bb:3d:d1:b2:78:87:d8:65:ea:f7:d5:f4:9c:27:4d:fc:
c6:1b:68:28:f4:84:ba:32:cc:3d:24:af:75:92:c9:02:ae:0d:
3d:1b:7b:d6:df:0f:99:b1:92:93:40:44:32:f8:59:9b:f5:4d:
78:06:0d:f1:29:18:e5:19:29:7b:04:c2:62:6f:93:2e:bf:9a:
37:13:07:8a:c6:d9:c3:70:ca:70:0b:81:ba:5f:e0:b1:7e:e7:
9c:c0:89:5a:6e:ae:6a:7b:47:c3:fc:79:3e:7d:5e:84:65:b0:
6e:5a:a9:d4:40:1e:ac:83:89:70:87:26:a4:34:a3:72:be:4c:
fa:2d:ad:4f:ec:36:81:e5:f6:d1:c3:7a:5b:93:ae:d0:cd:85:
d5:3d:77:a9:5d:8a:2e:22:45:42:66:21:89:e8:4f:33:c2:db:
86:22:a0:68:4c:14:cd:09:78:6e:57:1d:46:58:5b:91:25:d4:
2e:2a:40:c8:0b:e4:0f:36:91:16:b3:dd:aa:d1:57:31:73:a1:
32:d2:e2:ba:a3:81:e3:fd:5b:9e:3c:c7:10:63:63:43:a4:e0:
14:59:3b:3f:9e:c3:70:bc:af:08:46:07:57:34:49:a1:c0:05:
2a:03:aa:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 17:56:58 2026 by rpki-client