
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
File: 7s8_de-DBrbFk6QjzaGYa9496Ug.mft (raw, json)
Hash identifier: dD4OXFko7Cokia++U8t4MdEqbGmGQHiPR+UBMcJ9oas=
Subject key identifier: BA:C5:7C:02:89:B1:BB:CF:DF:CF:23:F9:2F:B7:C6:32:DB:67:7E:0A
Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
Certificate issuer: /CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Certificate serial: 01A000CA9149D28D34485F6FA0F6C6799657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 15:01:10 +0000
Manifest this update: Fri 14 Aug 2026 15:01:10 +0000
Manifest next update: Sat 15 Aug 2026 15:01:10 +0000
Files and hashes: 1: 7s8_de-DBrbFk6QjzaGYa9496Ug.crl (hash: 5AkKm5eBxDUcQQ2VgcE6u6NwLzmzeernTL5rpnh1XZ4=)
2: sl-nYt82qhzHyv-nkhEpEqMcJKY.roa (hash: q2Tif7W7uSE6r0l0RzQYoGnDEkiYUnvvVbum3TT4DDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:91:49:d2:8d:34:48:5f:6f:a0:f6:c6:79:96:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Validity
Not Before: Aug 14 15:01:10 2026 GMT
Not After : Aug 15 15:01:10 2026 GMT
Subject: CN=bac57c0289b1bbcfdfcf23f92fb7c632db677e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b6:65:7e:8f:72:a6:42:19:8a:42:71:c8:70:
77:bd:ac:13:a7:0f:4b:12:d4:a9:07:4f:2a:28:e8:
a1:9d:7f:8c:1a:45:bf:c1:0a:d1:bb:70:a2:7b:7c:
5b:82:90:d9:2e:06:f6:30:97:e5:a2:59:d1:93:a2:
bd:6d:8d:25:06:f3:2d:d4:0f:9f:ad:e1:61:8c:10:
4f:c8:d7:c0:11:e4:ec:2a:ac:2c:cc:49:06:83:68:
e6:52:01:69:c9:68:2d:fa:00:e6:1c:ff:3d:3a:a5:
e2:0e:ed:9d:5f:c6:de:35:94:ac:3c:ab:76:2c:70:
94:fb:2c:ce:3c:44:54:9f:34:73:9f:4b:1d:e2:1b:
2e:56:78:37:0e:a8:09:e1:e8:e5:c3:58:9f:63:f2:
df:de:93:4a:ea:55:52:b9:0c:c8:78:ae:f9:6c:2f:
b3:56:91:98:3f:69:0b:43:d3:d5:49:4b:11:9b:24:
d8:5e:89:10:08:06:85:9f:6a:a7:91:ec:be:37:32:
7e:30:98:41:51:c6:e8:f7:31:89:13:f5:ee:41:eb:
f8:f8:26:62:4a:66:d7:6b:2c:96:19:74:34:52:30:
b4:e4:fc:ce:85:4e:06:6d:4a:9a:1b:29:19:97:10:
81:3b:e3:18:9a:cd:93:9e:5e:54:ce:47:69:f8:fb:
9f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C5:7C:02:89:B1:BB:CF:DF:CF:23:F9:2F:B7:C6:32:DB:67:7E:0A
X509v3 Authority Key Identifier:
keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:16:d0:a4:9d:67:8a:97:71:c7:47:bf:67:f3:d9:8a:98:f4:
d5:81:dd:db:09:1b:a2:de:e5:de:ef:9e:f8:bf:33:00:b8:d0:
10:6e:44:35:01:cc:1a:f8:e0:8e:3d:a3:96:bb:4c:b4:ea:b5:
35:4c:9e:0b:8e:ac:c8:b4:14:ae:82:b9:95:4f:5e:6c:78:9c:
20:f5:b1:2d:4e:36:29:6e:19:25:61:17:71:a3:6c:66:52:48:
8e:0f:d9:66:8e:c4:ad:84:01:88:80:4d:ac:f6:fd:a0:16:53:
7b:92:c0:43:15:e7:4e:02:f6:78:0c:35:7f:ff:fd:77:50:bd:
98:95:0e:a1:77:04:f8:d3:24:ab:1c:16:6e:a1:cc:67:b5:8c:
80:16:68:71:b8:55:df:1f:9c:22:8c:1f:6b:2a:7a:cb:61:3b:
45:1f:da:52:40:c8:f8:25:77:b5:59:2d:01:1b:55:5b:af:95:
d8:91:47:6d:e2:a1:b5:cf:0a:9c:7e:a9:26:79:a0:06:c1:21:
49:c6:1d:96:7b:9d:7f:5d:0a:fc:76:ec:45:44:cf:8d:d0:fb:
e6:d9:b8:26:5e:4c:e0:3f:e9:9b:d6:b2:83:f6:52:68:92:f6:
6e:01:b9:c3:6a:18:9d:74:91:c6:bb:e6:e8:50:63:3f:4a:96:
14:22:c7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:37 2026 by rpki-client