Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
File: RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft (raw, json)
Hash identifier: b13N0Q6q549q6J0aCbfpQKFJ8orSSGFARTAWPlJ8nUM=
Subject key identifier: C4:A0:EE:6E:7A:08:F1:AA:A2:7D:08:E0:C5:13:7D:E8:9C:0C:5A:2B
Authority key identifier: 44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
Certificate issuer: /CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Certificate serial: 01A1464DDB24B9B99A3BB11F9915917D1B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
Manifest number: 1AA8
Signing time: Fri 16 Oct 2026 20:01:09 +0000
Manifest this update: Fri 16 Oct 2026 20:01:09 +0000
Manifest next update: Sat 17 Oct 2026 20:01:09 +0000
Files and hashes: 1: 1f3m5WIt2ZvCZFCMEpdrMwuuSa0.roa (hash: zBndpFW3MOOklCRMcrwC7cRmH+rM6cBDTwopgPRh+HE=)
2: RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl (hash: YS04aW2R0AYL78v03EnpRKOgpUAL+aakfAYUflXUmTQ=)
3: q3LGHpKLwXhUXQy5N3eUog7IGnE.roa (hash: ny31WBuWDPbRs/tDie0hbkT18Zoj64Zy4OoqbPqJ5zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:4d:db:24:b9:b9:9a:3b:b1:1f:99:15:91:7d:1b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Validity
Not Before: Oct 16 20:01:09 2026 GMT
Not After : Oct 17 20:01:09 2026 GMT
Subject: CN=c4a0ee6e7a08f1aaa27d08e0c5137de89c0c5a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:41:27:26:02:e7:7d:97:79:0f:57:10:81:6a:
60:20:3f:fc:bf:dd:9a:3a:b6:d3:8c:ac:06:7f:eb:
81:63:a0:cf:5b:f7:2a:49:b3:5a:1e:f0:5e:7a:30:
2e:ea:9c:56:af:e7:70:e5:15:be:10:a7:f4:40:1d:
8e:46:88:57:fa:4b:95:03:e8:a6:ea:0c:6f:62:17:
e8:ab:b9:a1:bd:60:20:c3:60:d8:da:1d:15:cd:e0:
22:ef:80:7b:b8:de:85:ad:af:07:1e:e3:7f:f2:05:
5d:3c:d8:fd:ed:3b:ab:99:ba:d8:8b:28:b1:29:d9:
ef:f2:63:46:cc:e8:55:9e:38:51:02:8f:d2:ba:19:
ab:60:10:ed:37:a3:59:64:07:b6:59:11:f6:a1:c9:
0c:da:8b:b5:e8:c9:9a:1c:47:59:75:77:10:a2:2a:
8e:a3:f6:92:d5:de:63:65:09:0f:30:5d:08:e4:2c:
0c:35:15:46:f3:67:8b:f3:a7:89:45:91:cd:1a:44:
1b:96:b6:6d:ff:9f:88:b1:29:93:76:ff:38:f5:c4:
63:db:f4:0e:ff:9d:54:90:6f:81:b9:f6:03:bb:09:
c6:87:ae:f1:df:bd:cc:b3:4a:90:79:1e:41:75:b0:
4a:58:9e:a2:74:61:22:57:14:e3:8c:1e:ab:69:a3:
17:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A0:EE:6E:7A:08:F1:AA:A2:7D:08:E0:C5:13:7D:E8:9C:0C:5A:2B
X509v3 Authority Key Identifier:
keyid:44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:21:3f:8c:8d:ca:4b:13:d4:c3:0a:6a:12:48:27:43:1b:92:
