Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
File: oTRxtQAqTrZJYSXPWHN_Deutrns.mft (raw, json)
Hash identifier: +CIoBopSRwF6neEaWO77gxNOsFI3d9mCmwcdulILpJ8=
Subject key identifier: B9:79:59:80:83:D6:4E:E4:34:FA:01:AD:BB:90:2B:5C:BC:01:7F:26
Authority key identifier: A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
Certificate issuer: /CN=a13471b5002a4eb6496125cf58737f0debadae7b
Certificate serial: 019FA9070158B45171215AC9ADAEDBE206D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
Manifest number: 0959
Signing time: Tue 28 Jul 2026 14:00:36 +0000
Manifest this update: Tue 28 Jul 2026 14:00:36 +0000
Manifest next update: Wed 29 Jul 2026 14:00:36 +0000
Files and hashes: 1: YMlojSojXsI2HBIediVAZQR53Uw.roa (hash: JmufbrfZpdywXGEriwFTpVhWPjQ10Wi0s4R9uPOJmgM=)
2: oTRxtQAqTrZJYSXPWHN_Deutrns.crl (hash: MKj5jvLETMNCCZTcz6vQZSptxz282qmtXyLqdbjZvkc=)
3: ofNUkXwRdU2CygbCJb-JHa2iVxk.asa (hash: 2CgpH6bf+b3jg+rggjhpByWihzKk9amkpphMJMuERmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:01:58:b4:51:71:21:5a:c9:ad:ae:db:e2:06:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13471b5002a4eb6496125cf58737f0debadae7b
Validity
Not Before: Jul 28 14:00:36 2026 GMT
Not After : Jul 29 14:00:36 2026 GMT
Subject: CN=b979598083d64ee434fa01adbb902b5cbc017f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9e:f2:50:48:af:b0:c3:40:1a:62:fd:e6:92:
4b:3c:30:47:51:3b:99:71:5c:74:8e:70:98:76:29:
9d:c5:1d:a3:74:0f:cc:66:6c:95:b8:12:2a:1f:72:
22:53:d4:6b:b9:6a:83:d5:cb:a5:5f:65:98:c4:7b:
72:9d:9b:97:55:5d:82:51:64:ec:d3:d1:72:17:68:
62:7c:63:2e:23:9b:ba:a9:2a:35:45:9d:3b:bb:3e:
c7:25:a6:bb:9b:03:ec:5c:61:96:20:77:32:d4:b2:
6d:92:9a:96:a2:94:a4:98:0a:bd:46:45:a8:f3:82:
75:cc:33:0d:7a:57:52:7c:d4:c3:86:b1:45:c0:d5:
0c:57:86:f9:fb:e7:fe:e9:db:89:e0:2c:6b:85:6f:
0f:34:18:67:4b:14:f7:f5:67:47:da:17:8f:78:9c:
1c:5a:ba:81:05:45:10:d3:23:35:d2:d9:38:1f:21:
24:b4:6f:5b:dc:2a:8a:95:7a:05:c0:b2:38:1c:4f:
e2:8e:4a:69:9c:2f:93:2a:aa:28:d6:15:81:3e:2b:
08:6a:59:1b:c8:5d:94:b1:5a:b3:71:c3:db:18:93:
3e:dc:a0:f2:d7:6a:15:c2:de:17:3e:73:46:b6:9a:
72:3f:a5:39:8c:b5:a8:dd:c3:ea:b0:ad:4b:0f:44:
c7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:79:59:80:83:D6:4E:E4:34:FA:01:AD:BB:90:2B:5C:BC:01:7F:26
X509v3 Authority Key Identifier:
keyid:A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:85:63:3c:01:bc:81:27:8c:e0:c7:af:51:6d:77:f3:ff:e0:
71:fc:d3:02:3c:b2:30:3e:88:44:e5:f3:2d:68:73:c3:82:7f:
77:f7:72:7c:54:1e:af:d9:40:b3:eb:6d:98:09:a8:2f:9d:a7:
86:de:8f:41:ee:56:3d:5c:4e:07:44:4f:55:06:02:95:32:b3:
7c:98:98:6e:8a:d0:7f:f9:d6:7d:b7:c4:3a:ba:8a:92:20:35:
f9:a6:b4:70:bd:51:58:d8:ec:84:f9:5e:9f:6e:3c:fd:72:9b:
07:e1:32:88:d7:ba:25:33:5d:89:d5:30:71:e8:45:2c:0e:b0:
7e:21:0e:05:fd:d9:0a:c9:0a:9f:9d:46:d7:ba:4b:ad:48:87:
34:02:46:0c:63:ef:b0:e8:e3:ae:5a:99:73:3d:ec:af:59:95:
27:21:0b:d2:85:d7:b0:80:1d:1c:8c:45:c6:d6:93:b9:a8:fa:
19:51:66:6a:cd:68:4b:cd:34:35:38:3e:51:cb:ea:50:33:94:
96:ec:92:10:16:cb:39:2a:d1:a8:85:6b:6d:bf:43:b5:ab:df:
db:a8:02:e4:eb:f4:ca:51:ac:b8:f5:8b:1c:ac:48:a8:12:a4:
6b:40:05:ba:c6:0b:65:d3:3c:a4:99:83:2d:36:84:c2:63:ff:
9a:45:ea:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:31:56 2026 by rpki-client