Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
File: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json)
Hash identifier: 44v+iZli1AAsai1quwOr+aQDh9EIQnzo6PRoglgcjAU=
Subject key identifier: C6:19:68:0A:53:A0:B7:BD:6B:95:45:22:41:3E:28:AC:FF:1F:F0:83
Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
Certificate issuer: /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Certificate serial: 019CAB3497AC93AE6FA3B4881CE5DB0F0200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
Manifest number: 0497
Signing time: Sun 01 Mar 2026 21:01:16 +0000
Manifest this update: Sun 01 Mar 2026 21:01:16 +0000
Manifest next update: Mon 02 Mar 2026 21:01:16 +0000
Files and hashes: 1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: HC6Ebj+3Pq3wu4hsMdNys2RfAEoFSgctgvpnfg9cp0Y=)
2: nnQafl9L2c6amifJ2gxq8iAxgCA.roa (hash: c2LfwipJXbeLDsPAx811kLeO5Uh/svWtqhW+8TuWjB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:97:ac:93:ae:6f:a3:b4:88:1c:e5:db:0f:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Validity
Not Before: Mar 1 21:01:16 2026 GMT
Not After : Mar 2 21:01:16 2026 GMT
Subject: CN=c619680a53a0b7bd6b954522413e28acff1ff083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:41:0e:71:d8:9c:f6:4b:e5:29:f0:62:39:
77:f4:7e:1d:4b:8d:58:74:46:28:12:ad:5f:28:09:
0d:b6:1e:62:d6:44:aa:2a:27:30:5e:81:b9:e7:6b:
c6:b8:51:4e:6a:ad:1e:ff:59:3d:a5:cc:26:6e:7b:
93:3b:8a:66:39:41:8f:46:e9:d0:27:36:c4:a3:e4:
95:c3:a0:14:11:d3:7b:93:44:f2:b3:36:b4:82:71:
87:ad:44:bd:f1:e7:27:85:ed:91:3e:9f:49:0c:6a:
67:be:ed:99:89:70:55:a0:f5:fe:51:31:cf:2a:4a:
08:43:59:2c:65:47:65:c3:3a:e5:52:60:6f:ba:6b:
a7:9d:db:cd:21:ce:d1:26:ed:8e:38:d6:24:5d:f8:
46:9b:11:63:6c:63:45:3c:08:95:78:22:be:1a:5b:
1c:b4:19:bb:3a:57:74:fb:b9:fe:2c:eb:7a:6f:c5:
ea:88:1b:ce:50:56:50:ff:8d:90:ca:46:4b:89:ed:
99:7a:18:7c:07:7d:cc:41:31:43:ef:fe:a9:f5:21:
bf:c0:f2:51:cd:9c:71:95:3b:e5:02:ab:3f:8d:d7:
d6:3f:1b:92:a4:f6:94:a7:2d:82:b1:26:91:73:d1:
28:6b:d2:69:39:bc:8c:55:a0:74:ff:29:b0:db:b3:
54:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:19:68:0A:53:A0:B7:BD:6B:95:45:22:41:3E:28:AC:FF:1F:F0:83
X509v3 Authority Key Identifier:
keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5a:10:14:ab:3e:5a:c4:a9:4d:3b:d4:62:e3:3b:84:f3:7d:
34:06:9b:d2:ca:da:f8:a3:b6:e6:5c:c4:4c:c0:5a:7c:7d:99:
22:b7:30:d9:a3:c9:fb:76:b9:ab:6c:ff:a7:d9:d7:64:fc:e1:
86:53:66:a3:e3:a2:32:a1:3d:b1:19:5d:4c:47:49:97:3b:5a:
20:c6:15:a8:2d:de:c3:24:c3:8d:94:f4:c9:85:ae:cd:74:3b:
e9:f0:70:7b:1f:ea:91:ab:25:cb:28:86:6c:7f:db:bb:59:50:
ee:00:4f:e9:de:dd:2f:b2:31:c0:17:44:d9:3e:db:f7:22:5c:
39:fd:8a:ac:48:6a:48:d9:eb:20:d3:40:4a:57:44:a7:21:24:
3b:da:fe:87:34:33:a6:cb:44:2e:e7:ed:0a:6b:74:f7:c4:a4:
b6:33:d4:f2:7d:3a:48:64:71:d9:50:a0:49:ca:d0:b2:98:41:
ed:d2:25:f3:87:78:ed:f6:76:e4:74:4e:e2:f3:2c:b8:80:63:
55:b5:0e:47:cc:7e:b7:ce:79:73:5f:a8:65:99:61:15:1d:77:
b5:10:23:9e:d4:b4:60:7b:76:2d:2f:5f:b5:55:be:5e:b8:00:
64:0d:01:0c:e9:ed:10:93:14:da:73:33:73:e9:30:8c:0d:c8:
e3:62:e1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:56 2026 by rpki-client