Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
File: oTRxtQAqTrZJYSXPWHN_Deutrns.mft (raw, json)
Hash identifier: DknXC+SM5ODxo0amjbPLsC0YcptwKnMAoJ/wphfQH7o=
Subject key identifier: D5:11:9D:4D:88:3D:72:E8:D9:9B:44:1D:AB:38:12:29:7B:5E:6F:21
Authority key identifier: A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
Certificate issuer: /CN=a13471b5002a4eb6496125cf58737f0debadae7b
Certificate serial: 019D97E219AA05EE09FB87D8CFEBB0E978BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
Manifest number: 0847
Signing time: Thu 16 Apr 2026 20:01:10 +0000
Manifest this update: Thu 16 Apr 2026 20:01:10 +0000
Manifest next update: Fri 17 Apr 2026 20:01:10 +0000
Files and hashes: 1: YMlojSojXsI2HBIediVAZQR53Uw.roa (hash: JmufbrfZpdywXGEriwFTpVhWPjQ10Wi0s4R9uPOJmgM=)
2: oTRxtQAqTrZJYSXPWHN_Deutrns.crl (hash: TdK4olkpCjT/6P3ba6WLjKcZk8OM3UDN0Q58EWwJxPM=)
3: ofNUkXwRdU2CygbCJb-JHa2iVxk.asa (hash: 2CgpH6bf+b3jg+rggjhpByWihzKk9amkpphMJMuERmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:19:aa:05:ee:09:fb:87:d8:cf:eb:b0:e9:78:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13471b5002a4eb6496125cf58737f0debadae7b
Validity
Not Before: Apr 16 20:01:10 2026 GMT
Not After : Apr 17 20:01:10 2026 GMT
Subject: CN=d5119d4d883d72e8d99b441dab3812297b5e6f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8a:65:cc:ae:20:cd:bb:38:89:30:1c:7c:4b:
98:d9:d0:82:f4:2f:99:0e:cd:c6:4f:3a:05:3d:61:
58:5f:14:f2:64:35:d8:10:f5:f9:a1:28:1d:cd:19:
c3:72:7a:c2:1f:87:5e:40:e9:86:62:e3:34:8d:69:
8b:de:df:a2:95:c5:6a:fd:fb:cf:dd:53:95:39:02:
58:34:29:ff:e4:c5:7a:72:5e:4c:78:21:a8:f1:01:
ae:a7:be:cc:11:34:78:ba:bb:f1:29:6c:29:37:cf:
51:9a:ac:2b:4d:07:94:56:d9:30:31:54:39:7a:59:
61:d8:55:12:31:85:d9:65:d4:f8:b1:50:fd:f8:35:
78:38:b5:80:08:61:40:c3:c6:49:88:79:de:46:d5:
3a:ee:4a:3a:a5:6e:f6:e0:cb:04:f4:9f:5c:51:0e:
81:02:f5:9f:9a:d5:d3:73:19:d6:ac:af:8c:d2:0f:
16:2d:21:1b:1e:57:00:67:3a:f8:1f:24:0f:63:62:
92:35:5d:7b:bb:70:49:03:bb:57:6c:a6:47:dc:12:
c8:f8:b9:dd:47:f4:be:5a:95:df:d6:26:5d:2d:7c:
c7:3c:50:b2:5e:ea:17:39:87:c0:91:b8:08:62:b2:
a5:b9:e1:20:b5:0c:bd:be:a3:8f:8d:7f:52:47:6d:
b5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:11:9D:4D:88:3D:72:E8:D9:9B:44:1D:AB:38:12:29:7B:5E:6F:21
X509v3 Authority Key Identifier:
keyid:A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a3:9e:9e:19:f0:32:81:7a:28:5f:64:20:93:c7:03:bf:52:
