Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json)
Hash identifier: q//RW/y3AzsOKMqSRvnivqefh1dQOTDEU62flPwENxY=
Subject key identifier: 52:5D:77:B6:77:EC:2D:3A:01:39:11:28:F8:19:03:16:AE:BF:88:C8
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 019E1D59CFD8443C0DFE4177446D5D5C96E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
Manifest number: 122D
Signing time: Tue 12 May 2026 18:01:25 +0000
Manifest this update: Tue 12 May 2026 18:01:25 +0000
Manifest next update: Wed 13 May 2026 18:01:25 +0000
Files and hashes: 1: AH8BkwVFANpM3D-2UXxmQPvm-gI.roa (hash: 6QRSR3qapkQkS77YuUKuuRiuJc7R5yNd3794dtUPMJs=)
2: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: 1n5ODWREq6mogf2+j9cXPp10DGtD8fIypq5JL7w05kE=)
3: P3is6hWIutnv3WVE2XVBQR28koo.roa (hash: zNTZY/b8g0CyM9V/gtiEl5HaCGnXYunucSw3v6eVe8o=)
4: p7rkdahFQXPqaYGeqvTzgl8b8gg.roa (hash: D1K5j64bqVkMi5je9WvKCxtYUE9schoY5RKt4Mby4MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:cf:d8:44:3c:0d:fe:41:77:44:6d:5d:5c:96:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: May 12 18:01:25 2026 GMT
Not After : May 13 18:01:25 2026 GMT
Subject: CN=525d77b677ec2d3a01391128f8190316aebf88c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:5c:cc:15:d8:22:ee:07:b3:c6:06:0e:1d:
77:7f:ec:94:ec:8b:f9:2a:b6:83:b7:cd:66:f9:ff:
cf:ab:0b:07:61:8c:34:bf:e7:fe:28:43:28:42:87:
ab:9e:62:e6:c7:fc:69:5d:ac:bf:3e:a2:a8:9f:62:
69:5c:e2:b4:ca:0d:47:d8:f8:82:1b:58:4c:a1:9f:
47:94:be:ba:1f:7f:61:5b:df:09:47:5e:ba:1a:8f:
69:13:ce:b8:bd:e6:0f:7f:10:82:8e:98:e9:56:1e:
95:18:1b:ee:d4:74:be:48:55:90:c8:65:34:a2:ab:
2a:0b:20:77:43:46:7d:ad:70:dc:24:a6:a1:dd:30:
3c:b4:24:40:08:2b:4f:ee:8c:cf:d6:d9:07:5e:58:
84:ea:56:07:40:b0:dc:3b:6a:0f:5b:be:7c:e1:41:
2d:45:b9:fa:1e:ed:b4:43:74:4d:f2:d7:f5:9b:81:
3e:df:52:45:c0:31:fe:2e:10:1f:04:52:bb:38:e4:
c0:e4:9d:2b:3e:53:1a:49:5f:e7:09:5a:67:af:17:
d4:11:e7:45:46:c6:e2:b1:49:b2:34:f9:15:2c:81:
0b:5e:32:79:38:69:36:67:d2:aa:c7:fc:3a:b3:76:
0d:6f:d4:30:49:36:f3:0b:84:3d:b4:be:54:43:18:
a9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5D:77:B6:77:EC:2D:3A:01:39:11:28:F8:19:03:16:AE:BF:88:C8
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:57:55:49:42:ae:02:64:6b:16:02:ca:d2:9c:a7:35:77:8e:
b7:17:a3:b2:46:3c:c1:08:14:91:06:4d:d6:6b:d5:af:9b:a1:
47:8a:cd:b8:6e:2f:5d:3b:d6:f3:1e:3f:4b:d3:c1:2a:9d:c0:
47:b4:e8:25:ea:7d:d2:c7:56:50:6c:2b:19:cf:bb:e7:2c:c4:
e5:08:82:f9:0e:b9:af:7f:aa:90:72:d4:03:6b:14:f6:41:f7:
d6:18:51:5e:ab:5f:cd:26:94:6f:fb:19:28:c2:ef:bf:aa:65:
b5:e4:36:04:88:f4:b1:41:bc:cb:2a:e6:16:ad:05:e1:b1:f4:
e9:81:8d:04:07:91:66:2d:a0:bb:d3:a7:36:cf:a6:37:7e:da:
1d:ad:14:dd:0d:ea:8c:32:9d:09:31:b2:d6:4b:b0:d2:ff:a3:
47:f1:9b:95:9b:9f:dd:d3:b3:d9:f4:0e:e4:9d:a7:fe:ac:7c:
48:39:3b:3f:73:f4:d8:59:98:e1:91:86:99:72:b3:d5:d9:8f:
75:a5:08:5b:48:8a:96:0c:0c:ef:82:a0:83:5b:e7:ee:f7:cb:
72:e5:21:e9:f9:74:df:dd:e8:0c:ad:55:55:69:b9:16:70:27:
12:08:98:36:ac:5d:ff:a8:0d:0e:d9:84:69:e4:77:c7:6a:3e:
92:52:8b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:23:31 2026 by rpki-client