Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json)
Hash identifier: 0pAU+q+51WyUfg+Fv4wIOHVGKqFBnjCMMptG7ht/h8Y=
Subject key identifier: 8A:E6:51:B4:C2:C9:BC:CE:60:65:DA:FF:5F:2F:EA:05:18:6B:0C:A8
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 019F92113109FB2F92F0E3665997C0F374DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
Manifest number: 12EE
Signing time: Fri 24 Jul 2026 03:00:27 +0000
Manifest this update: Fri 24 Jul 2026 03:00:27 +0000
Manifest next update: Sat 25 Jul 2026 03:00:27 +0000
Files and hashes: 1: AH8BkwVFANpM3D-2UXxmQPvm-gI.roa (hash: 6QRSR3qapkQkS77YuUKuuRiuJc7R5yNd3794dtUPMJs=)
2: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: eyBpdvSrLG9rFdS3Dth0owtheX9IsucTl4BVHoFUldE=)
3: P3is6hWIutnv3WVE2XVBQR28koo.roa (hash: zNTZY/b8g0CyM9V/gtiEl5HaCGnXYunucSw3v6eVe8o=)
4: p7rkdahFQXPqaYGeqvTzgl8b8gg.roa (hash: D1K5j64bqVkMi5je9WvKCxtYUE9schoY5RKt4Mby4MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:31:09:fb:2f:92:f0:e3:66:59:97:c0:f3:74:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: Jul 24 03:00:27 2026 GMT
Not After : Jul 25 03:00:27 2026 GMT
Subject: CN=8ae651b4c2c9bcce6065daff5f2fea05186b0ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b6:9f:eb:2f:19:74:37:13:c8:44:cd:bf:2c:
bb:8b:68:86:fc:41:e8:c4:f6:74:ef:45:7f:3f:fb:
7a:e8:e6:9b:78:0b:32:cf:a0:02:59:9f:0f:68:b3:
4d:0d:8c:52:15:f0:17:d8:3d:c8:5f:ce:99:60:7e:
06:b0:d9:ba:cd:5d:1f:9a:b8:f0:31:4c:46:85:39:
f7:ff:75:82:28:bf:bf:3c:bc:21:d0:85:f5:b7:f3:
75:a0:7f:5f:5a:c1:fe:d9:c5:b5:f1:5c:9e:97:01:
39:60:1f:fe:4b:3d:7d:0e:07:dc:f2:cc:43:75:0c:
cf:f3:ca:0e:50:7a:68:3f:90:ad:b3:96:7b:c7:f1:
d2:46:42:4b:46:4c:96:14:74:23:bd:3e:1b:48:c7:
fe:58:69:4a:d3:d4:6b:7c:34:64:a7:08:77:26:e4:
05:e8:30:7c:86:bb:fd:30:b7:c1:ed:9a:e7:9a:29:
3b:6a:71:79:8b:11:db:c1:0a:0b:cd:21:89:7a:6c:
da:5f:ea:94:e2:bd:75:13:9b:0a:38:b5:73:7b:4b:
6e:e0:fd:9b:18:22:93:46:6c:cd:16:ab:4e:b2:2b:
68:5a:9a:54:4c:a4:e4:70:af:85:c1:fe:59:ae:fa:
0a:89:5d:2e:63:2a:78:8c:f0:8b:d3:43:91:ed:2a:
b1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E6:51:B4:C2:C9:BC:CE:60:65:DA:FF:5F:2F:EA:05:18:6B:0C:A8
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5e:a3:e9:7f:86:15:d0:b1:63:b8:31:89:91:35:d7:12:95:
ef:ed:c5:7d:fc:fc:d5:56:97:7d:95:a8:e3:8f:07:9c:e1:9a:
57:f5:da:46:7a:85:d6:af:4b:a3:24:7a:a8:4a:e7:bc:00:06:
76:9e:c8:90:73:b0:e0:cc:e3:9a:e2:4c:7b:6a:96:ec:dd:df:
68:72:b0:07:a7:ed:b7:1b:11:f4:eb:ae:11:92:62:9d:b7:38:
db:0a:29:73:68:66:21:21:f9:7b:b0:c6:b3:c5:9a:11:8a:41:
52:ac:80:87:6e:b1:0e:ca:44:2c:93:82:93:99:2b:00:bf:b5:
86:97:26:91:3d:49:7c:31:c3:d5:a2:67:34:93:a7:7d:88:08:
02:f6:52:e2:58:14:9d:d3:96:63:34:f2:90:02:87:2c:b5:2c:
f9:56:2c:cd:05:f4:80:73:0a:86:c1:c4:53:5c:50:2c:c5:f8:
80:22:ad:d2:e6:28:e4:e4:b1:db:e1:7b:e8:01:64:8b:74:44:
b7:11:fe:cc:7b:67:a3:dd:52:4b:f1:a4:5b:e7:49:c8:12:ba:
5c:96:64:9f:0c:43:00:a9:65:c4:de:d0:42:d3:ea:77:a9:68:
03:05:ea:40:62:6b:4a:98:d0:24:4a:5f:7f:a3:9d:79:bc:46:
a6:64:e4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:18:52 2026 by rpki-client