Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
File: 7s8_de-DBrbFk6QjzaGYa9496Ug.mft (raw, json)
Hash identifier: 1GZJTuLHvl0t1oddCAkH2e+M1WtmQfGWGZcstl5RxKA=
Subject key identifier: 12:FA:FC:16:86:F1:97:B4:67:9C:52:EE:49:A6:2E:BD:B8:30:96:8F
Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
Certificate issuer: /CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Certificate serial: 019FA9E34A42C732E3974622ECAAEB395D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 18:01:12 +0000
Manifest this update: Tue 28 Jul 2026 18:01:12 +0000
Manifest next update: Wed 29 Jul 2026 18:01:12 +0000
Files and hashes: 1: 7s8_de-DBrbFk6QjzaGYa9496Ug.crl (hash: 7JABodipw1+/udEL/32F07TfO5c9BxnhxgdkcitJ3Ms=)
2: sl-nYt82qhzHyv-nkhEpEqMcJKY.roa (hash: q2Tif7W7uSE6r0l0RzQYoGnDEkiYUnvvVbum3TT4DDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:4a:42:c7:32:e3:97:46:22:ec:aa:eb:39:5d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Validity
Not Before: Jul 28 18:01:12 2026 GMT
Not After : Jul 29 18:01:12 2026 GMT
Subject: CN=12fafc1686f197b4679c52ee49a62ebdb830968f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:60:d9:7d:5f:cc:ea:55:c6:fb:b6:b4:b1:06:
12:9f:8a:e6:24:6c:fb:d2:a7:ce:ea:fa:60:7e:2d:
0d:77:40:3b:9a:24:23:05:36:17:d9:59:07:2c:19:
28:09:58:c4:6b:47:6c:82:0c:64:b5:e4:18:c6:1f:
67:9a:b0:b5:3b:ca:8b:82:2c:5d:e6:61:8e:03:07:
20:e7:6a:6e:58:cd:69:55:63:32:ab:40:ae:5a:2a:
aa:7a:17:e6:fd:d4:3c:73:fb:0d:13:7f:8a:e8:a6:
10:a8:25:61:5f:c1:85:46:c2:4b:90:0c:79:02:59:
91:03:44:ca:9a:12:31:38:4d:7b:38:6d:d2:06:77:
cb:ad:dc:67:1f:30:3d:f9:e7:8e:fc:91:2e:0a:68:
04:0d:e0:c4:6f:9c:67:02:51:6f:c9:e4:c7:04:ff:
6f:d9:54:3c:4c:90:ba:4d:75:c8:0a:ba:21:e7:5b:
03:6f:28:47:61:b2:c0:f5:0d:70:49:35:47:3d:6f:
ae:9d:bb:c6:00:be:39:7f:07:46:c2:d3:50:91:74:
dd:db:f5:ba:07:b0:18:93:c8:04:fa:68:85:3e:f9:
4a:c2:fc:45:ec:83:b6:6c:60:bf:5e:04:06:9e:7d:
b4:5c:fc:96:d7:09:74:0a:79:9f:26:9c:12:b9:51:
bf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FA:FC:16:86:F1:97:B4:67:9C:52:EE:49:A6:2E:BD:B8:30:96:8F
X509v3 Authority Key Identifier:
keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1b:df:db:dc:30:eb:5f:2b:93:ae:98:c1:be:30:bf:ea:eb:
c1:db:ae:d7:d6:77:f3:67:f6:2f:69:fd:b7:e9:7a:8f:6e:2c:
45:df:3d:05:0a:8a:c1:75:a8:3d:a6:9d:1b:4c:ad:4d:60:14:
45:04:60:82:2b:58:52:dd:75:26:95:1a:a5:a4:9d:fd:6f:44:
e4:10:68:a8:dd:55:0e:ef:76:6e:e2:c2:e8:98:d1:68:fc:2b:
bc:05:54:3b:e2:2b:83:16:cf:fc:e3:ef:0a:57:36:7b:64:5e:
62:e7:52:e4:93:dd:76:ff:11:7e:2a:28:e6:5a:6e:23:e5:92:
0a:2f:60:9a:2c:02:e4:3e:94:2b:0e:7e:cf:4a:be:0e:ad:b8:
47:bf:e3:14:2f:19:08:d9:be:29:e9:53:af:b8:6c:f8:f4:24:
10:92:05:a5:71:1c:2e:a5:e5:1f:3d:07:e1:a8:d1:12:3e:99:
e5:77:0b:7e:97:04:06:11:4d:2d:8c:70:20:88:f3:8b:bc:b4:
7d:57:0d:d6:59:5a:01:b7:6e:d7:33:4f:e4:38:9a:6a:6b:0a:
74:8e:3f:38:85:76:28:ce:5e:22:a4:f7:0a:23:bf:93:01:9d:
23:48:22:55:9b:f7:5c:55:af:d1:40:c8:20:0d:ac:78:51:72:
2f:e8:84:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:52:03 2026 by rpki-client