Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
File: II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json)
Hash identifier: lln3XhPV2MUIjYd849VxtYOTvJtwAyQRyfU+5+osxPc=
Subject key identifier: 77:11:DA:2C:55:C6:D8:05:BA:2F:46:B6:87:D2:A3:ED:DF:86:6F:35
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial: 019EB4A03F19F2FE1A48BCAB059695370165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
Manifest number: 1691
Signing time: Thu 11 Jun 2026 03:01:01 +0000
Manifest this update: Thu 11 Jun 2026 03:01:01 +0000
Manifest next update: Fri 12 Jun 2026 03:01:01 +0000
Files and hashes: 1: CFgzsXECwMiDOwIfWrN0I3tIDWI.roa (hash: 4jxaJz34clPFCvVztYmXdTaBL83us4edb+/DIMlX2XY=)
2: FaUuFS6TDX1zSostpasPm7Qvifc.roa (hash: AQyo3IRzMcTTKX0sekpJskKYPPvY2FFoOC49QHNt62o=)
3: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: DfSx+W9JSsPrnsAN5JB+nh5S39xAVg61bq9p9NWgYVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b4:a0:3f:19:f2:fe:1a:48:bc:ab:05:96:95:37:01:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Validity
Not Before: Jun 11 03:01:01 2026 GMT
Not After : Jun 12 03:01:01 2026 GMT
Subject: CN=7711da2c55c6d805ba2f46b687d2a3eddf866f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:15:46:45:8a:f0:30:77:90:16:b3:b6:38:26:
11:f2:ac:dd:b9:87:d9:f1:15:c1:76:09:81:fe:ef:
7b:46:7a:fb:16:3c:41:3d:f9:08:ee:5d:65:62:ab:
c8:7c:66:9e:a6:a2:c6:19:cb:74:98:ff:c8:e3:1f:
4e:90:58:af:23:e2:55:7d:78:f4:df:b6:dd:45:ee:
d4:52:be:90:a2:4a:4b:dd:ce:ed:cf:90:bf:cb:f9:
36:d2:e1:96:55:1c:65:12:2c:f7:23:a3:fc:6b:72:
cb:6f:88:a7:f6:49:6f:4a:30:64:24:26:1c:e6:39:
80:9b:fe:86:0a:3b:62:39:af:08:25:af:f6:76:89:
67:81:da:d3:b0:c8:51:94:f3:46:2c:9d:76:8a:a0:
c9:2d:6e:b8:9b:96:b5:b9:ad:5a:ed:e5:01:7c:bc:
3c:73:ba:43:55:f5:8d:cc:9f:5d:6c:61:fe:a0:16:
5b:f4:cb:df:77:45:2a:15:3b:91:58:cd:ad:29:f0:
5e:78:11:b0:bf:40:91:db:8c:82:34:17:aa:02:6d:
1c:1e:6d:6e:a9:92:3a:b6:06:2b:99:97:44:cc:ff:
67:3b:fc:af:a6:2d:d6:1a:96:b2:22:ff:8f:99:c0:
c9:26:b8:81:e3:56:64:62:b7:46:ef:7e:37:98:b6:
e7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:11:DA:2C:55:C6:D8:05:BA:2F:46:B6:87:D2:A3:ED:DF:86:6F:35
X509v3 Authority Key Identifier:
keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:85:10:4f:25:4a:e6:de:e6:c4:78:6f:c8:9d:f0:93:f7:d7:
22:0d:40:23:3c:e9:0f:46:29:44:b9:69:a2:2c:88:5b:1d:7f:
9a:0b:39:6b:bb:9f:67:2e:10:c5:17:9f:c9:62:e1:07:25:b8:
cb:aa:b5:1a:86:5e:c8:7e:c5:02:c7:d0:d0:ec:5e:9d:c4:8f:
92:45:31:b0:27:da:be:bf:be:8e:b5:cc:b4:e4:2b:8c:95:67:
2a:e7:c2:dc:f1:9d:2a:28:85:36:e6:d7:28:e1:9a:27:bc:b8:
1c:aa:30:c6:40:47:92:c5:95:ba:1a:5b:09:52:ff:0e:bb:24:
cc:c8:8b:62:6b:d1:ca:05:78:a2:f9:6c:fa:1e:b3:61:e8:ca:
6e:c1:bd:77:6e:5c:c6:23:ed:33:67:ed:70:99:41:6a:35:80:
bb:22:a7:5d:e0:57:a4:1e:ac:f7:fd:71:9a:8c:d8:41:8d:d9:
24:cb:8e:bd:c9:01:7a:d6:dd:73:2d:fd:b0:e7:ab:95:38:e8:
3b:6b:54:72:db:95:4d:a7:66:6b:7f:85:7d:0b:d3:5f:b0:bb:
e2:81:6e:62:b1:5c:60:1e:02:77:29:4c:4a:6a:07:e9:5c:92:
00:c4:1c:45:01:7d:cf:b2:96:ea:a7:e4:e8:d6:a9:94:36:c6:
58:4d:27:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 13:07:46 2026 by rpki-client