Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
File: oTRxtQAqTrZJYSXPWHN_Deutrns.mft (raw, json)
Hash identifier: jcjppaaCmukIVUiiKdSohSJka0rufdXFxD8+eD3jA7w=
Subject key identifier: CC:56:B5:27:8E:40:48:C0:44:ED:9B:C8:BA:09:96:2A:F9:93:42:51
Authority key identifier: A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
Certificate issuer: /CN=a13471b5002a4eb6496125cf58737f0debadae7b
Certificate serial: 019CAA58D6432C29580BB75CA8F15C1851F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
Manifest number: 07CC
Signing time: Sun 01 Mar 2026 17:01:14 +0000
Manifest this update: Sun 01 Mar 2026 17:01:14 +0000
Manifest next update: Mon 02 Mar 2026 17:01:14 +0000
Files and hashes: 1: YMlojSojXsI2HBIediVAZQR53Uw.roa (hash: JmufbrfZpdywXGEriwFTpVhWPjQ10Wi0s4R9uPOJmgM=)
2: oTRxtQAqTrZJYSXPWHN_Deutrns.crl (hash: PQMzu7t4SKLWZTWVpSUDc7KfI0gJp2f7Ns6zy/pq+AY=)
3: ofNUkXwRdU2CygbCJb-JHa2iVxk.asa (hash: 2CgpH6bf+b3jg+rggjhpByWihzKk9amkpphMJMuERmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:d6:43:2c:29:58:0b:b7:5c:a8:f1:5c:18:51:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13471b5002a4eb6496125cf58737f0debadae7b
Validity
Not Before: Mar 1 17:01:14 2026 GMT
Not After : Mar 2 17:01:14 2026 GMT
Subject: CN=cc56b5278e4048c044ed9bc8ba09962af9934251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:0d:61:46:0a:37:04:5d:3f:ec:85:3c:84:
c2:58:3f:09:99:c9:3e:27:6f:78:d1:f4:76:0a:b8:
df:b7:1a:a6:4a:a9:d5:f4:a5:65:5c:85:0b:aa:fd:
2f:fc:4e:d1:d4:b8:fe:bc:97:16:d1:91:4b:72:07:
94:2b:a9:b8:09:27:80:a5:1c:46:60:6d:df:7b:53:
f8:89:37:8d:b9:9a:02:9f:72:09:75:34:b6:27:a6:
fb:0d:fd:44:86:e7:2f:a0:79:fe:07:ae:87:e6:24:
6f:1f:44:f4:f2:56:19:33:52:40:fa:19:a5:69:b1:
7c:2b:7d:a3:2f:0d:68:73:e5:1c:8f:0e:88:27:54:
81:1a:50:0f:00:7a:75:01:fe:ff:79:76:79:85:2d:
04:5c:60:bd:2f:d4:e5:f0:70:ed:c1:7e:2d:84:51:
b6:64:a0:06:48:c6:1d:bc:5a:b6:90:b1:43:fb:6c:
82:75:78:28:06:af:6f:e6:9e:da:ff:ac:f2:98:5b:
d4:3a:de:74:85:0d:35:b2:7b:67:c0:4c:0f:43:4d:
28:40:e1:e9:71:88:67:c4:c1:2e:c7:e3:1d:0e:a8:
60:fb:c3:38:59:fd:a5:10:69:65:cc:c4:33:3d:01:
d7:82:cb:1a:28:ab:88:e9:6a:86:0b:15:87:6d:05:
19:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:56:B5:27:8E:40:48:C0:44:ED:9B:C8:BA:09:96:2A:F9:93:42:51
X509v3 Authority Key Identifier:
keyid:A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:87:6d:fb:a3:a6:82:53:f9:4e:ce:03:29:d5:50:5b:c2:20:
