Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
File: 7s8_de-DBrbFk6QjzaGYa9496Ug.mft (raw, json)
Hash identifier: ThXNOfHOUxdaDPZGEqnxHy5yG7OQnPL7XCAe/4uOLjc=
Subject key identifier: 5B:D4:9B:F7:71:26:73:11:27:2D:D9:ED:3E:6A:2A:D9:97:DE:BC:2F
Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
Certificate issuer: /CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Certificate serial: 01A13D8173974F837B0907C1BC26F70AE042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 03:00:56 +0000
Manifest this update: Thu 15 Oct 2026 03:00:56 +0000
Manifest next update: Fri 16 Oct 2026 03:00:56 +0000
Files and hashes: 1: 7s8_de-DBrbFk6QjzaGYa9496Ug.crl (hash: 14uw6SvX4yQD4ieT0Hrkb7m3DkSgVKQAvxS6OLfGx/o=)
2: sl-nYt82qhzHyv-nkhEpEqMcJKY.roa (hash: q2Tif7W7uSE6r0l0RzQYoGnDEkiYUnvvVbum3TT4DDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:73:97:4f:83:7b:09:07:c1:bc:26:f7:0a:e0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Validity
Not Before: Oct 15 03:00:56 2026 GMT
Not After : Oct 16 03:00:56 2026 GMT
Subject: CN=5bd49bf771267311272dd9ed3e6a2ad997debc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:46:0a:96:5c:96:05:be:4b:2b:45:28:6d:
a9:6f:b0:da:9e:84:ae:d3:3c:0b:7e:43:89:7e:f7:
af:31:d0:ff:d8:26:e4:cc:e3:a7:d3:65:14:88:8d:
52:92:3b:b8:02:71:67:8c:7e:12:75:f9:67:58:87:
6d:30:ac:b2:53:88:02:c1:a0:38:07:64:7f:fe:b5:
e5:49:3c:13:bf:62:75:9f:8e:d4:6c:3b:c7:49:77:
49:f2:93:a4:51:b5:98:78:07:34:12:2c:4e:0e:60:
86:ee:20:df:bf:ca:0e:f7:cc:8c:8c:94:ac:e9:65:
47:d7:b0:2e:85:40:f9:b8:14:09:f3:4d:b5:84:d5:
dd:46:d8:e9:f3:92:97:56:c8:1c:a4:cc:c4:3f:df:
88:8f:09:6c:55:59:8f:93:40:69:f2:c9:64:fb:b6:
10:71:1e:ec:43:e6:4d:39:09:5a:c9:31:60:d5:66:
be:b5:58:eb:13:da:ec:93:77:4c:a0:d1:0d:41:c8:
43:e8:d9:4f:8d:a2:82:56:98:49:dc:a1:d6:a4:bf:
e6:b7:27:a8:f1:d3:37:49:7a:17:07:e4:7a:f3:71:
f4:0d:a6:40:2c:01:82:12:94:3a:4b:ea:a8:3d:aa:
02:a2:88:a6:88:17:b7:81:4c:86:b7:6b:69:63:d3:
37:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D4:9B:F7:71:26:73:11:27:2D:D9:ED:3E:6A:2A:D9:97:DE:BC:2F
X509v3 Authority Key Identifier:
keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:54:fd:ed:9c:aa:7f:15:2d:92:c8:8f:00:ab:72:6c:a9:c3:
ef:f2:53:45:35:fa:4d:a3:6d:db:34:a6:c9:94:4e:23:07:f6:
e1:39:c9:46:c7:0e:d3:bc:7c:2c:93:53:6a:e6:26:2f:17:8c:
35:ce:41:46:42:91:e8:09:15:7c:6a:88:84:0c:66:44:4d:70:
7f:1c:01:5e:0d:34:6c:7e:49:18:0f:b2:ff:7e:bc:55:d5:ef:
a3:e9:2f:60:2b:87:30:5c:8c:39:fc:73:46:37:2a:1a:59:bd:
5a:29:5c:c6:df:84:38:83:35:10:91:00:70:2f:82:41:27:4e:
8a:01:07:7f:5f:c9:6b:3d:f6:50:63:05:fe:a2:d5:61:70:d7:
66:8c:81:9a:57:86:04:39:0c:bb:5f:53:37:a2:39:37:ea:77:
1a:1e:04:0e:e0:fa:52:c0:95:82:aa:49:9d:8b:e8:c7:88:bc:
54:b1:9b:d8:1a:cc:39:8f:fb:96:e4:a6:33:8d:17:ac:c3:69:
cf:db:c2:79:82:31:71:d7:b7:a2:dc:6f:3f:12:e0:1b:b0:bc:
37:c3:7b:9a:c2:92:59:77:b7:6b:df:42:bc:83:38:6b:a4:99:
48:87:06:d8:e0:8d:d2:9a:08:ce:e8:c9:3e:2d:c6:06:ba:cc:
c2:40:d5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:07:07 2026 by rpki-client