Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
File: 7s8_de-DBrbFk6QjzaGYa9496Ug.mft (raw, json)
Hash identifier: JQIBkBUgzIyylFhwCvCACl1X6W9GjZdHwEFWYw0c/cw=
Subject key identifier: 34:03:8E:C6:19:0A:9D:9F:27:6E:8C:16:F7:BE:B9:77:C5:A3:F3:37
Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
Certificate issuer: /CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Certificate serial: 019EBE48004AB736AB47F71719C4F49D0B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 00:00:50 +0000
Manifest this update: Sat 13 Jun 2026 00:00:50 +0000
Manifest next update: Sun 14 Jun 2026 00:00:50 +0000
Files and hashes: 1: 7s8_de-DBrbFk6QjzaGYa9496Ug.crl (hash: 1Ks8cExOPy/vEdmetk/4yFzQBCPO2xNDRD+VUQ/Xuws=)
2: sl-nYt82qhzHyv-nkhEpEqMcJKY.roa (hash: q2Tif7W7uSE6r0l0RzQYoGnDEkiYUnvvVbum3TT4DDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:48:00:4a:b7:36:ab:47:f7:17:19:c4:f4:9d:0b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Validity
Not Before: Jun 13 00:00:50 2026 GMT
Not After : Jun 14 00:00:50 2026 GMT
Subject: CN=34038ec6190a9d9f276e8c16f7beb977c5a3f337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:29:d8:d9:65:5c:1e:64:10:b5:60:ed:1a:e9:
52:de:a9:ad:35:71:ad:61:90:30:bd:fc:0a:3c:84:
dd:02:ce:ff:b1:a2:46:e6:3a:43:55:cf:0d:c0:6e:
9f:2f:c6:2a:72:5a:d6:7f:fb:81:1a:21:a2:62:68:
ac:c1:00:2b:4d:85:ee:d4:b7:35:99:7d:36:dc:d0:
bb:7f:76:e3:72:cf:ef:de:1e:55:bd:cc:ae:ea:27:
4b:46:00:83:e9:91:13:33:cb:1b:20:62:15:ca:00:
6e:a6:57:f8:b7:fb:ce:19:b2:5c:2b:49:a8:8b:d5:
88:c8:85:86:8b:84:f1:bc:7d:3c:2a:32:73:db:a9:
b0:0e:26:03:22:c3:e1:65:90:51:35:6a:84:0c:da:
51:6c:36:92:8b:58:d3:ec:b2:68:6c:f9:79:d2:e2:
80:34:ea:47:0b:ee:40:91:48:8f:a2:8e:cd:ab:af:
40:3f:da:9a:ad:0c:3f:f5:39:4f:25:d4:3b:cd:0e:
c4:ca:52:3e:d2:0e:f2:e6:89:be:3e:df:48:42:e0:
9f:37:89:22:4f:57:2c:00:8f:d0:6f:aa:6c:f4:c8:
e8:29:d8:46:d9:cc:59:1a:cd:d7:a8:91:ad:ec:6e:
ac:ec:18:8e:7d:10:90:07:d2:b1:b7:ec:3d:6d:5f:
af:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:03:8E:C6:19:0A:9D:9F:27:6E:8C:16:F7:BE:B9:77:C5:A3:F3:37
X509v3 Authority Key Identifier:
keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b2:64:37:a3:57:20:16:94:44:e3:e8:58:39:75:82:27:8d:
be:cd:b3:42:c2:52:3b:33:9f:4f:3c:b3:3d:b6:19:3d:98:42:
48:d8:30:34:21:3e:ab:d4:aa:24:0f:be:2b:ad:57:dc:41:19:
cf:b4:3a:95:b0:ec:44:2e:cd:f3:58:2d:d5:16:36:3e:94:31:
e1:fc:ec:96:b5:b2:32:82:c1:dc:ba:c6:e7:01:e7:a7:20:03:
38:b5:42:51:a8:c5:b9:f5:22:32:9a:89:2e:0f:38:e6:11:0a:
56:17:2c:3a:c0:63:da:51:bf:15:42:d8:47:79:95:df:e1:f7:
96:d2:84:4d:e1:20:74:e5:04:7a:e9:56:44:c0:76:7a:1b:11:
20:30:79:f7:28:0b:4b:46:42:08:5c:04:c5:90:ea:33:fc:e4:
c4:e0:62:c6:4b:a2:74:52:46:08:f9:3a:9f:b8:60:87:1d:dd:
bf:c0:29:79:62:b0:09:d6:52:f5:d9:43:a6:61:38:6e:35:91:
2b:11:3c:63:e5:d6:21:05:dd:ca:b7:75:88:72:bb:c1:a1:cb:
04:e9:84:7d:22:d8:65:74:29:e2:62:24:7b:84:2f:f4:09:71:
c8:72:8f:35:f3:35:27:6c:6b:e2:0c:7c:9a:92:a0:e4:55:92:
8b:77:28:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:33:43 2026 by rpki-client