Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
File: oTRxtQAqTrZJYSXPWHN_Deutrns.mft (raw, json)
Hash identifier: nXsLpirAov3j2zF/gjDxSKbKezunSWvfRLp3XoOpbvE=
Subject key identifier: 08:EE:1D:19:8B:73:33:44:1C:87:F2:B2:CA:23:38:E4:95:E3:8E:25
Authority key identifier: A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
Certificate issuer: /CN=a13471b5002a4eb6496125cf58737f0debadae7b
Certificate serial: 019EBF5A426A20A9439772518AD0E00CECCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
Manifest number: 08E0
Signing time: Sat 13 Jun 2026 05:00:23 +0000
Manifest this update: Sat 13 Jun 2026 05:00:23 +0000
Manifest next update: Sun 14 Jun 2026 05:00:23 +0000
Files and hashes: 1: YMlojSojXsI2HBIediVAZQR53Uw.roa (hash: JmufbrfZpdywXGEriwFTpVhWPjQ10Wi0s4R9uPOJmgM=)
2: oTRxtQAqTrZJYSXPWHN_Deutrns.crl (hash: Okq9FpvzfBgUwPZAf4PMnP9JuPFRontCBtKOlr0zPhA=)
3: ofNUkXwRdU2CygbCJb-JHa2iVxk.asa (hash: 2CgpH6bf+b3jg+rggjhpByWihzKk9amkpphMJMuERmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:42:6a:20:a9:43:97:72:51:8a:d0:e0:0c:ec:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13471b5002a4eb6496125cf58737f0debadae7b
Validity
Not Before: Jun 13 05:00:23 2026 GMT
Not After : Jun 14 05:00:23 2026 GMT
Subject: CN=08ee1d198b7333441c87f2b2ca2338e495e38e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e8:20:26:11:21:85:a5:54:50:ab:53:d5:be:
c2:06:8a:64:35:8a:fa:f0:20:83:38:1e:f3:79:04:
af:ad:82:23:98:09:c0:34:0a:45:e8:91:31:e5:6c:
37:9c:17:a4:42:dd:c2:11:4d:15:49:8f:e6:26:b7:
c4:98:da:03:ca:d4:4b:6f:de:d1:d7:33:54:e8:2e:
34:13:6b:ed:0c:b6:9c:d3:d8:98:0f:58:f7:b8:14:
91:dc:3c:cf:03:41:72:23:d1:7f:e9:22:f0:64:96:
c4:93:5f:7c:68:43:e7:76:c8:90:94:a6:29:27:4b:
a4:1e:8c:4f:70:06:79:42:6b:ac:37:c3:33:4f:72:
96:f4:45:55:61:f8:b8:9a:84:b2:1c:9f:86:c4:84:
de:ca:24:84:90:25:d4:22:a0:e5:44:0d:85:a6:cb:
05:9f:55:8d:3b:ee:51:27:31:83:fa:98:08:a6:a4:
f8:13:49:2d:5a:ea:94:59:db:3f:6a:f7:57:fa:09:
c9:6a:fe:71:bb:22:3a:02:ec:e3:a8:90:39:a2:e9:
61:a1:64:5d:0b:31:bd:19:58:e2:16:b5:bd:fb:3c:
7d:9b:c2:0c:be:be:43:1f:ad:42:8d:4c:00:e1:e6:
56:67:40:6f:e7:b7:fc:0b:d3:75:14:3b:32:7c:c6:
c6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EE:1D:19:8B:73:33:44:1C:87:F2:B2:CA:23:38:E4:95:E3:8E:25
X509v3 Authority Key Identifier:
keyid:A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e8:cc:32:1b:30:ce:a0:d5:ff:b5:ae:e0:c2:b1:16:79:a1:
97:b6:a1:ef:99:d0:cc:c4:12:f2:0c:5c:06:5d:ab:db:ca:81:
c0:73:23:86:1d:10:eb:c4:34:5b:3d:cc:aa:5f:1e:5d:7a:eb:
7d:17:e6:38:c4:e1:e2:30:92:d8:28:da:a3:33:40:a8:18:c6:
e4:7c:e2:4d:60:af:89:23:5a:fe:be:4a:8e:7c:93:33:89:d3:
95:49:d1:94:4d:6b:c2:c9:7a:25:ab:d3:30:6d:59:f3:3a:ec:
ac:54:83:59:65:40:9b:67:08:e2:57:49:65:be:55:c0:4f:2f:
2e:ea:ae:96:68:2c:a5:3f:db:db:b8:6a:11:e2:5b:20:e9:42:
4d:14:6c:40:30:83:4c:d0:fc:59:2e:a5:f4:57:32:04:16:32:
dd:73:52:ec:7c:7d:ed:ca:a3:8f:76:4f:8d:ff:99:95:46:02:
74:17:32:8d:86:6b:4f:a9:27:8c:48:7f:e8:ff:88:af:59:21:
cc:6d:ef:9c:6e:80:c5:fd:8d:a2:80:92:5b:61:d8:4b:88:6f:
dc:60:4e:e6:ca:54:33:5c:25:6f:2d:54:1c:6c:6b:46:3c:ba:
77:a4:50:32:7d:1d:53:c7:ab:2a:9e:3d:4d:27:ab:95:c8:83:
94:e4:b6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:38:01 2026 by rpki-client