Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json)
Hash identifier: I3+DhqAi4CXAGVVbpPiduCZqCtjDyd4Nxso81saPcl0=
Subject key identifier: 85:B1:AD:AD:0F:13:E6:3B:D5:8C:4E:E0:C7:ED:EB:95:90:FE:8A:44
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 019D65E2622E67A6CC152B4CB803A6A82A42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
Manifest number: 11CE
Signing time: Tue 07 Apr 2026 03:00:28 +0000
Manifest this update: Tue 07 Apr 2026 03:00:28 +0000
Manifest next update: Wed 08 Apr 2026 03:00:28 +0000
Files and hashes: 1: AH8BkwVFANpM3D-2UXxmQPvm-gI.roa (hash: 6QRSR3qapkQkS77YuUKuuRiuJc7R5yNd3794dtUPMJs=)
2: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: v7gLwbZgdQaLAqeiW3laPg1amBMaVwt/gUA8OIzv0ps=)
3: P3is6hWIutnv3WVE2XVBQR28koo.roa (hash: zNTZY/b8g0CyM9V/gtiEl5HaCGnXYunucSw3v6eVe8o=)
4: p7rkdahFQXPqaYGeqvTzgl8b8gg.roa (hash: D1K5j64bqVkMi5je9WvKCxtYUE9schoY5RKt4Mby4MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:65:e2:62:2e:67:a6:cc:15:2b:4c:b8:03:a6:a8:2a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: Apr 7 03:00:28 2026 GMT
Not After : Apr 8 03:00:28 2026 GMT
Subject: CN=85b1adad0f13e63bd58c4ee0c7edeb9590fe8a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ef:ac:46:9c:00:47:b3:54:49:f2:46:de:53:
bc:d5:43:aa:4e:cf:02:11:3c:47:57:13:3a:e4:b9:
bd:be:d5:39:05:7a:46:87:74:32:f8:1d:7f:28:94:
15:2c:2a:a4:e5:25:3e:68:0f:91:43:26:c2:68:e0:
6f:c1:2c:a0:09:c9:46:1d:c4:8c:ca:56:a2:ed:14:
5e:d8:59:26:31:cd:38:3e:1d:a5:ed:a9:c9:34:fb:
db:7d:6d:bc:f0:44:73:53:dd:09:20:ed:f2:8e:a7:
87:e4:51:4d:6f:1a:e4:18:54:b4:d7:81:09:b3:30:
41:e2:a7:39:19:8a:35:ab:09:8d:50:c2:06:2b:fb:
7c:4c:e2:c4:4f:1b:29:55:0a:45:93:a6:3f:fa:9e:
eb:29:a7:5f:52:60:55:06:9a:3a:84:94:84:3c:85:
16:90:57:8b:4e:1a:b7:07:0b:7c:7f:e3:ec:48:38:
68:c2:dc:12:23:9a:f3:58:89:76:89:91:d9:52:03:
07:15:bd:a4:35:62:4c:6d:4b:b7:0b:e9:41:60:19:
b2:3c:b9:bb:55:29:2b:d4:ee:35:8b:a1:69:c3:ad:
2d:e6:f9:a0:81:c3:5d:aa:8d:4e:05:0c:ce:33:00:
e0:0b:21:24:26:02:80:a6:2a:a0:9f:6d:56:d0:d4:
94:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B1:AD:AD:0F:13:E6:3B:D5:8C:4E:E0:C7:ED:EB:95:90:FE:8A:44
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:eb:30:b5:58:08:b6:64:5d:84:65:47:b4:a3:9e:65:71:79:
fc:6e:51:83:07:83:40:b9:f5:0b:c3:7a:7e:56:6a:8e:26:24:
dc:11:1b:f3:7b:79:26:79:7b:53:78:f7:f5:c1:58:e2:62:e3:
69:7c:27:d3:b9:98:1b:11:57:73:6b:81:ca:75:19:40:c4:c1:
43:64:f1:2d:b3:1f:6c:ba:b6:71:93:9b:c2:d9:f3:73:31:ae:
79:a2:4c:f6:72:02:4f:ae:3a:a9:4c:7d:30:81:90:1e:69:fa:
4c:52:d2:36:9e:30:37:33:30:7a:6b:30:81:99:97:8c:72:f6:
cb:36:c5:bb:8d:84:0a:c5:12:14:e0:b5:ce:94:34:96:dc:29:
8d:eb:03:a8:ec:f5:a7:a8:1f:ad:16:de:ce:73:60:37:54:96:
66:9e:c0:76:3d:fe:0c:b4:88:af:92:cc:9b:2d:b4:57:31:ae:
a2:36:91:d1:ed:7f:ee:e8:ab:fa:78:05:92:82:0d:ba:76:87:
dc:18:45:b1:ea:96:0b:c8:2a:da:8a:49:98:62:a7:07:a7:5e:
f3:a6:6b:27:05:7e:ac:b0:ff:5e:99:7c:82:17:54:63:b4:f9:
59:a0:46:06:0d:d2:4b:12:70:c0:bd:75:a1:55:bb:55:fe:cf:
25:81:bb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 12:04:35 2026 by rpki-client