Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
File: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json)
Hash identifier: aDIS7gHR6q3ziO0o73C2BE/J9WlZOQJucxFw7IzY33c=
Subject key identifier: 5C:54:8D:3C:90:53:2E:AB:6D:BF:C7:6E:06:4A:2D:A8:C4:41:9D:BE
Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
Certificate issuer: /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Certificate serial: 01A0DB03EEA3425A0FE096BB53183D10DABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
Manifest number: 06C2
Signing time: Sat 26 Sep 2026 00:01:02 +0000
Manifest this update: Sat 26 Sep 2026 00:01:02 +0000
Manifest next update: Sun 27 Sep 2026 00:01:02 +0000
Files and hashes: 1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: g3ki2bwwfRdYZnI/yMy3fUYJiXT4Hll+JBy7v14vZDs=)
2: nnQafl9L2c6amifJ2gxq8iAxgCA.roa (hash: c2LfwipJXbeLDsPAx811kLeO5Uh/svWtqhW+8TuWjB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:03:ee:a3:42:5a:0f:e0:96:bb:53:18:3d:10:da:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Validity
Not Before: Sep 26 00:01:02 2026 GMT
Not After : Sep 27 00:01:02 2026 GMT
Subject: CN=5c548d3c90532eab6dbfc76e064a2da8c4419dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:38:ff:3a:f2:72:b9:89:96:9a:9a:a5:48:f7:
f5:81:18:5d:ed:30:f3:30:0a:72:22:52:4a:da:a3:
1d:2b:b3:73:33:8b:5d:96:45:b9:bb:37:1c:50:12:
fe:e0:2c:cb:5e:70:28:7f:45:9e:01:fe:d2:36:ef:
c3:02:20:44:30:b4:b1:da:6c:58:66:da:b5:07:3a:
23:5e:a5:9a:77:7d:6e:17:7d:e9:8a:3b:65:ef:ee:
6b:8e:58:de:a4:98:f9:c7:75:37:ea:56:f3:13:0c:
0a:31:5d:de:58:6c:91:7c:b8:49:ed:11:6f:2a:6b:
14:35:64:1f:d5:b4:8f:84:fd:a8:cc:db:d3:f1:8b:
ff:c7:1a:14:4a:9e:2f:a5:2f:75:a3:c2:69:9f:b1:
f2:e6:19:48:58:78:47:ec:a9:5f:41:6f:ac:3d:4f:
81:ba:48:01:53:ef:4a:c8:9d:b3:bf:6e:81:ae:04:
06:94:0d:9a:d6:fe:db:08:84:ad:4a:05:e6:33:90:
a5:26:89:58:e5:3c:18:24:72:09:e1:41:5a:a1:56:
f5:18:99:57:f4:6c:da:fc:e2:fa:54:61:b2:d7:1b:
62:9e:91:20:b3:08:5c:96:f2:de:bb:fa:33:87:00:
c2:5a:9d:c6:27:70:78:a7:78:8c:3d:0b:c1:1f:c1:
62:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:54:8D:3C:90:53:2E:AB:6D:BF:C7:6E:06:4A:2D:A8:C4:41:9D:BE
X509v3 Authority Key Identifier:
keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:36:b5:9d:8d:4c:f6:44:e1:b2:f0:39:61:84:93:8f:c4:7c:
4c:90:41:08:10:f5:d7:a7:6e:2a:53:f1:e2:71:39:c6:28:06:
