Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
File: II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json)
Hash identifier: 6T8uB7yH55+roFdRdeJ/d2m3mXQ2FAIK2i6PzPXKi8Y=
Subject key identifier: 05:A1:E4:03:CB:67:81:E9:61:D8:69:39:BE:1F:56:84:A6:DA:93:65
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial: 019EC03690C5C64245F34901C41C14C787A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
Manifest number: 1697
Signing time: Sat 13 Jun 2026 09:01:01 +0000
Manifest this update: Sat 13 Jun 2026 09:01:01 +0000
Manifest next update: Sun 14 Jun 2026 09:01:01 +0000
Files and hashes: 1: CFgzsXECwMiDOwIfWrN0I3tIDWI.roa (hash: 4jxaJz34clPFCvVztYmXdTaBL83us4edb+/DIMlX2XY=)
2: FaUuFS6TDX1zSostpasPm7Qvifc.roa (hash: AQyo3IRzMcTTKX0sekpJskKYPPvY2FFoOC49QHNt62o=)
3: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: 4So/YDaT4e0Qi6d4ZSJnvmYvTA+DMVuV2xaqEzO5Brs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:90:c5:c6:42:45:f3:49:01:c4:1c:14:c7:87:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Validity
Not Before: Jun 13 09:01:01 2026 GMT
Not After : Jun 14 09:01:01 2026 GMT
Subject: CN=05a1e403cb6781e961d86939be1f5684a6da9365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2b:c5:1a:e8:aa:c6:3f:4f:fe:bf:41:90:f3:
67:63:16:74:94:f9:b3:10:4f:d6:36:fd:3d:9a:91:
88:a6:a9:f8:54:08:c7:04:d7:db:30:b8:f4:fc:ab:
3b:3a:34:aa:72:02:4d:26:9e:e4:e7:41:17:16:76:
00:3a:39:ea:ad:0c:a2:7c:76:53:dd:a9:cc:b3:ee:
76:0e:e6:ce:41:6d:41:f6:97:42:d2:d4:ec:28:7b:
76:91:80:4e:8c:14:3a:23:e2:27:20:c7:ef:de:36:
19:2f:55:49:7a:22:49:75:9c:ef:d2:3a:2c:f0:fe:
0d:7f:e1:75:9f:0b:1e:03:d8:9a:32:9f:ca:e1:6d:
83:68:20:7e:cc:d1:73:c7:13:e6:25:ce:3f:80:1d:
3c:66:6f:ce:b4:b5:22:1e:b1:0e:3f:fd:42:66:95:
2c:1c:69:a3:0d:61:e8:43:4b:b8:63:bc:c0:7a:93:
e5:86:b7:1f:5f:97:92:5f:fa:82:e2:81:15:dc:83:
86:69:23:31:c6:04:fc:27:fc:9f:c0:f2:21:99:1d:
c7:33:04:f1:3c:ba:4a:2e:60:ec:0d:b6:57:a5:ce:
16:3f:dd:bf:fe:bb:41:45:9e:b8:cb:c1:6e:67:70:
35:4c:5a:c7:94:a2:b6:0e:15:6c:1a:3c:ef:42:1a:
58:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A1:E4:03:CB:67:81:E9:61:D8:69:39:BE:1F:56:84:A6:DA:93:65
X509v3 Authority Key Identifier:
keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a6:2c:31:b8:cf:aa:be:b8:ea:50:a6:5d:c9:bb:12:be:12:
06:f9:f5:36:ac:73:75:dd:42:64:80:3e:73:30:3d:30:3e:05:
3f:7f:57:87:19:09:c2:28:8a:36:2f:0f:9b:e9:1f:22:f7:6a:
05:2f:2b:bb:d7:d2:ec:4c:8c:7f:9b:e6:38:e3:d1:74:76:c8:
35:89:fa:c6:d7:95:82:52:b2:60:0d:2d:80:cd:26:ea:dc:ef:
ce:13:f6:fd:6c:05:bc:17:2a:3d:02:6e:61:8a:6f:96:b1:f9:
25:64:64:20:e8:1a:42:8a:2f:b9:13:64:a0:60:6b:45:6f:43:
b2:3e:a9:3d:a5:14:80:5c:7a:1e:24:6a:a2:1d:b3:08:72:e1:
ec:e6:90:7f:22:f6:39:9d:de:02:05:67:98:0d:9e:b2:97:99:
be:0e:f3:3a:09:72:23:f8:4b:bc:4a:c2:1a:79:88:51:3e:7a:
1f:bc:3f:f7:5c:bb:46:ff:08:0d:8b:f9:00:42:7d:d3:c1:78:
ea:b6:2e:0a:a8:fa:25:c2:a8:16:9d:27:0d:ed:97:2b:a9:f9:
06:14:b2:9d:42:55:78:39:0d:1e:36:aa:af:12:eb:39:64:35:
ce:01:bd:fe:29:c7:70:aa:dc:5a:bb:8c:90:bd:1e:b9:23:88:
9d:ba:76:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:05:50 2026 by rpki-client