Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
File: RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft (raw, json)
Hash identifier: YPMUQ60yVgl7hS/r8tLGGA2XHDkXCEqfwXkxVTC6tos=
Subject key identifier: 70:5F:CB:91:47:C9:05:4C:A4:03:E3:79:E9:38:0D:76:BC:14:37:33
Authority key identifier: 44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
Certificate issuer: /CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Certificate serial: 019D9BBE1C6ECAABA37865CBAA957922C003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 14:00:20 +0000
Manifest this update: Fri 17 Apr 2026 14:00:20 +0000
Manifest next update: Sat 18 Apr 2026 14:00:20 +0000
Files and hashes: 1: 1f3m5WIt2ZvCZFCMEpdrMwuuSa0.roa (hash: zBndpFW3MOOklCRMcrwC7cRmH+rM6cBDTwopgPRh+HE=)
2: RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl (hash: 1PyyUzbifCnb/10Q+sN7qEvO7dW2RtzfO807KIUca2Y=)
3: q3LGHpKLwXhUXQy5N3eUog7IGnE.roa (hash: ny31WBuWDPbRs/tDie0hbkT18Zoj64Zy4OoqbPqJ5zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:1c:6e:ca:ab:a3:78:65:cb:aa:95:79:22:c0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Validity
Not Before: Apr 17 14:00:20 2026 GMT
Not After : Apr 18 14:00:20 2026 GMT
Subject: CN=705fcb9147c9054ca403e379e9380d76bc143733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:5e:7d:a5:c3:7b:42:32:e0:95:24:7e:02:
cd:76:f2:d6:76:d4:ed:00:3e:40:ef:9b:4b:4f:a4:
76:4c:34:a5:3f:9d:86:30:b7:db:c3:2d:46:19:e0:
84:90:84:7e:44:b4:74:70:f8:1c:6a:05:14:35:6e:
cd:7c:e6:af:60:df:1f:d8:f8:b8:f6:4b:e9:b1:56:
e6:70:ff:96:9f:df:74:2c:8b:31:53:58:ba:b2:53:
ab:79:b5:d4:2d:e8:8b:37:28:4e:ef:f7:db:a6:5d:
1e:59:03:e3:ce:51:3d:25:a7:f0:68:c0:80:89:2e:
97:78:59:de:05:41:55:76:30:bd:03:9a:14:ee:c3:
fd:c2:5a:39:b5:bb:83:a9:6a:86:63:78:6f:62:44:
50:cd:74:c2:24:5f:69:e2:62:6f:bc:14:8f:ce:b5:
98:62:82:fa:75:a3:a8:44:98:f9:fa:1c:f1:55:55:
b0:ab:ca:e1:7f:bd:0b:90:4e:1c:84:5b:51:16:f4:
d0:24:8e:94:3a:f7:00:ea:cc:47:98:b0:18:5f:92:
20:c2:8f:32:49:1d:84:b9:3c:8b:87:89:8c:84:49:
4c:89:39:79:25:bb:55:4a:55:b9:f0:62:25:35:04:
54:39:c0:54:c2:60:e2:a2:93:00:e4:09:24:47:e7:
2d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5F:CB:91:47:C9:05:4C:A4:03:E3:79:E9:38:0D:76:BC:14:37:33
X509v3 Authority Key Identifier:
keyid:44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:36:3d:72:30:f5:f4:bc:e5:33:bd:fd:3f:f7:01:55:42:05:
1c:89:16:80:2a:7d:16:cb:ed:6d:0d:f0:c3:9d:a2:76:05:66:
a9:eb:08:79:5b:c0:a8:32:3d:b7:53:12:47:23:76:0f:be:55:
f0:b2:10:9a:3a:1c:bc:b4:e0:5f:4b:69:ac:01:3e:56:a9:dc:
8f:53:23:9e:de:1b:8b:0b:b7:bf:7f:66:f9:89:e9:ec:ed:40:
42:77:aa:8a:3a:87:c5:ef:a0:fa:06:89:96:e4:7e:42:e5:a1:
c0:77:67:c5:3a:ed:07:1a:9f:f0:5f:38:86:3b:4e:d2:23:fe:
e6:fd:a1:ce:83:67:5e:6f:bd:1d:02:08:fd:7a:c0:37:b7:6c:
16:14:8e:58:2f:a7:69:61:cd:52:81:dd:04:c1:29:ab:8f:e2:
5d:7f:d1:e7:38:54:87:76:8f:e6:ab:dc:03:37:66:e0:1c:23:
32:f6:fb:e8:60:ee:d1:3d:7b:13:e7:e5:0e:c4:9f:2d:7e:d6:
75:15:cb:ec:e3:6c:3a:ad:fa:ae:06:9a:7b:b3:1b:6f:17:55:
81:43:db:55:bd:3b:7b:a6:fe:59:31:a8:d3:2e:66:43:6b:06:
8e:45:03:ec:f0:b7:c0:a6:6a:62:6b:5b:65:f0:99:b7:e0:eb:
df:b6:40:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:47:51 2026 by rpki-client