Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
File: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json)
Hash identifier: tCYyHXCEEbLHsrTsa6Yn2oMhCfN3WIeDOPsx89qWt24=
Subject key identifier: A8:CF:4C:ED:7E:A3:70:D4:A9:32:32:F9:F8:68:09:22:F3:62:ED:A5
Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
Certificate issuer: /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Certificate serial: 01A0C9A1AD135D2070A8C86AF6EB2F8D3123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
Manifest number: 06B9
Signing time: Tue 22 Sep 2026 15:00:10 +0000
Manifest this update: Tue 22 Sep 2026 15:00:10 +0000
Manifest next update: Wed 23 Sep 2026 15:00:10 +0000
Files and hashes: 1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: nxIOomGZoNAoPX+V5enuOuktjKLy//HN/XO7cDzONsc=)
2: nnQafl9L2c6amifJ2gxq8iAxgCA.roa (hash: c2LfwipJXbeLDsPAx811kLeO5Uh/svWtqhW+8TuWjB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a1:ad:13:5d:20:70:a8:c8:6a:f6:eb:2f:8d:31:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Validity
Not Before: Sep 22 15:00:10 2026 GMT
Not After : Sep 23 15:00:10 2026 GMT
Subject: CN=a8cf4ced7ea370d4a93232f9f8680922f362eda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e4:d0:ef:53:57:d4:9f:f7:c1:d2:4b:43:06:
c2:36:41:7a:a9:fd:e6:b4:83:1c:fa:78:5e:8a:58:
c5:9e:e9:58:70:94:ec:d4:39:6c:29:7f:d1:7b:4d:
c2:e3:6b:5a:d8:82:73:7d:ab:1d:7f:79:cf:82:ca:
5c:6a:25:61:eb:2b:96:b9:d4:c0:93:4c:39:b8:41:
a8:01:06:93:0e:08:69:26:8d:c1:e4:91:f8:c5:5c:
d3:4d:81:be:0e:7f:8b:ab:ca:d9:f5:f4:36:1f:06:
89:18:43:7b:16:c4:e5:2e:15:5c:04:58:29:4f:e5:
bd:c7:58:68:62:17:1a:88:b9:e5:01:61:5d:45:5e:
84:45:0d:39:4e:eb:27:a0:15:98:4d:2b:88:81:a8:
63:d9:25:e0:74:2b:f7:a1:82:ab:40:2b:f8:c8:8d:
3b:4e:27:5a:5b:1e:e3:96:93:40:45:2a:8d:60:31:
56:92:f3:7c:20:57:92:d3:d4:2b:6d:71:2e:fc:31:
14:51:64:52:58:f7:03:d2:aa:b4:13:85:1e:87:16:
de:21:9c:ad:0b:e4:41:13:78:48:bf:d8:de:5c:f3:
a5:c8:40:88:91:af:c4:5e:f8:20:48:e1:67:d2:fa:
bc:54:ef:98:ef:3b:f1:a9:44:06:bd:ce:be:fa:73:
01:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CF:4C:ED:7E:A3:70:D4:A9:32:32:F9:F8:68:09:22:F3:62:ED:A5
X509v3 Authority Key Identifier:
keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a7:23:17:9c:c8:e6:80:eb:11:4a:61:b2:96:19:2b:3e:af:
14:99:0c:23:96:fb:7e:f2:1f:1e:f2:20:01:ae:7e:99:95:5d:
1a:34:b0:e3:a8:37:3a:48:37:c9:5b:69:37:fd:82:96:49:2f:
b2:5f:c0:83:74:4b:75:bc:35:64:3a:35:2b:49:e3:a9:67:68:
8f:2c:2b:2c:64:4e:18:9e:09:5e:ae:4a:02:77:94:ac:0f:ea:
f9:a7:82:e2:28:be:1f:7e:1b:d4:3b:27:85:4f:fe:60:e8:98:
ce:2b:29:e3:4e:52:83:50:c1:22:2c:61:bf:4f:2c:a7:d3:c0:
d3:9c:b9:16:b9:ae:ef:bf:3a:7d:28:14:64:a4:d7:9a:d2:e4:
35:3a:6d:82:49:aa:b0:6a:c0:18:22:cb:5b:68:6c:02:b8:97:
fb:12:80:f9:3f:89:37:0a:77:26:d7:fe:ee:dc:19:a2:bd:48:
04:4f:03:f6:8f:00:3a:53:4f:87:48:07:43:e6:a5:68:5b:fa:
8e:b3:ce:9a:55:7c:a6:8e:be:27:2a:5e:88:65:67:85:7f:8e:
3e:7c:d8:0d:3a:6a:b9:56:74:d4:d5:25:0f:44:70:78:dd:bf:
8b:f8:79:ac:03:f5:73:64:66:8f:83:78:ec:c2:b9:30:45:6c:
ee:60:ce:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:26:23 2026 by rpki-client