Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json)
Hash identifier: kbfY1joZsXXrjb0ojEWdjxequUmooKzGlG6okB1hCcA=
Subject key identifier: 00:24:45:CF:5F:5C:74:29:F8:BE:5B:C2:B6:91:75:96:E0:1A:2E:C0
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 01A1DB387A77713981F22C7172FE6A947EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
Manifest number: 141D
Signing time: Sat 14 Nov 2026 18:01:13 +0000
Manifest this update: Sat 14 Nov 2026 18:01:13 +0000
Manifest next update: Sun 15 Nov 2026 18:01:13 +0000
Files and hashes: 1: AH8BkwVFANpM3D-2UXxmQPvm-gI.roa (hash: 6QRSR3qapkQkS77YuUKuuRiuJc7R5yNd3794dtUPMJs=)
2: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: nDwo7I+cpzvuKqwqCMxKdVCK32QWOf2B9F61GHee2Qw=)
3: P3is6hWIutnv3WVE2XVBQR28koo.roa (hash: zNTZY/b8g0CyM9V/gtiEl5HaCGnXYunucSw3v6eVe8o=)
4: p7rkdahFQXPqaYGeqvTzgl8b8gg.roa (hash: D1K5j64bqVkMi5je9WvKCxtYUE9schoY5RKt4Mby4MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 18:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:38:7a:77:71:39:81:f2:2c:71:72:fe:6a:94:7e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: Nov 14 18:01:13 2026 GMT
Not After : Nov 15 18:01:13 2026 GMT
Subject: CN=002445cf5f5c7429f8be5bc2b6917596e01a2ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:5e:cc:c4:63:3d:ba:5a:7b:39:bc:e5:5e:
28:94:3f:28:84:f4:dc:bd:b0:44:78:b2:09:ea:87:
78:64:cc:aa:4c:36:27:7e:96:5a:8a:8d:72:2f:55:
d9:85:90:d8:be:3b:cc:24:af:1f:e5:1a:4d:52:a3:
20:87:b9:0e:dd:fc:ec:42:17:07:16:8e:b0:f0:64:
80:77:c9:35:59:d4:d3:c4:7e:68:9d:f0:af:26:e6:
b2:ca:5a:18:b3:9d:02:ee:58:1a:c3:7d:12:4d:8d:
6d:5f:08:59:82:57:df:c2:68:8d:7a:cf:b4:31:f2:
ee:24:21:5a:92:4f:e0:42:bc:89:e8:1b:f5:66:28:
1e:7e:16:f6:60:e3:01:c3:0a:b4:c0:e5:0c:e8:1d:
0d:04:f9:89:22:bf:11:a5:3b:37:b1:37:7e:fb:cc:
f9:26:df:b9:53:4f:24:5d:20:0d:cc:e8:a7:28:32:
23:1e:1f:93:bc:7b:9c:5f:b2:21:e3:fa:7a:c4:fe:
e8:02:cf:c5:14:b7:f0:40:4d:ae:eb:63:2f:df:8f:
41:8b:94:57:62:95:1d:97:e1:80:bc:60:33:f2:9e:
73:91:74:17:d8:41:5e:07:f1:9d:8f:9e:52:a4:10:
62:8b:2a:f9:e5:5a:b7:68:de:37:1c:af:49:79:bd:
e5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:24:45:CF:5F:5C:74:29:F8:BE:5B:C2:B6:91:75:96:E0:1A:2E:C0
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d4:6e:2b:6c:ce:b4:84:ea:d5:a7:e5:3f:18:0d:69:dc:40:
f9:cc:14:0c:a6:ba:2a:98:7b:7c:54:23:9e:0e:d6:e5:a1:8a:
0d:46:8c:91:87:0b:98:bd:27:f6:3c:6b:51:a0:29:6f:bd:2d:
5a:a8:7f:36:80:88:d8:38:17:27:6e:3b:4b:26:4d:b8:d3:7a:
94:b5:ce:bf:85:73:4d:c3:26:fd:4c:5a:ce:75:31:cf:bf:09:
60:10:19:ee:51:35:05:6d:71:c3:af:21:19:0c:33:d1:5d:42:
b0:aa:95:7c:17:83:ed:3b:ec:1f:05:65:27:66:e0:8a:27:64:
1d:1f:10:f0:d7:07:10:83:72:15:da:5d:f4:bd:55:67:1a:e2:
bf:32:35:74:b4:50:7c:b5:25:23:a2:45:7f:f1:91:59:3e:c6:
53:3f:28:e8:7a:db:7b:e8:49:20:f3:9f:37:3b:d1:d0:b3:2b:
a4:2c:d8:20:19:4a:cf:cc:f0:a2:9d:c1:a6:85:12:49:c6:36:
54:ca:4a:fd:ac:ba:c8:ed:e9:07:b1:f3:95:76:44:9e:67:27:
03:17:47:af:23:57:13:a0:f8:1a:b8:55:37:23:ad:31:b6:af:
c3:78:95:f8:7c:c0:51:ba:49:03:16:0d:94:06:70:69:0e:17:
b3:15:80:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHbOHp3cTmB8ixxcv5qlH7sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYzBiOWIzM2RjZTVlYmEwYWVhNjQ4OTE1OGQzZmIyNzAy
MmFjZTcwHhcNMjYxMTE0MTgwMTEzWhcNMjYxMTE1MTgwMTEzWjAzMTEwLwYDVQQD
EygwMDI0NDVjZjVmNWM3NDI5ZjhiZTViYzJiNjkxNzU5NmUwMWEyZWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6ZezMRjPbpaezm85V4olD8ohPTc
vbBEeLIJ6od4ZMyqTDYnfpZaio1yL1XZhZDYvjvMJK8f5RpNUqMgh7kO3fzsQhcH
Fo6w8GSAd8k1WdTTxH5onfCvJuayyloYs50C7lgaw30STY1tXwhZglffwmiNes+0
MfLuJCFakk/gQryJ6Bv1Zigefhb2YOMBwwq0wOUM6B0NBPmJIr8RpTs3sTd++8z5
Jt+5U08kXSANzOinKDIjHh+TvHucX7Ih4/p6xP7oAs/FFLfwQE2u62Mv349Bi5RX
YpUdl+GAvGAz8p5zkXQX2EFeB/Gdj55SpBBiiyr55Vq3aN43HK9Jeb3lKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAkRc9fXHQp+L5bwraRdZbgGi7AMB8GA1UdIwQY
MBaAFCDAubM9zl66CupkiRWNP7JwIqznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEt
OGQzZGNjMzNhZDBhLzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEtOGQzZGNjMzNhZDBh
LzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtRuK2zO
tITq1aflPxgNadxA+cwUDKa6Kph7fFQjng7W5aGKDUaMkYcLmL0n9jxrUaApb70t
Wqh/NoCI2DgXJ247SyZNuNN6lLXOv4VzTcMm/UxaznUxz78JYBAZ7lE1BW1xw68h
GQwz0V1CsKqVfBeD7TvsHwVlJ2bgiidkHR8Q8NcHEINyFdpd9L1VZxrivzI1dLRQ
fLUlI6JFf/GRWT7GUz8o6Hrbe+hJIPOfNzvR0LMrpCzYIBlKz8zwop3BpoUSScY2
VMpK/ay6yO3pB7HzlXZEnmcnAxdHryNXE6D4GrhVNyOtMbavw3iV+HzAUbpJAxYN
lAZwaQ4XsxWA5A==
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:31:44 2026 by rpki-client