Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
File: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json)
Hash identifier: UcM0msRs482087EMi4eWSRlJz7TOybZlXHl5/KxPxe4=
Subject key identifier: 9D:96:63:92:4A:FD:A8:B6:87:96:31:81:C7:55:AC:A8:1D:BB:D2:3B
Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
Certificate issuer: /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Certificate serial: 019D26CCC82A389C00C558287FB0286A0473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
Manifest number: 04D7
Signing time: Wed 25 Mar 2026 21:00:47 +0000
Manifest this update: Wed 25 Mar 2026 21:00:47 +0000
Manifest next update: Thu 26 Mar 2026 21:00:47 +0000
Files and hashes: 1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: XkEZhtGldU5OGTZBkJAWhJL+l9iFbq7OTcY0r830hpM=)
2: nnQafl9L2c6amifJ2gxq8iAxgCA.roa (hash: c2LfwipJXbeLDsPAx811kLeO5Uh/svWtqhW+8TuWjB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:c8:2a:38:9c:00:c5:58:28:7f:b0:28:6a:04:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Validity
Not Before: Mar 25 21:00:47 2026 GMT
Not After : Mar 26 21:00:47 2026 GMT
Subject: CN=9d9663924afda8b687963181c755aca81dbbd23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:74:66:95:d3:36:25:a3:aa:ae:6d:8b:d4:71:
2d:45:9b:79:17:8e:c0:5e:49:17:bf:13:5a:a7:0e:
e2:21:a2:45:9c:15:23:cf:10:d3:db:ce:7a:32:ae:
94:80:0d:80:86:f0:52:4c:9f:23:e8:3b:87:c4:d4:
6c:dd:3e:d2:8d:29:05:a7:45:36:b6:ba:5d:b3:29:
55:17:8f:e1:82:0e:66:7f:35:c6:60:0e:09:89:20:
1f:a4:dc:a5:82:75:f2:43:f0:83:e5:96:79:80:a3:
36:1e:f9:d2:f7:f0:15:b4:30:06:40:d5:45:48:bc:
3a:c4:a1:02:7b:94:6e:c4:17:e1:89:1a:ca:5b:f3:
4f:3c:ea:a0:f0:8a:32:48:f9:16:a7:dd:e1:bd:44:
8a:84:2a:d4:2f:ed:36:10:c7:3f:db:1c:8d:22:8e:
3a:40:95:95:2c:f0:8c:2b:c1:e6:c8:97:2e:66:66:
5d:8d:7c:2a:0c:3a:1d:7e:34:6f:75:d9:32:bf:c4:
3f:b1:8a:ff:19:60:62:6f:4d:2f:04:15:43:d1:4a:
a0:6f:4a:57:49:2d:1e:61:70:13:73:1a:34:4d:ce:
48:ba:a0:d6:db:78:40:90:97:b5:59:e5:cf:1e:76:
fb:61:70:ac:dc:ab:1b:91:bb:99:a6:e7:85:1f:3b:
bf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:96:63:92:4A:FD:A8:B6:87:96:31:81:C7:55:AC:A8:1D:BB:D2:3B
X509v3 Authority Key Identifier:
keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:18:62:5c:f1:72:7f:15:7c:0d:91:77:d9:59:94:5d:52:e7:
99:b6:1a:d6:67:70:24:2b:23:ff:1f:68:79:c0:77:10:2a:a0:
c2:12:79:9d:25:b8:4b:7d:d3:44:53:2f:ba:a5:37:32:c1:76:
69:f4:73:33:45:1c:06:43:f0:88:ca:ea:3a:91:3a:50:9a:3a:
79:92:52:73:4d:33:9e:b2:75:9f:77:13:2e:bd:e0:55:8d:61:
39:ce:dd:0b:26:53:61:04:46:bf:14:bf:78:a1:56:41:d9:b1:
d5:39:74:1b:12:4a:62:65:76:4f:ef:1d:ac:4d:e3:b4:45:08:
8a:0c:a0:a2:0d:f9:3a:e0:94:b3:f4:fb:c9:d2:5b:f0:7d:ed:
e7:85:fb:7c:41:ed:47:11:de:e0:99:3a:9d:f7:6c:0b:cf:32:
39:26:82:a4:24:69:90:72:a1:b3:28:1a:da:bb:c9:c4:27:fd:
dc:16:62:5e:c6:88:0f:1b:bf:a3:ca:ac:49:35:49:4f:14:c6:
4f:65:cf:8b:61:6d:6f:6d:6a:ca:d4:e0:59:7e:9f:19:ec:b7:
78:c7:b3:95:e2:06:42:5e:0e:38:f8:89:c6:e6:de:fb:20:fe:
f2:37:5a:b6:06:55:f7:c6:56:3b:b4:16:13:9a:d8:ee:c4:3d:
ed:3d:e7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:07 2026 by rpki-client