Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
File: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json)
Hash identifier: EIMwjDQfaiMpYnc4yDJuliLeGH3hOmY052ykO3CG13U=
Subject key identifier: 45:BA:09:F5:53:86:CA:BD:E5:E8:7D:2B:58:C8:29:96:95:B2:4D:F7
Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
Certificate issuer: /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Certificate serial: 019F90C81D519AF3762F6F0CCE419AD70CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
Manifest number: 0617
Signing time: Thu 23 Jul 2026 21:01:01 +0000
Manifest this update: Thu 23 Jul 2026 21:01:01 +0000
Manifest next update: Fri 24 Jul 2026 21:01:01 +0000
Files and hashes: 1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: 8xCHUt1wvJNjcUytRMY6Xgy7bFu2Py/Y233WxX7F+UU=)
2: nnQafl9L2c6amifJ2gxq8iAxgCA.roa (hash: c2LfwipJXbeLDsPAx811kLeO5Uh/svWtqhW+8TuWjB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:1d:51:9a:f3:76:2f:6f:0c:ce:41:9a:d7:0c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Validity
Not Before: Jul 23 21:01:01 2026 GMT
Not After : Jul 24 21:01:01 2026 GMT
Subject: CN=45ba09f55386cabde5e87d2b58c8299695b24df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:30:b9:48:70:af:14:9b:e3:40:f2:ad:c5:b5:
ad:b4:17:22:99:89:57:4f:39:ca:72:61:88:c0:d6:
9e:44:1f:5d:9f:bf:c1:69:96:5f:da:db:5e:53:e8:
f9:30:a0:79:4f:84:46:45:96:53:5e:82:59:16:41:
b7:a1:2d:09:e4:31:da:dc:dd:e6:24:fc:22:4f:d5:
41:5e:4d:b3:03:94:ee:0b:2f:c8:e0:e4:7f:95:e1:
10:8a:b8:e8:1e:ae:55:7f:4a:3d:7a:24:28:b3:59:
b6:7e:f6:18:a8:d5:0b:f3:ee:28:35:2c:36:25:fe:
19:13:24:09:94:7a:c0:ca:8e:11:79:dc:2c:06:bf:
a5:9a:83:7c:18:d1:3c:92:43:da:87:21:78:d0:06:
1a:77:93:07:23:04:53:5d:67:e6:98:82:09:22:56:
67:46:3d:a8:a3:2e:9c:c8:09:26:ea:64:f3:f9:25:
90:2e:ae:55:79:a8:35:d7:b0:d1:d7:14:09:b0:62:
4a:1a:54:fa:96:0a:24:5b:42:96:63:e0:38:f2:ed:
2b:18:3f:6d:be:72:c5:54:68:41:7b:81:c2:6b:3c:
44:02:af:cd:ab:0f:7b:36:c7:9f:9f:7e:3d:8a:b9:
b1:4a:54:7f:d6:98:10:9b:d2:dd:10:f5:6e:86:d8:
85:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BA:09:F5:53:86:CA:BD:E5:E8:7D:2B:58:C8:29:96:95:B2:4D:F7
X509v3 Authority Key Identifier:
keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3d:97:5e:ca:eb:77:7a:14:72:9d:ac:4c:a6:4a:a9:00:a0:
36:fc:17:c8:ef:6f:5c:40:a0:8e:5f:94:62:0c:a3:87:69:5f:
7b:43:ab:15:4c:4e:59:5e:af:71:86:14:4a:d1:53:75:05:47:
c9:43:f9:a6:9c:c9:8a:80:16:1e:2e:75:56:4f:d8:56:24:f1:
3a:08:d8:03:35:b9:de:dc:c1:f2:43:b3:fd:a0:e7:f6:7f:10:
90:b4:8c:03:cc:56:6b:44:1f:91:5d:b3:df:62:b1:d9:35:f2:
fd:99:69:2d:6c:66:e5:8c:25:07:5e:52:57:40:b8:63:7c:60:
6a:fc:00:01:ec:64:48:e2:ec:8c:ba:44:6b:19:2d:97:1a:32:
9e:80:e9:9e:8c:55:dc:ac:7b:b2:77:77:1c:ee:fc:b8:b3:67:
e0:8e:da:76:11:3f:07:eb:d7:63:92:af:aa:20:0e:20:9d:4d:
9b:a0:94:4f:f1:59:67:ff:5a:f1:ec:ec:ba:34:f1:ec:44:a0:
36:25:6d:a9:fd:e1:2e:24:8a:ae:94:7b:63:1a:44:33:73:ef:
d7:fe:54:37:68:8a:b6:39:13:1f:c1:1c:e5:b2:e6:a3:ac:92:
a2:93:1a:73:24:1d:6a:eb:14:77:51:02:54:b1:0d:f2:ae:6c:
53:c5:ea:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:40:03 2026 by rpki-client