Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
File: idaknSMAf7sSRxkvu3vZgus3M18.mft (raw, json)
Hash identifier: tqhFognnkvixX7Zj9HEP9J1qI/QtZaIhRGK5RNGCk+4=
Subject key identifier: 1D:D7:0C:81:9D:08:E8:B1:07:9A:4F:71:8E:FE:7A:CB:09:88:06:A3
Authority key identifier: 89:D6:A4:9D:23:00:7F:BB:12:47:19:2F:BB:7B:D9:82:EB:37:33:5F
Certificate issuer: /CN=89d6a49d23007fbb1247192fbb7bd982eb37335f
Certificate serial: 019D27DF611E230C9E4B3FBB7FACE8D3E64B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
Manifest number: 038C
Signing time: Thu 26 Mar 2026 02:00:43 +0000
Manifest this update: Thu 26 Mar 2026 02:00:43 +0000
Manifest next update: Fri 27 Mar 2026 02:00:43 +0000
Files and hashes: 1: Af_5rqEWBhs_t_5t3ubsN4ME7qQ.roa (hash: US3yyitysBySkBj1duM7uaT/kHoh5Ro/nrveWTewP9E=)
2: idaknSMAf7sSRxkvu3vZgus3M18.crl (hash: A5zsJXU6gYd5+6Fjuo0wJnlDMh36kw/u447/HMrTIwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:61:1e:23:0c:9e:4b:3f:bb:7f:ac:e8:d3:e6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d6a49d23007fbb1247192fbb7bd982eb37335f
Validity
Not Before: Mar 26 02:00:43 2026 GMT
Not After : Mar 27 02:00:43 2026 GMT
Subject: CN=1dd70c819d08e8b1079a4f718efe7acb098806a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7b:6c:7a:8a:61:24:9e:e6:3b:24:04:70:35:
08:0d:5f:a1:22:0d:d3:0e:f9:19:a9:45:fd:ac:3d:
f0:4c:dd:bb:81:e7:8d:9f:b9:8e:8e:89:4b:17:1d:
21:2d:bc:1d:71:b4:1f:54:48:09:79:ac:89:52:37:
90:75:9c:c9:b9:67:74:c6:9d:d1:33:7d:0f:dc:7e:
67:8e:4e:f7:65:00:85:52:55:70:b4:7e:8f:63:27:
10:20:7a:b9:c4:8b:98:3d:ab:fb:0b:81:4f:fd:23:
08:c7:2c:59:99:e1:99:ed:f7:ef:02:22:d9:34:25:
95:43:b2:a2:11:e0:5b:e2:11:b1:23:5f:c1:f8:24:
81:2f:e6:6a:79:a0:fa:ea:f0:e1:4c:71:b3:c8:31:
c5:f8:bf:b2:b2:07:1c:03:0f:57:59:ab:d8:ef:98:
06:d4:73:76:bc:f0:00:3f:d9:46:44:b5:b3:b8:89:
12:c9:99:6e:c9:95:d7:dc:55:13:f9:dd:2e:83:b8:
9f:88:0b:4d:c0:6b:c6:cc:f2:75:47:3b:4e:39:f5:
6f:12:16:24:10:45:8a:0f:ce:be:14:38:d6:83:42:
fc:89:ad:ca:62:36:2d:28:55:e3:01:a8:a6:ad:2f:
4d:82:ba:1c:81:34:67:8d:e4:1e:cc:64:ce:de:1e:
2b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D7:0C:81:9D:08:E8:B1:07:9A:4F:71:8E:FE:7A:CB:09:88:06:A3
X509v3 Authority Key Identifier:
keyid:89:D6:A4:9D:23:00:7F:BB:12:47:19:2F:BB:7B:D9:82:EB:37:33:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d4:69:21:12:5d:e6:0e:4e:79:99:e4:f6:e8:e2:e9:d0:61:
e6:12:66:6b:72:2b:cb:5f:95:15:fe:03:ce:8c:3b:1c:50:ed:
65:c7:b4:a5:15:8c:65:05:04:3f:89:3d:0e:0c:83:a6:b0:87:
bb:78:b5:b7:08:da:4f:52:c9:2d:6c:67:f7:a1:fd:6a:be:74:
39:1a:e2:e1:ef:5e:fa:32:0d:b5:15:f6:7a:62:35:cb:df:e9:
76:64:d4:be:9e:26:8d:73:aa:6d:9b:0c:5d:df:78:79:55:56:
65:3e:6c:37:99:7c:b5:9f:db:f3:ea:99:71:4d:8b:9f:85:5c:
27:a5:c6:02:c8:15:5a:5a:88:e7:10:61:59:51:a5:96:11:90:
06:e0:aa:e2:aa:5c:19:96:b7:e6:87:7a:5e:c7:0b:6a:ad:37:
1b:71:58:61:06:3e:1b:74:76:0e:57:5c:42:f3:e0:c5:0e:7b:
62:07:70:90:36:47:63:1d:c5:97:b6:75:e3:42:22:ca:65:79:
c8:24:d2:1f:d6:4d:dc:83:e9:ce:29:53:1d:61:2e:cd:8c:2f:
67:d9:a7:e3:70:37:18:1e:4e:44:be:1b:05:77:be:87:a9:08:
7d:d1:79:c4:26:56:b6:31:8d:fd:26:84:1b:0d:59:c4:13:24:
26:e3:ce:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:09:30 2026 by rpki-client