Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
File: idaknSMAf7sSRxkvu3vZgus3M18.mft (raw, json)
Hash identifier: lzYtZVtqug16/AjypO1PB2rTEQ5HisCu3Pyq/0crugI=
Subject key identifier: 21:BE:B2:2D:63:3D:6D:04:F8:4D:F9:29:74:A2:7F:31:94:65:37:13
Authority key identifier: 89:D6:A4:9D:23:00:7F:BB:12:47:19:2F:BB:7B:D9:82:EB:37:33:5F
Certificate issuer: /CN=89d6a49d23007fbb1247192fbb7bd982eb37335f
Certificate serial: 019E1D2328D45C679EB2B8080C5B2B463777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
Manifest number: 040B
Signing time: Tue 12 May 2026 17:01:43 +0000
Manifest this update: Tue 12 May 2026 17:01:43 +0000
Manifest next update: Wed 13 May 2026 17:01:43 +0000
Files and hashes: 1: Af_5rqEWBhs_t_5t3ubsN4ME7qQ.roa (hash: US3yyitysBySkBj1duM7uaT/kHoh5Ro/nrveWTewP9E=)
2: idaknSMAf7sSRxkvu3vZgus3M18.crl (hash: pPigZ5KYbRR9E/Rs0mx+0ty1AufKnGKLw0ZnSjSY5/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:28:d4:5c:67:9e:b2:b8:08:0c:5b:2b:46:37:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d6a49d23007fbb1247192fbb7bd982eb37335f
Validity
Not Before: May 12 17:01:43 2026 GMT
Not After : May 13 17:01:43 2026 GMT
Subject: CN=21beb22d633d6d04f84df92974a27f3194653713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e6:49:0d:ac:97:61:7e:f6:e9:00:6a:38:14:
21:79:e1:d6:39:08:45:0a:44:9d:7c:68:50:5a:dd:
e4:f4:5e:23:79:40:49:8d:97:eb:e4:41:32:2e:a3:
87:9d:ec:8c:e2:22:be:13:1c:fd:f4:6a:f7:76:1b:
46:9c:74:07:a5:fd:bb:f1:9c:0b:c1:3e:cd:5a:ad:
05:02:c8:97:55:60:15:1c:e5:07:c3:7c:4d:7a:a6:
91:5d:96:63:58:1b:7e:4f:07:89:11:54:86:a6:59:
72:0e:e3:1e:7a:6a:f1:35:1b:c0:55:06:ea:e7:d4:
a6:59:8b:85:8d:61:02:aa:90:9f:17:e0:3a:81:ea:
e6:94:42:45:9e:a8:30:3d:78:2e:04:ec:46:88:e0:
ce:c5:24:8c:d4:3d:10:98:1c:b8:84:1a:e9:c8:25:
75:24:13:48:d5:6e:ee:3c:3b:09:2e:c9:82:b0:88:
06:a2:fe:31:23:60:6e:08:2e:3d:b1:08:e9:83:48:
0d:0c:b5:fa:1f:6c:34:b2:dd:1b:82:99:f2:37:14:
90:13:dc:b6:b4:0a:0c:44:9d:00:b6:a5:7b:e5:00:
fd:3c:73:91:c9:96:6b:5e:e8:17:e3:98:72:9b:58:
d5:c5:d4:42:3b:28:89:e4:7a:1b:ae:3a:0d:14:b9:
56:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BE:B2:2D:63:3D:6D:04:F8:4D:F9:29:74:A2:7F:31:94:65:37:13
X509v3 Authority Key Identifier:
keyid:89:D6:A4:9D:23:00:7F:BB:12:47:19:2F:BB:7B:D9:82:EB:37:33:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ff:d2:3a:5f:b4:66:f3:22:08:82:be:5d:78:f0:f8:3b:8a:
62:2c:b0:e9:ba:ee:3b:07:00:d6:8f:78:37:07:32:2c:be:89:
9d:f1:92:b5:20:96:f5:f2:21:c7:b6:9a:10:e9:6e:47:cc:fb:
66:51:94:5f:d5:bc:20:de:fa:73:fa:31:ad:70:b7:a9:ea:31:
7a:c4:fe:54:6f:9d:1d:55:ec:f2:a4:99:fb:71:d2:61:c1:ca:
3d:fb:32:45:8a:af:e3:6e:ad:b5:60:c7:41:2f:1b:01:2b:9d:
11:20:ef:15:a6:8d:bd:97:9d:41:6b:5a:2b:9a:cb:33:48:37:
d6:8c:24:e4:cb:42:e4:81:5b:97:cd:1c:14:b0:ed:84:55:28:
65:d9:44:56:ba:d2:46:e3:45:bc:93:28:d8:56:b5:eb:bd:f7:
c0:7d:dd:28:e3:7d:89:9b:47:d0:8d:12:8e:03:4f:4f:8c:bf:
1f:c4:a7:c7:65:b5:23:de:6f:d1:a3:56:b1:f5:e5:b3:0e:4c:
de:23:6e:46:3d:f9:2f:9a:30:8e:91:92:f2:5a:69:3e:2f:97:
cc:93:33:9e:b0:3e:3b:92:de:b9:3b:19:f7:e9:b4:63:51:06:
53:32:1a:1b:79:85:87:5d:51:3f:37:76:55:d1:8d:23:cb:2e:
05:ae:6f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:23:05 2026 by rpki-client