Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
File: RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft (raw, json)
Hash identifier: V6uDivfXYD7dIgjB+NP1cb4xaEDrmUDAMItCtVvxiyw=
Subject key identifier: F6:58:A2:07:4E:12:28:40:7A:EE:7F:1E:DA:85:5F:FD:D0:58:9F:A1
Authority key identifier: 44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
Certificate issuer: /CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Certificate serial: 019E32607DCB7641B10A962A417EB8D44A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
Manifest number: 1910
Signing time: Sat 16 May 2026 20:00:44 +0000
Manifest this update: Sat 16 May 2026 20:00:44 +0000
Manifest next update: Sun 17 May 2026 20:00:44 +0000
Files and hashes: 1: 1f3m5WIt2ZvCZFCMEpdrMwuuSa0.roa (hash: zBndpFW3MOOklCRMcrwC7cRmH+rM6cBDTwopgPRh+HE=)
2: RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl (hash: eMIALmVKASpWSnEhWxojuPdMEe5uYBMht9Myd9sqZLE=)
3: q3LGHpKLwXhUXQy5N3eUog7IGnE.roa (hash: ny31WBuWDPbRs/tDie0hbkT18Zoj64Zy4OoqbPqJ5zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:60:7d:cb:76:41:b1:0a:96:2a:41:7e:b8:d4:4a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Validity
Not Before: May 16 20:00:44 2026 GMT
Not After : May 17 20:00:44 2026 GMT
Subject: CN=f658a2074e1228407aee7f1eda855ffdd0589fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:4a:73:7d:24:8e:e5:44:47:8a:fc:cc:d1:
6f:c8:27:8e:da:65:e0:be:7a:cd:55:3f:06:0e:52:
70:8e:07:3a:6b:a8:14:1d:a7:09:d3:3e:64:25:71:
2e:b5:ae:d9:0d:07:0a:e7:fc:77:eb:6c:e4:b5:40:
ec:0e:11:30:3d:2c:29:4d:4b:4f:ce:26:3c:ad:d1:
cf:19:2b:89:71:9f:c1:0f:7a:16:82:78:49:27:1b:
50:48:17:88:c8:62:1f:e8:51:4b:70:8e:ca:f3:a6:
80:85:65:89:2f:87:38:e0:4e:ba:84:19:bc:f8:db:
bd:13:8d:ed:00:d1:0b:8a:89:67:91:ab:63:18:25:
e0:f2:a5:df:ba:57:09:7d:9a:ee:32:92:63:c5:6c:
cc:90:bf:f0:05:c4:bf:b6:e5:31:da:af:92:bd:e1:
6f:9d:8a:92:a6:06:e9:c5:f4:ad:4c:b0:8e:d4:0b:
f8:5f:4f:99:78:83:8c:8e:c6:09:23:8b:40:95:19:
da:d2:32:24:23:df:4c:57:3f:fb:d2:4a:37:e1:a3:
82:13:fc:56:32:0b:85:27:cb:1d:2d:fb:d6:20:3c:
d4:cd:0d:8e:e1:a7:02:f5:ce:94:98:a0:35:26:6a:
37:fd:5f:6a:f1:53:b2:ec:ec:08:3e:0b:d0:60:9c:
d4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:58:A2:07:4E:12:28:40:7A:EE:7F:1E:DA:85:5F:FD:D0:58:9F:A1
X509v3 Authority Key Identifier:
keyid:44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f9:b2:76:3c:ea:fb:6c:22:50:e0:99:a4:88:05:11:de:db:
