Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json)
Hash identifier: dKUTHkg5i72hD1zAxPhJW8lsx+Zx5LSY45WlQs7DtYM=
Subject key identifier: AB:68:E7:05:33:C1:03:DF:03:D1:84:A4:1E:6A:82:6D:CE:CB:04:43
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 019E4F8F3430F92FF9B602702D6570B78774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
Manifest number: 1247
Signing time: Fri 22 May 2026 12:00:45 +0000
Manifest this update: Fri 22 May 2026 12:00:45 +0000
Manifest next update: Sat 23 May 2026 12:00:45 +0000
Files and hashes: 1: AH8BkwVFANpM3D-2UXxmQPvm-gI.roa (hash: 6QRSR3qapkQkS77YuUKuuRiuJc7R5yNd3794dtUPMJs=)
2: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: ILXpzS34yRqiEeJrOBemEsbe1LPDTBKeq3HOKGL2eE8=)
3: P3is6hWIutnv3WVE2XVBQR28koo.roa (hash: zNTZY/b8g0CyM9V/gtiEl5HaCGnXYunucSw3v6eVe8o=)
4: p7rkdahFQXPqaYGeqvTzgl8b8gg.roa (hash: D1K5j64bqVkMi5je9WvKCxtYUE9schoY5RKt4Mby4MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:8f:34:30:f9:2f:f9:b6:02:70:2d:65:70:b7:87:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: May 22 12:00:45 2026 GMT
Not After : May 23 12:00:45 2026 GMT
Subject: CN=ab68e70533c103df03d184a41e6a826dcecb0443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:39:c9:6c:66:e0:1a:0b:9e:d3:5f:d8:47:
16:fb:bc:c5:46:c3:48:d9:38:9c:5d:de:1b:58:23:
5e:cd:07:ba:f5:5b:91:6b:6e:71:b9:3a:80:0f:d9:
a0:52:40:1b:9d:12:20:77:89:94:7a:50:fb:72:56:
e8:00:e1:50:02:f0:80:a5:07:52:d6:45:f1:47:7a:
ee:75:e7:8a:38:6b:ee:0a:09:d8:1a:2e:68:88:f8:
ef:1a:c2:54:b5:5f:b5:c5:44:f1:7a:41:14:77:c8:
cf:53:e8:a8:66:c4:06:f5:48:6f:43:48:13:87:a3:
1d:ca:3b:e2:06:87:1e:68:eb:17:62:69:33:44:bd:
1d:e7:c0:4e:0d:09:1a:e1:d9:d8:9f:1c:af:5a:47:
f0:fd:28:05:9b:d9:82:32:2c:d1:16:b7:ac:d0:fa:
89:33:7e:e6:f9:3d:37:d1:39:6d:c9:ae:bd:1e:9f:
fd:53:40:1d:48:49:86:cb:8f:db:a4:a7:b2:4c:80:
62:c2:37:b9:ef:a4:54:f4:9b:af:e7:51:1d:0b:89:
07:4e:4c:f8:c1:c0:15:84:c6:61:69:96:1a:39:58:
28:a6:97:91:09:71:b0:9c:50:10:d0:5b:4c:ea:e0:
a2:bb:8a:2c:35:18:d6:4d:52:da:cf:5f:f4:ef:81:
a7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:68:E7:05:33:C1:03:DF:03:D1:84:A4:1E:6A:82:6D:CE:CB:04:43
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:eb:ae:bf:6a:c5:88:81:ba:bf:ed:b3:f8:fc:81:98:86:a3:
f8:a6:45:25:63:93:e9:33:42:7a:b5:df:9a:7c:ad:bf:25:f2:
9f:ad:40:c5:ed:6b:b8:83:0c:11:f0:b2:5e:38:63:1e:1b:ad:
1e:46:57:1d:72:8f:ae:07:d8:b9:a0:68:83:84:cf:45:4a:76:
d4:bb:be:a1:b2:70:0e:f1:3e:2e:69:24:63:01:90:69:dd:03:
e9:51:66:db:a8:97:86:6e:0b:c3:e2:df:b6:ef:62:3a:17:fb:
fc:8c:cb:6a:a6:25:74:d0:7d:70:39:df:17:ce:93:56:90:4e:
cf:5f:fb:bf:45:d4:ba:30:f7:54:1d:b5:18:5c:04:c3:c8:9d:
cd:a9:c8:b1:13:33:a7:73:a2:42:3d:8f:3e:e9:5a:0f:11:57:
ab:25:7f:45:05:ab:5f:71:53:fb:67:79:2b:e6:50:be:3b:75:
e5:cc:d0:91:60:68:55:7d:14:06:19:c6:d0:fe:d9:93:f9:e1:
75:01:88:a2:da:df:ed:5c:10:8f:20:f1:9f:96:3d:f1:7c:6b:
c0:ee:9b:9f:a1:4f:51:cb:e1:e1:f4:31:5a:4a:52:2d:67:cf:
d3:03:28:74:52:e1:16:61:9c:e2:aa:c8:64:ff:2d:86:46:22:
2d:f3:d9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:09:51 2026 by rpki-client