Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json)
Hash identifier: U/roL9ftadeDbSQvxjMAYeWg1XmZ0wloW9NDe+aQtlc=
Subject key identifier: 94:B1:76:5E:B7:42:B1:E8:A9:C6:27:5F:13:1C:CC:4E:CD:19:1D:CA
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 01A0C1438DF578CFEB556D694085CECAA6F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
Manifest number: 138B
Signing time: Mon 21 Sep 2026 00:00:24 +0000
Manifest this update: Mon 21 Sep 2026 00:00:24 +0000
Manifest next update: Tue 22 Sep 2026 00:00:24 +0000
Files and hashes: 1: AH8BkwVFANpM3D-2UXxmQPvm-gI.roa (hash: 6QRSR3qapkQkS77YuUKuuRiuJc7R5yNd3794dtUPMJs=)
2: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: MPPg0tOZdWZFSAJ3m+hvHVxSCrJ36Fu0uys211em2YY=)
3: P3is6hWIutnv3WVE2XVBQR28koo.roa (hash: zNTZY/b8g0CyM9V/gtiEl5HaCGnXYunucSw3v6eVe8o=)
4: p7rkdahFQXPqaYGeqvTzgl8b8gg.roa (hash: D1K5j64bqVkMi5je9WvKCxtYUE9schoY5RKt4Mby4MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:43:8d:f5:78:cf:eb:55:6d:69:40:85:ce:ca:a6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: Sep 21 00:00:24 2026 GMT
Not After : Sep 22 00:00:24 2026 GMT
Subject: CN=94b1765eb742b1e8a9c6275f131ccc4ecd191dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cb:ed:70:9d:72:76:cc:1a:eb:02:f3:66:72:
fc:1a:a8:a6:94:14:ab:e0:55:59:97:39:88:da:76:
b1:64:64:ae:75:3b:50:ee:34:a1:5c:59:7a:5c:48:
c1:44:33:d1:bc:df:13:fb:4c:3e:85:6f:ac:cb:f3:
58:c8:31:42:71:65:ce:fb:55:53:47:3b:22:3f:54:
b3:91:3d:22:d3:94:f3:ae:dc:61:7a:1c:0b:32:30:
e7:6f:2b:43:21:40:e4:b7:d8:d5:1f:bd:b2:6f:bc:
3a:3d:81:37:30:3a:94:cc:5c:1f:11:d2:d1:82:94:
18:cf:9e:39:b3:da:94:a7:d4:ef:66:df:67:c4:25:
c3:3a:8d:57:48:d9:5d:15:51:b5:1d:81:d5:e9:8e:
32:68:3c:c1:77:b2:b6:02:ce:dc:ea:33:35:fe:2f:
da:26:48:0f:02:25:7c:2c:a9:28:48:84:2e:3d:42:
9f:f5:b5:06:26:11:07:22:ea:03:88:06:04:2b:ff:
79:cc:cf:94:75:59:eb:a5:64:1a:f7:be:9d:9e:ac:
87:8f:c9:01:88:27:55:c5:64:cb:c4:e3:6d:bb:f4:
f8:50:94:24:3d:c1:eb:29:b3:4b:cb:ea:4d:d5:ed:
00:24:5f:59:4b:64:9f:49:e0:ab:3f:93:eb:60:c7:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B1:76:5E:B7:42:B1:E8:A9:C6:27:5F:13:1C:CC:4E:CD:19:1D:CA
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5a:17:35:3b:16:95:4a:11:e8:d2:d4:43:9f:61:3d:5d:13:
08:b6:1f:e5:63:b8:09:79:e8:7f:d7:35:f5:f3:e8:0d:5e:59:
18:13:59:af:d9:74:b5:e4:10:0f:2b:e6:29:37:59:67:c6:98:
40:1f:5e:56:4d:69:0d:78:80:60:a4:23:2d:16:c6:50:df:97:
6c:6c:a4:f7:e1:7d:06:e3:82:96:c5:23:fd:92:a7:a1:06:60:
12:ac:87:e0:00:d9:8d:51:8e:df:67:56:7b:c4:cc:ad:03:88:
02:8e:97:59:c3:02:f8:93:c4:23:30:4e:b2:1f:5f:95:cf:b1:
ab:d7:32:54:79:0d:20:40:3b:1d:96:f3:9f:94:1b:b5:c8:42:
3c:18:c2:b5:ec:0f:ec:cf:2c:a1:e8:07:23:61:5d:f7:bd:bd:
fc:f8:16:fe:31:ff:c8:ea:72:21:76:77:e3:47:a2:b6:91:0e:
24:5e:59:80:75:0c:73:3a:0e:5d:61:0b:ec:0d:25:8e:2e:52:
28:b3:b2:73:01:ab:ff:ad:0a:ab:3b:51:ac:40:8d:27:66:42:
0d:33:cc:6f:2e:ee:71:c2:10:9e:17:92:a6:63:60:7f:1e:50:
c4:5a:cc:b4:cc:bf:13:93:cc:83:df:91:8d:7c:41:41:23:5d:
3b:57:aa:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBQ431eM/rVW1pQIXOyqb4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYzBiOWIzM2RjZTVlYmEwYWVhNjQ4OTE1OGQzZmIyNzAy
MmFjZTcwHhcNMjYwOTIxMDAwMDI0WhcNMjYwOTIyMDAwMDI0WjAzMTEwLwYDVQQD
Eyg5NGIxNzY1ZWI3NDJiMWU4YTljNjI3NWYxMzFjY2M0ZWNkMTkxZGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48vtcJ1ydswa6wLzZnL8GqimlBSr
4FVZlzmI2naxZGSudTtQ7jShXFl6XEjBRDPRvN8T+0w+hW+sy/NYyDFCcWXO+1VT
RzsiP1SzkT0i05TzrtxhehwLMjDnbytDIUDkt9jVH72yb7w6PYE3MDqUzFwfEdLR
gpQYz545s9qUp9TvZt9nxCXDOo1XSNldFVG1HYHV6Y4yaDzBd7K2As7c6jM1/i/a
JkgPAiV8LKkoSIQuPUKf9bUGJhEHIuoDiAYEK/95zM+UdVnrpWQa976dnqyHj8kB
iCdVxWTLxONtu/T4UJQkPcHrKbNLy+pN1e0AJF9ZS2SfSeCrP5PrYMe3NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSxdl63QrHoqcYnXxMczE7NGR3KMB8GA1UdIwQY
MBaAFCDAubM9zl66CupkiRWNP7JwIqznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEt
OGQzZGNjMzNhZDBhLzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEtOGQzZGNjMzNhZDBh
LzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVoXNTsW
lUoR6NLUQ59hPV0TCLYf5WO4CXnof9c19fPoDV5ZGBNZr9l0teQQDyvmKTdZZ8aY
QB9eVk1pDXiAYKQjLRbGUN+XbGyk9+F9BuOClsUj/ZKnoQZgEqyH4ADZjVGO32dW
e8TMrQOIAo6XWcMC+JPEIzBOsh9flc+xq9cyVHkNIEA7HZbzn5QbtchCPBjCtewP
7M8soegHI2Fd9729/PgW/jH/yOpyIXZ340eitpEOJF5ZgHUMczoOXWEL7A0lji5S
KLOycwGr/60KqztRrECNJ2ZCDTPMby7uccIQnheSpmNgfx5QxFrMtMy/E5PMg9+R
jXxBQSNdO1eqXA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 07:19:43 2026 by rpki-client