Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
File: 7s8_de-DBrbFk6QjzaGYa9496Ug.mft (raw, json)
Hash identifier: xahWecmIZe7cKvLWzpt3CkMc89A71c7DOIBxSZ4zumY=
Subject key identifier: 44:1F:74:DB:82:C9:61:95:2F:80:4D:64:51:9D:0B:F3:73:09:67:00
Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
Certificate issuer: /CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Certificate serial: 019CAB33FB149609D276F60947AAF0CB4AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 21:00:36 +0000
Manifest this update: Sun 01 Mar 2026 21:00:36 +0000
Manifest next update: Mon 02 Mar 2026 21:00:36 +0000
Files and hashes: 1: 7s8_de-DBrbFk6QjzaGYa9496Ug.crl (hash: KQkIw1SLWM6noMnyltifzwMx9RADi7qIT9i3Tsnl3vA=)
2: sl-nYt82qhzHyv-nkhEpEqMcJKY.roa (hash: q2Tif7W7uSE6r0l0RzQYoGnDEkiYUnvvVbum3TT4DDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:fb:14:96:09:d2:76:f6:09:47:aa:f0:cb:4a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Validity
Not Before: Mar 1 21:00:36 2026 GMT
Not After : Mar 2 21:00:36 2026 GMT
Subject: CN=441f74db82c961952f804d64519d0bf373096700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f1:a9:43:ec:af:92:6c:f3:57:2a:c7:a3:82:
9b:af:8c:44:4f:7c:ee:12:b5:3f:59:79:96:62:7b:
ea:28:07:5d:b0:8d:3f:5a:62:67:43:ae:47:31:d3:
c0:40:19:16:c1:f6:70:e0:eb:20:13:d1:18:9b:1e:
80:d3:3e:3b:14:89:41:0f:4d:51:62:31:e7:81:3b:
2d:2b:a4:a2:e3:01:8a:ae:09:56:b8:82:74:82:66:
46:1f:32:c0:b7:13:04:88:c1:1e:e8:1b:c4:e4:0c:
31:5c:e7:11:6a:4f:f5:57:fe:13:c8:ed:96:d0:2b:
21:29:a3:94:09:8e:29:c0:e9:ad:7b:66:35:d9:0d:
ed:a1:e4:1c:e2:24:85:eb:ba:eb:64:b6:7f:17:2e:
4d:23:4e:a6:1e:4f:83:34:4c:d5:a6:1b:50:e1:c6:
0b:b8:8e:52:fa:ec:de:a7:e4:1e:2f:69:47:d1:43:
15:82:af:79:47:68:e3:2b:e7:f0:59:53:09:23:d0:
77:bf:fd:2b:5a:4b:bd:5f:83:1b:3c:e8:39:6e:88:
b8:8f:42:41:53:b7:5f:17:8b:5b:1c:46:7d:ef:ec:
5d:76:1c:2f:51:76:49:8c:0d:ef:cd:5d:3b:7e:c0:
ac:05:8b:35:8c:f7:4f:f4:46:37:15:9f:48:f7:8c:
b0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1F:74:DB:82:C9:61:95:2F:80:4D:64:51:9D:0B:F3:73:09:67:00
X509v3 Authority Key Identifier:
keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:70:e4:3c:13:ab:ff:7a:fd:e2:69:a8:ae:38:74:8e:04:ff:
a7:0a:be:e9:62:d0:93:8e:49:c7:8e:6d:d6:90:8f:79:1e:f9:
fd:44:b4:85:59:00:29:95:2d:e9:f7:1c:84:c8:b5:41:c2:9a:
