Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
File: RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft (raw, json)
Hash identifier: w2IzEThCO0yY2eWGyebDuFht/N1bEQgeCa6inC1HgKI=
Subject key identifier: 45:61:93:4B:1D:3C:94:F0:47:C1:DF:E9:F8:9F:1A:83:5D:7C:08:38
Authority key identifier: 44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
Certificate issuer: /CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Certificate serial: 019D29CEE0AF52DEADD5ACC286B41F760186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 11:01:56 +0000
Manifest this update: Thu 26 Mar 2026 11:01:56 +0000
Manifest next update: Fri 27 Mar 2026 11:01:56 +0000
Files and hashes: 1: 1f3m5WIt2ZvCZFCMEpdrMwuuSa0.roa (hash: zBndpFW3MOOklCRMcrwC7cRmH+rM6cBDTwopgPRh+HE=)
2: RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl (hash: umveQm+x/ZcVJOursKpLU/K2GueKHLHXY63wURQFTHg=)
3: q3LGHpKLwXhUXQy5N3eUog7IGnE.roa (hash: ny31WBuWDPbRs/tDie0hbkT18Zoj64Zy4OoqbPqJ5zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:e0:af:52:de:ad:d5:ac:c2:86:b4:1f:76:01:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Validity
Not Before: Mar 26 11:01:56 2026 GMT
Not After : Mar 27 11:01:56 2026 GMT
Subject: CN=4561934b1d3c94f047c1dfe9f89f1a835d7c0838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ea:a3:39:d1:7f:32:0c:f0:c1:d0:89:f7:4f:
31:ca:ee:7b:ae:8e:6e:88:58:76:8e:08:6f:57:74:
32:7c:7b:c9:b3:0a:d6:82:0b:b1:f9:c6:eb:ef:76:
aa:b6:e8:38:7b:00:b5:9f:2f:8d:f6:c1:f7:d3:8b:
c5:99:01:e3:05:2a:cb:61:03:0a:2c:6a:20:e4:0a:
75:20:cb:4c:81:60:e0:7d:ac:77:68:93:dc:ff:98:
a4:b8:f6:cc:24:74:a8:d1:87:a2:eb:44:ea:ce:f0:
81:ed:d5:3b:ca:3c:bf:66:5f:ee:fe:78:0f:60:be:
05:9b:87:57:89:d9:d6:50:3e:ec:74:4d:e8:58:ca:
88:f0:42:88:93:19:8d:ed:b5:af:4b:b7:93:dd:e2:
74:c9:dd:75:6c:40:5f:c9:01:2e:41:e7:b7:09:21:
50:18:a0:ac:e6:b4:dd:17:77:13:82:bc:e2:3d:25:
54:27:dd:73:ad:b7:30:35:10:da:84:8c:50:ff:38:
fa:a9:91:dc:de:1a:64:b2:e3:24:a0:97:7d:7d:cb:
e3:e6:a4:a4:fb:79:8f:15:60:59:ab:bc:92:70:7d:
07:bf:ce:b0:d3:62:5a:11:39:64:57:8d:f5:81:db:
cb:a3:ad:1f:06:1d:33:e4:b4:93:ff:e6:b0:08:8c:
92:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:61:93:4B:1D:3C:94:F0:47:C1:DF:E9:F8:9F:1A:83:5D:7C:08:38
X509v3 Authority Key Identifier:
keyid:44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:25:a5:90:44:21:09:98:d6:51:fd:e2:9f:91:a0:81:b3:03:
95:60:7e:68:b3:2f:57:ef:2d:e0:94:3e:b2:a1:c6:a2:f3:3b:
4f:48:12:03:d9:38:9c:c0:ad:6e:7b:f4:a1:d3:47:46:b8:81:
7f:c1:18:a7:8c:88:e5:f1:89:4e:83:ad:b3:bb:d2:db:d9:95:
d7:69:da:06:f1:c9:af:37:04:c3:ae:43:d9:1d:50:e0:35:1d:
71:e9:6f:04:5a:e9:0e:bf:a2:47:20:04:9c:39:5b:9b:7d:c7:
95:9e:c7:77:b6:7e:3f:f9:2f:ff:81:5e:4f:3c:d1:39:9d:84:
b9:5f:f8:88:b4:cd:77:f8:2e:8b:98:94:c8:88:03:45:ef:78:
57:fa:81:7d:86:09:9c:8a:ef:87:2d:a7:01:9a:50:be:6b:36:
5d:59:15:1f:bf:5f:37:d6:2f:52:01:ca:c7:07:d5:98:5a:7d:
fa:d1:f9:a5:3d:2b:4b:fd:25:19:1b:30:4f:4e:78:62:83:75:
11:e4:0d:0f:25:e4:7b:b7:e3:55:7d:01:b9:d7:03:b2:de:aa:
01:a4:f5:36:29:5a:09:32:60:dc:46:13:cf:88:e9:d1:3c:44:
3d:ff:a4:79:e6:86:6c:07:25:c1:9f:ab:ac:37:99:cc:c9:55:
37:fa:e1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:08:29 2026 by rpki-client