Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json)
Hash identifier: B5SxO6d/Tz2LynFb3cfyEwhmi+ZVdGU7vhcy6HEocrg=
Subject key identifier: 0F:F5:46:76:86:A6:C4:2C:E3:3A:49:59:01:FA:10:5E:E3:02:AC:14
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 01A1390025C811AC39EDD08E35B8710ED3F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
Manifest number: 13C9
Signing time: Wed 14 Oct 2026 06:01:13 +0000
Manifest this update: Wed 14 Oct 2026 06:01:13 +0000
Manifest next update: Thu 15 Oct 2026 06:01:13 +0000
Files and hashes: 1: AH8BkwVFANpM3D-2UXxmQPvm-gI.roa (hash: 6QRSR3qapkQkS77YuUKuuRiuJc7R5yNd3794dtUPMJs=)
2: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: oqJgM0JLvXkqgKO+GoYwTvRwwZ1aoS6V6TWDCMho7L4=)
3: P3is6hWIutnv3WVE2XVBQR28koo.roa (hash: zNTZY/b8g0CyM9V/gtiEl5HaCGnXYunucSw3v6eVe8o=)
4: p7rkdahFQXPqaYGeqvTzgl8b8gg.roa (hash: D1K5j64bqVkMi5je9WvKCxtYUE9schoY5RKt4Mby4MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:00:25:c8:11:ac:39:ed:d0:8e:35:b8:71:0e:d3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: Oct 14 06:01:13 2026 GMT
Not After : Oct 15 06:01:13 2026 GMT
Subject: CN=0ff5467686a6c42ce33a495901fa105ee302ac14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bb:a5:2f:d1:70:56:ae:91:3c:ae:96:c1:4f:
21:db:8c:77:e1:33:b9:bc:d8:b5:29:c4:c4:73:da:
01:01:dc:ec:4a:d1:b8:c1:00:be:cd:cc:c0:ce:4a:
66:3f:aa:77:ef:24:74:49:a2:a6:54:97:e8:78:33:
e6:fb:c2:68:93:9e:85:43:f7:31:39:69:26:e7:06:
f8:d0:3e:20:c0:fa:f8:d5:5c:13:8e:12:c2:e7:b4:
fd:e9:33:04:88:da:fa:14:d3:51:bc:49:fb:2a:c7:
4e:f0:86:c8:a1:08:81:88:b8:2d:f8:11:e9:a4:6e:
ba:ce:82:6d:8d:02:3c:c4:40:b5:a6:b5:0a:ad:41:
72:b0:eb:fe:ab:2a:3f:2a:9a:72:62:08:b0:d1:9f:
25:d7:fd:f8:6c:d8:bd:98:0c:81:01:12:1e:7c:2e:
1a:d7:12:23:67:1d:67:97:cc:a0:c6:12:20:ed:6a:
54:6b:94:06:d4:6c:a9:6b:37:c2:98:05:64:f2:99:
f3:b2:9b:26:e9:0c:9f:05:be:12:ef:ad:e6:19:62:
fb:46:c1:ea:04:1f:4f:f4:4a:11:ac:4e:3a:65:64:
94:aa:f3:3f:72:dc:23:c4:a9:1c:1e:d8:b5:b4:4a:
79:58:26:35:81:96:89:a9:4b:26:d8:a7:a2:0d:3f:
86:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F5:46:76:86:A6:C4:2C:E3:3A:49:59:01:FA:10:5E:E3:02:AC:14
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:29:3b:cd:0f:ef:85:7a:40:b8:bc:01:f5:e0:eb:26:5d:04:
08:af:af:78:d6:be:61:86:9e:b3:fe:d7:75:0a:b5:d0:78:15:
56:e0:7a:16:a7:96:0b:a2:a6:4f:7b:2d:f2:9a:67:da:c0:c0:
b8:05:85:b6:98:ef:cd:ad:14:fa:27:0a:96:30:e4:ca:6f:24:
cb:0f:9f:2b:1d:03:56:86:f2:2c:34:9c:1b:23:c1:bd:34:db:
76:76:83:af:22:cb:86:80:51:d1:bd:af:99:e1:14:39:ec:fc:
8c:03:70:6d:fb:f3:0b:85:22:a1:c2:79:46:c2:e6:82:0c:df:
d0:93:4e:f3:17:a7:de:96:a8:07:11:71:bc:f5:fb:c0:1e:b2:
52:b5:3a:c7:e8:b0:f2:b1:27:33:6d:b8:c1:46:92:da:6b:3f:
f4:75:06:3b:ca:57:26:ea:c6:dd:70:ec:c6:7f:3b:af:bd:d3:
2e:4b:98:37:ac:b7:77:fa:74:de:4a:95:e0:db:3f:ed:ca:48:
3e:09:b2:3c:3b:0c:16:22:4e:5e:a8:ee:59:10:f9:c8:a4:88:
70:d0:ea:75:3c:f9:e4:ec:8e:0e:c9:d8:61:f6:dd:4f:91:56:
ef:24:2b:6a:47:ff:2c:6d:1a:79:7a:d1:f5:de:bd:99:c4:15:
67:fe:b8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:03:32 2026 by rpki-client