Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
File: 7s8_de-DBrbFk6QjzaGYa9496Ug.mft (raw, json)
Hash identifier: MAfPihZYhjvEWKJSH883VDUm5Ks19HQuH44uTq05Dwk=
Subject key identifier: CF:14:F2:11:5E:63:86:C2:80:1B:7E:24:43:45:59:A9:B4:6A:C9:8C
Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
Certificate issuer: /CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Certificate serial: 019D26CD78DFDFAAB99DB4E0C550F278884E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 21:01:33 +0000
Manifest this update: Wed 25 Mar 2026 21:01:33 +0000
Manifest next update: Thu 26 Mar 2026 21:01:33 +0000
Files and hashes: 1: 7s8_de-DBrbFk6QjzaGYa9496Ug.crl (hash: Tcgx7PkJ7Um160k0Tonpn3XELAdukP0cthGcRFcVAgM=)
2: sl-nYt82qhzHyv-nkhEpEqMcJKY.roa (hash: q2Tif7W7uSE6r0l0RzQYoGnDEkiYUnvvVbum3TT4DDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:78:df:df:aa:b9:9d:b4:e0:c5:50:f2:78:88:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Validity
Not Before: Mar 25 21:01:33 2026 GMT
Not After : Mar 26 21:01:33 2026 GMT
Subject: CN=cf14f2115e6386c2801b7e24434559a9b46ac98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fb:52:42:a8:e5:79:8d:bd:dc:9b:75:bb:d1:
1d:36:72:72:dd:55:aa:36:98:ab:d5:92:19:c4:14:
95:89:9c:47:3f:9e:fc:1b:15:24:a3:59:06:35:a7:
ba:37:45:dc:7e:64:14:b8:d7:ab:76:3d:c3:a2:96:
de:09:2f:80:01:b5:d3:b5:7b:2b:6b:e4:85:a4:f9:
4e:b5:03:a3:08:4f:e8:dd:c6:bc:cb:55:45:72:4c:
35:a5:48:80:7b:e1:58:02:ff:f4:ce:4a:d7:98:43:
ba:d2:e7:a9:16:85:b1:18:10:6d:eb:2e:88:93:b4:
55:28:87:55:6d:b0:e3:b0:cf:ff:0d:09:5d:d2:81:
4f:93:db:52:f4:77:84:a8:bd:45:1c:af:2e:14:9d:
b9:1e:0d:1e:b4:b7:42:f4:36:ea:1b:df:99:2b:a7:
56:7b:3f:49:63:96:2e:0a:eb:c6:fa:f9:b1:45:90:
9c:79:64:b9:6a:97:23:04:17:37:55:4c:c8:d9:18:
82:65:82:da:bc:62:7c:ae:a0:b7:04:68:19:09:cd:
dd:de:42:e8:fb:61:96:7e:3f:6c:4a:af:b2:82:ca:
5f:a4:3d:db:ee:dc:36:60:65:af:f7:d2:dd:97:d2:
4c:ca:e2:52:45:21:a4:f9:cb:22:6a:2a:06:88:cd:
6e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:14:F2:11:5E:63:86:C2:80:1B:7E:24:43:45:59:A9:B4:6A:C9:8C
X509v3 Authority Key Identifier:
keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:de:4d:78:a0:ca:ba:a0:6c:0c:92:4e:ec:3e:c4:17:a5:6d:
0b:ef:ab:c0:df:c7:7a:39:c5:5e:7d:0c:38:87:cc:8c:a9:38:
50:f7:23:89:30:61:a0:c9:dd:ce:13:96:52:12:e6:fd:f6:43:
a9:64:8e:f9:d1:bd:83:70:31:fb:0a:67:80:c9:07:61:32:57:
8c:4b:f8:3c:8a:64:3d:69:3e:2a:e5:2c:14:75:d6:d1:02:a5:
b2:31:0c:87:da:15:5d:01:3b:8f:1d:89:9a:f0:9f:20:f7:d4:
f4:ad:79:59:f3:79:6f:da:6a:a3:bb:72:17:58:61:1b:93:f1:
5f:66:48:14:dd:73:67:57:b8:53:90:95:88:7e:60:b6:93:a9:
17:bb:3c:7a:48:19:13:82:a3:35:d4:fb:22:44:12:48:e9:1d:
74:c5:f5:34:dd:ae:98:a2:51:e6:1d:09:1f:c7:90:11:a9:e6:
82:80:12:34:32:74:51:91:57:8e:53:6e:3f:24:2e:42:de:85:
34:af:72:53:1b:c9:82:16:67:b9:a8:88:fc:04:01:aa:0c:bf:
6d:d9:b4:6b:ac:5d:3e:bc:44:5b:0d:b3:ad:9b:38:69:2f:78:
92:f7:f4:26:b5:73:ba:27:22:9f:2d:54:c9:62:ad:03:82:fa:
1f:86:80:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:09 2026 by rpki-client