Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
File: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json)
Hash identifier: 2ZskCwjcbNT0QzisjlT2/E7J7bLHAuEZoBMi6P6TEAY=
Subject key identifier: 37:22:50:FE:D1:F7:3B:6A:13:44:EE:96:14:C9:DD:B0:BE:A9:E8:24
Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
Certificate issuer: /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Certificate serial: 019E1DFE40F23F84359E0B3EFE6938762B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
Manifest number: 0557
Signing time: Tue 12 May 2026 21:01:02 +0000
Manifest this update: Tue 12 May 2026 21:01:02 +0000
Manifest next update: Wed 13 May 2026 21:01:02 +0000
Files and hashes: 1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: 66v/2KKmMu5eIHCOuQrt3Uo8oWAeWfqqaEPo0JCdeCQ=)
2: nnQafl9L2c6amifJ2gxq8iAxgCA.roa (hash: c2LfwipJXbeLDsPAx811kLeO5Uh/svWtqhW+8TuWjB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:40:f2:3f:84:35:9e:0b:3e:fe:69:38:76:2b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Validity
Not Before: May 12 21:01:02 2026 GMT
Not After : May 13 21:01:02 2026 GMT
Subject: CN=372250fed1f73b6a1344ee9614c9ddb0bea9e824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cb:74:c4:af:4d:8c:a4:e3:4c:55:d6:64:0b:
88:22:41:15:b5:da:9d:a2:8f:14:3d:2b:c3:a0:99:
76:c6:68:9d:b9:9a:67:e8:8a:2a:45:aa:1b:cc:5c:
79:cb:8b:dd:67:c2:b2:34:df:71:50:26:b1:07:d5:
e9:cc:da:9f:da:91:88:27:fb:89:c4:32:ef:a1:5e:
cf:91:c9:56:1f:11:0d:09:76:8e:5d:00:26:0e:eb:
bc:9e:cc:d2:7b:3d:13:54:80:a0:5a:ba:be:74:b5:
58:53:0a:a3:4b:28:b6:6e:48:49:fd:2a:24:b3:c6:
08:89:aa:ca:a2:ca:62:2a:22:f3:b4:eb:ac:f9:12:
de:ba:d2:63:25:dd:c7:11:ec:23:e1:80:68:6b:87:
bf:7f:31:38:e2:ff:1b:28:8f:20:bd:63:bf:fc:c4:
92:f0:10:39:41:97:c9:26:7f:df:f8:75:bb:9b:55:
7b:2b:a2:9f:ea:46:48:8b:a6:6b:d5:5e:ea:83:23:
92:6f:4d:44:8d:3c:0f:3c:b5:a7:38:b8:75:17:78:
89:e1:1b:c6:82:b3:80:10:b8:93:81:ac:99:59:df:
88:d0:32:42:8d:2c:9c:9d:77:e8:93:b1:29:32:a0:
90:20:7b:1c:93:1d:04:2c:6e:6d:a8:70:e0:61:19:
15:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:22:50:FE:D1:F7:3B:6A:13:44:EE:96:14:C9:DD:B0:BE:A9:E8:24
X509v3 Authority Key Identifier:
keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:4f:32:4c:6d:32:91:83:81:a1:14:d4:ef:12:00:a6:96:44:
44:12:e5:bd:88:77:6b:09:d2:9d:c7:27:cf:96:2f:ab:45:e4:
