Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json)
Hash identifier: kJkEA5QnzzrLU0jq9bta98lTNkggyyET//5rhbKTzy0=
Subject key identifier: AF:34:6B:C0:FC:74:8D:D4:15:54:66:55:07:5D:3F:A6:82:76:2A:65
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 019D981859780130C971A0A75196F18218D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
Manifest number: 11E8
Signing time: Thu 16 Apr 2026 21:00:25 +0000
Manifest this update: Thu 16 Apr 2026 21:00:25 +0000
Manifest next update: Fri 17 Apr 2026 21:00:25 +0000
Files and hashes: 1: AH8BkwVFANpM3D-2UXxmQPvm-gI.roa (hash: 6QRSR3qapkQkS77YuUKuuRiuJc7R5yNd3794dtUPMJs=)
2: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: jERfXOJquto+oQBJDwgLB68qhvtnS7i76IaaA+AGvnM=)
3: P3is6hWIutnv3WVE2XVBQR28koo.roa (hash: zNTZY/b8g0CyM9V/gtiEl5HaCGnXYunucSw3v6eVe8o=)
4: p7rkdahFQXPqaYGeqvTzgl8b8gg.roa (hash: D1K5j64bqVkMi5je9WvKCxtYUE9schoY5RKt4Mby4MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:59:78:01:30:c9:71:a0:a7:51:96:f1:82:18:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: Apr 16 21:00:25 2026 GMT
Not After : Apr 17 21:00:25 2026 GMT
Subject: CN=af346bc0fc748dd415546655075d3fa682762a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:67:d4:1e:37:91:eb:78:61:6a:a4:a3:0e:dd:
49:54:23:55:10:07:a3:04:fa:e7:a9:d0:25:89:ec:
bf:69:aa:b9:5c:3f:13:6c:b0:77:96:76:c3:8c:f9:
3a:f2:4b:eb:ed:e7:10:9e:b4:f9:a8:05:65:ce:c9:
02:7c:e3:d4:9a:29:ce:50:85:ca:53:0b:45:ea:7b:
6e:06:fa:15:07:c5:6f:f4:45:2b:b3:df:65:df:05:
7b:c8:2d:a3:fa:70:16:bb:89:aa:18:49:52:25:75:
1d:a8:a7:1a:e5:53:3e:74:1c:d8:50:d8:1b:dc:07:
1f:17:4e:d4:2b:dd:6b:f8:02:8d:e3:43:41:37:a8:
a3:c5:65:e0:ac:b5:c8:f1:a0:27:4a:c7:fb:63:2e:
78:3a:d2:3d:c8:08:68:6a:36:76:47:b6:a5:48:41:
f0:2f:ee:24:c8:0e:0b:e0:d4:eb:08:25:b8:b8:0f:
a8:36:b9:6f:d3:8a:35:49:cb:88:59:f9:67:ec:a8:
65:5b:0d:ce:b7:76:55:aa:78:13:e9:73:0c:b5:f4:
b3:25:af:ef:cb:82:6f:89:b0:11:13:c7:ff:b6:1d:
34:4c:08:e8:8a:80:73:12:e1:e5:6d:16:a4:73:7b:
25:d7:f5:e3:af:67:29:01:de:be:07:57:67:8c:e2:
75:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:34:6B:C0:FC:74:8D:D4:15:54:66:55:07:5D:3F:A6:82:76:2A:65
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d3:51:7c:7a:70:07:47:33:25:fb:07:00:68:2f:fc:af:d9:
8a:55:bd:c9:10:ab:4e:8d:f4:c7:e2:e0:81:b6:1b:b8:1a:f4:
bb:66:61:ae:29:15:32:2c:ce:e8:f7:07:7a:71:d0:a6:2f:82:
e6:1f:63:ad:50:40:f0:d5:75:89:1a:77:e2:fb:3a:77:f2:4f:
97:ea:71:05:ba:23:dd:f5:58:e1:a0:a9:db:25:fd:da:c7:a4:
3a:29:c5:16:52:0c:9f:5f:88:28:17:b1:2f:3c:c4:3c:71:80:
52:d0:6b:d8:2b:29:03:6b:b0:43:58:4c:87:e6:c8:d4:b3:41:
db:76:6e:fa:a3:76:6c:6b:92:ab:6d:25:b7:02:c3:51:37:38:
b3:10:39:3c:41:75:67:65:04:74:db:39:d0:79:29:da:36:41:
c6:db:50:84:bd:89:12:a0:fa:ac:07:04:64:ce:50:a2:05:a5:
4c:1c:60:ba:1e:db:b6:cc:c6:a4:b0:83:6b:84:22:77:25:75:
6f:75:36:ba:51:7e:91:7c:11:a0:7f:f6:11:97:6a:4d:f8:fc:
e0:29:1b:1e:14:5b:83:20:e2:c7:e2:39:07:78:62:40:a8:28:
26:43:26:1f:70:80:a1:b8:1b:70:f8:90:53:61:c4:9a:1b:fc:
83:3d:01:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:04:57 2026 by rpki-client