Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
File: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json)
Hash identifier: MdSFBu7iRB4Pm03b1F83pjAYbtQDPLxGJctSzAXL7/M=
Subject key identifier: E1:6E:E7:B2:3F:24:AE:60:38:FE:91:CA:18:CF:9C:C2:D7:F2:39:6E
Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
Certificate issuer: /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Certificate serial: 019D382E3B67456DA76DF01F5DD46839C258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
Manifest number: 04E0
Signing time: Sun 29 Mar 2026 06:00:47 +0000
Manifest this update: Sun 29 Mar 2026 06:00:47 +0000
Manifest next update: Mon 30 Mar 2026 06:00:47 +0000
Files and hashes: 1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: GGtmD2xen8iMCF38zNDuDwkFZeXGc2yn8OSwpjqB2OI=)
2: nnQafl9L2c6amifJ2gxq8iAxgCA.roa (hash: c2LfwipJXbeLDsPAx811kLeO5Uh/svWtqhW+8TuWjB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:3b:67:45:6d:a7:6d:f0:1f:5d:d4:68:39:c2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Validity
Not Before: Mar 29 06:00:47 2026 GMT
Not After : Mar 30 06:00:47 2026 GMT
Subject: CN=e16ee7b23f24ae6038fe91ca18cf9cc2d7f2396e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:77:05:c6:ec:23:b7:6e:0e:8b:3f:80:1e:
4e:54:54:0b:2a:4d:e9:7c:b3:da:13:55:e0:f3:b8:
72:ba:4a:da:67:f7:74:a2:e6:43:8c:7d:5b:ef:2f:
34:23:5d:3b:c7:7a:c7:42:b1:fb:e6:8e:68:90:fe:
ed:44:30:4b:0d:2f:51:97:19:33:22:a9:8a:98:a3:
75:b8:32:0d:c7:bf:bb:36:0b:21:61:01:f1:29:8b:
d3:4d:5b:dd:6f:27:9c:02:db:28:b1:c7:99:15:74:
37:cc:ce:37:a5:b6:03:57:a2:44:2d:bb:09:3d:da:
2f:96:67:78:63:24:cc:92:98:3a:ae:85:b6:c1:0b:
ff:7e:38:f5:39:66:99:67:7c:87:44:48:01:6f:57:
09:bc:66:c6:6a:fa:d1:4c:17:5e:01:c0:49:88:2d:
69:83:c1:16:7a:c7:18:68:53:8c:1a:ba:e6:76:4c:
78:e1:e6:58:b3:5b:89:16:95:82:4e:b6:ca:e8:1c:
06:e9:23:54:e5:0a:20:9c:21:08:a6:1b:7f:50:c2:
be:07:99:ac:a5:6c:ce:5d:40:ed:9b:b7:64:2e:99:
97:c9:31:cb:5e:1f:31:69:36:68:ec:b7:6f:17:17:
78:ea:97:6b:19:ab:b2:ae:89:3f:0a:ce:cc:f9:b7:
7e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6E:E7:B2:3F:24:AE:60:38:FE:91:CA:18:CF:9C:C2:D7:F2:39:6E
X509v3 Authority Key Identifier:
keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:63:fd:79:af:be:38:52:07:af:bc:62:47:c6:7f:37:aa:55:
22:6e:6a:84:02:22:9b:8c:cb:1c:4e:ac:c7:15:76:a2:1a:bf:
a3:88:e4:62:fd:62:55:61:0e:a5:0b:f8:92:cf:73:26:a1:cd:
45:d7:f6:40:de:9d:ba:58:b9:4d:1c:58:a0:4c:27:5a:6d:83:
e8:62:ae:7b:6b:c4:f9:dd:24:5d:e1:de:7b:b8:6d:05:3a:eb:
ef:0c:e4:2f:1d:38:4a:a7:07:03:26:4f:14:86:f3:cc:64:f1:
61:dd:6d:7c:24:75:5d:3a:ad:d8:f9:35:f6:7a:a0:ac:7f:19:
da:cd:d7:f4:c0:5f:b9:1b:9f:ce:cd:9c:fa:4f:eb:2c:e7:49:
09:b2:b7:8f:c8:4d:82:21:aa:62:0f:2a:a0:7a:98:ca:e1:2d:
83:0d:cb:0a:9d:45:1d:f4:3f:8c:88:e0:d1:e1:8c:4a:43:cd:
fe:62:44:85:75:32:3c:7b:cb:18:a0:ff:b8:a2:4f:e5:10:35:
51:da:9f:76:d6:e2:cb:c6:be:2a:d4:6e:b1:61:fc:3b:96:39:
bd:9e:d2:62:1a:a6:99:42:b3:11:17:22:72:eb:0c:f6:35:38:
55:c9:ac:5d:2d:1f:8a:fe:b8:6a:88:64:40:c8:af:46:0d:b3:
23:1e:2f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:19 2026 by rpki-client