Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
File: RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft (raw, json)
Hash identifier: E9U545QH2V+XL6Q+8SiPv4is5mm9eMFU2I+Nw4UVtg0=
Subject key identifier: 53:42:A0:AB:71:1F:AA:32:DB:39:02:12:55:CB:00:48:92:67:40:A7
Authority key identifier: 44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
Certificate issuer: /CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Certificate serial: 01A134EC62DDC1D01F565FC70CE336625004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
Manifest number: 1A9F
Signing time: Tue 13 Oct 2026 11:01:09 +0000
Manifest this update: Tue 13 Oct 2026 11:01:09 +0000
Manifest next update: Wed 14 Oct 2026 11:01:09 +0000
Files and hashes: 1: 1f3m5WIt2ZvCZFCMEpdrMwuuSa0.roa (hash: zBndpFW3MOOklCRMcrwC7cRmH+rM6cBDTwopgPRh+HE=)
2: RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl (hash: 52mPMy+hAxx6ut3PFfX1mqjZDV0L2YTTZHtHo8yVnQM=)
3: q3LGHpKLwXhUXQy5N3eUog7IGnE.roa (hash: ny31WBuWDPbRs/tDie0hbkT18Zoj64Zy4OoqbPqJ5zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:ec:62:dd:c1:d0:1f:56:5f:c7:0c:e3:36:62:50:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Validity
Not Before: Oct 13 11:01:09 2026 GMT
Not After : Oct 14 11:01:09 2026 GMT
Subject: CN=5342a0ab711faa32db39021255cb0048926740a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:13:07:0c:3e:62:10:10:b0:d9:30:b8:d6:cd:
e8:e8:58:f2:81:96:11:aa:0a:a0:90:66:0a:3f:5d:
5e:f8:1a:4f:30:19:df:cc:54:01:39:f3:9b:71:6b:
ae:b8:bf:d8:e1:91:ae:45:73:49:3c:26:95:ae:28:
a7:6c:f2:35:6e:3f:64:02:5a:15:bc:80:51:a1:7e:
d1:c7:d7:fa:d3:43:4e:a7:1d:85:f8:60:bc:34:cd:
0c:db:60:fa:1a:7d:5a:af:ff:7d:ec:a3:42:42:70:
bc:68:bf:7a:73:41:a3:2b:a8:8c:48:25:71:f1:0a:
99:c9:4f:e5:8c:44:cd:6e:e5:5f:b5:03:0f:1e:e1:
0b:d8:f6:da:91:21:cc:70:fb:3b:95:40:65:98:06:
7f:5f:38:82:98:4c:ab:0e:c2:fb:7a:f7:04:c7:ae:
f5:31:2a:8c:48:72:2f:f2:ea:ea:cc:df:31:38:6b:
92:4f:12:bb:3b:b0:4d:7f:e5:08:94:32:ce:e1:b9:
57:de:e7:ce:5b:ce:35:b7:52:ce:c1:52:58:90:14:
0e:1a:ff:1f:98:5c:65:9c:f4:4c:52:51:ef:09:20:
6c:18:a7:79:04:40:eb:00:8b:d6:65:31:4c:a5:46:
60:23:4a:dc:24:78:ff:cb:2f:09:ed:79:a9:d4:fd:
84:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:42:A0:AB:71:1F:AA:32:DB:39:02:12:55:CB:00:48:92:67:40:A7
X509v3 Authority Key Identifier:
keyid:44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ba:3f:e6:9f:15:fb:1c:49:6c:84:ca:90:c7:5d:5f:33:f1:
40:9f:00:60:fc:63:20:b1:dd:c0:6a:8f:bb:96:08:0d:93:00:
50:96:58:3b:57:8c:5c:ef:70:c6:b2:ee:75:24:97:95:f2:ab:
12:f6:f7:9f:8a:85:c2:3b:35:b4:51:a7:18:8c:61:5e:bc:78:
91:50:b8:f6:6e:46:c7:57:76:17:f9:5c:fe:c1:9a:a1:66:77:
46:ea:07:42:87:b5:e2:61:08:68:9d:13:c4:b9:c8:5b:76:8e:
3d:21:02:72:d0:ec:81:4c:28:81:66:f4:d1:9a:b7:c7:92:1a:
5d:d2:6c:d5:c8:24:e9:4e:f4:d9:ef:83:c3:ba:13:d2:9b:67:
22:55:d3:a9:e8:ad:ad:d3:58:18:48:ba:68:4e:f7:b5:38:d8:
9c:89:d0:80:62:80:e4:ae:8b:12:b0:d1:05:1b:09:22:e4:8b:
60:1d:34:8d:27:ad:73:5b:d5:a8:a9:a9:6c:8f:ff:3a:a2:ce:
b6:a3:38:21:0e:57:95:2f:0d:54:37:fb:ce:4b:5e:39:d0:bf:
b0:30:1f:a2:ed:53:fa:da:e1:97:de:01:77:8b:c1:07:e2:f0:
5d:5e:bd:20:18:ed:6d:dc:77:cc:68:47:b7:9b:3b:75:c4:07:
50:65:9b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:18:48 2026 by rpki-client