Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json)
Hash identifier: PUnhQNqzfPB05vKznOZ8O33jP61u6Z81XGl6iVkh/l0=
Subject key identifier: D8:0E:B7:F3:37:88:4F:17:6E:0E:BA:68:B8:63:85:D9:75:D0:8A:80
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 019F374E6B1ED6F53F1FF33336400CED9A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
Manifest number: 12BF
Signing time: Mon 06 Jul 2026 12:01:53 +0000
Manifest this update: Mon 06 Jul 2026 12:01:53 +0000
Manifest next update: Tue 07 Jul 2026 12:01:53 +0000
Files and hashes: 1: AH8BkwVFANpM3D-2UXxmQPvm-gI.roa (hash: 6QRSR3qapkQkS77YuUKuuRiuJc7R5yNd3794dtUPMJs=)
2: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: xMrUyiUIKM3uMA5U1nM0BcM1WKgW2ilq/Pxt8WSKgxU=)
3: P3is6hWIutnv3WVE2XVBQR28koo.roa (hash: zNTZY/b8g0CyM9V/gtiEl5HaCGnXYunucSw3v6eVe8o=)
4: p7rkdahFQXPqaYGeqvTzgl8b8gg.roa (hash: D1K5j64bqVkMi5je9WvKCxtYUE9schoY5RKt4Mby4MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 12:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:4e:6b:1e:d6:f5:3f:1f:f3:33:36:40:0c:ed:9a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: Jul 6 12:01:53 2026 GMT
Not After : Jul 7 12:01:53 2026 GMT
Subject: CN=d80eb7f337884f176e0eba68b86385d975d08a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b8:17:5d:6c:60:49:5b:21:75:38:aa:41:2e:
57:6f:b8:d7:6e:48:ba:e5:3e:b1:f5:35:27:77:7d:
4a:09:6b:85:41:56:2f:38:b8:27:db:52:6e:0f:21:
19:02:5e:2d:c3:f7:9b:89:b7:7a:51:77:d6:a9:ff:
e7:1a:01:54:45:ee:94:62:dd:92:8e:ac:76:92:69:
a1:18:2f:4a:f7:ed:12:83:14:98:be:17:cb:95:d3:
92:89:ef:f2:a2:c5:d6:b0:c9:2d:4e:06:ef:de:99:
40:a5:8d:b6:63:7d:3f:eb:cc:d5:bb:94:70:6a:39:
2c:eb:13:12:c9:0d:42:5e:18:60:16:2b:5d:78:0a:
f1:a7:99:82:41:36:e7:3b:fa:a5:3b:ce:cc:f2:1c:
34:55:13:03:f8:4d:8f:f5:95:15:ad:bd:00:89:1a:
cb:99:58:a4:cc:49:63:a4:b4:23:b5:b9:81:b7:ba:
ab:ef:6c:98:f7:a4:01:8f:12:04:9b:ca:c6:85:a4:
3c:57:46:8c:4c:21:ff:81:46:51:47:1a:f8:a7:b8:
cc:6d:f4:ab:89:33:f3:bf:b4:0f:f5:2e:3a:d2:8f:
2e:85:e7:15:87:d5:71:34:c7:e2:9a:5e:42:d4:f3:
c8:d7:8d:0f:66:cc:f3:06:b5:09:d4:ee:ce:5b:11:
f6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0E:B7:F3:37:88:4F:17:6E:0E:BA:68:B8:63:85:D9:75:D0:8A:80
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:27:38:64:f5:1c:fa:4d:1d:23:79:24:ae:3f:eb:00:86:4e:
f3:35:6d:3d:43:21:46:2e:8f:ae:f1:64:1e:a7:19:a4:a8:2e:
ae:ab:e2:3b:ca:d7:c7:da:95:6d:d8:37:08:4f:59:b6:9e:1a:
69:5b:35:97:f8:03:e3:69:70:8e:24:fd:a7:73:44:c6:7f:1d:
b0:50:55:4a:3d:0f:d9:7b:c9:eb:85:5e:af:c2:20:ab:1c:9f:
cc:61:d0:e8:fa:f6:b3:4f:60:83:31:85:25:c8:0f:c6:e1:e4:
73:80:96:3a:06:71:e9:1e:68:f2:49:c5:50:96:0f:0d:65:ed:
ea:9f:4e:d0:d2:fc:06:4e:64:0b:99:a6:5d:70:39:88:47:e7:
e7:d4:dd:dc:c7:f1:0a:85:a9:96:02:6c:ea:89:f3:a2:fc:4e:
42:9f:0d:d2:94:18:36:ac:e8:e6:f1:22:dd:fa:c4:63:48:a7:
d4:87:d8:e9:8e:16:8e:10:0d:dd:de:6a:b6:7a:1a:b8:f8:e9:
7f:23:55:9d:c8:8e:68:ca:df:5a:22:89:94:21:63:5d:08:b2:
6d:63:fa:17:f6:e8:f9:bc:bf:25:ac:00:f3:80:7e:af:d5:61:
a0:1c:9b:23:04:15:6a:e4:cc:85:5a:a4:7e:01:97:bb:b1:01:
2d:72:63:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ83Tmse1vU/H/MzNkAM7Zo8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYzBiOWIzM2RjZTVlYmEwYWVhNjQ4OTE1OGQzZmIyNzAy
MmFjZTcwHhcNMjYwNzA2MTIwMTUzWhcNMjYwNzA3MTIwMTUzWjAzMTEwLwYDVQQD
EyhkODBlYjdmMzM3ODg0ZjE3NmUwZWJhNjhiODYzODVkOTc1ZDA4YTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbgXXWxgSVshdTiqQS5Xb7jXbki6
5T6x9TUnd31KCWuFQVYvOLgn21JuDyEZAl4tw/ebibd6UXfWqf/nGgFURe6UYt2S
jqx2kmmhGC9K9+0SgxSYvhfLldOSie/yosXWsMktTgbv3plApY22Y30/68zVu5Rw
ajks6xMSyQ1CXhhgFitdeArxp5mCQTbnO/qlO87M8hw0VRMD+E2P9ZUVrb0AiRrL
mVikzEljpLQjtbmBt7qr72yY96QBjxIEm8rGhaQ8V0aMTCH/gUZRRxr4p7jMbfSr
iTPzv7QP9S460o8uhecVh9VxNMfiml5C1PPI140PZszzBrUJ1O7OWxH2xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgOt/M3iE8Xbg66aLhjhdl10IqAMB8GA1UdIwQY
MBaAFCDAubM9zl66CupkiRWNP7JwIqznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEt
OGQzZGNjMzNhZDBhLzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEtOGQzZGNjMzNhZDBh
LzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSc4ZPUc
+k0dI3kkrj/rAIZO8zVtPUMhRi6PrvFkHqcZpKgurqviO8rXx9qVbdg3CE9Ztp4a
aVs1l/gD42lwjiT9p3NExn8dsFBVSj0P2XvJ64Ver8IgqxyfzGHQ6Pr2s09ggzGF
JcgPxuHkc4CWOgZx6R5o8knFUJYPDWXt6p9O0NL8Bk5kC5mmXXA5iEfn59Td3Mfx
CoWplgJs6onzovxOQp8N0pQYNqzo5vEi3frEY0in1IfY6Y4WjhAN3d5qtnoauPjp
fyNVnciOaMrfWiKJlCFjXQiybWP6F/bo+by/JawA84B+r9VhoBybIwQVauTMhVqk
fgGXu7EBLXJjuA==
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:06:42 2026 by rpki-client