80:ad:6c:f3:83:25:6a:bc:90:56:3a:10:73:48:85:87:32:c0:
4f:18:aa:9a:6c:4d:78:cd:26:d8:b0:0d:8b:34:b0:c2:05:ec:
2f:86:c8:e2:c3:c8:e3:80:5f:16:0d:bb:f8:06:06:56:40:1b:
cf:f3:99:c3:ef:1a:af:02:03:a6:b6:49:2d:c5:91:7d:db:a7:
b6:82:46:d0:00:11:ad:9e:d8:88:69:7a:7a:13:94:88:49:f1:
1d:07:3e:30:f6:b1:cf:2b:d1:11:94:29:d8:6b:f4:42:58:c9:
94:38:66:99:d4:1f:87:0b:ca:3a:4a:95:14:f6:ba:3e:d3:77:
3f:fd:47:8f:dc:ab:d2:a1:f1:2a:f7:9b:9c:ad:19:b6:24:fb:
26:da:f9:69:7c:7d:09:43:ab:57:b6:ee:a4:3c:53:9e:01:b1:
ed:51:e3:7d:40:d4:87:1f:25:6f:88:9b:bc:41:f0:9e:c4:da:
2d:2b:50:1e:50:92:59:09:d8:01:25:30:bb:62:fc:45:9b:7d:
a1:dd:21:de:da:93:e2:c7:d2:9c:07:78:07:f5:31:0a:4c:0e:
b8:20:7c:ce:ff:15:e5:7f:ca:93:36:1d:ba:07:81:54:92:a2:
52:fc:bf:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4hmqBe4J+4fYz+uw6Xi6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMzQ3MWI1MDAyYTRlYjY0OTYxMjVjZjU4NzM3ZjBkZWJh
ZGFlN2IwHhcNMjYwNDE2MjAwMTEwWhcNMjYwNDE3MjAwMTEwWjAzMTEwLwYDVQQD
EyhkNTExOWQ0ZDg4M2Q3MmU4ZDk5YjQ0MWRhYjM4MTIyOTdiNWU2ZjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoplzK4gzbs4iTAcfEuY2dCC9C+Z
Ds3GTzoFPWFYXxTyZDXYEPX5oSgdzRnDcnrCH4deQOmGYuM0jWmL3t+ilcVq/fvP
3VOVOQJYNCn/5MV6cl5MeCGo8QGup77METR4urvxKWwpN89RmqwrTQeUVtkwMVQ5
ellh2FUSMYXZZdT4sVD9+DV4OLWACGFAw8ZJiHneRtU67ko6pW724MsE9J9cUQ6B
AvWfmtXTcxnWrK+M0g8WLSEbHlcAZzr4HyQPY2KSNV17u3BJA7tXbKZH3BLI+Lnd
R/S+WpXf1iZdLXzHPFCyXuoXOYfAkbgIYrKlueEgtQy9vqOPjX9SR221/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNURnU2IPXLo2ZtEHas4Eil7Xm8hMB8GA1UdIwQY
MBaAFKE0cbUAKk62SWElz1hzfw3rra57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1RSeHRRQXFUclpKWVNYUFdITl9EZXV0cm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9kOWU4N2ItNDUwYS00MTUyLWEyNDIt
ZDY5MTBiMjFhYjQyLzEvb1RSeHRRQXFUclpKWVNYUFdITl9EZXV0cm5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9kOWU4N2ItNDUwYS00MTUyLWEyNDItZDY5MTBiMjFhYjQy
LzEvb1RSeHRRQXFUclpKWVNYUFdITl9EZXV0cm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6Oenhnw
MoF6KF9kIJPHA79SgK1s84MlaryQVjoQc0iFhzLATxiqmmxNeM0m2LANizSwwgXs
L4bI4sPI44BfFg27+AYGVkAbz/OZw+8arwIDprZJLcWRfduntoJG0AARrZ7YiGl6
ehOUiEnxHQc+MPaxzyvREZQp2Gv0QljJlDhmmdQfhwvKOkqVFPa6PtN3P/1Hj9yr
0qHxKvebnK0ZtiT7Jtr5aXx9CUOrV7bupDxTngGx7VHjfUDUhx8lb4ibvEHwnsTa
LStQHlCSWQnYASUwu2L8RZt9od0h3tqT4sfSnAd4B/UxCkwOuCB8zv8V5X/KkzYd
ugeBVJKiUvy/pg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:44 2026 by rpki-client