Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
File: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json)
Hash identifier: 9ptKCVA6ZEfPW2m7OEctcsN/kPLw/TRk8buI2yv+BfQ=
Subject key identifier: 6B:68:C8:8C:9C:B4:B5:D8:CC:FC:16:57:E1:67:2A:6F:7F:3C:AC:89
Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
Certificate issuer: /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Certificate serial: 01A08FB2B8C4AD8555B5369AC0B673A23C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
Manifest number: 069B
Signing time: Fri 11 Sep 2026 09:00:49 +0000
Manifest this update: Fri 11 Sep 2026 09:00:49 +0000
Manifest next update: Sat 12 Sep 2026 09:00:49 +0000
Files and hashes: 1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: Cc8rUHU41wTKkhyZ022gZSYwDoqMF56qIQWj/rUwwK4=)
2: nnQafl9L2c6amifJ2gxq8iAxgCA.roa (hash: c2LfwipJXbeLDsPAx811kLeO5Uh/svWtqhW+8TuWjB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:b2:b8:c4:ad:85:55:b5:36:9a:c0:b6:73:a2:3c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Validity
Not Before: Sep 11 09:00:49 2026 GMT
Not After : Sep 12 09:00:49 2026 GMT
Subject: CN=6b68c88c9cb4b5d8ccfc1657e1672a6f7f3cac89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:9f:7a:ca:ee:25:fc:06:2a:13:b6:bb:b5:
ae:0d:1e:26:22:a4:bd:bf:26:65:d4:29:ad:df:b0:
33:a9:4b:2b:57:7b:1d:60:d3:cf:fa:ad:62:73:96:
7a:bb:6b:3e:f7:7b:6c:fd:0e:e9:a9:79:81:37:94:
e2:db:de:99:5b:be:d0:e1:2b:85:64:ae:ea:8a:e2:
05:e3:7b:90:9f:7d:c0:fe:d8:02:93:71:90:b7:b0:
04:e4:47:0b:b3:1a:e2:1e:5b:1f:8c:1f:5a:7f:63:
c7:db:cf:1a:29:55:61:f7:1c:35:b3:d6:c3:44:4e:
ea:1a:2d:28:8e:02:be:0c:3f:2b:b9:48:f8:26:fb:
c6:6f:66:7b:61:2c:ed:a1:7a:5f:49:99:a1:92:4e:
00:b7:cb:69:e3:8a:c8:28:8c:56:ba:f7:05:c8:f2:
8b:27:aa:d0:25:83:fd:bc:03:b2:87:11:50:0d:68:
94:a7:10:9a:15:38:be:c8:5e:10:30:fe:5e:e0:59:
69:c4:a2:58:3d:bc:09:3b:20:4b:d7:ea:77:4e:df:
44:70:43:e0:90:d3:1f:02:f6:5e:07:99:7c:62:cb:
1a:08:43:0c:5c:35:51:5c:24:9c:5f:24:89:9c:66:
fe:2d:3a:da:89:1c:e6:0a:4e:b0:07:67:c6:a0:ec:
d2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:68:C8:8C:9C:B4:B5:D8:CC:FC:16:57:E1:67:2A:6F:7F:3C:AC:89
X509v3 Authority Key Identifier:
keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f2:e6:ac:17:ed:0e:2a:8f:61:6c:ec:30:3f:db:9f:38:f5:
0b:fe:74:c9:8f:3b:e2:95:62:3a:5d:6c:50:11:a8:a5:24:be:
93:95:2d:3b:0a:64:20:11:da:54:aa:f3:69:74:cd:16:22:b4:
28:7e:b6:f9:a3:6e:a6:54:0c:05:30:1d:f7:2f:40:8a:08:2b:
c5:7d:f7:7e:b7:16:45:9c:51:61:66:54:28:1e:d8:ec:47:d7:
ff:ee:0c:c0:8a:f9:ee:ad:07:41:6c:62:99:d5:68:d2:15:32:
8c:4f:02:a6:ac:f5:96:b8:be:bf:65:43:91:26:1a:f3:95:2c:
9b:d3:2a:78:ff:aa:f6:d2:23:38:8c:79:74:7b:1c:55:78:ad:
65:15:a0:ea:14:9e:ad:b0:a6:ac:5a:d8:b4:7e:83:7d:f9:bf:
ea:6b:ed:32:54:01:f0:4e:9f:88:c6:aa:91:96:48:03:2e:ec:
8a:29:6f:df:e9:11:08:a1:37:8d:01:2e:d9:f0:26:2b:d0:34:
f5:a2:a7:7b:c4:3f:b0:14:cc:27:f3:b3:6f:53:3c:93:0c:3b:
0d:17:35:4f:0c:81:ef:ea:79:40:58:68:ae:6b:35:27:d8:19:
12:41:17:5b:f3:2c:6e:78:17:2b:62:72:57:7d:2e:28:f2:0e:
a8:d9:07:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:09:01 2026 by rpki-client