Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
File: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json)
Hash identifier: ARRhUrspVJuUbAWfL+gc4CQ5NUeDAXC7JpVRICSvdBc=
Subject key identifier: 72:F4:63:56:14:30:7F:40:B2:C2:6F:67:80:AD:3D:DB:46:FD:48:5E
Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
Certificate issuer: /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Certificate serial: 01A186E3DB72CBD42F97251BF1DAA1FDCB19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
Manifest number: 071B
Signing time: Thu 29 Oct 2026 09:00:42 +0000
Manifest this update: Thu 29 Oct 2026 09:00:42 +0000
Manifest next update: Fri 30 Oct 2026 09:00:42 +0000
Files and hashes: 1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: ANYb8PC5JTnoGzteENRBmN7znh/J4dw7Rgud3kaclnQ=)
2: nnQafl9L2c6amifJ2gxq8iAxgCA.roa (hash: c2LfwipJXbeLDsPAx811kLeO5Uh/svWtqhW+8TuWjB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:e3:db:72:cb:d4:2f:97:25:1b:f1:da:a1:fd:cb:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Validity
Not Before: Oct 29 09:00:42 2026 GMT
Not After : Oct 30 09:00:42 2026 GMT
Subject: CN=72f4635614307f40b2c26f6780ad3ddb46fd485e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bf:3a:c3:3f:41:db:7f:8c:6b:81:47:7c:1b:
5a:59:3f:bc:a7:29:53:1c:9e:ff:28:9c:f8:ef:e5:
57:17:d2:85:dd:11:60:92:2f:95:2c:1d:0c:1e:e9:
5e:e2:b4:f7:75:0a:98:d9:69:a5:f2:12:4b:6f:6a:
4d:d2:05:31:68:5d:a6:7f:4a:fe:4d:49:52:3d:87:
e1:30:34:b5:78:8e:0a:c8:d1:ba:65:0d:7b:8c:9f:
67:91:0b:02:1c:7a:c7:38:62:fe:59:fd:2a:94:54:
7b:1e:92:5d:9f:53:89:d6:b8:30:00:71:5d:e6:af:
03:d0:a4:fd:d1:6e:db:06:07:4d:7f:04:a1:e1:20:
21:17:52:6b:d2:f5:21:df:4f:3e:89:2b:4d:51:81:
89:fa:c1:47:1b:67:f5:66:a1:ad:10:94:4c:8e:8c:
46:09:08:b9:61:d2:d7:cd:3c:af:aa:5e:41:cc:e9:
fd:bf:6e:00:fa:37:ad:57:18:db:87:1c:60:93:95:
a8:4f:fa:c5:c8:5a:33:00:e0:1e:44:2f:9c:af:19:
20:62:2c:3d:f4:64:a3:3c:ba:e9:db:2a:41:6a:da:
0f:0f:ae:26:3f:66:e8:98:f8:e6:51:9f:3d:94:db:
65:b5:d6:a4:32:ad:38:ea:ea:af:12:1e:01:fc:66:
7e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F4:63:56:14:30:7F:40:B2:C2:6F:67:80:AD:3D:DB:46:FD:48:5E
X509v3 Authority Key Identifier:
keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:42:41:f0:d1:e2:81:9f:18:e3:a0:ce:04:da:90:36:44:42:
e3:a1:63:3a:bf:88:dc:0f:e1:22:6a:48:09:46:59:e3:2a:cb:
75:5e:ab:2b:44:18:57:51:5b:9d:5a:cc:6c:79:dd:ea:a1:21:
a2:92:d3:c1:3b:c4:ef:2b:f5:08:51:a1:70:c1:9d:5a:e3:22:
aa:8d:25:89:80:5d:e1:26:28:b0:23:5e:a8:7e:56:87:06:f9:
4c:2d:5c:9f:6a:46:cf:48:99:29:66:db:4f:93:c4:7e:f9:12:
18:42:61:df:10:a4:1e:7f:93:00:bd:ba:44:69:91:95:9f:9e:
57:f7:e6:4b:6a:fd:0f:66:ce:60:a7:fb:3d:6e:4b:19:b8:f0:
2a:9f:cb:02:92:4c:ed:ff:5a:e8:05:de:dc:44:69:bb:dc:c0:
7d:e3:c7:41:bb:7c:da:56:d9:bb:30:51:47:39:c0:08:2c:85:
57:0b:35:0a:88:4a:8f:10:54:ef:af:6b:37:ea:29:94:3e:a2:
68:79:de:e3:12:96:ac:55:d7:96:84:b5:c0:64:00:97:61:48:
98:04:e1:25:a9:9f:08:53:1b:05:70:c5:33:c9:b7:ec:d8:62:
53:f3:ba:f8:f6:e5:4e:06:ea:23:6f:26:8a:95:49:d6:aa:4c:
99:4e:30:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:58:15 2026 by rpki-client