1b:ff:24:75:a2:9b:30:93:90:85:2f:6e:e1:cd:33:d8:50:6b:
0e:26:d9:32:82:f9:6f:31:b1:39:2d:82:23:5c:5d:1f:50:01:
35:3c:2c:6f:b7:d5:b0:4b:23:a6:22:21:e5:13:fc:1a:7f:93:
fa:21:90:a3:c4:ce:88:d0:64:33:fe:76:c6:ed:ed:a8:a3:57:
b5:d6:b7:3f:a4:87:4e:a7:a7:ca:cb:22:21:26:ad:23:d3:8a:
09:00:76:65:bf:b0:95:15:bc:b1:4b:d0:41:5a:53:a7:74:3c:
0e:c2:8d:c2:19:5a:4d:b9:90:f0:e9:ab:2e:98:e8:2c:02:3c:
62:07:e4:f6:ab:54:10:6c:41:1e:2d:01:eb:c8:19:56:da:08:
6f:cf:f4:dc:90:d0:0b:36:14:0c:dd:af:63:d4:a4:60:44:c4:
3d:69:2d:e4:db:d6:03:90:fb:77:aa:77:13:63:19:62:47:c2:
7b:63:b6:87:9d:38:6f:10:06:ed:04:cc:08:36:22:58:58:42:
04:7f:e4:ff:b7:2c:56:95:da:a6:0c:2c:09:78:c7:b2:f3:67:
4f:50:95:f3:47:44:01:de:84:92:09:69:d4:59:63:7c:13:7c:
be:d3:2e:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFGTdskubmaO7EfmRWRfRtDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MzJmNjFiYmQzZmQxMWQ3ZmFjYmIxNTQzYTc1MWE2NWEz
ZjY0YzMwHhcNMjYxMDE2MjAwMTA5WhcNMjYxMDE3MjAwMTA5WjAzMTEwLwYDVQQD
EyhjNGEwZWU2ZTdhMDhmMWFhYTI3ZDA4ZTBjNTEzN2RlODljMGM1YTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0EnJgLnfZd5D1cQgWpgID/8v92a
OrbTjKwGf+uBY6DPW/cqSbNaHvBeejAu6pxWr+dw5RW+EKf0QB2ORohX+kuVA+im
6gxvYhfoq7mhvWAgw2DY2h0VzeAi74B7uN6Fra8HHuN/8gVdPNj97TurmbrYiyix
Kdnv8mNGzOhVnjhRAo/SuhmrYBDtN6NZZAe2WRH2ockM2ou16MmaHEdZdXcQoiqO
o/aS1d5jZQkPMF0I5CwMNRVG82eL86eJRZHNGkQblrZt/5+IsSmTdv849cRj2/QO
/51UkG+BufYDuwnGh67x373Ms0qQeR5BdbBKWJ6idGEiVxTjjB6raaMXwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSg7m56CPGqon0I4MUTfeicDForMB8GA1UdIwQY
MBaAFEQy9hu9P9Edf6y7FUOnUaZaP2TDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkRMMkc3MF8wUjFfckxzVlE2ZFJwbG9fWk1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82NjRlYjEtZjIyMC00ODA0LThjNWEt
OTI3ODg0MGM0OTcwLzEvUkRMMkc3MF8wUjFfckxzVlE2ZFJwbG9fWk1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82NjRlYjEtZjIyMC00ODA0LThjNWEtOTI3ODg0MGM0OTcw
LzEvUkRMMkc3MF8wUjFfckxzVlE2ZFJwbG9fWk1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANiE/jI3K
SxPUwwpqEkgnQxuSG/8kdaKbMJOQhS9u4c0z2FBrDibZMoL5bzGxOS2CI1xdH1AB
NTwsb7fVsEsjpiIh5RP8Gn+T+iGQo8TOiNBkM/52xu3tqKNXtda3P6SHTqenyssi
ISatI9OKCQB2Zb+wlRW8sUvQQVpTp3Q8DsKNwhlaTbmQ8OmrLpjoLAI8Ygfk9qtU
EGxBHi0B68gZVtoIb8/03JDQCzYUDN2vY9SkYETEPWkt5NvWA5D7d6p3E2MZYkfC
e2O2h504bxAG7QTMCDYiWFhCBH/k/7csVpXapgwsCXjHsvNnT1CV80dEAd6Ekglp
1FljfBN8vtMuGw==
-----END CERTIFICATE-----
Generated at Sat Oct 17 06:10:56 2026 by rpki-client