Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
File: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json)
Hash identifier: SfiFgFu5DM0UCB62GWIzqXb3bx2veKyKJ/7GsLjJT60=
Subject key identifier: 94:5B:72:22:45:65:F6:90:A7:49:AE:94:F4:3E:1A:E4:03:66:3D:FF
Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
Certificate issuer: /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Certificate serial: 019EBE477182913565F1CE831596B30DCED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
Manifest number: 05AA
Signing time: Sat 13 Jun 2026 00:00:13 +0000
Manifest this update: Sat 13 Jun 2026 00:00:13 +0000
Manifest next update: Sun 14 Jun 2026 00:00:13 +0000
Files and hashes: 1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: k9+GC7AiWR7nSCH6E28jpx+sE2Lqa/bghSgtFVWQiv4=)
2: nnQafl9L2c6amifJ2gxq8iAxgCA.roa (hash: c2LfwipJXbeLDsPAx811kLeO5Uh/svWtqhW+8TuWjB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:71:82:91:35:65:f1:ce:83:15:96:b3:0d:ce:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Validity
Not Before: Jun 13 00:00:13 2026 GMT
Not After : Jun 14 00:00:13 2026 GMT
Subject: CN=945b72224565f690a749ae94f43e1ae403663dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8c:50:66:a9:14:20:f4:de:94:3d:68:d2:a0:
ce:14:06:27:1b:f6:a4:42:cb:5b:8e:10:54:00:56:
2f:76:5d:e7:ac:6e:8e:c2:1c:4b:a9:ae:24:28:e8:
fc:79:22:03:2f:79:ae:5e:86:c1:42:15:5c:46:ff:
5b:d9:97:fe:2c:72:13:f9:e5:47:71:1a:06:f1:73:
4a:0e:20:ef:37:a5:83:4d:cb:42:19:e2:46:29:d5:
b3:2c:c1:84:bc:9c:77:88:da:4a:d6:3a:cd:99:73:
1b:45:85:47:af:eb:61:a4:9e:57:4a:5f:bd:46:f8:
99:d7:57:8a:c2:5b:8c:69:92:d4:3a:39:50:ac:e6:
c4:ad:1d:15:c0:c0:a7:e3:17:1a:3e:d2:5b:d1:61:
5d:89:c3:0a:66:ab:36:df:30:f9:a7:bf:d7:e7:39:
d4:74:bd:38:d8:7b:e0:86:39:2e:f7:1e:77:09:ca:
72:e6:74:29:7a:9a:82:e4:ae:1f:ce:ea:5b:d2:62:
ea:ce:21:47:f1:ad:4d:f8:d7:03:9a:ab:49:df:fc:
73:92:23:51:3b:3d:f3:bd:9b:76:23:3e:90:ab:f4:
08:f0:37:1c:a5:0e:c8:14:c1:c1:81:79:11:00:1e:
73:59:4d:e8:fe:83:ae:3f:9f:ea:b2:d9:a8:f1:7b:
57:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5B:72:22:45:65:F6:90:A7:49:AE:94:F4:3E:1A:E4:03:66:3D:FF
X509v3 Authority Key Identifier:
keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:3c:34:10:0b:f7:69:28:17:d6:e3:bd:a6:5c:05:83:60:f3:
00:e6:da:d2:df:a3:66:0d:40:b5:3a:f8:60:d4:3f:07:57:36:
45:ad:6d:f1:7e:62:77:77:1a:0b:5c:a3:f6:dc:bd:38:56:8d:
4c:36:f1:c9:39:41:dd:d5:2e:cb:1a:13:f9:0b:80:0b:30:0a:
2d:5d:f7:57:b6:69:51:d8:c9:79:91:6c:64:e2:b3:6a:8e:24:
6a:54:82:98:61:11:4c:f3:26:c1:8e:5a:50:ea:d6:00:21:2d:
23:08:6e:d3:c7:fa:c5:a0:d4:4d:f1:e1:b1:1a:40:00:6f:72:
62:83:f3:5f:8f:78:f2:a1:71:d4:c7:94:16:a3:30:ea:78:38:
41:9b:6c:66:f1:85:53:d3:2c:92:55:ef:2f:76:8f:6e:6c:41:
b9:71:dd:d1:83:f0:df:26:d7:38:61:53:4b:2d:86:05:05:c5:
a8:53:ab:b0:b4:af:c8:54:51:9d:c5:5a:05:4e:bc:44:ab:cf:
23:1e:a5:fa:b3:84:00:0f:31:22:2a:4a:e0:58:ed:fe:ca:3e:
67:18:9b:15:c8:fd:2c:70:c6:0f:26:3d:87:9b:34:2d:05:e5:
5f:f1:fb:66:0b:30:ce:2a:69:bd:d3:c2:4c:bd:b5:3c:a8:ee:
3a:1f:98:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:22:14 2026 by rpki-client