Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
File: II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json)
Hash identifier: MF0uQJ+qgLZWG3NEPqtZU47lYOwhzKRuuwohA32MkBY=
Subject key identifier: EE:57:93:FF:7F:5C:13:B2:DC:C1:57:20:E6:BE:A4:38:40:2D:AD:9D
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial: 01A0C1E859684BBEFA7E8AA88F1421EEBA9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
Manifest number: 17A1
Signing time: Mon 21 Sep 2026 03:00:24 +0000
Manifest this update: Mon 21 Sep 2026 03:00:24 +0000
Manifest next update: Tue 22 Sep 2026 03:00:24 +0000
Files and hashes: 1: CFgzsXECwMiDOwIfWrN0I3tIDWI.roa (hash: 4jxaJz34clPFCvVztYmXdTaBL83us4edb+/DIMlX2XY=)
2: FaUuFS6TDX1zSostpasPm7Qvifc.roa (hash: AQyo3IRzMcTTKX0sekpJskKYPPvY2FFoOC49QHNt62o=)
3: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: vlgHeH/rMrk2t38ZMeNsMtSKiSRpK5u69mp6Ahu5IsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:59:68:4b:be:fa:7e:8a:a8:8f:14:21:ee:ba:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Validity
Not Before: Sep 21 03:00:24 2026 GMT
Not After : Sep 22 03:00:24 2026 GMT
Subject: CN=ee5793ff7f5c13b2dcc15720e6bea438402dad9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:c5:9a:85:06:93:cf:fd:75:46:45:0f:b5:
53:22:9d:bb:a4:cd:47:f7:a8:04:09:01:bf:21:53:
96:09:f2:70:f2:a4:d8:f8:6d:ad:bd:4a:f7:da:a0:
52:3d:dd:3e:4b:ce:f3:f2:2d:55:f3:3f:fe:c9:d6:
ca:bb:7b:1c:fc:6f:64:78:b2:80:9c:e4:11:aa:f9:
69:67:64:57:0d:f7:58:0e:c7:94:2a:90:6a:36:e5:
77:48:74:fb:ee:91:07:3c:84:2c:8f:e6:79:f2:64:
06:e0:0d:07:f9:27:d0:e3:31:3b:d8:ba:16:99:9b:
92:51:08:7c:03:ad:6e:74:b1:75:39:1b:91:79:e7:
a0:5c:9f:86:b4:6d:3d:af:a0:ad:8d:60:b3:ba:fe:
13:80:4f:66:a6:0a:3f:19:4b:7c:88:8b:4c:54:f6:
d4:dc:55:38:fc:72:6a:ab:05:5e:d4:e2:39:ca:dc:
0a:84:76:07:f3:9c:cd:b9:1b:1d:2e:3e:1b:74:d3:
c2:aa:b5:4a:3f:47:ab:8e:e9:9f:b2:8f:8d:74:00:
ba:83:b4:44:10:c2:99:0c:ed:00:f3:60:76:67:1a:
c7:9f:bd:09:b8:c6:17:40:4e:c4:1f:13:84:80:14:
49:32:0e:a5:aa:c4:77:ec:95:01:ca:0a:1a:c9:d5:
6b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:57:93:FF:7F:5C:13:B2:DC:C1:57:20:E6:BE:A4:38:40:2D:AD:9D
X509v3 Authority Key Identifier:
keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:bb:ef:ad:ae:23:4a:8d:f0:bf:0a:c0:a8:e1:5a:e6:4e:6e:
5a:fd:ce:b2:08:fa:d0:14:0c:fb:2f:e1:bf:dc:78:0b:46:a6:
87:ed:21:6a:68:b2:21:eb:93:52:1d:5f:33:fb:0f:74:91:00:
6a:03:4b:6f:d7:d5:3e:c6:83:75:c7:09:5a:cf:a9:b0:a3:f6:
e0:3f:e1:c5:cf:be:dc:78:f4:0b:38:24:34:74:18:bb:ed:04:
36:c2:5b:1b:67:1e:4c:62:41:bd:6a:54:fe:2f:9c:c0:3f:cb:
d5:87:03:b2:22:3b:cb:6e:de:39:02:09:5e:a9:c3:43:dc:6b:
b7:ce:75:a2:30:62:50:dc:ae:46:3d:75:7f:44:25:19:ff:d4:
96:f9:55:69:ce:f4:0f:da:54:b1:b9:84:d5:d0:4e:16:fc:64:
83:b3:0a:be:26:cf:04:1d:18:5c:67:dd:5c:5b:6b:d0:18:56:
ce:25:09:a2:ed:e3:37:11:49:9f:44:19:69:bb:b3:6b:ec:c4:
ce:42:58:58:54:53:b4:a6:4d:52:e2:93:be:d6:c2:31:ff:15:
4c:16:c9:89:27:87:4d:4b:13:e3:4d:bd:c1:0a:4d:78:16:3c:
b7:f3:37:09:77:cc:11:03:93:e4:b2:f7:b9:84:6f:6e:d3:76:
11:0f:45:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:15:39 2026 by rpki-client