Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
File: II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json)
Hash identifier: l8dp2Aa2d3zfusVSbE8o+D8aJCVqsBGmhbA1vBaz7dw=
Subject key identifier: 09:2F:F3:2E:1C:38:3E:71:D6:D0:3B:AE:DC:36:EC:5E:96:A4:6B:29
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial: 019E1DFE3FBC966919C681CACFD05398A419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
Manifest number: 1643
Signing time: Tue 12 May 2026 21:01:02 +0000
Manifest this update: Tue 12 May 2026 21:01:02 +0000
Manifest next update: Wed 13 May 2026 21:01:02 +0000
Files and hashes: 1: CFgzsXECwMiDOwIfWrN0I3tIDWI.roa (hash: 4jxaJz34clPFCvVztYmXdTaBL83us4edb+/DIMlX2XY=)
2: FaUuFS6TDX1zSostpasPm7Qvifc.roa (hash: AQyo3IRzMcTTKX0sekpJskKYPPvY2FFoOC49QHNt62o=)
3: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: +BGrDb/9hE9hnxPGjgH7gKEygS+naH9tmZqSr4UJL7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:3f:bc:96:69:19:c6:81:ca:cf:d0:53:98:a4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Validity
Not Before: May 12 21:01:02 2026 GMT
Not After : May 13 21:01:02 2026 GMT
Subject: CN=092ff32e1c383e71d6d03baedc36ec5e96a46b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:03:96:27:b6:46:d5:eb:d8:59:53:63:0f:
84:73:19:07:d0:64:03:12:22:1c:ca:7d:cc:0c:0f:
ff:d4:72:4a:b3:eb:5f:98:8d:e3:fb:e2:94:52:dc:
bd:36:59:82:94:0b:69:e5:28:08:0f:b8:05:e6:c9:
4c:23:bc:ad:7d:87:a7:a0:c8:0c:1e:e8:73:f2:ab:
b0:8b:e8:97:48:94:64:fe:f5:00:63:5f:65:c5:6b:
b4:62:42:d6:c3:f9:8c:49:86:1e:dc:aa:32:55:40:
cf:20:0c:32:bf:56:e7:4d:c9:65:60:a1:c2:bd:f2:
3a:fc:16:b1:8c:6b:72:14:bf:bb:92:2d:13:1a:ee:
47:8a:04:e2:d1:9e:f0:a1:33:16:d1:05:ed:12:c4:
a4:97:d8:40:f7:1e:1c:2e:3d:ce:6c:33:b8:3b:96:
9b:70:98:3b:f1:f5:57:4f:30:70:11:29:04:c3:b2:
22:6d:07:77:ef:76:ac:2f:d9:e5:58:9b:e9:44:51:
68:e2:cb:58:a0:28:f9:d5:b8:13:44:99:ac:b3:d5:
d4:fc:f5:aa:a7:a1:e7:58:4c:1f:f5:83:cf:3d:c7:
83:07:b5:07:1d:4b:c2:b3:d3:fb:ea:2a:c1:1c:26:
0f:8b:ff:15:b3:a4:94:9f:0c:6c:f8:eb:2a:05:2b:
ae:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2F:F3:2E:1C:38:3E:71:D6:D0:3B:AE:DC:36:EC:5E:96:A4:6B:29
X509v3 Authority Key Identifier:
keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:32:2a:61:c9:04:f0:bf:e0:80:9d:85:13:dc:c6:4f:04:49:
d1:f6:7e:1b:e7:4a:b0:f7:52:74:9d:1a:9a:34:5c:fb:21:8c:
45:ef:96:02:3f:73:b8:25:cf:0d:0f:8e:58:af:c6:f5:39:c9:
03:1c:cc:02:81:ad:1c:4c:5c:25:01:58:b9:b7:ff:0f:da:01:
9c:b0:01:96:0e:46:d4:26:99:af:77:3d:e4:5f:b3:46:12:2c:
77:92:c9:41:fc:17:fd:52:af:36:b4:4f:51:2e:54:78:46:07:
08:b0:5b:ba:90:bf:73:43:4e:e8:c2:12:e4:d1:05:cf:6f:d8:
41:3a:39:6f:41:f4:33:cb:80:88:fd:6c:df:a1:22:d4:f6:ad:
4a:a9:77:09:13:b6:14:69:a2:e0:3f:f7:e7:12:7c:2c:6b:61:
6d:50:46:02:eb:d8:3b:b3:91:95:9c:68:d0:46:f3:14:09:d2:
6c:13:e6:d3:b9:30:47:70:d1:ef:4c:97:b4:8f:0b:df:58:65:
8b:71:2d:a4:19:25:1f:5b:19:ed:46:ad:59:f6:62:3c:bd:46:
c5:4d:79:63:1b:d5:8c:ab:9d:e1:81:d4:50:77:b6:79:d5:36:
0b:01:4a:fb:cd:ac:a0:a8:35:b2:a8:19:8e:a7:96:e0:44:a6:
3c:42:f7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:33:51 2026 by rpki-client