Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
File: 7s8_de-DBrbFk6QjzaGYa9496Ug.mft (raw, json)
Hash identifier: 0k8uj51I3aZIVUFOHyytCmVGMwWriUeGqoVi7DPV8r0=
Subject key identifier: 8E:A4:E5:1E:5D:03:6F:9C:D0:10:84:FB:D7:37:CC:F0:32:3E:98:B7
Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
Certificate issuer: /CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Certificate serial: 019D382DDD9BB3B54F4B29BDAAC20D90AA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:00:23 +0000
Manifest this update: Sun 29 Mar 2026 06:00:23 +0000
Manifest next update: Mon 30 Mar 2026 06:00:23 +0000
Files and hashes: 1: 7s8_de-DBrbFk6QjzaGYa9496Ug.crl (hash: kuXvk/fCD/owSRbvEUrz8mIusCahS0RnzqSYbf2hsLw=)
2: sl-nYt82qhzHyv-nkhEpEqMcJKY.roa (hash: q2Tif7W7uSE6r0l0RzQYoGnDEkiYUnvvVbum3TT4DDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:dd:9b:b3:b5:4f:4b:29:bd:aa:c2:0d:90:aa:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Validity
Not Before: Mar 29 06:00:23 2026 GMT
Not After : Mar 30 06:00:23 2026 GMT
Subject: CN=8ea4e51e5d036f9cd01084fbd737ccf0323e98b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ba:c2:7b:68:ea:17:b6:78:3a:e9:86:05:67:
9f:e7:01:f6:a4:15:76:76:59:9a:7e:75:3d:c3:d8:
0b:f2:ff:34:5c:6e:7f:40:11:84:8d:55:3e:84:8b:
68:b0:b3:d7:c5:f0:d3:0e:3c:e4:2e:ad:46:34:9a:
af:e2:28:63:d9:22:1d:b0:a4:fb:58:e1:21:6f:82:
bd:22:61:4e:1a:e9:8a:92:21:d7:32:cc:8a:e4:42:
43:39:7c:b1:69:03:23:27:b0:d8:bf:ce:c8:ce:94:
8b:1d:32:56:c2:5e:ee:45:b2:e3:2c:ba:c7:9d:7c:
51:d2:78:31:a7:07:ee:34:b5:1b:7d:cb:e0:f4:ff:
62:71:b5:3e:82:cc:81:a4:1f:e3:83:75:93:90:53:
8a:7d:17:f4:84:b2:73:49:73:74:77:3f:90:f1:d5:
f3:cd:4c:dc:10:a0:96:9d:73:d3:7d:14:3d:9d:40:
8e:fe:46:90:9f:70:40:a1:c9:1b:59:60:b9:18:bb:
40:61:71:56:ed:b9:99:ec:ab:a4:8f:d6:7b:15:e3:
c7:57:b5:d9:f8:01:c5:7e:91:6b:13:e9:e8:8f:9e:
2f:11:00:2d:25:65:59:c5:aa:d6:be:ab:73:46:9d:
87:bc:4c:6e:70:33:25:8f:90:99:bf:7d:48:19:8e:
26:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A4:E5:1E:5D:03:6F:9C:D0:10:84:FB:D7:37:CC:F0:32:3E:98:B7
X509v3 Authority Key Identifier:
keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ac:5f:bf:c6:09:b0:de:a3:6b:79:e0:cd:4a:8e:db:52:ee:
0a:2e:a2:2a:33:1b:4e:b6:20:87:df:43:0f:0a:83:0e:54:18:
bd:f5:2f:d8:64:61:7e:4c:27:ca:0d:26:f7:ac:8b:26:af:d5:
0c:28:48:66:90:f0:10:ce:23:5a:9d:48:50:b2:ba:05:ea:d5:
89:a6:20:26:00:d0:de:f1:c1:36:10:4e:e2:6b:bb:b0:7a:99:
f3:b5:ad:3b:ac:fc:f3:0c:4a:3f:41:04:f0:8d:20:08:b3:05:
0c:73:11:37:d0:b2:b3:06:1d:d5:1a:36:f5:71:6f:20:38:a2:
ce:96:ea:21:76:a3:2e:4f:d8:57:3c:6c:e6:6d:e2:2a:19:57:
be:fe:74:2a:db:ce:db:d7:fd:d2:bc:16:c0:cf:b2:57:94:78:
96:d9:f9:83:fd:56:0b:6d:a7:b9:d0:08:f4:50:92:1c:2b:18:
3d:50:db:b8:1f:10:c2:62:d8:3e:f2:5b:12:4f:b0:b4:65:89:
26:c5:b9:53:e5:09:c9:df:1a:07:8f:10:30:98:99:db:75:25:
37:92:5d:71:02:df:46:89:b6:fd:49:e2:e7:c8:9f:03:14:f3:
d3:fc:6b:c3:68:2a:21:3a:87:fb:44:89:42:33:d8:75:6b:30:
82:35:1d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:20 2026 by rpki-client