Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
File: oTRxtQAqTrZJYSXPWHN_Deutrns.mft (raw, json)
Hash identifier: 7bQVQkjCcqRgmgJUtKyXMaQyFwFPkd6VYnFC5B3e8Xg=
Subject key identifier: 79:73:A7:49:D1:8E:23:7C:B4:DF:AB:BB:E2:58:E0:16:50:89:03:BC
Authority key identifier: A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
Certificate issuer: /CN=a13471b5002a4eb6496125cf58737f0debadae7b
Certificate serial: 019CA86A65077220949A74A3BEFC383F2EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
Manifest number: 07CB
Signing time: Sun 01 Mar 2026 08:01:10 +0000
Manifest this update: Sun 01 Mar 2026 08:01:10 +0000
Manifest next update: Mon 02 Mar 2026 08:01:10 +0000
Files and hashes: 1: YMlojSojXsI2HBIediVAZQR53Uw.roa (hash: JmufbrfZpdywXGEriwFTpVhWPjQ10Wi0s4R9uPOJmgM=)
2: oTRxtQAqTrZJYSXPWHN_Deutrns.crl (hash: Bh127J6LTOu7DPrMq/ovWTSeFO+QUwsFNwKNB7elNtk=)
3: ofNUkXwRdU2CygbCJb-JHa2iVxk.asa (hash: 2CgpH6bf+b3jg+rggjhpByWihzKk9amkpphMJMuERmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:6a:65:07:72:20:94:9a:74:a3:be:fc:38:3f:2e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13471b5002a4eb6496125cf58737f0debadae7b
Validity
Not Before: Mar 1 08:01:10 2026 GMT
Not After : Mar 2 08:01:10 2026 GMT
Subject: CN=7973a749d18e237cb4dfabbbe258e016508903bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0b:83:30:f3:d3:24:fb:22:3b:a7:87:2c:a9:
24:6c:f2:06:c0:a2:ad:82:c1:99:f3:42:38:19:75:
c8:d4:0e:69:60:7d:8b:ac:7d:fb:08:70:0f:d8:e0:
62:82:36:a9:21:25:89:36:d0:01:17:84:0e:bb:f5:
1d:c0:7d:cc:0f:66:4d:af:ed:af:d7:36:f8:e9:11:
c3:b3:99:1e:16:a9:14:cd:41:1c:08:5b:d7:4f:52:
69:d7:93:0d:18:7f:e0:25:df:29:dd:59:90:e3:35:
49:c7:c3:46:57:4b:2b:80:8e:3c:cb:27:df:dc:4b:
5b:1d:fc:dc:cd:a7:d1:00:7c:61:4a:7c:b5:ef:6d:
85:6d:1e:73:60:b8:6e:4e:5a:e2:04:d5:df:6e:fe:
c0:f7:12:59:96:0d:99:ba:29:de:47:ef:40:d0:ba:
f7:0d:16:11:34:f6:98:e5:2f:1a:08:25:e0:e9:0d:
ef:11:95:49:dc:b2:1d:c6:f0:6c:85:d7:f1:67:ec:
4c:6b:4d:4a:8d:dc:48:2d:b9:ad:42:0c:16:b6:19:
ee:c7:55:76:7b:6b:25:cd:c1:e7:90:bb:5d:30:48:
11:ee:71:6c:b1:4f:e4:1e:6f:40:18:5e:c4:63:7b:
78:90:9b:ed:20:26:79:07:10:59:da:7e:29:3b:d5:
29:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:73:A7:49:D1:8E:23:7C:B4:DF:AB:BB:E2:58:E0:16:50:89:03:BC
X509v3 Authority Key Identifier:
keyid:A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:9d:0a:85:63:c7:aa:71:2a:37:6a:e7:f0:25:b5:9b:00:c9:
06:d0:f7:a2:96:19:4c:2d:7c:87:f9:b5:cd:6a:d3:ac:bf:b5:
72:85:7c:a8:b4:3e:61:14:47:b0:0a:6a:22:65:ce:eb:95:4b:
2f:1f:c4:12:59:05:bf:83:6e:27:34:2c:17:7b:50:29:54:b2:
83:9a:a2:b1:8c:f3:96:7c:18:8b:19:bd:f6:a4:39:d7:fa:0f:
b4:a8:0b:cc:6c:c6:73:35:12:41:d5:d9:63:c9:1f:a0:cb:07:
50:f5:65:07:5e:7a:55:ad:79:f1:e4:d2:69:d7:bf:82:f9:c3:
e0:a9:7f:56:99:61:1c:c1:fc:57:8d:38:f1:28:55:b3:6d:4e:
62:c9:0e:26:01:78:f5:2d:4c:49:ee:10:d9:35:94:29:6e:6c:
90:9c:b1:6f:0e:dd:df:2d:14:38:70:da:2c:22:bb:10:82:bb:
41:81:90:e7:8c:a1:5b:fe:4a:c7:6b:63:7b:f8:9e:2b:29:0a:
6f:00:b0:28:11:79:6e:14:55:68:c5:50:6b:37:fc:76:7f:a7:
2a:92:d7:4f:60:29:71:2f:15:5b:68:a5:15:1f:3a:52:a6:0d:
2c:a8:53:58:82:6d:35:47:a5:93:56:2b:31:26:a7:c6:d1:b3:
d6:57:7b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:23:31 2026 by rpki-client