Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json)
Hash identifier: i5+uxCNS3Ea3hZ59efSlL4eDXB59ThyIFPTomusosac=
Subject key identifier: DA:35:0E:1C:C7:6A:FE:7D:68:73:D5:D0:73:3D:44:26:36:48:AE:1C
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 019EBF913AC6590BC058F8B5A78138398E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
Manifest number: 1281
Signing time: Sat 13 Jun 2026 06:00:26 +0000
Manifest this update: Sat 13 Jun 2026 06:00:26 +0000
Manifest next update: Sun 14 Jun 2026 06:00:26 +0000
Files and hashes: 1: AH8BkwVFANpM3D-2UXxmQPvm-gI.roa (hash: 6QRSR3qapkQkS77YuUKuuRiuJc7R5yNd3794dtUPMJs=)
2: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: ckok8VJuPM9HzVqKRpSeqBP60ZkkSVH5x7ri8xI4974=)
3: P3is6hWIutnv3WVE2XVBQR28koo.roa (hash: zNTZY/b8g0CyM9V/gtiEl5HaCGnXYunucSw3v6eVe8o=)
4: p7rkdahFQXPqaYGeqvTzgl8b8gg.roa (hash: D1K5j64bqVkMi5je9WvKCxtYUE9schoY5RKt4Mby4MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:3a:c6:59:0b:c0:58:f8:b5:a7:81:38:39:8e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: Jun 13 06:00:26 2026 GMT
Not After : Jun 14 06:00:26 2026 GMT
Subject: CN=da350e1cc76afe7d6873d5d0733d44263648ae1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:c9:19:58:04:1a:8d:db:d3:b8:76:eb:51:
9a:11:8e:82:44:dc:29:cd:48:c5:80:54:cf:f3:3b:
da:05:a9:0b:19:1e:3b:70:1e:cf:74:c8:2b:7c:90:
d0:fe:35:d4:ae:79:b9:97:5b:af:cc:ae:c8:6a:6e:
0f:eb:a0:be:8d:f0:94:65:4c:50:fa:7a:1d:37:bc:
03:52:d9:b5:5f:d4:b4:ee:28:10:43:c1:50:48:19:
1c:bd:d5:4d:e8:e0:46:3b:f6:8f:59:4d:ec:1d:ec:
db:91:3a:0e:a9:77:9a:08:15:92:f6:99:8c:4d:10:
79:d8:ec:cf:5a:84:96:b9:9e:68:b0:b2:80:52:8e:
5c:4e:49:b7:b9:17:38:5d:25:1c:33:7d:63:82:e9:
da:63:a5:ee:1d:c7:1c:b5:09:be:9e:5f:52:7e:5a:
7e:3e:79:5e:e1:05:f8:cd:1c:1b:1b:b2:41:2f:dc:
bd:3e:39:8e:50:33:ab:cf:0b:f8:49:54:93:2e:e4:
8b:55:19:b4:35:7d:ba:76:61:df:4b:8b:c8:24:f0:
43:ff:51:71:ae:7c:1b:d2:aa:25:ec:32:d9:0d:ad:
31:55:9b:19:79:2e:76:b8:e3:17:14:0d:e4:35:c1:
9d:f2:d6:6c:a4:3e:5d:3f:1d:91:d6:aa:cd:5d:b5:
74:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:35:0E:1C:C7:6A:FE:7D:68:73:D5:D0:73:3D:44:26:36:48:AE:1C
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:39:a0:cb:5d:93:91:53:f4:33:09:1c:b4:4e:82:41:1f:d0:
4e:61:b9:15:a3:a2:c8:6d:0e:42:cb:cf:1d:12:a8:d2:42:42:
5c:02:75:71:93:26:4a:04:7f:14:c6:22:97:b0:5d:43:ed:da:
5a:db:b2:5b:83:11:ec:b2:0e:a9:d9:75:29:2d:2f:b7:8f:8e:
4e:be:fc:4f:82:a7:b7:36:9a:24:60:e9:8a:25:1c:e3:93:ff:
1a:6b:dc:04:5c:be:38:ff:a6:15:98:a1:4a:f9:48:93:21:a8:
94:78:3c:d1:6a:9b:74:bf:00:4f:05:da:5e:c5:70:bd:89:86:
50:da:85:b2:d3:c4:1a:cd:b2:59:e5:1d:e5:c0:fc:62:5c:54:
e4:44:31:1c:cd:c5:db:35:cf:92:10:1c:bc:b5:4d:34:21:c4:
ed:35:fa:1b:ff:bd:d2:aa:31:90:a5:17:b1:1e:81:81:8d:94:
e2:f0:6c:29:55:bc:6c:d2:45:59:eb:55:c5:a2:56:42:48:c8:
86:b9:d6:6d:3b:fd:d1:93:7d:3a:27:88:b2:03:b2:99:3f:2b:
fe:50:f2:36:80:1a:43:05:be:d7:9a:81:6a:1b:ef:5d:19:36:
4b:b8:bc:54:f6:ba:9d:99:5d:83:35:ba:0b:82:41:fb:e1:2c:
8a:00:37:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kTrGWQvAWPi1p4E4OY5AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYzBiOWIzM2RjZTVlYmEwYWVhNjQ4OTE1OGQzZmIyNzAy
MmFjZTcwHhcNMjYwNjEzMDYwMDI2WhcNMjYwNjE0MDYwMDI2WjAzMTEwLwYDVQQD
EyhkYTM1MGUxY2M3NmFmZTdkNjg3M2Q1ZDA3MzNkNDQyNjM2NDhhZTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCXJGVgEGo3b07h261GaEY6CRNwp
zUjFgFTP8zvaBakLGR47cB7PdMgrfJDQ/jXUrnm5l1uvzK7Iam4P66C+jfCUZUxQ
+nodN7wDUtm1X9S07igQQ8FQSBkcvdVN6OBGO/aPWU3sHezbkToOqXeaCBWS9pmM
TRB52OzPWoSWuZ5osLKAUo5cTkm3uRc4XSUcM31jgunaY6XuHccctQm+nl9Sflp+
Pnle4QX4zRwbG7JBL9y9PjmOUDOrzwv4SVSTLuSLVRm0NX26dmHfS4vIJPBD/1Fx
rnwb0qol7DLZDa0xVZsZeS52uOMXFA3kNcGd8tZspD5dPx2R1qrNXbV0LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNo1DhzHav59aHPV0HM9RCY2SK4cMB8GA1UdIwQY
MBaAFCDAubM9zl66CupkiRWNP7JwIqznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEt
OGQzZGNjMzNhZDBhLzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEtOGQzZGNjMzNhZDBh
LzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAujmgy12T
kVP0MwkctE6CQR/QTmG5FaOiyG0OQsvPHRKo0kJCXAJ1cZMmSgR/FMYil7BdQ+3a
WtuyW4MR7LIOqdl1KS0vt4+OTr78T4KntzaaJGDpiiUc45P/GmvcBFy+OP+mFZih
SvlIkyGolHg80WqbdL8ATwXaXsVwvYmGUNqFstPEGs2yWeUd5cD8YlxU5EQxHM3F
2zXPkhAcvLVNNCHE7TX6G/+90qoxkKUXsR6BgY2U4vBsKVW8bNJFWetVxaJWQkjI
hrnWbTv90ZN9OieIsgOymT8r/lDyNoAaQwW+15qBahvvXRk2S7i8VPa6nZldgzW6
C4JB++EsigA3kQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:57:23 2026 by rpki-client