1f:8a:c6:61:94:16:4d:7f:84:fd:88:89:50:18:3b:0a:ed:a9:
2e:e1:58:94:1b:2b:9e:13:bf:b2:54:5a:16:1b:0e:09:d0:90:
fc:6a:d1:93:21:68:6f:59:6e:ce:98:52:5e:19:2c:ae:5e:f6:
4c:32:9f:23:2b:25:c2:07:73:a9:86:9a:2f:3d:ae:f3:15:ae:
b3:9d:8f:86:1c:f7:ee:64:e9:14:0e:c2:cb:14:9b:26:c6:fc:
2b:3c:e4:c3:10:8c:5c:0f:a3:a1:44:9d:d6:15:2f:0c:c5:9c:
b4:64:dd:92:ba:60:70:9b:ec:8f:f3:f8:8f:ac:e0:9a:64:fe:
4b:36:a1:03:49:04:94:b5:c1:b3:28:da:f8:d5:d5:b8:3f:ef:
49:49:fd:58:1e:03:9b:b9:b2:1f:37:0b:e7:e1:e6:16:a4:71:
df:50:a8:49:69:78:bf:ac:cf:1d:b4:5f:35:e0:e3:6f:4d:6c:
c0:81:c8:68:fb:a3:c9:e8:f7:89:b1:aa:39:08:a5:d5:bd:32:
92:26:59:ec:07:eb:7d:02:f9:fa:88:20:05:d5:28:54:f1:22:
66:c4:fb:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/kDyP4Q1ngs+/mk4dis6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZGVmZjRiOGZjMzA3NTQ0ZmVjMWZhOTlkYTJhNjg5N2Rm
NDYyYjgwHhcNMjYwNTEyMjEwMTAyWhcNMjYwNTEzMjEwMTAyWjAzMTEwLwYDVQQD
EygzNzIyNTBmZWQxZjczYjZhMTM0NGVlOTYxNGM5ZGRiMGJlYTllODI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8t0xK9NjKTjTFXWZAuIIkEVtdqd
oo8UPSvDoJl2xmiduZpn6IoqRaobzFx5y4vdZ8KyNN9xUCaxB9XpzNqf2pGIJ/uJ
xDLvoV7PkclWHxENCXaOXQAmDuu8nszSez0TVICgWrq+dLVYUwqjSyi2bkhJ/Sok
s8YIiarKospiKiLztOus+RLeutJjJd3HEewj4YBoa4e/fzE44v8bKI8gvWO//MSS
8BA5QZfJJn/f+HW7m1V7K6Kf6kZIi6Zr1V7qgyOSb01EjTwPPLWnOLh1F3iJ4RvG
grOAELiTgayZWd+I0DJCjSycnXfok7EpMqCQIHsckx0ELG5tqHDgYRkVhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDciUP7R9ztqE0TulhTJ3bC+qegkMB8GA1UdIwQY
MBaAFC3e/0uPwwdUT+wfqZ2ipol99GK4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGQ3X1M0X0RCMVJQN0ItcG5hS21pWDMwWXJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMzA5YzktMjMwYS00MWUyLWJmMjct
NjYxM2FlYWE2MGRlLzEvTGQ3X1M0X0RCMVJQN0ItcG5hS21pWDMwWXJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mMzA5YzktMjMwYS00MWUyLWJmMjctNjYxM2FlYWE2MGRl
LzEvTGQ3X1M0X0RCMVJQN0ItcG5hS21pWDMwWXJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqU8yTG0y
kYOBoRTU7xIAppZERBLlvYh3awnSnccnz5Yvq0XkH4rGYZQWTX+E/YiJUBg7Cu2p
LuFYlBsrnhO/slRaFhsOCdCQ/GrRkyFob1luzphSXhksrl72TDKfIyslwgdzqYaa
Lz2u8xWus52Phhz37mTpFA7CyxSbJsb8KzzkwxCMXA+joUSd1hUvDMWctGTdkrpg
cJvsj/P4j6zgmmT+SzahA0kElLXBsyja+NXVuD/vSUn9WB4Dm7myHzcL5+HmFqRx
31CoSWl4v6zPHbRfNeDjb01swIHIaPujyej3ibGqOQil1b0ykiZZ7AfrfQL5+ogg
BdUoVPEiZsT72g==
-----END CERTIFICATE-----
Generated at Wed May 13 07:19:49 2026 by rpki-client