4c:87:96:11:6e:68:ef:ef:d6:b6:00:e9:57:8f:ea:8f:56:a7:
fb:4f:29:36:65:7d:a1:f2:b0:b7:cf:df:70:f5:ec:b0:6b:f0:
16:19:b6:da:4f:a3:61:03:ee:93:eb:5e:cc:22:9d:21:47:3c:
8b:ff:b8:ce:ee:06:bc:67:6b:de:b8:5d:8e:09:39:66:8a:22:
bf:83:b1:f7:16:50:a0:b4:0a:3b:65:e4:0b:47:5d:e4:52:28:
00:17:e9:8c:90:66:3e:4d:28:a7:9a:22:80:38:56:b7:25:3a:
93:57:8e:d4:5e:9d:b2:9f:05:15:27:50:f2:ea:33:fa:62:0c:
f0:36:6b:af:be:36:ae:c3:7b:4e:57:40:8e:bf:f1:02:31:6c:
d6:03:91:03:a8:70:11:f6:37:75:6d:96:d1:3c:0c:50:49:5f:
24:e6:1c:29:e8:60:3a:8b:2a:2c:d8:b2:fd:ae:ed:ec:3a:fc:
53:60:37:8a:6f:6a:b4:9e:e2:dd:2b:99:0b:19:89:2b:20:44:
5c:1f:a6:3f:00:a0:a7:00:47:11:2c:ef:6e:9d:22:29:73:81:
40:a6:65:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbA+6jQloP4Ja7Uxg9ENq7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZGVmZjRiOGZjMzA3NTQ0ZmVjMWZhOTlkYTJhNjg5N2Rm
NDYyYjgwHhcNMjYwOTI2MDAwMTAyWhcNMjYwOTI3MDAwMTAyWjAzMTEwLwYDVQQD
Eyg1YzU0OGQzYzkwNTMyZWFiNmRiZmM3NmUwNjRhMmRhOGM0NDE5ZGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTj/OvJyuYmWmpqlSPf1gRhd7TDz
MApyIlJK2qMdK7NzM4tdlkW5uzccUBL+4CzLXnAof0WeAf7SNu/DAiBEMLSx2mxY
Ztq1BzojXqWad31uF33pijtl7+5rjljepJj5x3U36lbzEwwKMV3eWGyRfLhJ7RFv
KmsUNWQf1bSPhP2ozNvT8Yv/xxoUSp4vpS91o8Jpn7Hy5hlIWHhH7KlfQW+sPU+B
ukgBU+9KyJ2zv26BrgQGlA2a1v7bCIStSgXmM5ClJolY5TwYJHIJ4UFaoVb1GJlX
9Gza/OL6VGGy1xtinpEgswhclvLeu/ozhwDCWp3GJ3B4p3iMPQvBH8Fi1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxUjTyQUy6rbb/HbgZKLajEQZ2+MB8GA1UdIwQY
MBaAFC3e/0uPwwdUT+wfqZ2ipol99GK4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGQ3X1M0X0RCMVJQN0ItcG5hS21pWDMwWXJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMzA5YzktMjMwYS00MWUyLWJmMjct
NjYxM2FlYWE2MGRlLzEvTGQ3X1M0X0RCMVJQN0ItcG5hS21pWDMwWXJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mMzA5YzktMjMwYS00MWUyLWJmMjctNjYxM2FlYWE2MGRl
LzEvTGQ3X1M0X0RCMVJQN0ItcG5hS21pWDMwWXJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArDa1nY1M
9kThsvA5YYSTj8R8TJBBCBD116duKlPx4nE5xigGTIeWEW5o7+/WtgDpV4/qj1an
+08pNmV9ofKwt8/fcPXssGvwFhm22k+jYQPuk+tezCKdIUc8i/+4zu4GvGdr3rhd
jgk5Zooiv4Ox9xZQoLQKO2XkC0dd5FIoABfpjJBmPk0op5oigDhWtyU6k1eO1F6d
sp8FFSdQ8uoz+mIM8DZrr742rsN7TldAjr/xAjFs1gORA6hwEfY3dW2W0TwMUElf
JOYcKehgOosqLNiy/a7t7Dr8U2A3im9qtJ7i3SuZCxmJKyBEXB+mPwCgpwBHESzv
bp0iKXOBQKZlnA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:39:34 2026 by rpki-client