
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
File: II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json)
Hash identifier: AcBXxP0FwtTE1Vx/df3PwSko7hyceYBC46Ah5XUWzMo=
Subject key identifier: BC:54:A1:48:7D:AA:28:AE:87:1A:91:81:43:5C:FA:42:01:46:13:BA
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial: 019F90C7F134A32AFBBE0318363AF9D673B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
Manifest number: 1703
Signing time: Thu 23 Jul 2026 21:00:50 +0000
Manifest this update: Thu 23 Jul 2026 21:00:50 +0000
Manifest next update: Fri 24 Jul 2026 21:00:50 +0000
Files and hashes: 1: CFgzsXECwMiDOwIfWrN0I3tIDWI.roa (hash: 4jxaJz34clPFCvVztYmXdTaBL83us4edb+/DIMlX2XY=)
2: FaUuFS6TDX1zSostpasPm7Qvifc.roa (hash: AQyo3IRzMcTTKX0sekpJskKYPPvY2FFoOC49QHNt62o=)
3: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: J/QOsHmOdGAtILfDYezuspKKaVTiMbkigS/ifqDz5u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:f1:34:a3:2a:fb:be:03:18:36:3a:f9:d6:73:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Validity
Not Before: Jul 23 21:00:50 2026 GMT
Not After : Jul 24 21:00:50 2026 GMT
Subject: CN=bc54a1487daa28ae871a9181435cfa42014613ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:08:8d:25:b1:79:db:c8:f3:db:86:15:ac:35:
55:d4:31:82:d3:2a:a6:02:e8:14:ae:a4:b9:27:6b:
f3:95:69:01:bc:bf:da:fc:3e:61:62:cc:ac:8e:55:
c6:73:7c:71:d3:c7:29:ea:ab:20:1a:09:f2:5d:80:
6e:87:75:84:5a:de:d7:3f:23:5b:bf:84:da:18:b1:
ce:93:a2:40:d4:7b:0c:25:1a:10:e5:09:b0:dd:07:
e0:b1:a6:ba:8f:48:93:c1:a5:36:6a:b1:ac:8c:b1:
81:65:6a:f6:8f:9e:cc:c8:b8:d0:37:38:b8:96:9c:
e1:f8:91:20:bc:0a:0b:87:80:5c:c4:e3:b2:27:ec:
70:65:a1:08:21:91:73:f8:2a:c5:94:08:6c:74:98:
94:b7:cc:b6:08:fa:1c:d7:d6:6f:4f:72:d2:d2:92:
8c:57:51:d7:50:f6:3d:24:b9:95:08:50:88:7a:9c:
de:81:04:1f:88:a5:5f:1b:00:98:45:4d:1e:b0:f8:
e1:be:40:0b:80:8b:69:6d:05:b3:c6:4b:20:f1:81:
d6:ac:b4:6f:48:22:b6:87:33:14:b8:93:ea:e8:0a:
7c:02:41:88:01:56:f8:fc:28:33:aa:d0:5f:4e:cf:
db:e0:49:0f:7a:03:bb:3c:46:06:92:f9:a4:b1:6a:
c0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:54:A1:48:7D:AA:28:AE:87:1A:91:81:43:5C:FA:42:01:46:13:BA
X509v3 Authority Key Identifier:
keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b0:e1:b9:b3:0a:c5:c4:cd:66:ae:77:5b:bc:f1:9e:55:85:
8b:4c:92:15:d7:f0:86:89:c9:83:4f:f7:84:c2:03:d0:72:5c:
68:2d:c1:3d:30:31:ff:9d:cb:a1:a9:d7:6d:45:6e:78:ba:b3:
b1:be:c9:33:fe:df:04:d9:b7:59:34:26:f6:fe:2c:ee:ba:e0:
df:26:5f:33:78:b2:ba:4c:b6:32:d7:51:80:dd:ea:85:d8:6f:
d9:8f:88:a2:37:c8:42:d6:2b:b4:89:76:a6:69:b0:7b:59:4c:
68:9d:69:b9:5a:6c:1b:5f:bf:b8:b7:7a:2d:c9:5f:80:f7:15:
7c:fd:48:be:a7:b9:23:5d:10:66:05:5b:1a:bd:78:e6:ad:ae:
68:c8:d7:1d:8d:b9:dd:07:c0:c3:33:98:9e:9e:2a:81:9b:f4:
da:67:00:73:8f:5e:72:f1:ec:a2:0f:3e:b2:f1:69:d6:da:6b:
48:15:6d:83:fc:ed:3b:b9:b9:25:0d:39:9f:8d:ca:01:eb:2e:
60:cd:bf:b6:5a:88:6c:d2:e5:a8:41:39:cb:a2:87:80:be:5c:
a1:3e:3f:65:34:61:b7:06:cd:d6:1e:67:a2:c0:b4:0b:04:51:
ce:e1:3f:ad:7f:bb:0f:d6:24:a8:73:3d:59:d9:aa:5d:91:6f:
79:2f:9f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:07 2026 by rpki-client