97:d3:11:28:f9:b5:0f:ba:f8:ba:a0:e0:64:78:48:32:76:a6:
e6:92:4b:4a:e8:16:df:53:aa:b7:cf:d6:55:f6:fd:7d:7b:04:
79:30:66:63:eb:0d:d9:f0:ef:8a:b1:d7:fc:20:36:5a:f6:8f:
56:b8:29:d1:3b:53:67:1b:82:6a:8c:e6:34:10:67:d8:39:4f:
31:de:e7:31:45:64:ec:97:e8:10:79:35:4b:fd:ab:4c:b4:ea:
93:61:6b:b9:e6:d3:03:4a:96:5d:ed:3d:a6:22:35:1f:4e:5c:
21:1e:43:80:58:a8:fb:8c:0e:30:96:03:2c:6c:cc:bf:63:89:
a2:2a:a1:16:1c:44:69:d8:8f:8f:2f:3e:4f:4b:20:2d:5f:74:
49:e7:d8:a5:9f:ae:8c:08:6e:f4:ad:93:3c:e7:39:bd:1e:49:
0b:c1:39:1c:d5:28:59:95:a5:b8:31:00:0d:e0:16:12:08:24:
d5:81:63:05:a8:28:29:4d:b5:d9:54:4d:bd:01:27:61:cc:08:
9d:40:5b:fe:f1:b6:c9:03:c2:44:5b:7b:4e:5f:ec:78:48:40:
cf:bf:3d:56:61:48:72:31:e7:81:b2:75:d5:65:de:91:a6:bd:
e3:29:40:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4yYH3LdkGxCpYqQX641EoUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MzJmNjFiYmQzZmQxMWQ3ZmFjYmIxNTQzYTc1MWE2NWEz
ZjY0YzMwHhcNMjYwNTE2MjAwMDQ0WhcNMjYwNTE3MjAwMDQ0WjAzMTEwLwYDVQQD
EyhmNjU4YTIwNzRlMTIyODQwN2FlZTdmMWVkYTg1NWZmZGQwNTg5ZmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqChKc30kjuVER4r8zNFvyCeO2mXg
vnrNVT8GDlJwjgc6a6gUHacJ0z5kJXEuta7ZDQcK5/x362zktUDsDhEwPSwpTUtP
ziY8rdHPGSuJcZ/BD3oWgnhJJxtQSBeIyGIf6FFLcI7K86aAhWWJL4c44E66hBm8
+Nu9E43tANELiolnkatjGCXg8qXfulcJfZruMpJjxWzMkL/wBcS/tuUx2q+SveFv
nYqSpgbpxfStTLCO1Av4X0+ZeIOMjsYJI4tAlRna0jIkI99MVz/70ko34aOCE/xW
MguFJ8sdLfvWIDzUzQ2O4acC9c6UmKA1Jmo3/V9q8VOy7OwIPgvQYJzUaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZYogdOEihAeu5/HtqFX/3QWJ+hMB8GA1UdIwQY
MBaAFEQy9hu9P9Edf6y7FUOnUaZaP2TDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkRMMkc3MF8wUjFfckxzVlE2ZFJwbG9fWk1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82NjRlYjEtZjIyMC00ODA0LThjNWEt
OTI3ODg0MGM0OTcwLzEvUkRMMkc3MF8wUjFfckxzVlE2ZFJwbG9fWk1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82NjRlYjEtZjIyMC00ODA0LThjNWEtOTI3ODg0MGM0OTcw
LzEvUkRMMkc3MF8wUjFfckxzVlE2ZFJwbG9fWk1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvmydjzq
+2wiUOCZpIgFEd7bl9MRKPm1D7r4uqDgZHhIMnam5pJLSugW31Oqt8/WVfb9fXsE
eTBmY+sN2fDvirHX/CA2WvaPVrgp0TtTZxuCaozmNBBn2DlPMd7nMUVk7JfoEHk1
S/2rTLTqk2FruebTA0qWXe09piI1H05cIR5DgFio+4wOMJYDLGzMv2OJoiqhFhxE
adiPjy8+T0sgLV90SefYpZ+ujAhu9K2TPOc5vR5JC8E5HNUoWZWluDEADeAWEggk
1YFjBagoKU212VRNvQEnYcwInUBb/vG2yQPCRFt7Tl/seEhAz789VmFIcjHngbJ1
1WXekaa94ylADA==
-----END CERTIFICATE-----
Generated at Sun May 17 00:30:05 2026 by rpki-client