Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
File: 7s8_de-DBrbFk6QjzaGYa9496Ug.mft (raw, json)
Hash identifier: XZgMfD7bn2vZ386eJgeMUPFQqOP2dJMyiD4eCcRZx8M=
Subject key identifier: 11:B8:0C:41:58:03:1C:86:59:17:AA:9D:AD:F9:A7:C5:11:B5:FF:77
Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
Certificate issuer: /CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Certificate serial: 01A0C3D6A6802111BDA4B2499AD6D998C24D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 12:00:19 +0000
Manifest this update: Mon 21 Sep 2026 12:00:19 +0000
Manifest next update: Tue 22 Sep 2026 12:00:19 +0000
Files and hashes: 1: 7s8_de-DBrbFk6QjzaGYa9496Ug.crl (hash: fJQmrBHlveS+mMIzfMt1Z5qUspDlDL6ESB5B16OqsP4=)
2: sl-nYt82qhzHyv-nkhEpEqMcJKY.roa (hash: q2Tif7W7uSE6r0l0RzQYoGnDEkiYUnvvVbum3TT4DDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:a6:80:21:11:bd:a4:b2:49:9a:d6:d9:98:c2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Validity
Not Before: Sep 21 12:00:19 2026 GMT
Not After : Sep 22 12:00:19 2026 GMT
Subject: CN=11b80c4158031c865917aa9dadf9a7c511b5ff77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a4:1b:53:a0:45:e2:3d:e7:95:88:84:12:1f:
e9:f6:99:4f:91:b8:b2:65:07:ce:4f:44:53:78:12:
d6:bc:70:4f:40:aa:fc:1b:9e:bd:33:89:0b:46:51:
b1:a6:a6:a4:84:68:a0:87:99:08:e4:38:a2:ea:d6:
38:30:96:81:f1:d4:46:98:03:d0:21:dc:d7:8e:0c:
ee:9d:34:dc:86:05:3c:e7:f4:9a:14:f6:61:2f:4a:
f2:ba:48:81:a1:88:e1:af:4a:47:be:55:23:5e:ec:
cf:41:ba:17:f1:b6:60:91:4c:15:b1:d7:4c:7d:6a:
89:d2:af:4b:e4:71:1d:82:c3:6d:11:7b:50:11:c8:
02:16:de:9e:d9:65:e1:4b:ef:b6:d8:9f:bd:a1:04:
b2:43:c7:5f:3b:89:d6:4a:74:eb:f0:00:2e:e0:f7:
1d:0b:b8:f8:d0:4e:17:ee:72:c9:21:c5:04:77:a4:
36:d7:66:ad:f3:08:79:90:dc:dd:29:bc:04:e6:64:
61:97:9f:6f:19:ca:47:71:51:fa:d2:7d:70:8b:06:
9e:c4:48:dc:96:c4:6b:6b:5d:1e:ba:04:80:43:5c:
70:6f:54:e1:47:50:c7:0b:67:5c:2a:16:6f:b2:28:
d3:94:02:c6:13:b8:23:21:7c:c2:86:57:48:5b:64:
e3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B8:0C:41:58:03:1C:86:59:17:AA:9D:AD:F9:A7:C5:11:B5:FF:77
X509v3 Authority Key Identifier:
keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:22:04:d5:bc:76:0a:01:80:f1:d6:f3:83:6b:38:6a:52:87:
68:ee:04:87:6d:d5:e8:a2:8a:15:4a:01:29:4b:96:ae:63:ce:
c1:7b:66:e0:4f:f7:c7:c2:89:b5:7c:02:44:31:3a:c4:48:ca:
18:dc:39:cd:9f:f6:11:e8:76:91:67:8a:6f:14:bc:c5:61:27:
b6:4e:0c:cf:46:60:05:bb:27:fb:54:1d:c6:1d:ef:e0:99:95:
0e:a7:45:16:ba:62:3a:fc:be:59:3d:3a:95:ae:b2:85:38:2f:
f2:25:ea:71:58:c4:e5:a8:6c:7f:66:4d:00:fd:5f:46:fb:28:
cb:28:d4:b5:b0:d5:32:ca:55:fb:73:81:27:d6:1b:81:e0:7a:
75:34:5a:e8:9a:81:7c:82:59:3d:b0:ae:b0:3b:f6:56:60:6b:
86:67:0a:9f:d5:a5:2e:c2:79:a0:2b:73:36:52:9a:46:af:56:
e1:b9:76:36:64:49:77:a2:6b:58:81:43:f2:ac:7d:92:0d:d4:
c8:43:54:c8:f4:64:34:3e:99:97:2e:80:53:f2:09:c3:b3:77:
a0:76:e8:67:a9:cd:00:6d:c7:be:c4:d4:8c:e2:ee:88:bf:62:
5b:f8:9f:bd:cf:af:2f:33:c8:26:0d:0e:1c:30:f4:72:9e:4a:
6e:42:0c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:18:00 2026 by rpki-client