Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json)
Hash identifier: mM+Sr+6iR+ajJQQUOY2ZZv4pvj8NhIDVo+PTXMm9DmY=
Subject key identifier: 51:00:FF:64:B8:B0:FC:41:62:0D:E4:DF:F8:19:6D:14:8D:08:57:34
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 019FA93DA074574EBED5D01E1CD24CEBCEE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
Manifest number: 12FA
Signing time: Tue 28 Jul 2026 15:00:15 +0000
Manifest this update: Tue 28 Jul 2026 15:00:15 +0000
Manifest next update: Wed 29 Jul 2026 15:00:15 +0000
Files and hashes: 1: AH8BkwVFANpM3D-2UXxmQPvm-gI.roa (hash: 6QRSR3qapkQkS77YuUKuuRiuJc7R5yNd3794dtUPMJs=)
2: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: 7CvmDTzHOV7s4Ucl46+aoznSLJ57ZyLBggDMfFQu2CQ=)
3: P3is6hWIutnv3WVE2XVBQR28koo.roa (hash: zNTZY/b8g0CyM9V/gtiEl5HaCGnXYunucSw3v6eVe8o=)
4: p7rkdahFQXPqaYGeqvTzgl8b8gg.roa (hash: D1K5j64bqVkMi5je9WvKCxtYUE9schoY5RKt4Mby4MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:a0:74:57:4e:be:d5:d0:1e:1c:d2:4c:eb:ce:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: Jul 28 15:00:15 2026 GMT
Not After : Jul 29 15:00:15 2026 GMT
Subject: CN=5100ff64b8b0fc41620de4dff8196d148d085734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:92:09:3e:2b:cb:81:b4:ae:6d:f4:fd:d3:d9:
95:a8:ab:47:73:ea:7d:97:52:76:86:5b:36:f6:aa:
03:b3:bb:5e:22:13:e6:6f:48:a7:af:9a:f9:b5:24:
0f:f5:e1:94:34:4b:57:3e:43:c3:41:c1:39:d8:ba:
81:74:61:ef:d8:ea:b0:9c:9b:4d:3f:f7:a7:a5:47:
9a:23:9f:f6:c6:b2:1d:2a:76:89:88:fd:9a:b2:25:
7c:64:6f:38:b7:ea:30:a6:58:5e:98:d4:93:15:78:
4c:06:89:d1:7f:32:e9:0a:2e:dd:7a:4e:2c:fe:41:
89:02:8a:91:7d:5a:ad:9c:e6:a2:2a:7f:37:7d:cf:
96:fa:2e:d8:76:01:91:55:09:53:43:b6:47:f7:3b:
c6:f0:52:3d:7c:e7:b4:4a:65:39:02:78:3d:20:8e:
bc:63:c8:c7:3b:ba:f1:31:fc:c0:f7:f8:f9:a0:73:
8c:df:cf:92:d8:c9:c2:50:3d:59:3b:01:b0:85:27:
54:d1:f1:a2:7a:37:72:99:d7:d6:99:87:38:73:c6:
39:a7:fd:29:06:72:1e:8d:06:87:cb:37:17:4b:17:
5e:c9:aa:b4:2e:ce:28:8c:c5:2b:e2:97:f9:aa:ff:
f8:80:3b:14:87:1b:53:a8:c3:94:74:d1:6d:f7:53:
ad:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:00:FF:64:B8:B0:FC:41:62:0D:E4:DF:F8:19:6D:14:8D:08:57:34
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:be:0b:59:7c:51:d4:3d:a8:45:3c:06:22:aa:70:fe:89:62:
f1:df:cc:2d:bd:b6:60:fc:85:6b:c4:1b:ff:1b:d9:12:e3:64:
b4:b6:17:0b:59:e7:25:c5:5f:75:fa:86:40:42:dd:d4:7e:3f:
6d:77:75:97:23:8b:60:cd:5c:65:35:f3:a3:3f:4f:01:ee:e2:
35:bb:c5:ec:45:89:33:a2:8e:33:19:c0:0c:7a:e8:30:41:b9:
eb:e7:a9:06:13:40:55:c6:97:fe:7e:a6:27:3d:22:27:c5:5d:
6e:ce:83:56:0f:5f:5d:9f:52:d4:01:49:d7:bc:51:a0:63:41:
53:54:27:ca:80:6e:a1:cc:47:56:c0:bf:f2:2d:9f:5b:53:57:
b8:19:84:e7:a5:cd:48:d9:4d:3a:a5:8a:8e:89:09:03:19:1d:
83:94:41:ac:4e:cf:01:39:53:3e:96:b3:71:1f:8a:30:95:81:
c4:a8:9d:06:36:e1:d9:59:e1:41:6b:3d:32:79:7c:eb:86:ac:
25:84:b0:8c:90:5f:ea:f7:75:23:b5:e3:ee:c3:5a:7b:05:d7:
59:42:3e:4d:f3:b2:d4:8c:2c:9f:e8:31:cb:77:d0:f4:52:79:
55:0f:96:08:fe:df:92:21:f5:28:2a:53:34:0a:5e:ab:df:40:
f4:71:7f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:30:50 2026 by rpki-client