Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
File: II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json)
Hash identifier: q343YhrhcPD5Bnj0IYe5E4e91HsTyHW2SBeMVsG2rGQ=
Subject key identifier: 1A:BC:40:F0:10:2C:48:90:1D:9B:16:18:6F:E3:8E:17:FB:5C:CB:83
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial: 019CAB3474941C43692CAA93578D1FB8CD61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
Manifest number: 1583
Signing time: Sun 01 Mar 2026 21:01:07 +0000
Manifest this update: Sun 01 Mar 2026 21:01:07 +0000
Manifest next update: Mon 02 Mar 2026 21:01:07 +0000
Files and hashes: 1: CFgzsXECwMiDOwIfWrN0I3tIDWI.roa (hash: 4jxaJz34clPFCvVztYmXdTaBL83us4edb+/DIMlX2XY=)
2: FaUuFS6TDX1zSostpasPm7Qvifc.roa (hash: AQyo3IRzMcTTKX0sekpJskKYPPvY2FFoOC49QHNt62o=)
3: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: j4jLeNmIm/SBM7Ad7l50SdI/mYuiI9ZMSsTMUDZnlX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:74:94:1c:43:69:2c:aa:93:57:8d:1f:b8:cd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Validity
Not Before: Mar 1 21:01:07 2026 GMT
Not After : Mar 2 21:01:07 2026 GMT
Subject: CN=1abc40f0102c48901d9b16186fe38e17fb5ccb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:63:4d:cd:af:ca:7b:9c:ce:ed:fc:f1:de:f0:
28:43:b8:16:63:a2:06:76:2a:c4:fc:5d:bb:bf:51:
f9:3c:08:c6:2d:ad:d4:3d:33:95:c6:ff:79:6a:3c:
a2:4f:36:f7:12:34:61:3a:66:d5:36:26:b5:b8:0c:
0c:23:89:41:47:8f:13:b1:a6:bb:2c:03:21:3b:3e:
52:38:60:bd:93:93:d9:9d:c2:58:b1:cd:a2:22:69:
27:12:5d:e0:9f:8c:7b:1e:1a:bd:37:e4:d1:4e:e4:
fb:0d:6d:f4:97:36:c9:ab:33:78:4d:63:6e:cb:18:
b2:9c:22:eb:51:61:86:e1:14:fe:85:e1:b0:f5:7b:
34:24:3e:b2:ba:61:74:99:b8:de:a8:e7:9f:7b:e9:
b4:64:d6:08:35:ac:cd:6a:ee:5b:bf:9f:1b:02:ef:
10:34:d1:33:be:c0:0a:19:4c:c8:3d:b2:b6:9f:f5:
3c:a1:87:fb:21:d5:9c:36:9b:09:95:e9:2e:ca:f7:
54:eb:a8:a5:9d:31:44:0a:d5:01:c5:64:b6:75:50:
a2:50:de:f7:3e:48:55:dd:b9:69:3f:e8:17:71:6b:
cb:02:ac:11:53:72:f6:9e:d9:07:b3:1a:28:99:3d:
66:97:e2:fb:c2:5c:fe:b5:de:1e:16:84:f5:d6:87:
95:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BC:40:F0:10:2C:48:90:1D:9B:16:18:6F:E3:8E:17:FB:5C:CB:83
X509v3 Authority Key Identifier:
keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f6:33:5b:17:35:8b:a8:e3:de:b5:e7:67:b3:e7:77:6e:d9:
36:e9:c6:f5:9d:50:9d:43:5c:0f:84:86:e4:1c:40:3c:4a:87:
55:a9:d1:07:7d:2a:2c:8a:67:f5:0c:2d:91:0a:01:d4:ad:ca:
02:b2:86:72:e1:f7:d4:5c:7c:fe:b7:e9:da:d4:d2:14:22:cc:
18:bb:a1:81:b6:68:cc:42:0f:c7:1d:de:bb:5d:9b:2b:fc:8c:
07:80:e1:07:94:c1:12:35:49:5d:62:59:cb:30:97:88:5a:4e:
c8:4a:61:23:b5:7a:71:8b:5e:56:ea:7a:f6:5e:11:0c:52:a8:
3a:91:ee:78:d8:1f:7a:e6:36:00:b3:cf:1d:9d:20:01:10:25:
c6:fc:6b:d7:07:e0:62:4b:03:75:5b:9b:fd:77:36:71:87:41:
af:1d:44:5b:1a:14:68:c0:f7:4e:79:f4:31:ae:36:e4:40:70:
7d:66:24:95:15:d3:aa:d2:bd:9d:a6:76:83:27:93:ea:42:d8:
db:17:73:3f:54:3d:fd:7a:97:d2:c0:0d:cb:cd:ad:1f:7c:8e:
6f:26:17:10:bc:2d:59:29:f3:2d:1d:09:de:1d:f7:5a:5d:58:
a3:a1:b8:69:1f:3a:1c:e8:fb:57:99:da:fb:b7:9d:c6:e6:05:
cd:11:e0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:26 2026 by rpki-client