Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
File: II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json)
Hash identifier: GQMOV/T5fnK1MuwxfiSd/ZqIi8lEMQroNNCkUdY5ydc=
Subject key identifier: 19:5B:69:D0:FE:46:D4:50:E0:24:8C:88:77:40:49:E9:32:32:43:FF
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial: 019F9E4CE9F455AEE4BAC9D3B8E4D14CFD23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
Manifest number: 170A
Signing time: Sun 26 Jul 2026 12:01:08 +0000
Manifest this update: Sun 26 Jul 2026 12:01:08 +0000
Manifest next update: Mon 27 Jul 2026 12:01:08 +0000
Files and hashes: 1: CFgzsXECwMiDOwIfWrN0I3tIDWI.roa (hash: 4jxaJz34clPFCvVztYmXdTaBL83us4edb+/DIMlX2XY=)
2: FaUuFS6TDX1zSostpasPm7Qvifc.roa (hash: AQyo3IRzMcTTKX0sekpJskKYPPvY2FFoOC49QHNt62o=)
3: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: h+Gl6UaHYAkbqNLssqmpE9kSKPZB538VRPHG5CgDiKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:4c:e9:f4:55:ae:e4:ba:c9:d3:b8:e4:d1:4c:fd:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Validity
Not Before: Jul 26 12:01:08 2026 GMT
Not After : Jul 27 12:01:08 2026 GMT
Subject: CN=195b69d0fe46d450e0248c88774049e9323243ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d8:6f:31:25:66:25:d1:6f:41:83:24:b5:7b:
83:4d:17:03:9d:f2:af:ff:d4:19:31:7f:8d:8c:e5:
cb:5a:34:7d:6d:49:63:ea:4d:7a:4d:1a:a3:f2:3d:
f4:4a:81:17:4d:11:da:ca:9a:25:03:01:11:b3:63:
13:09:ac:03:a2:ea:e8:42:97:cb:b6:95:05:10:86:
bf:57:a2:4e:e1:39:41:37:2d:5e:0d:47:dd:d8:60:
b2:8d:5f:f0:d3:94:45:92:99:28:86:d2:38:ab:f1:
3b:b7:21:75:af:87:74:6f:b9:68:21:14:39:35:e3:
26:be:4f:25:bd:23:2b:f8:ae:9d:8b:06:ad:f1:cb:
b5:f3:b9:41:9f:ab:c0:53:68:89:13:08:9e:5c:19:
ce:71:2f:af:ce:59:1b:1b:9d:d1:aa:ad:bb:f2:a9:
00:8f:5e:fc:aa:5b:b4:6c:bd:0c:e8:33:d5:5c:4a:
55:16:cf:79:bd:ca:16:f9:a8:fc:bf:68:2c:a3:dc:
30:2e:d5:40:c9:18:19:70:90:55:1a:36:6f:f4:8b:
dc:fe:4b:5d:6f:aa:a0:6c:3c:68:88:5e:9f:ef:f1:
80:01:ae:15:6c:41:37:1a:9b:9d:c5:42:78:9e:57:
eb:bf:64:14:c9:a7:f6:60:f1:b7:0d:57:3d:dd:57:
15:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5B:69:D0:FE:46:D4:50:E0:24:8C:88:77:40:49:E9:32:32:43:FF
X509v3 Authority Key Identifier:
keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:fd:34:25:f7:94:3b:3e:de:17:7b:b8:26:f9:6b:8f:45:91:
6c:1f:62:f8:99:67:a6:88:17:cb:8a:d1:d7:f6:9e:ef:77:1e:
