Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json)
Hash identifier: wbjqGrTwk1sYQzdGo5PRsEOBNESBQ4VW4QaRYBOrzbc=
Subject key identifier: 48:A9:45:74:08:65:42:83:5C:1B:2F:5C:12:1F:D0:D9:E9:3E:26:27
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 019C7E24CF94AEBA910C0F25C4D9342EBCCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
Manifest number: 1156
Signing time: Sat 21 Feb 2026 03:01:07 +0000
Manifest this update: Sat 21 Feb 2026 03:01:07 +0000
Manifest next update: Sun 22 Feb 2026 03:01:07 +0000
Files and hashes: 1: AH8BkwVFANpM3D-2UXxmQPvm-gI.roa (hash: 6QRSR3qapkQkS77YuUKuuRiuJc7R5yNd3794dtUPMJs=)
2: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: flX8ZLSOC3vREl1JXHAiuzitFsh7APx52l5gYqxCYeY=)
3: P3is6hWIutnv3WVE2XVBQR28koo.roa (hash: zNTZY/b8g0CyM9V/gtiEl5HaCGnXYunucSw3v6eVe8o=)
4: p7rkdahFQXPqaYGeqvTzgl8b8gg.roa (hash: D1K5j64bqVkMi5je9WvKCxtYUE9schoY5RKt4Mby4MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7e:24:cf:94:ae:ba:91:0c:0f:25:c4:d9:34:2e:bc:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: Feb 21 03:01:07 2026 GMT
Not After : Feb 22 03:01:07 2026 GMT
Subject: CN=48a94574086542835c1b2f5c121fd0d9e93e2627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:1f:9c:41:62:8a:4f:44:2b:9b:55:d6:f6:
b2:3a:20:0f:d5:66:de:7b:57:68:15:89:97:61:1d:
5a:88:4d:04:f2:61:98:14:0a:b4:fa:81:af:b1:ba:
42:64:e2:96:2b:54:50:30:6d:8e:f2:e8:3b:a5:ed:
0e:d1:23:39:05:3f:ff:ea:6c:20:44:6d:8a:33:24:
33:c4:e3:d7:34:bc:7a:60:67:27:19:eb:05:a0:64:
b2:8f:14:f3:ec:d8:48:d4:9c:b4:4a:12:08:21:1c:
fa:9e:70:5a:3e:fb:c3:15:97:03:c6:07:d2:d5:7a:
dc:3f:b8:ee:4c:b1:2e:d2:1f:25:08:5e:56:34:7f:
be:75:bb:c1:4c:9e:00:1c:ec:84:53:bc:41:2f:f1:
6b:78:5a:6a:9c:0c:6b:2e:fb:6f:72:8b:3f:30:2c:
68:18:d3:b1:33:81:78:67:39:a1:e2:e7:e3:87:d1:
ce:18:77:c6:b8:7b:31:85:ba:a5:da:85:4c:2d:a5:
c0:4c:6b:4a:84:67:ed:1b:0c:87:de:35:b3:a4:57:
c3:87:0a:37:3e:85:08:e6:7d:5d:83:5d:3b:20:f2:
34:6e:4b:57:ef:c8:5e:66:42:91:e1:ce:f3:84:14:
9c:b5:a4:75:4b:1e:97:a3:0d:f1:b2:23:4c:51:b9:
af:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A9:45:74:08:65:42:83:5C:1B:2F:5C:12:1F:D0:D9:E9:3E:26:27
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:85:69:6a:be:b5:bf:32:0c:6f:40:ca:f2:75:8c:8a:b0:33:
eb:cb:39:15:df:17:37:c1:64:3a:5a:25:1c:17:f4:57:ce:f3:
97:fb:ae:20:7d:58:db:84:a4:5b:cf:bb:fe:db:37:85:e1:31:
c5:47:58:e8:a4:b2:d9:8d:42:cd:d6:8a:96:c5:5e:93:e7:9f:
0f:95:62:93:88:19:ae:03:63:39:ed:9b:5d:fd:ca:b0:6a:80:
48:e4:22:ff:df:18:72:8c:87:b1:94:b7:e8:6a:42:5e:cd:ae:
39:05:e1:38:98:16:69:6f:49:d8:56:3f:be:82:ec:b2:97:14:
0c:c4:ba:d9:60:f5:f2:1d:71:9b:49:a3:0e:65:dc:c4:6c:54:
02:d4:64:be:0c:73:54:7a:79:4a:d8:d9:63:af:2b:c8:24:19:
b0:d9:e8:28:ce:89:82:a3:2b:d2:cf:80:ee:f7:2d:60:11:f8:
dc:45:9b:66:17:74:97:42:6b:e4:46:9a:11:36:05:0f:89:e9:
1a:4d:33:20:0c:25:5e:a3:67:57:7b:2c:f1:92:6a:c0:86:ad:
10:6f:12:d9:fd:ab:b0:fd:3a:75:aa:25:0a:70:ac:e2:e5:ea:
3f:3c:20:70:1e:a6:f3:e5:4f:60:b6:d3:93:6e:92:28:d3:b4:
b5:5e:50:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZx+JM+UrrqRDA8lxNk0LrzOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYzBiOWIzM2RjZTVlYmEwYWVhNjQ4OTE1OGQzZmIyNzAy
MmFjZTcwHhcNMjYwMjIxMDMwMTA3WhcNMjYwMjIyMDMwMTA3WjAzMTEwLwYDVQQD
Eyg0OGE5NDU3NDA4NjU0MjgzNWMxYjJmNWMxMjFmZDBkOWU5M2UyNjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBofnEFiik9EK5tV1vayOiAP1Wbe
e1doFYmXYR1aiE0E8mGYFAq0+oGvsbpCZOKWK1RQMG2O8ug7pe0O0SM5BT//6mwg
RG2KMyQzxOPXNLx6YGcnGesFoGSyjxTz7NhI1Jy0ShIIIRz6nnBaPvvDFZcDxgfS
1XrcP7juTLEu0h8lCF5WNH++dbvBTJ4AHOyEU7xBL/FreFpqnAxrLvtvcos/MCxo
GNOxM4F4Zzmh4ufjh9HOGHfGuHsxhbql2oVMLaXATGtKhGftGwyH3jWzpFfDhwo3
PoUI5n1dg107IPI0bktX78heZkKR4c7zhBSctaR1Sx6Xow3xsiNMUbmv9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEipRXQIZUKDXBsvXBIf0NnpPiYnMB8GA1UdIwQY
MBaAFCDAubM9zl66CupkiRWNP7JwIqznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEt
OGQzZGNjMzNhZDBhLzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEtOGQzZGNjMzNhZDBh
LzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4Vpar61
vzIMb0DK8nWMirAz68s5Fd8XN8FkOlolHBf0V87zl/uuIH1Y24SkW8+7/ts3heEx
xUdY6KSy2Y1CzdaKlsVek+efD5Vik4gZrgNjOe2bXf3KsGqASOQi/98YcoyHsZS3
6GpCXs2uOQXhOJgWaW9J2FY/voLsspcUDMS62WD18h1xm0mjDmXcxGxUAtRkvgxz
VHp5StjZY68ryCQZsNnoKM6JgqMr0s+A7vctYBH43EWbZhd0l0Jr5EaaETYFD4np
Gk0zIAwlXqNnV3ss8ZJqwIatEG8S2f2rsP06daolCnCs4uXqPzwgcB6m8+VPYLbT
k26SKNO0tV5QyQ==
-----END CERTIFICATE-----
Generated at Sat Feb 21 06:09:05 2026 by rpki-client