90:29:e1:87:e8:49:11:90:72:53:04:85:55:04:39:d4:95:54:
62:db:3e:2e:cc:34:c9:3e:2d:41:84:31:0a:4e:da:7d:c5:62:
55:1c:15:6f:4b:18:c9:fc:5c:83:16:ef:95:46:09:32:63:42:
af:ae:14:42:5b:c1:7a:e5:0f:4b:fe:fe:a1:58:23:dc:c0:e8:
1b:44:42:75:b2:bd:b9:47:c5:f6:75:a9:8c:0e:aa:74:81:93:
dc:6b:cf:ef:58:fc:71:96:58:a6:41:6c:cc:0f:34:7f:10:c7:
ce:c1:31:79:60:57:53:37:96:10:e4:3b:9a:ee:8d:2e:5f:9f:
6e:32:04:d1:9a:11:0f:f6:e8:85:f3:e9:cd:72:e5:8f:0f:20:
0b:f2:bc:e6:a5:df:ed:05:91:62:62:ae:69:cb:bc:01:e4:c8:
69:d4:a8:05:4c:12:7c:31:0d:33:3d:b4:7e:47:58:16:a7:dc:
0b:8d:95:3d:83:25:b0:df:31:f9:2e:ca:23:c9:e3:06:38:0f:
ee:65:e3:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrM/sUlgnSdvYJR6rwy0rzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlY2YzZjc1ZWY4MzA2YjZjNTkzYTQyM2NkYTE5ODZiZGUz
ZGU5NDgwHhcNMjYwMzAxMjEwMDM2WhcNMjYwMzAyMjEwMDM2WjAzMTEwLwYDVQQD
Eyg0NDFmNzRkYjgyYzk2MTk1MmY4MDRkNjQ1MTlkMGJmMzczMDk2NzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvGpQ+yvkmzzVyrHo4Kbr4xET3zu
ErU/WXmWYnvqKAddsI0/WmJnQ65HMdPAQBkWwfZw4OsgE9EYmx6A0z47FIlBD01R
YjHngTstK6Si4wGKrglWuIJ0gmZGHzLAtxMEiMEe6BvE5AwxXOcRak/1V/4TyO2W
0CshKaOUCY4pwOmte2Y12Q3toeQc4iSF67rrZLZ/Fy5NI06mHk+DNEzVphtQ4cYL
uI5S+uzep+QeL2lH0UMVgq95R2jjK+fwWVMJI9B3v/0rWku9X4MbPOg5boi4j0JB
U7dfF4tbHEZ97+xddhwvUXZJjA3vzV07fsCsBYs1jPdP9EY3FZ9I94ywhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQfdNuCyWGVL4BNZFGdC/NzCWcAMB8GA1UdIwQY
MBaAFO7PP3Xvgwa2xZOkI82hmGvePelIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3M4X2RlLURCcmJGazZRanphR1lhOTQ5NlVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS81ZGYxNmItYmM2Ni00MGRkLWE3MzEt
MzViNTZjY2NhODQ5LzEvN3M4X2RlLURCcmJGazZRanphR1lhOTQ5NlVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS81ZGYxNmItYmM2Ni00MGRkLWE3MzEtMzViNTZjY2NhODQ5
LzEvN3M4X2RlLURCcmJGazZRanphR1lhOTQ5NlVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHDkPBOr
/3r94mmorjh0jgT/pwq+6WLQk45Jx45t1pCPeR75/US0hVkAKZUt6fcchMi1QcKa
kCnhh+hJEZByUwSFVQQ51JVUYts+Lsw0yT4tQYQxCk7afcViVRwVb0sYyfxcgxbv
lUYJMmNCr64UQlvBeuUPS/7+oVgj3MDoG0RCdbK9uUfF9nWpjA6qdIGT3GvP71j8
cZZYpkFszA80fxDHzsExeWBXUzeWEOQ7mu6NLl+fbjIE0ZoRD/bohfPpzXLljw8g
C/K85qXf7QWRYmKuacu8AeTIadSoBUwSfDENMz20fkdYFqfcC42VPYMlsN8x+S7K
I8njBjgP7mXjcg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:49:51 2026 by rpki-client