Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
File: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json)
Hash identifier: dhi4xyZs5GPjWKyJNFHD8U0CzWPcF7G2xsGc155OVEg=
Subject key identifier: B8:31:E4:B8:B1:69:2E:8A:98:FB:CB:39:65:AC:20:65:72:CF:9A:1A
Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
Certificate issuer: /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Certificate serial: 019FA7F4430822C0BAA0C89D443AA2AA4854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
Manifest number: 0623
Signing time: Tue 28 Jul 2026 09:00:30 +0000
Manifest this update: Tue 28 Jul 2026 09:00:30 +0000
Manifest next update: Wed 29 Jul 2026 09:00:30 +0000
Files and hashes: 1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: zhC5rg37JtG24LOEhLvZKYTdrDVr62mVa5ocF0cbAZg=)
2: nnQafl9L2c6amifJ2gxq8iAxgCA.roa (hash: c2LfwipJXbeLDsPAx811kLeO5Uh/svWtqhW+8TuWjB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:43:08:22:c0:ba:a0:c8:9d:44:3a:a2:aa:48:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Validity
Not Before: Jul 28 09:00:30 2026 GMT
Not After : Jul 29 09:00:30 2026 GMT
Subject: CN=b831e4b8b1692e8a98fbcb3965ac206572cf9a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:49:c0:23:d3:88:fc:ca:09:5d:c2:c2:96:ad:
1c:02:12:0d:fd:89:d3:00:ce:05:20:23:38:a9:92:
9e:c0:da:7f:d1:88:7b:f5:ee:86:83:dc:df:de:ee:
9c:57:63:07:9d:d5:8c:45:95:db:d9:b7:2d:00:ee:
c5:73:cb:0e:e0:9f:41:78:d2:01:4c:b0:b8:b4:28:
3a:90:99:13:9b:12:72:f7:2a:42:b7:33:38:ee:63:
e9:14:aa:3d:75:72:16:24:76:e3:6b:0f:3c:15:b2:
a7:72:5a:5b:0a:5b:93:90:cc:e9:af:90:79:40:25:
7b:bd:85:b5:eb:03:19:68:2b:e1:da:bd:35:c8:a4:
e3:18:fe:be:0b:82:f7:0f:c8:e0:ae:f3:69:58:b3:
70:94:8e:bd:4f:2b:df:3f:36:19:85:d2:d5:63:a9:
7e:e1:75:fe:0d:60:e2:31:63:50:21:c5:07:2d:10:
9d:19:54:05:44:93:45:57:e3:9b:f1:b1:99:a4:58:
c4:49:67:b5:1c:4f:c0:2c:22:b8:e0:67:19:16:ed:
2e:6c:2f:e9:70:cc:5c:8c:aa:4b:e0:f4:e5:15:4c:
c2:52:12:43:7e:53:3a:f4:a2:2b:de:ac:91:69:57:
07:c8:3c:ae:77:32:fe:2d:be:d3:da:8d:22:c1:31:
60:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:31:E4:B8:B1:69:2E:8A:98:FB:CB:39:65:AC:20:65:72:CF:9A:1A
X509v3 Authority Key Identifier:
keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8d:55:03:d2:4b:5c:55:c3:a8:b6:52:d4:3c:79:d9:bb:9a:
8d:9a:28:75:ab:ba:5b:79:19:a9:a1:da:6d:49:43:b2:92:fe:
40:5f:21:f1:e6:f9:78:6a:21:8a:50:b3:0b:fe:49:4f:77:9e:
41:7c:4c:de:cf:88:76:74:dd:85:96:7d:37:54:57:72:e0:90:
43:9a:80:75:a0:8d:2f:a5:4e:53:b4:cb:da:e4:9d:34:17:ee:
97:e4:85:83:09:9a:37:4c:f2:ca:1d:1d:3c:5e:fc:f2:f6:19:
35:1a:c1:03:b0:a6:b2:ea:8a:62:38:f8:c6:e0:db:f6:db:3d:
97:ab:bd:31:fd:40:fd:ee:08:c5:fb:b9:b6:aa:47:bb:e7:0a:
0b:61:c2:d0:ea:d4:c1:59:fc:5f:d3:7d:0b:96:b6:a9:79:5d:
9d:b2:f5:c7:07:67:8e:8d:f9:e8:62:0f:51:37:35:23:b6:0a:
a1:40:da:dd:b7:66:06:19:c3:d0:30:d8:59:d1:2f:a8:32:87:
c4:fd:d6:06:b2:af:3b:64:e9:6d:12:cb:ce:75:8b:60:13:22:
7a:1c:09:0a:9d:db:89:94:13:79:6f:8b:d5:dc:a7:4d:3a:dc:
a0:89:31:02:70:ee:62:1b:d3:37:c5:ae:84:24:2f:10:27:ca:
79:9f:3b:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+n9EMIIsC6oMidRDqiqkhUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZGVmZjRiOGZjMzA3NTQ0ZmVjMWZhOTlkYTJhNjg5N2Rm
NDYyYjgwHhcNMjYwNzI4MDkwMDMwWhcNMjYwNzI5MDkwMDMwWjAzMTEwLwYDVQQD
EyhiODMxZTRiOGIxNjkyZThhOThmYmNiMzk2NWFjMjA2NTcyY2Y5YTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnknAI9OI/MoJXcLClq0cAhIN/YnT
AM4FICM4qZKewNp/0Yh79e6Gg9zf3u6cV2MHndWMRZXb2bctAO7Fc8sO4J9BeNIB
TLC4tCg6kJkTmxJy9ypCtzM47mPpFKo9dXIWJHbjaw88FbKnclpbCluTkMzpr5B5
QCV7vYW16wMZaCvh2r01yKTjGP6+C4L3D8jgrvNpWLNwlI69TyvfPzYZhdLVY6l+
4XX+DWDiMWNQIcUHLRCdGVQFRJNFV+Ob8bGZpFjESWe1HE/ALCK44GcZFu0ubC/p
cMxcjKpL4PTlFUzCUhJDflM69KIr3qyRaVcHyDyudzL+Lb7T2o0iwTFg8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgx5LixaS6KmPvLOWWsIGVyz5oaMB8GA1UdIwQY
MBaAFC3e/0uPwwdUT+wfqZ2ipol99GK4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGQ3X1M0X0RCMVJQN0ItcG5hS21pWDMwWXJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMzA5YzktMjMwYS00MWUyLWJmMjct
NjYxM2FlYWE2MGRlLzEvTGQ3X1M0X0RCMVJQN0ItcG5hS21pWDMwWXJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mMzA5YzktMjMwYS00MWUyLWJmMjctNjYxM2FlYWE2MGRl
LzEvTGQ3X1M0X0RCMVJQN0ItcG5hS21pWDMwWXJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcI1VA9JL
XFXDqLZS1Dx52buajZoodau6W3kZqaHabUlDspL+QF8h8eb5eGohilCzC/5JT3ee
QXxM3s+IdnTdhZZ9N1RXcuCQQ5qAdaCNL6VOU7TL2uSdNBful+SFgwmaN0zyyh0d
PF788vYZNRrBA7CmsuqKYjj4xuDb9ts9l6u9Mf1A/e4Ixfu5tqpHu+cKC2HC0OrU
wVn8X9N9C5a2qXldnbL1xwdnjo356GIPUTc1I7YKoUDa3bdmBhnD0DDYWdEvqDKH
xP3WBrKvO2TpbRLLznWLYBMiehwJCp3biZQTeW+L1dynTTrcoIkxAnDuYhvTN8Wu
hCQvECfKeZ87gg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:12:18 2026 by rpki-client