Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json)
Hash identifier: x2lJ/X8Uwy4+bB6jiOs2i6iHWNfwLYMGhC2N49sz13w=
Subject key identifier: A6:34:6B:88:BC:A7:75:E0:2C:72:AD:19:60:D5:F3:6F:94:A2:DB:C8
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 019CAA8F9DB9326DB02B445B6E9D14E76E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
Manifest number: 116D
Signing time: Sun 01 Mar 2026 18:01:04 +0000
Manifest this update: Sun 01 Mar 2026 18:01:04 +0000
Manifest next update: Mon 02 Mar 2026 18:01:04 +0000
Files and hashes: 1: AH8BkwVFANpM3D-2UXxmQPvm-gI.roa (hash: 6QRSR3qapkQkS77YuUKuuRiuJc7R5yNd3794dtUPMJs=)
2: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: o5zdV6DS7lxRBAz5/oopyG3FMN4WUbU9kXaaJ1EXAlI=)
3: P3is6hWIutnv3WVE2XVBQR28koo.roa (hash: zNTZY/b8g0CyM9V/gtiEl5HaCGnXYunucSw3v6eVe8o=)
4: p7rkdahFQXPqaYGeqvTzgl8b8gg.roa (hash: D1K5j64bqVkMi5je9WvKCxtYUE9schoY5RKt4Mby4MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:9d:b9:32:6d:b0:2b:44:5b:6e:9d:14:e7:6e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: Mar 1 18:01:04 2026 GMT
Not After : Mar 2 18:01:04 2026 GMT
Subject: CN=a6346b88bca775e02c72ad1960d5f36f94a2dbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f6:f4:00:11:aa:f0:cc:3b:51:8e:74:bb:68:
90:89:bd:17:2a:dd:56:70:68:e1:6e:33:64:26:3b:
cb:ba:49:3c:81:50:75:1b:ad:85:95:e7:37:50:2c:
df:ed:8e:32:c3:22:6c:a1:fc:e9:b9:42:40:68:f3:
b8:1c:2d:ae:66:05:bc:59:e2:ec:99:a8:f4:e7:a4:
8f:fb:a2:fa:10:89:71:25:be:e5:8d:1b:41:41:6e:
f7:f4:7a:58:95:7e:96:ea:4a:1f:a8:aa:8a:71:72:
55:67:af:f0:6a:22:df:64:97:9d:88:e0:94:f2:56:
73:7c:77:57:fa:ed:7f:a1:5a:5e:6e:98:64:00:86:
95:8c:2e:16:0d:39:f6:6e:64:31:3c:78:5c:cf:8f:
ea:60:a1:5e:35:ae:12:e4:9e:4f:0d:ff:1b:a1:23:
b4:10:8a:03:8f:b9:17:c0:db:87:58:4e:7f:32:a3:
d3:8d:ca:77:9a:b0:61:77:c6:c7:ba:57:8e:cd:16:
f8:86:5a:b6:eb:7c:86:58:22:14:d3:5d:5b:42:7a:
86:d9:4d:9c:ee:0a:1e:5f:a2:c3:11:4c:c0:d0:1a:
cf:4f:bd:01:20:8f:55:f3:d5:f0:cb:42:5b:89:52:
4d:e6:63:55:7a:f3:31:fd:8f:5f:ed:25:6a:e3:2f:
ea:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:34:6B:88:BC:A7:75:E0:2C:72:AD:19:60:D5:F3:6F:94:A2:DB:C8
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:fa:d1:87:04:e2:2e:a5:2a:a3:13:7a:a9:07:2e:de:b6:46:
de:0a:5d:67:90:98:fc:1a:19:09:b7:b4:96:f6:0b:91:51:63:
05:9c:01:a6:e7:48:6a:ec:27:5b:2d:59:88:00:1b:cc:e4:65:
65:d0:1c:37:a7:92:45:00:00:52:3f:b6:7d:2b:39:9b:87:03:
ca:bd:e6:65:e2:5c:45:65:75:68:7e:73:51:6f:10:c7:61:1f:
19:e2:90:08:12:19:bc:e1:bf:63:82:ed:68:f7:35:0f:c9:95:
e7:d1:e5:8c:14:da:88:67:fa:41:49:ce:b4:8c:30:55:51:65:
f7:5b:36:1f:1e:54:a4:25:47:c7:c1:62:59:21:73:35:0f:5b:
af:9f:ac:a1:3f:ed:81:66:37:84:ba:b2:1f:24:d1:d0:11:2e:
2c:67:28:48:de:fb:5e:6f:cf:0f:e9:bd:88:4c:8b:69:4f:2e:
c8:1f:28:35:46:f5:d3:f1:7a:34:dd:30:2f:bf:bc:b0:3b:75:
d5:76:71:90:80:f6:3b:24:9f:4c:6f:5c:2b:1f:f3:d7:df:1d:
a9:fd:ea:26:00:c2:f8:18:36:16:31:55:80:a5:c6:7b:a1:10:
4a:f3:2a:13:fd:ab:5a:fc:4b:37:7e:ba:81:8e:e3:c2:f5:82:
84:a6:47:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:29 2026 by rpki-client