94:1e:d0:ec:59:4f:37:76:13:29:f7:9d:ae:b6:e4:80:2b:36:
7c:9d:69:e2:bb:30:58:0a:62:aa:67:4b:49:23:1a:39:bb:c7:
22:07:69:e1:d9:11:25:e4:7f:30:b7:0b:c1:40:85:a7:02:0a:
7b:a0:b8:70:79:32:30:4c:55:75:a0:2b:18:54:6d:4f:60:bd:
60:ca:c2:0d:57:19:32:db:1c:52:19:33:60:2c:81:00:27:83:
79:9e:1b:fa:be:58:45:78:07:df:0c:c8:72:0d:b4:68:99:bf:
cc:5a:b4:a7:eb:e4:06:3d:e6:e8:5f:6f:5c:38:84:18:b6:04:
5b:8f:aa:42:7b:07:90:12:1c:72:36:ea:8c:25:21:77:34:92:
d6:9e:45:4b:63:52:d7:ca:e4:d3:5c:f9:5d:f3:f5:43:ce:01:
eb:14:0c:c6:87:5f:c4:f4:cd:31:67:fc:cf:ee:11:04:22:de:
d1:a3:d2:81:13:8c:94:d4:02:fd:f5:cd:dc:63:7f:df:4b:07:
99:f5:13:17:73:e0:1e:81:5f:66:8c:7b:5b:43:5a:e3:12:6e:
8d:f6:8b:6c:aa:3f:d1:43:c3:1c:48:f1:7a:9a:10:55:97:c5:
b1:86:34:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWNZDLClYC7dcqPFcGFH2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMzQ3MWI1MDAyYTRlYjY0OTYxMjVjZjU4NzM3ZjBkZWJh
ZGFlN2IwHhcNMjYwMzAxMTcwMTE0WhcNMjYwMzAyMTcwMTE0WjAzMTEwLwYDVQQD
EyhjYzU2YjUyNzhlNDA0OGMwNDRlZDliYzhiYTA5OTYyYWY5OTM0MjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDsNYUYKNwRdP+yFPITCWD8Jmck+
J2940fR2CrjftxqmSqnV9KVlXIULqv0v/E7R1Lj+vJcW0ZFLcgeUK6m4CSeApRxG
YG3fe1P4iTeNuZoCn3IJdTS2J6b7Df1EhucvoHn+B66H5iRvH0T08lYZM1JA+hml
abF8K32jLw1oc+Ucjw6IJ1SBGlAPAHp1Af7/eXZ5hS0EXGC9L9Tl8HDtwX4thFG2
ZKAGSMYdvFq2kLFD+2yCdXgoBq9v5p7a/6zymFvUOt50hQ01sntnwEwPQ00oQOHp
cYhnxMEux+MdDqhg+8M4Wf2lEGllzMQzPQHXgssaKKuI6WqGCxWHbQUZPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxWtSeOQEjARO2byLoJlir5k0JRMB8GA1UdIwQY
MBaAFKE0cbUAKk62SWElz1hzfw3rra57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1RSeHRRQXFUclpKWVNYUFdITl9EZXV0cm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9kOWU4N2ItNDUwYS00MTUyLWEyNDIt
ZDY5MTBiMjFhYjQyLzEvb1RSeHRRQXFUclpKWVNYUFdITl9EZXV0cm5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9kOWU4N2ItNDUwYS00MTUyLWEyNDItZDY5MTBiMjFhYjQy
LzEvb1RSeHRRQXFUclpKWVNYUFdITl9EZXV0cm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4dt+6Om
glP5Ts4DKdVQW8IglB7Q7FlPN3YTKfedrrbkgCs2fJ1p4rswWApiqmdLSSMaObvH
Igdp4dkRJeR/MLcLwUCFpwIKe6C4cHkyMExVdaArGFRtT2C9YMrCDVcZMtscUhkz
YCyBACeDeZ4b+r5YRXgH3wzIcg20aJm/zFq0p+vkBj3m6F9vXDiEGLYEW4+qQnsH
kBIccjbqjCUhdzSS1p5FS2NS18rk01z5XfP1Q84B6xQMxodfxPTNMWf8z+4RBCLe
0aPSgROMlNQC/fXN3GN/30sHmfUTF3PgHoFfZox7W0Na4xJujfaLbKo/0UPDHEjx
epoQVZfFsYY0Cw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:17:56 2026 by rpki-client