Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
File: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json)
Hash identifier: bxeFLmwenCgvomftUXmaP3EMohiUNORtO/MUqvNXhBA=
Subject key identifier: F6:17:CD:37:89:BB:96:0D:80:94:03:93:0C:E4:25:BF:37:1E:6B:1A
Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
Certificate issuer: /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Certificate serial: 019EBC596CD04D2434AFA544B374547DD1DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
Manifest number: 05A9
Signing time: Fri 12 Jun 2026 15:00:37 +0000
Manifest this update: Fri 12 Jun 2026 15:00:37 +0000
Manifest next update: Sat 13 Jun 2026 15:00:37 +0000
Files and hashes: 1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: 7nO9lhyA8XUIBnGHLCT4AIRYsekc30lTvn2wZfUKHSs=)
2: nnQafl9L2c6amifJ2gxq8iAxgCA.roa (hash: c2LfwipJXbeLDsPAx811kLeO5Uh/svWtqhW+8TuWjB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:59:6c:d0:4d:24:34:af:a5:44:b3:74:54:7d:d1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Validity
Not Before: Jun 12 15:00:37 2026 GMT
Not After : Jun 13 15:00:37 2026 GMT
Subject: CN=f617cd3789bb960d809403930ce425bf371e6b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d4:ad:f8:81:5d:72:8e:ea:a2:62:70:19:b5:
f0:78:6c:ee:4e:71:14:a5:e8:23:da:6c:ab:9c:73:
0e:5e:00:fb:74:04:66:0a:37:57:16:f0:3e:f8:f9:
7f:88:4b:c1:df:8a:3f:4b:c4:73:36:a7:60:dc:a2:
9e:e7:ac:10:5d:6d:d1:a0:0e:41:67:97:51:0d:0a:
9a:21:bd:66:5d:28:2b:f6:76:08:2b:bc:82:7d:9f:
54:85:c7:17:0d:ee:58:63:f6:0c:6f:c8:35:ee:56:
b6:ce:98:a8:19:26:51:96:5a:3f:cb:7a:f8:93:04:
1a:9d:37:46:93:cd:26:29:82:77:08:19:eb:e0:1b:
2d:84:7a:21:50:08:24:53:cd:57:08:5d:28:31:75:
8f:7c:67:3a:4d:59:e0:5e:2b:9d:fe:ba:07:70:97:
d3:a6:d4:19:da:86:42:9a:4f:9f:a0:27:e3:c0:5f:
a3:bd:46:4f:41:83:eb:94:93:76:f2:e4:25:10:07:
4e:20:00:20:96:c0:29:01:c8:3d:57:1d:be:04:3a:
95:a6:3d:84:75:43:5f:27:68:d6:cc:db:c3:c4:06:
0c:f2:b4:c0:93:fb:06:81:12:76:b9:9c:9a:01:f8:
e5:f9:05:61:65:d1:40:9a:8d:fe:a4:3e:64:67:41:
7d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:17:CD:37:89:BB:96:0D:80:94:03:93:0C:E4:25:BF:37:1E:6B:1A
X509v3 Authority Key Identifier:
keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3a:52:78:2c:84:33:5c:dc:b8:ab:04:ef:62:aa:81:66:17:
db:39:34:d7:13:c9:37:4d:74:ac:dc:de:ca:4f:65:ec:ec:83:
3f:60:ab:f8:d2:f7:2f:ee:d1:2b:b4:04:23:5c:4a:97:16:fe:
5f:38:f1:ba:3f:19:c2:70:07:77:e2:40:2e:12:f1:04:e2:e4:
e3:67:e5:d3:ef:7b:c8:ac:95:0f:3f:c2:ee:b7:a9:87:c7:d5:
f1:66:75:f9:5d:f4:71:e0:69:b7:bd:e2:a4:21:1e:45:5c:66:
5a:f3:79:c6:9f:85:fb:fa:54:6e:4b:af:49:39:cf:3d:5d:cb:
3b:f2:00:8c:cc:7f:87:5b:b8:74:ae:b4:16:f0:53:46:60:d4:
dd:3a:a7:57:07:34:ef:03:8d:f3:4d:d5:da:12:8c:2d:ee:d9:
88:7e:28:18:fd:68:37:92:19:2e:4b:08:25:3a:ed:02:a3:fd:
a9:3b:e3:7b:38:1d:b7:10:c6:21:cb:a9:14:00:47:1a:f1:ac:
a2:a8:8e:92:2d:47:dd:91:63:e5:8c:70:60:63:99:6e:03:63:
04:63:87:b4:56:de:48:16:c5:42:df:80:37:c1:01:02:49:c6:
1e:d3:f5:b8:52:4c:89:9a:71:6f:ce:78:bf:f5:04:42:4d:0d:
d2:ed:5d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 02:21:19 2026 by rpki-client