Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
File: idaknSMAf7sSRxkvu3vZgus3M18.mft (raw, json)
Hash identifier: 9HCkGQchcyYOtUqZRRLROwQ1sWOmFT4CiiefNbtzu74=
Subject key identifier: 22:CA:62:66:4B:F6:02:C2:6F:6C:38:FF:B9:53:9B:6E:8E:8C:65:52
Authority key identifier: 89:D6:A4:9D:23:00:7F:BB:12:47:19:2F:BB:7B:D9:82:EB:37:33:5F
Certificate issuer: /CN=89d6a49d23007fbb1247192fbb7bd982eb37335f
Certificate serial: 019F91DB2330DF2D903C53CE2A4CA09D9B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
Manifest number: 04CC
Signing time: Fri 24 Jul 2026 02:01:25 +0000
Manifest this update: Fri 24 Jul 2026 02:01:25 +0000
Manifest next update: Sat 25 Jul 2026 02:01:25 +0000
Files and hashes: 1: Af_5rqEWBhs_t_5t3ubsN4ME7qQ.roa (hash: US3yyitysBySkBj1duM7uaT/kHoh5Ro/nrveWTewP9E=)
2: idaknSMAf7sSRxkvu3vZgus3M18.crl (hash: Ql/dn4W/1wA4IE/sKTHDaaeo6kYic9GhCVE3jPDewiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:23:30:df:2d:90:3c:53:ce:2a:4c:a0:9d:9b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d6a49d23007fbb1247192fbb7bd982eb37335f
Validity
Not Before: Jul 24 02:01:25 2026 GMT
Not After : Jul 25 02:01:25 2026 GMT
Subject: CN=22ca62664bf602c26f6c38ffb9539b6e8e8c6552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:38:dd:49:72:1d:1e:dd:65:d4:f7:2a:71:
39:a4:d2:df:8e:fa:5d:4b:c0:ec:d2:20:e7:3e:97:
25:3c:ba:85:11:13:e4:9e:1c:b9:92:ab:96:d1:16:
29:ba:c6:a0:39:3f:8b:99:e5:07:53:fa:b3:58:c3:
bf:40:d7:dd:32:7b:ec:60:7a:ee:a1:59:b2:56:db:
ab:ba:8e:b5:55:5f:22:18:62:94:68:c4:6f:f9:93:
0c:78:18:ce:69:53:26:59:0d:dc:bc:09:6e:f2:e0:
b9:5e:c9:5b:6a:9a:ac:a7:aa:b0:80:fc:4b:c9:b0:
33:01:b1:45:76:cc:f8:06:8c:e3:e6:0b:8f:04:5e:
e3:ee:3c:36:9e:53:24:77:9b:65:5b:51:be:88:db:
c0:36:1a:f0:fd:87:29:36:fa:95:9f:d5:69:d0:2a:
a2:fa:9d:ef:11:cb:ad:6e:a7:f5:a0:b7:5b:51:33:
a2:3d:cf:46:29:fe:f9:c8:f2:b4:57:37:35:05:07:
9d:61:a3:73:f6:bb:44:07:c0:3b:f9:86:cd:2c:cd:
bb:5b:d4:ae:42:20:5e:7a:90:bc:30:4c:45:83:c3:
b1:f1:77:b4:5b:7b:cb:dc:a9:1f:58:61:5a:bb:63:
c7:b2:d7:4e:fc:de:59:2e:74:31:59:dd:c8:f3:12:
ae:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CA:62:66:4B:F6:02:C2:6F:6C:38:FF:B9:53:9B:6E:8E:8C:65:52
X509v3 Authority Key Identifier:
keyid:89:D6:A4:9D:23:00:7F:BB:12:47:19:2F:BB:7B:D9:82:EB:37:33:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:6a:fe:22:8e:33:63:49:72:bf:02:ea:76:96:97:ea:25:ef:
d3:ae:d7:4d:ca:bc:b6:7a:27:a3:f7:ca:00:12:29:73:fd:8b:
c4:b0:25:7e:ed:e1:e9:71:94:d8:2b:74:88:6c:17:19:6b:88:
e6:aa:ae:3b:0b:84:a2:34:19:f9:ba:5f:da:7d:f9:d1:44:8d:
0c:20:71:cd:53:75:97:73:75:a1:b3:fe:3b:62:7e:9b:63:d8:
50:0f:80:fb:0f:66:ed:9a:0f:91:7d:44:18:a6:aa:81:24:79:
cd:21:a0:ca:6e:e9:e9:6d:0e:5d:27:da:6b:b5:c9:c7:3b:ff:
c7:f6:26:77:7c:f2:4b:47:20:b2:0b:f1:01:43:c1:05:a5:b4:
2f:9f:9f:ba:e5:f1:64:7d:9e:68:62:53:3d:c0:6f:98:fa:90:
c2:89:20:b1:8c:d4:8b:6a:dc:56:7f:8c:62:81:cd:f7:77:93:
a9:21:77:32:db:45:e3:eb:b7:0d:60:f7:43:69:33:69:c4:a6:
30:40:c8:e8:76:02:37:bd:0c:6d:e3:ae:09:93:99:ca:27:a6:
b8:20:85:36:7b:b6:da:ba:96:56:69:d7:29:8c:c7:a5:5c:02:
81:1b:b4:58:5b:6c:30:0f:10:c2:7f:1e:43:ea:b4:f1:a8:a2:
1e:9b:bf:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:55:10 2026 by rpki-client