Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
File: oTRxtQAqTrZJYSXPWHN_Deutrns.mft (raw, json)
Hash identifier: 7Kq/N5MSJhKKEsxOkvSFPbukF2cMgw/3kewi9Qp5vw4=
Subject key identifier: 1F:46:1F:A6:DB:DF:28:16:26:9A:F6:1F:B8:0C:1D:37:8A:62:2F:C0
Authority key identifier: A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
Certificate issuer: /CN=a13471b5002a4eb6496125cf58737f0debadae7b
Certificate serial: 01A0BF1E3BA5C4E469423353C94009992A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
Manifest number: 09E9
Signing time: Sun 20 Sep 2026 14:00:24 +0000
Manifest this update: Sun 20 Sep 2026 14:00:24 +0000
Manifest next update: Mon 21 Sep 2026 14:00:24 +0000
Files and hashes: 1: YMlojSojXsI2HBIediVAZQR53Uw.roa (hash: JmufbrfZpdywXGEriwFTpVhWPjQ10Wi0s4R9uPOJmgM=)
2: oTRxtQAqTrZJYSXPWHN_Deutrns.crl (hash: wYBUAu2ciRVR5hPhDDh+nkpOioTqfSUONJ9HHjW+/hY=)
3: ofNUkXwRdU2CygbCJb-JHa2iVxk.asa (hash: 2CgpH6bf+b3jg+rggjhpByWihzKk9amkpphMJMuERmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:1e:3b:a5:c4:e4:69:42:33:53:c9:40:09:99:2a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13471b5002a4eb6496125cf58737f0debadae7b
Validity
Not Before: Sep 20 14:00:24 2026 GMT
Not After : Sep 21 14:00:24 2026 GMT
Subject: CN=1f461fa6dbdf2816269af61fb80c1d378a622fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:be:de:7e:ae:28:7d:16:26:1c:03:dd:e8:e3:
0a:35:d3:86:a1:a5:a8:21:36:fa:5c:27:1b:5d:d9:
ac:db:c4:d8:01:65:f9:c7:57:47:5a:97:3e:71:3e:
0c:c4:61:6a:9d:f7:67:cd:72:38:24:cf:20:f8:f6:
8b:a3:49:f7:d1:39:5c:8e:51:9f:04:f4:20:c4:55:
dd:97:ee:31:35:23:2d:92:ad:65:5e:f7:73:c0:95:
7d:91:32:0d:be:23:4b:f2:97:c2:e6:4a:97:50:3c:
0a:88:6e:a0:20:c8:84:37:34:f7:75:06:9e:eb:92:
76:1c:65:55:e6:63:bd:90:ed:b2:26:7f:6d:a0:a4:
72:2a:ec:8b:96:2b:47:89:41:42:31:ea:e3:ce:f3:
7b:7f:b9:ef:f7:e8:37:6c:dd:22:79:e0:1f:3c:35:
37:91:7e:1b:6b:0b:22:42:c5:37:55:95:da:08:db:
5e:8d:73:f7:0c:71:95:e1:3e:8e:79:7b:18:95:0f:
a5:6f:69:03:56:87:b4:a0:7f:25:93:aa:22:7e:35:
60:5b:f9:5f:12:ce:2c:3c:d8:29:93:b8:a2:98:48:
76:0f:52:b0:5b:da:8e:c0:93:05:33:79:98:09:ea:
2b:cc:18:af:3c:50:f3:db:1c:c8:d6:d4:9d:04:97:
0a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:46:1F:A6:DB:DF:28:16:26:9A:F6:1F:B8:0C:1D:37:8A:62:2F:C0
X509v3 Authority Key Identifier:
keyid:A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:43:88:47:3b:04:cb:df:54:55:fd:a6:7c:a4:11:cf:ec:69:
f1:80:79:37:9a:1c:95:81:ad:01:8f:80:b2:06:b5:2d:6d:31:
a7:4f:47:a6:1a:34:c1:b9:b3:2d:6d:c5:0f:cf:eb:7a:da:f5:
cf:b9:53:de:c3:57:93:33:fe:c4:a1:2a:19:15:fe:c3:35:66:
91:c3:1f:46:7d:7c:b1:e9:76:62:62:c2:63:83:fc:59:c7:9b:
4e:ea:e2:18:39:fe:e1:e7:37:cf:13:3c:78:99:88:d9:06:86:
81:ce:91:ef:64:04:84:a8:7f:13:c3:e2:27:19:69:0b:63:72:
bb:1c:8e:b4:c7:25:37:e8:15:93:12:82:dd:6e:99:0b:ee:e1:
f5:01:fd:a5:cc:2c:2c:07:69:bc:12:ce:53:2d:d2:2f:a4:d0:
ac:79:a0:dd:92:2f:57:b6:d2:a9:64:1d:7a:9f:13:94:eb:16:
82:33:cc:ee:1c:cd:d6:34:90:a4:01:6c:07:7e:63:37:37:45:
56:53:c6:3f:37:cf:5c:b0:57:74:f4:7c:c7:04:28:c7:1e:f1:
5c:e1:80:53:a4:b3:6d:97:98:97:42:9f:37:ac:d1:43:3b:e9:
f4:25:f7:54:d2:30:4b:f5:ae:66:c4:ea:1c:d9:1e:c9:2a:0b:
d3:5a:0c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:13:05 2026 by rpki-client