Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
File: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json)
Hash identifier: CPJilDq4Y4SRTg9+VLwBp9PwK4I+tfRbrTb+gYPfMcE=
Subject key identifier: 15:05:61:92:49:26:DF:65:CA:BD:A9:A8:03:DB:4F:97:2F:03:83:6B
Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
Certificate issuer: /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Certificate serial: 019D98BD998DA291E36FF208CBCDAEDA5293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
Manifest number: 0512
Signing time: Fri 17 Apr 2026 00:00:55 +0000
Manifest this update: Fri 17 Apr 2026 00:00:55 +0000
Manifest next update: Sat 18 Apr 2026 00:00:55 +0000
Files and hashes: 1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: I6GDhLhuqUi1Nj/klGZqEGc8IQE4trqFUjbOHkVD5Rw=)
2: nnQafl9L2c6amifJ2gxq8iAxgCA.roa (hash: c2LfwipJXbeLDsPAx811kLeO5Uh/svWtqhW+8TuWjB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:99:8d:a2:91:e3:6f:f2:08:cb:cd:ae:da:52:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Validity
Not Before: Apr 17 00:00:55 2026 GMT
Not After : Apr 18 00:00:55 2026 GMT
Subject: CN=150561924926df65cabda9a803db4f972f03836b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:57:99:5f:17:17:0c:27:5b:da:d4:30:c7:eb:
c7:4b:25:43:10:4e:2f:ae:51:6f:d7:31:c4:47:91:
75:11:cd:2b:7a:7c:47:07:7d:42:dd:67:ec:60:ee:
a0:ef:3d:00:fd:3c:17:49:dc:93:df:d7:44:72:af:
c2:1f:d8:4d:07:62:16:d6:48:47:72:56:b7:d1:27:
b6:97:ef:40:69:b6:3b:0d:3a:37:27:7e:da:de:57:
d8:39:f9:21:ef:ef:e2:c6:8e:fd:e6:57:85:c9:34:
67:26:ba:41:87:77:8f:84:82:cb:81:07:04:2d:3c:
e6:35:73:86:e1:5a:92:87:99:f7:37:09:e9:80:f9:
60:10:c8:56:fe:f3:2a:a9:1b:71:12:58:28:81:40:
f6:a4:31:76:99:ef:d1:24:2c:54:a6:75:20:63:b5:
33:55:1b:cb:c6:48:df:fc:62:cd:ce:b7:28:7b:1f:
a6:9d:7f:4f:9d:aa:aa:8c:e5:b5:52:e1:97:cf:0a:
73:f9:3b:e5:f0:13:bd:e9:2a:f2:55:a2:80:12:9d:
ca:1d:b8:d5:6e:f3:80:f5:fb:48:c9:f6:29:c1:a8:
31:02:78:8c:d6:08:bc:ef:b9:ca:73:97:3b:26:5d:
07:28:be:ef:ef:bc:59:c7:6a:7c:a0:93:73:9b:d7:
17:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:05:61:92:49:26:DF:65:CA:BD:A9:A8:03:DB:4F:97:2F:03:83:6B
X509v3 Authority Key Identifier:
keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:10:b4:fc:44:41:81:94:9a:83:a5:43:e3:41:1c:0b:c7:33:
65:25:84:8b:72:c4:58:45:97:58:39:6a:3c:81:44:23:f4:0d:
90:22:5a:9c:ea:3c:d8:30:c4:ca:ac:bb:f2:58:8f:01:e3:db:
c4:e5:83:38:87:d9:fd:a3:cc:d0:f5:bd:72:fe:d1:b5:b7:6f:
5b:29:8e:16:df:47:ce:de:c0:a4:9e:8b:8e:d6:5e:d3:43:56:
fd:62:10:c0:d1:64:af:a3:c1:3b:05:86:0a:87:c8:d7:d6:c8:
5f:98:cb:b6:bc:7c:48:48:90:d3:52:37:2f:aa:21:8d:23:3e:
3d:cc:cc:ac:97:e5:e0:1b:11:63:42:93:d9:55:03:ef:0f:ab:
3d:90:65:20:81:b4:6d:ea:87:5b:67:18:54:64:69:73:f7:43:
bf:b5:dc:eb:55:bb:ed:7d:12:2f:9f:70:99:14:58:aa:c4:f4:
d3:09:fb:9b:8a:7a:48:49:39:31:c0:58:8c:9b:57:8d:21:2c:
36:9c:f2:00:f5:bb:e4:76:ef:fd:e8:30:af:f4:b9:3e:16:21:
22:74:b1:11:e1:b8:98:81:51:1b:f2:21:e4:a6:cb:61:18:c1:
de:5a:ff:7a:1b:60:4f:47:45:a9:16:c7:a2:90:57:ed:ac:fa:
82:1d:3c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:45 2026 by rpki-client