Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
File: II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json)
Hash identifier: 4T0u4VJYiNft3nj6rQAFAATtCXwwpv0NFN1P3lNvJqw=
Subject key identifier: FC:87:CC:8F:8C:CF:DC:8F:3B:5A:F0:B6:ED:F8:46:66:5D:23:59:44
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial: 019D9AAC232E7A11FA561A9E192C34F2F78C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
Manifest number: 15FF
Signing time: Fri 17 Apr 2026 09:01:05 +0000
Manifest this update: Fri 17 Apr 2026 09:01:05 +0000
Manifest next update: Sat 18 Apr 2026 09:01:05 +0000
Files and hashes: 1: CFgzsXECwMiDOwIfWrN0I3tIDWI.roa (hash: 4jxaJz34clPFCvVztYmXdTaBL83us4edb+/DIMlX2XY=)
2: FaUuFS6TDX1zSostpasPm7Qvifc.roa (hash: AQyo3IRzMcTTKX0sekpJskKYPPvY2FFoOC49QHNt62o=)
3: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: H4wO1fiPj5czKbNjR3J87X2kGtkAojJSQNeuUfjuZus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:23:2e:7a:11:fa:56:1a:9e:19:2c:34:f2:f7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Validity
Not Before: Apr 17 09:01:05 2026 GMT
Not After : Apr 18 09:01:05 2026 GMT
Subject: CN=fc87cc8f8ccfdc8f3b5af0b6edf846665d235944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:aa:5b:15:9e:d8:fd:84:78:ee:3a:d6:dc:93:
2e:fb:24:e8:cc:c3:49:bf:b3:53:91:de:1c:f2:cb:
d8:78:9a:1d:b5:06:77:bb:a2:d1:01:ea:d8:55:55:
35:9d:13:5d:07:90:cf:2b:07:32:fc:c9:23:5f:52:
c1:15:8d:f3:a5:b2:b0:18:6b:be:7e:de:f9:4d:f7:
b8:2c:15:91:d8:06:08:7e:cc:1e:14:85:71:27:f0:
13:ff:80:48:51:43:6a:01:20:99:9a:aa:63:b5:f6:
22:d2:a7:cf:d8:00:91:2a:6a:6c:d1:43:fe:63:07:
61:4d:8b:5a:e3:e9:6d:20:c9:56:c4:7d:f3:6a:87:
ca:8e:3e:8b:af:b9:3b:e7:9f:85:63:2d:12:c1:f0:
01:69:bc:d6:56:f8:db:f7:22:3e:8e:48:eb:93:51:
08:38:ec:0c:29:99:63:45:35:01:0e:b9:87:6d:9a:
16:50:a0:5e:4f:1e:23:09:2c:00:d4:07:b1:d9:e3:
42:43:44:20:a7:bc:a5:4c:7b:7e:b9:c2:15:4c:8d:
dc:57:e1:b6:06:db:34:b9:04:c8:94:04:23:2d:ab:
80:dd:da:95:a5:4c:2f:18:b0:f0:e3:80:61:15:93:
b1:23:e7:fb:bd:c8:ca:62:6e:5c:7d:22:b6:90:7a:
bf:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:87:CC:8F:8C:CF:DC:8F:3B:5A:F0:B6:ED:F8:46:66:5D:23:59:44
X509v3 Authority Key Identifier:
keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:22:fd:b6:c4:7a:6e:f5:5a:da:87:53:37:95:43:3d:2e:44:
ed:1f:46:c1:d1:1a:6e:ea:33:d5:36:6a:0a:b7:2d:9d:82:5d:
fb:0c:83:82:1c:e0:80:5a:79:e7:95:8d:9b:d5:23:ba:e9:5b:
1e:e4:9f:81:d3:24:c3:f8:46:0c:8d:de:e0:7d:55:d7:b8:56:
5a:59:47:bd:51:41:d3:6b:74:8b:47:2e:b3:69:d8:c7:79:43:
08:aa:d9:bd:3a:62:88:64:0b:3e:7d:4c:49:cc:c4:f7:c5:e9:
95:df:1b:4a:d4:21:9b:52:f8:96:f2:28:1e:77:03:eb:8d:32:
41:a8:54:e9:d6:59:1d:4b:d7:68:b2:40:6f:8c:f1:67:d7:20:
3a:bf:32:cd:5f:6e:b5:05:6b:ad:d5:38:b0:fd:b6:db:d8:77:
b8:f8:a7:32:92:db:f7:da:78:a8:c6:0e:6c:54:56:d9:52:87:
6b:c2:78:d4:bc:ef:7b:c1:a6:6a:bf:3e:25:91:57:b1:ce:6d:
f7:80:b1:8f:e9:11:2f:c9:e3:06:54:f2:da:9c:78:99:24:4f:
18:9e:87:5d:3a:f2:c4:0b:5a:74:1a:58:72:83:77:1b:96:a2:
a4:2a:6e:b5:c5:f6:9c:d5:ba:5a:42:42:ee:e8:60:aa:a6:a4:
97:3a:48:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:09 2026 by rpki-client