43:76:cf:f1:ca:d0:dd:ef:d0:4a:3b:1c:c2:19:db:26:ee:c0:
72:29:39:7a:c3:ea:51:24:32:9f:9e:6e:2f:44:08:4e:82:79:
c3:fc:04:cf:27:e6:43:8b:e9:80:ea:40:a2:42:2f:26:a8:bb:
08:3a:42:17:3b:dc:92:c9:c9:51:df:c0:3f:19:dc:ea:29:f6:
86:d4:cf:c0:08:d9:56:f7:d4:63:e0:1c:40:de:3f:04:89:fa:
6a:b3:b3:84:a3:88:b6:31:43:0f:0f:bf:ed:2c:cf:c2:6b:16:
da:c0:bd:2c:41:59:99:29:e6:43:8e:5f:a1:b0:17:1d:c3:b4:
68:84:89:ca:04:d7:92:fb:2f:53:8b:eb:71:7b:b4:3f:de:03:
bc:46:ff:8f:0f:49:ed:70:00:83:f6:71:02:cc:44:15:3b:e6:
27:7d:34:9c:a6:d2:b3:c6:c1:7c:3a:d6:4b:6c:6f:04:59:a3:
68:06:16:3e:dd:20:b4:c1:ed:31:d3:7a:60:02:5b:b5:cf:44:
7b:9a:85:3c:68:dd:f8:ce:85:03:cd:6a:83:0a:2e:17:be:58:
6c:71:07:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+eTOn0Va7kusnTuOTRTP0jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOGY4YmY4ZDAxMmEyNWNjY2VlMjEwNjgwM2Q3MDY0MzIw
ZWQwZjAwHhcNMjYwNzI2MTIwMTA4WhcNMjYwNzI3MTIwMTA4WjAzMTEwLwYDVQQD
EygxOTViNjlkMGZlNDZkNDUwZTAyNDhjODg3NzQwNDllOTMyMzI0M2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NhvMSVmJdFvQYMktXuDTRcDnfKv
/9QZMX+NjOXLWjR9bUlj6k16TRqj8j30SoEXTRHaypolAwERs2MTCawDouroQpfL
tpUFEIa/V6JO4TlBNy1eDUfd2GCyjV/w05RFkpkohtI4q/E7tyF1r4d0b7loIRQ5
NeMmvk8lvSMr+K6diwat8cu187lBn6vAU2iJEwieXBnOcS+vzlkbG53Rqq278qkA
j178qlu0bL0M6DPVXEpVFs95vcoW+aj8v2gso9wwLtVAyRgZcJBVGjZv9Ivc/ktd
b6qgbDxoiF6f7/GAAa4VbEE3GpudxUJ4nlfrv2QUyaf2YPG3DVc93VcVZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlbadD+RtRQ4CSMiHdASekyMkP/MB8GA1UdIwQY
MBaAFCCPi/jQEqJczO4hBoA9cGQyDtDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUktTC1OQVNvbHpNN2lFR2dEMXdaRElPMFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wZWY1OGEtNTY2Zi00OGJjLWI3ZGEt
ODA1NWVjMTBmZjBhLzEvSUktTC1OQVNvbHpNN2lFR2dEMXdaRElPMFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wZWY1OGEtNTY2Zi00OGJjLWI3ZGEtODA1NWVjMTBmZjBh
LzEvSUktTC1OQVNvbHpNN2lFR2dEMXdaRElPMFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/00JfeU
Oz7eF3u4Jvlrj0WRbB9i+JlnpogXy4rR1/ae73ceQ3bP8crQ3e/QSjscwhnbJu7A
cik5esPqUSQyn55uL0QIToJ5w/wEzyfmQ4vpgOpAokIvJqi7CDpCFzvcksnJUd/A
Pxnc6in2htTPwAjZVvfUY+AcQN4/BIn6arOzhKOItjFDDw+/7SzPwmsW2sC9LEFZ
mSnmQ45fobAXHcO0aISJygTXkvsvU4vrcXu0P94DvEb/jw9J7XAAg/ZxAsxEFTvm
J300nKbSs8bBfDrWS2xvBFmjaAYWPt0gtMHtMdN6YAJbtc9Ee5qFPGjd+M6FA81q
gwouF75YbHEHlg==
-----END CERTIFICATE-----
Generated at Sun Jul 26 15:51:21 2026 by rpki-client