Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json)
Hash identifier: Q1tfqc0aLrQOCaG5MNieGDZRcRjn0fG8x5YelcOZM10=
Subject key identifier: DA:F2:35:4A:7C:DA:D8:7B:72:56:87:47:F1:02:03:DD:4F:36:68:E0
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 01A0D0B6F50AED49670628A5272F1FCF6023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
Manifest number: 1393
Signing time: Thu 24 Sep 2026 00:00:46 +0000
Manifest this update: Thu 24 Sep 2026 00:00:46 +0000
Manifest next update: Fri 25 Sep 2026 00:00:46 +0000
Files and hashes: 1: AH8BkwVFANpM3D-2UXxmQPvm-gI.roa (hash: 6QRSR3qapkQkS77YuUKuuRiuJc7R5yNd3794dtUPMJs=)
2: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: 0YGgYJFl7uVmiovJgTZ8LYTmaIvBrIrafiOfjFBRLMo=)
3: P3is6hWIutnv3WVE2XVBQR28koo.roa (hash: zNTZY/b8g0CyM9V/gtiEl5HaCGnXYunucSw3v6eVe8o=)
4: p7rkdahFQXPqaYGeqvTzgl8b8gg.roa (hash: D1K5j64bqVkMi5je9WvKCxtYUE9schoY5RKt4Mby4MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:f5:0a:ed:49:67:06:28:a5:27:2f:1f:cf:60:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: Sep 24 00:00:46 2026 GMT
Not After : Sep 25 00:00:46 2026 GMT
Subject: CN=daf2354a7cdad87b72568747f10203dd4f3668e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:79:2c:fe:09:0b:0a:81:ec:5b:13:ea:c8:25:
e4:2f:c0:e8:9d:e5:2f:e0:aa:3c:b8:2b:3a:67:48:
63:5a:98:32:7e:41:79:1e:9e:3d:05:67:b8:fd:72:
96:c0:a8:bf:a7:54:81:ec:21:07:0d:6b:28:05:f6:
4e:70:10:95:a3:a8:ae:7d:e6:c8:a7:2f:ef:e6:8a:
58:f8:b6:d6:4a:a9:35:1b:0c:8a:61:83:22:8e:9b:
ae:99:16:d0:8e:a0:8e:80:17:1b:88:6a:82:46:d6:
6e:3a:78:eb:ab:17:f4:62:56:dd:85:36:b3:f8:9f:
86:e7:4e:e8:9d:bb:a4:26:1c:70:51:43:5c:46:04:
fc:21:72:5c:dd:8e:25:1f:8b:ef:6f:42:58:4d:4b:
c8:e7:f4:fd:30:5d:ea:d0:a5:24:d7:4b:ba:17:c0:
1d:1f:f0:80:73:49:eb:2b:48:21:18:7c:c0:2f:af:
00:07:ad:08:d4:36:9d:73:cc:7d:6c:7f:a5:0d:56:
b4:d4:e6:3c:88:d9:73:a5:61:32:1b:aa:62:c4:19:
40:83:8d:6b:1d:43:e0:7f:11:5c:46:e6:db:fc:b6:
de:ad:ba:3f:ea:02:fc:5e:86:57:7c:62:c4:7e:bd:
38:6b:f2:cc:2c:18:66:04:c5:b8:21:e4:12:36:1e:
1e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F2:35:4A:7C:DA:D8:7B:72:56:87:47:F1:02:03:DD:4F:36:68:E0
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:48:29:cb:f7:d4:8e:e4:8e:a9:3f:6d:cf:ec:94:b7:b1:34:
7f:50:f9:0d:86:86:db:c1:24:0e:ed:13:a4:4f:b9:54:33:68:
d7:61:98:6e:a5:03:4d:fa:47:81:fd:ec:7b:d8:d9:62:2f:94:
db:7a:b2:32:a6:79:fd:20:0c:80:74:a9:20:94:ef:84:85:ae:
8a:6e:89:e2:b6:48:52:fc:dc:7f:54:59:f8:1e:75:d6:84:a6:
54:fb:23:77:2d:55:df:cc:05:24:44:b5:f2:30:83:2a:94:55:
3d:d2:19:da:46:f8:5d:59:76:e4:40:35:a8:8d:e6:89:15:e0:
00:82:4e:8f:6e:d0:a5:e8:f9:00:11:ff:db:ad:a9:b1:57:9c:
55:cf:b1:60:60:37:c4:f9:bd:f5:c8:2c:54:27:3f:e9:8e:53:
ec:cd:5f:1f:98:c2:fb:35:ca:c1:1e:77:b0:40:81:81:a2:6b:
24:07:85:13:87:58:f0:d9:14:f9:57:35:80:76:c1:58:d1:87:
70:dc:45:d8:3b:27:b2:f4:06:1d:76:46:b2:88:0e:11:30:ac:
26:da:01:06:24:3f:d1:af:61:a3:2d:40:68:d2:6a:ac:77:4e:
2c:72:99:c3:f1:74:73:82:e4:d4:7e:b7:42:34:7a:b7:be:c3:
4e:0d:8b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:09:32 2026 by rpki-client