Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
File: II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json)
Hash identifier: v+4b/j0CWFnv6L/kRvIOyezfp3t5vh2d13k5bOwRL24=
Subject key identifier: 6A:98:9B:22:7C:25:02:BB:A1:26:80:8F:27:DF:CA:81:CC:CF:65:1D
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial: 01A175823370A8772286B3D3E1882F2740CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
Manifest number: 17FE
Signing time: Mon 26 Oct 2026 00:00:29 +0000
Manifest this update: Mon 26 Oct 2026 00:00:29 +0000
Manifest next update: Tue 27 Oct 2026 00:00:29 +0000
Files and hashes: 1: CFgzsXECwMiDOwIfWrN0I3tIDWI.roa (hash: 4jxaJz34clPFCvVztYmXdTaBL83us4edb+/DIMlX2XY=)
2: FaUuFS6TDX1zSostpasPm7Qvifc.roa (hash: AQyo3IRzMcTTKX0sekpJskKYPPvY2FFoOC49QHNt62o=)
3: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: uUKri1nuNmBvcGkaDuKu/dE9cZIkwIKxmyim+JhHAOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:82:33:70:a8:77:22:86:b3:d3:e1:88:2f:27:40:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Validity
Not Before: Oct 26 00:00:29 2026 GMT
Not After : Oct 27 00:00:29 2026 GMT
Subject: CN=6a989b227c2502bba126808f27dfca81cccf651d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d8:45:49:1f:4d:5e:2f:63:2f:77:b2:21:59:
5f:9c:f9:44:99:e9:45:65:2c:05:12:fb:50:49:09:
ef:83:a8:82:42:dd:ca:f0:38:e0:10:83:24:c8:34:
eb:4a:5f:4d:c6:52:ef:7a:af:cf:cf:9e:6c:7d:97:
df:51:70:3b:4f:43:53:41:84:e9:71:b1:ca:72:c8:
5d:7e:f0:68:6e:9e:bf:fe:40:3b:e5:0f:52:62:e6:
54:e6:4d:ea:a3:b5:09:c8:6e:39:bf:09:c2:7c:99:
ee:d8:82:00:56:8f:7d:16:f5:ad:65:ac:d0:11:70:
de:6a:71:d3:41:6f:c4:ca:2b:20:27:71:3f:9a:d8:
2d:a1:d5:2c:08:e0:e5:36:85:a6:c7:82:e5:bc:ea:
2a:c1:79:55:96:06:6f:63:bd:3b:08:4e:14:1c:fa:
2a:5b:3e:ff:2a:2a:72:39:11:d5:c5:fd:23:1d:e8:
14:84:ba:78:eb:d5:33:95:a9:18:ff:cb:d3:f9:77:
28:0e:b1:77:c3:88:e2:cd:aa:9c:e4:b1:9c:1c:f9:
ef:a0:c2:d4:e3:4a:4d:8d:33:5e:07:89:00:e2:85:
6a:9d:04:31:00:da:48:99:f8:f4:bc:4b:61:8b:85:
4f:e4:f0:4c:3a:70:bd:f3:ae:41:54:dd:d7:ca:49:
d6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:98:9B:22:7C:25:02:BB:A1:26:80:8F:27:DF:CA:81:CC:CF:65:1D
X509v3 Authority Key Identifier:
keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3f:93:49:d9:78:a4:bc:9b:58:1b:f5:5c:cc:df:e8:75:0c:
ce:d5:4a:69:69:b6:be:d2:88:fc:97:11:2d:5f:b4:e9:e2:0e:
84:8c:19:72:4c:51:6e:19:0c:45:59:97:11:5a:ca:04:de:ce:
b6:12:b6:1c:cd:28:f4:ee:59:3f:2b:0a:a2:fb:3d:4c:46:70:
c0:56:20:ac:b4:ca:44:39:4c:f3:65:f9:0b:c3:3a:8b:16:a0:
ed:11:34:1b:56:be:8a:7e:cd:48:c5:ea:57:dc:fb:58:9c:1d:
78:fa:5e:48:6c:da:7e:f2:de:67:91:7b:22:b8:0c:55:6c:e2:
ff:5d:82:d3:c4:8e:05:14:85:5f:ab:b1:0b:0c:2c:55:db:a6:
36:1e:28:67:f9:5d:b3:85:62:ee:f5:08:22:b5:0e:bd:12:99:
1b:23:2d:21:5e:7b:7e:b0:90:58:1b:c0:a4:e3:e3:c9:3e:51:
32:ee:67:f8:59:57:f4:49:03:57:bd:31:18:df:a0:3a:ba:23:
c7:2c:41:8e:95:4d:9c:bc:8d:48:49:ae:ec:6d:30:4f:6b:c7:
ab:94:23:8f:4d:ac:e9:f4:0b:5b:6a:df:85:5b:58:27:58:60:
83:ad:01:cf:06:25:8a:42:55:ab:10:f2:f9:c8:2f:5e:66:89:
dc:46:6a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:34:30 2026 by rpki-client