
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
File: 7s8_de-DBrbFk6QjzaGYa9496Ug.mft (raw, json)
Hash identifier: KBP4UuZEu7g5mX1VhYVorS03PMim7MQnPiT/KvxBjeI=
Subject key identifier: E3:0D:8E:2A:B0:16:E4:75:0A:0B:89:E4:6C:A3:65:BA:FC:B4:6B:17
Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
Certificate issuer: /CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Certificate serial: 019D98BD5EFCB2CC372010B226E068958620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 00:00:40 +0000
Manifest this update: Fri 17 Apr 2026 00:00:40 +0000
Manifest next update: Sat 18 Apr 2026 00:00:40 +0000
Files and hashes: 1: 7s8_de-DBrbFk6QjzaGYa9496Ug.crl (hash: 0t05/egX0ol9/GfBYb8bxxzH2rCt1WOyiej17vpnYsA=)
2: sl-nYt82qhzHyv-nkhEpEqMcJKY.roa (hash: q2Tif7W7uSE6r0l0RzQYoGnDEkiYUnvvVbum3TT4DDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:5e:fc:b2:cc:37:20:10:b2:26:e0:68:95:86:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Validity
Not Before: Apr 17 00:00:40 2026 GMT
Not After : Apr 18 00:00:40 2026 GMT
Subject: CN=e30d8e2ab016e4750a0b89e46ca365bafcb46b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:79:b0:54:68:df:9e:1b:dc:46:fe:80:fe:cb:
ad:cd:8f:72:32:9f:2f:55:d2:0b:c8:a1:b4:62:96:
da:33:31:77:2e:fa:f9:87:8f:4c:c7:ae:0d:81:da:
9a:72:85:b7:8d:b0:ab:60:dd:81:c4:21:59:0c:d5:
fd:7d:3c:29:7b:8a:2d:79:d6:aa:f3:61:bb:8b:3a:
99:f9:f4:2d:26:11:13:73:64:63:3d:d4:94:f3:7d:
9d:c8:f4:9e:e0:8f:18:9f:f2:b4:2f:22:b8:ae:23:
19:c0:57:1b:97:46:47:08:28:a6:59:7a:95:a1:d1:
db:85:10:53:a8:7e:5f:eb:51:89:fc:36:41:5e:c8:
c0:b5:fb:05:1b:a3:f7:60:98:b8:22:9b:0f:5b:07:
fb:62:e1:9b:4c:c8:05:a8:e9:fd:82:79:02:53:88:
62:dc:5b:9b:de:65:41:07:6b:aa:a9:c0:c8:42:4c:
3e:ab:13:ac:00:b1:0d:cd:74:f1:d9:8b:e6:c1:b9:
7e:f8:22:99:b4:bd:fd:54:53:31:52:3e:77:17:85:
d0:78:3c:b1:1c:a5:30:f0:21:87:db:fd:e7:41:7d:
d0:79:dc:45:c5:e9:21:1b:b9:81:41:bf:5b:b9:da:
e5:b6:32:a2:c6:e7:42:85:88:41:02:94:46:68:74:
74:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0D:8E:2A:B0:16:E4:75:0A:0B:89:E4:6C:A3:65:BA:FC:B4:6B:17
X509v3 Authority Key Identifier:
keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e0:5f:5c:c0:76:95:e2:77:f5:9b:e8:28:5e:9a:25:74:3d:
10:c5:43:c8:1d:9f:a2:9a:bd:b0:69:66:85:72:98:ee:c6:7c:
7e:58:d8:0a:5d:29:b8:60:5e:80:a0:3c:0d:22:db:81:95:b8:
cf:19:a8:b2:25:57:e6:1b:87:d9:bd:97:34:cb:9c:f9:b5:d7:
22:44:3c:69:59:67:3a:df:e9:13:f5:fe:0a:71:08:ab:a4:02:
1c:0c:fa:19:0a:bd:5f:1e:8c:e7:c9:d7:ba:5b:13:21:32:9e:
c3:22:83:fa:f3:2d:b3:bc:62:66:b3:41:72:30:87:a4:53:8a:
b4:41:50:0f:4f:76:2f:70:0c:23:ef:6b:22:4a:de:5c:76:b1:
b7:6c:27:4f:be:56:44:ad:6a:85:a3:3c:a7:24:35:a9:4f:91:
33:01:90:5c:05:92:e4:3e:aa:1d:a1:ec:88:0b:8c:d5:8d:0e:
2a:6c:f0:6a:94:25:c3:8d:9d:33:ff:84:7e:d1:f1:21:5b:00:
92:bf:2a:be:e0:4c:dd:29:7c:21:d8:05:0e:e4:cb:a1:a2:c3:
53:f0:9b:52:b8:51:37:02:e4:7d:35:d0:74:1c:1d:08:a9:41:
7c:88:91:b3:21:fd:24:e0:aa:ee:40:e2:f4:cc:fa:68:d9:47:
ea:7d:61:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:51:55 2026 by rpki-client