Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
File: RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft (raw, json)
Hash identifier: yWVEIi80hzx/PJn44LLgFADpLnw9V4VdEf5S3iVtbN0=
Subject key identifier: 7F:72:D6:68:66:63:28:48:AE:CB:53:67:87:03:23:A4:5F:2A:60:B2
Authority key identifier: 44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
Certificate issuer: /CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Certificate serial: 019CAE3526FE6975B429E33DF5E459A424E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 11:00:44 +0000
Manifest this update: Mon 02 Mar 2026 11:00:44 +0000
Manifest next update: Tue 03 Mar 2026 11:00:44 +0000
Files and hashes: 1: 1f3m5WIt2ZvCZFCMEpdrMwuuSa0.roa (hash: zBndpFW3MOOklCRMcrwC7cRmH+rM6cBDTwopgPRh+HE=)
2: RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl (hash: u8Y2bRxjkB3qnjA44rWgUnqV9Pl+kjiJISl+ZBsoE5I=)
3: q3LGHpKLwXhUXQy5N3eUog7IGnE.roa (hash: ny31WBuWDPbRs/tDie0hbkT18Zoj64Zy4OoqbPqJ5zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:26:fe:69:75:b4:29:e3:3d:f5:e4:59:a4:24:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Validity
Not Before: Mar 2 11:00:44 2026 GMT
Not After : Mar 3 11:00:44 2026 GMT
Subject: CN=7f72d66866632848aecb5367870323a45f2a60b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b2:42:7b:29:5e:e0:7c:e1:9e:d2:6a:56:99:
24:3b:98:9b:7c:bb:7f:ce:1f:d7:f2:70:3c:7a:0d:
9f:93:26:c6:12:04:96:07:40:b2:81:cb:f5:5b:2f:
f7:78:73:3e:44:b9:ef:32:bd:d6:23:13:0b:e9:77:
f2:67:50:e7:92:61:74:36:7c:26:3b:2d:03:71:3e:
42:99:ff:75:50:6b:c3:df:e8:a3:fd:88:13:51:2d:
cc:e8:ae:b9:b3:32:76:1b:b7:d8:ff:88:c4:9a:b9:
23:93:72:52:1d:aa:c4:28:2a:f4:c6:40:8e:dd:18:
4a:d0:60:83:3f:db:2f:67:36:74:29:9a:53:d9:23:
9d:02:4e:b0:ff:59:7e:0c:93:7a:6d:40:fe:2d:81:
4e:b7:72:37:e5:3e:18:5b:e0:00:26:34:71:e5:d1:
f0:87:ca:f1:b1:2e:b7:71:03:0b:e9:ca:c0:9e:a1:
c8:95:04:8f:f7:8c:0a:3a:9f:1e:9a:11:27:02:68:
d7:e5:34:0d:73:46:e8:98:81:5a:1a:df:f6:2b:37:
c3:c8:50:f7:02:82:34:f1:6b:43:84:7a:d5:7e:07:
0d:32:a6:20:43:3d:a6:3b:ad:29:e8:dc:c5:15:ae:
9f:e3:df:4d:50:0d:fc:ee:0f:ff:2d:28:18:82:28:
b0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:72:D6:68:66:63:28:48:AE:CB:53:67:87:03:23:A4:5F:2A:60:B2
X509v3 Authority Key Identifier:
keyid:44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:76:13:93:73:e3:8e:76:e3:5d:1d:ef:a7:a7:d5:00:b2:a6:
17:52:01:40:d0:aa:cf:aa:e9:bd:5d:1a:36:07:36:ae:39:91:
2a:ef:a7:3b:3b:de:08:95:90:d3:54:2c:a5:da:7f:0f:0f:d1:
ed:7d:27:7c:91:38:47:9f:67:8f:e1:93:ad:80:95:cf:4f:5d:
dd:d9:ea:5f:ea:d7:7d:a2:2e:dc:89:0f:9d:b7:91:d0:60:95:
8b:76:3d:af:23:b6:64:c6:29:91:d5:87:3a:73:a5:b3:7c:c5:
ad:a5:09:ea:8d:2e:5a:da:98:98:04:43:62:be:5e:24:68:2e:
77:a8:ea:f3:53:46:1f:5d:7c:d5:41:6d:61:36:e5:9a:e8:c7:
26:e1:73:c1:c5:10:61:ba:d2:45:3f:e5:bc:b0:a9:ae:87:09:
97:92:9f:01:cc:db:dd:5e:49:39:c6:cd:01:59:30:0c:72:dd:
ff:29:90:ad:5d:35:89:b3:ee:61:22:39:72:6a:4f:73:14:f6:
63:e8:67:a6:e2:60:b8:b5:ff:84:5c:90:12:5e:a3:62:11:21:
d3:50:53:71:ce:21:ec:86:d0:1f:e6:b5:d4:74:ec:4b:78:d7:
d7:0e:05:5e:3c:0e:9e:c7:c7:d8:b2:2d:10:25:44:90:5b:7e:
a2:96:2e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:32:46 2026 by rpki-client