Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
File: II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json)
Hash identifier: oQlG+No2Gy0UnwaFv/GyrXNryUG+HCp141Sk7wlCwQ8=
Subject key identifier: D3:B2:E7:6E:46:FE:87:47:B5:00:57:01:CD:EB:C1:FB:BC:40:95:49
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial: 019CE334D7B1D792A69DE3CC579B6D31B095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
Manifest number: 15A0
Signing time: Thu 12 Mar 2026 18:00:16 +0000
Manifest this update: Thu 12 Mar 2026 18:00:16 +0000
Manifest next update: Fri 13 Mar 2026 18:00:16 +0000
Files and hashes: 1: CFgzsXECwMiDOwIfWrN0I3tIDWI.roa (hash: 4jxaJz34clPFCvVztYmXdTaBL83us4edb+/DIMlX2XY=)
2: FaUuFS6TDX1zSostpasPm7Qvifc.roa (hash: AQyo3IRzMcTTKX0sekpJskKYPPvY2FFoOC49QHNt62o=)
3: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: 0t39bmzudcV+Ivfdp86c2x3pCwRV5aS8Sk5DDPR9/tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 18:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:34:d7:b1:d7:92:a6:9d:e3:cc:57:9b:6d:31:b0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Validity
Not Before: Mar 12 18:00:16 2026 GMT
Not After : Mar 13 18:00:16 2026 GMT
Subject: CN=d3b2e76e46fe8747b5005701cdebc1fbbc409549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:32:60:67:15:61:6b:1d:e4:67:3d:6c:7e:c8:
c1:8a:ef:de:b2:c5:69:5c:6e:9d:0e:e9:3f:ff:ea:
65:36:d3:25:a0:12:bb:52:37:51:c7:24:aa:71:24:
97:0f:9f:9b:e3:7a:e4:fe:72:e7:59:22:c3:15:2a:
40:a3:fa:90:56:d6:1d:42:8e:e3:6f:01:47:e1:83:
e2:f0:1e:de:19:af:b2:4d:44:8d:4d:7e:81:b0:68:
e0:b0:bb:51:fb:f3:4d:72:f4:fe:57:68:db:57:d4:
ba:33:60:d8:88:51:57:3a:a8:6a:d8:98:c7:62:31:
ea:29:3f:f3:4a:de:1d:8a:f2:9f:ce:c7:a5:d8:13:
29:13:15:53:94:06:8e:2b:67:be:2a:db:9a:ed:34:
85:cc:36:6f:49:cd:f8:fc:ab:79:b9:eb:76:fb:ca:
e4:28:23:b3:7b:8f:d4:c2:5b:ef:bd:ef:3c:08:f4:
d4:4e:3c:db:3e:05:9b:1f:85:d8:04:10:de:29:55:
13:fd:e4:03:dd:59:d8:ab:8d:4c:a7:02:dd:5b:24:
fd:61:8a:4c:29:e2:8a:61:ed:05:34:46:d9:27:ee:
85:79:5e:40:83:cc:e1:54:31:ff:77:2e:04:04:22:
07:e8:5a:4a:fd:b3:aa:61:53:93:b3:5b:cd:a2:11:
e4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B2:E7:6E:46:FE:87:47:B5:00:57:01:CD:EB:C1:FB:BC:40:95:49
X509v3 Authority Key Identifier:
keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f3:e9:2b:e2:26:dc:d2:c4:ff:c6:43:cd:d8:ee:35:e6:eb:
68:0a:22:1b:a4:94:e6:41:04:b4:23:dc:96:4b:46:46:f2:8d:
c3:67:4f:ee:80:f5:f8:f2:ff:d0:46:0a:e2:11:a0:f4:92:90:
67:75:eb:34:12:b4:45:95:8d:48:18:68:9c:ae:7f:0e:7e:62:
c2:f4:74:54:76:3e:74:20:42:6d:71:a0:b2:f1:47:64:34:2f:
0a:5d:0e:56:e3:47:d5:c2:d9:0d:34:fa:f5:71:d3:f2:bd:c4:
15:94:35:0a:a8:6c:65:21:b2:55:bc:2e:ac:f4:55:57:be:5b:
f8:c9:b1:02:3f:3e:e1:ce:78:aa:64:5f:ca:01:41:82:d0:5a:
d9:07:49:7b:1d:6f:a5:9a:76:01:d7:da:b4:20:d3:e6:0e:05:
33:fc:f0:d8:77:b1:8b:72:9b:69:d0:d7:18:16:1b:c3:59:ba:
db:74:dc:bb:42:c1:37:86:1e:ce:ad:d5:c2:ec:ab:03:30:a2:
86:6f:c1:2a:67:17:06:22:e4:6d:2b:f2:59:67:46:0d:7d:7c:
7a:e0:ea:27:8d:fc:96:e0:1e:a4:1a:f7:6d:cc:25:ae:7f:f0:
9d:89:bc:a7:51:8d:1a:d2:47:c6:84:7a:78:11:57:54:ba:1e:
23:83:f8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:47:50 2026 by rpki-client