Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
File: oTRxtQAqTrZJYSXPWHN_Deutrns.mft (raw, json)
Hash identifier: 8tqUGgIFQJCiyswRsZh1/jdecvv+xHeBXI9Ljs1EPI8=
Subject key identifier: C5:9E:0D:27:19:7F:C9:DA:E9:5C:1B:8D:45:67:E5:52:BF:D5:45:8D
Authority key identifier: A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
Certificate issuer: /CN=a13471b5002a4eb6496125cf58737f0debadae7b
Certificate serial: 01A0CE914C73DFBF28DC9C51EB593D9C97E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
Manifest number: 09F1
Signing time: Wed 23 Sep 2026 14:00:23 +0000
Manifest this update: Wed 23 Sep 2026 14:00:23 +0000
Manifest next update: Thu 24 Sep 2026 14:00:23 +0000
Files and hashes: 1: YMlojSojXsI2HBIediVAZQR53Uw.roa (hash: JmufbrfZpdywXGEriwFTpVhWPjQ10Wi0s4R9uPOJmgM=)
2: oTRxtQAqTrZJYSXPWHN_Deutrns.crl (hash: gEcBg8vUeBBrUFkKj9VuMkAqiA/NF6Cp+c7quhG145c=)
3: ofNUkXwRdU2CygbCJb-JHa2iVxk.asa (hash: 2CgpH6bf+b3jg+rggjhpByWihzKk9amkpphMJMuERmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:4c:73:df:bf:28:dc:9c:51:eb:59:3d:9c:97:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13471b5002a4eb6496125cf58737f0debadae7b
Validity
Not Before: Sep 23 14:00:23 2026 GMT
Not After : Sep 24 14:00:23 2026 GMT
Subject: CN=c59e0d27197fc9dae95c1b8d4567e552bfd5458d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:51:6c:f3:cc:9a:36:c3:ba:ee:0f:79:08:
0a:34:fc:05:a9:6c:82:95:51:e5:df:ea:8b:7b:31:
6c:27:85:7b:78:73:2c:3f:78:85:6d:54:06:38:c9:
0c:34:7e:c6:08:57:36:01:46:3a:4e:66:fb:82:8b:
36:27:a7:84:25:62:9c:0f:37:47:f3:63:2e:f2:25:
cb:db:4e:4b:b2:bc:83:99:c7:34:7c:be:fa:80:b7:
8c:ed:49:91:02:3b:c9:03:f1:89:06:65:d7:bd:f3:
d4:27:a4:f0:aa:60:1d:a3:49:85:98:f8:70:af:84:
d2:1b:f6:4b:64:62:4c:17:53:26:dd:3a:24:62:3d:
b3:a8:a3:04:1f:48:c7:2a:2f:2b:bb:91:2e:65:65:
1f:6c:ce:3e:ba:c4:23:0d:7a:f8:81:71:0a:c4:39:
1f:24:f3:cc:b6:cc:b0:0c:77:83:0c:61:e0:87:0d:
b2:32:8d:2e:0e:3e:0d:0a:98:8b:60:38:64:e8:ea:
78:80:fe:aa:71:c3:ac:af:56:6c:b2:f3:e4:b2:6d:
86:32:16:92:56:71:21:b1:2b:6a:d7:d4:5b:1b:f3:
b7:3f:0d:da:55:3d:d7:36:c0:77:83:31:77:16:c2:
29:be:b7:94:4e:b6:2e:5c:30:be:6f:f0:28:d4:99:
fd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9E:0D:27:19:7F:C9:DA:E9:5C:1B:8D:45:67:E5:52:BF:D5:45:8D
X509v3 Authority Key Identifier:
keyid:A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:bc:1b:b2:9f:78:cd:b0:a0:33:02:20:96:14:95:6b:1e:45:
da:a2:20:bd:13:e9:01:1f:27:c8:a5:84:ae:f4:95:06:6b:82:
b2:97:c8:f7:ac:e4:26:79:e7:79:41:09:bd:2c:eb:04:27:35:
bd:23:ab:4f:85:04:e6:cd:5d:68:1e:f0:1d:7a:f5:6e:1a:e9:
d8:e2:af:ca:7a:14:19:9f:61:a7:ad:37:dc:e6:59:07:fa:08:
ed:23:7c:20:91:6a:c9:ab:26:b6:7c:65:d1:3e:48:a9:ef:b0:
86:b3:58:f3:8d:f7:c7:35:7f:7a:74:77:47:2d:30:b3:d4:38:
37:d5:6c:56:e4:17:50:6e:9c:46:3f:96:95:a7:17:9e:66:9d:
6b:1b:8f:7f:3b:25:70:a2:b8:0f:89:3c:99:09:3d:1f:ff:9d:
d4:b6:2e:ba:99:ac:82:7d:e8:41:76:70:5b:e1:72:02:50:a6:
a7:10:68:07:a3:04:4f:b2:cf:10:ae:a6:dc:5a:51:e5:ea:de:
48:01:c5:36:dd:a5:5a:83:13:d5:21:af:2f:5d:bc:dc:0a:9f:
c8:9d:bf:ce:63:ea:63:70:66:55:f8:c1:1c:b0:00:f5:08:f7:
64:05:0d:c7:03:f5:f7:10:41:3a:79:e8:03:3c:44:1f:0d:7b:
c9:c0:24:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOkUxz378o3JxR61k9nJfnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMzQ3MWI1MDAyYTRlYjY0OTYxMjVjZjU4NzM3ZjBkZWJh
ZGFlN2IwHhcNMjYwOTIzMTQwMDIzWhcNMjYwOTI0MTQwMDIzWjAzMTEwLwYDVQQD
EyhjNTllMGQyNzE5N2ZjOWRhZTk1YzFiOGQ0NTY3ZTU1MmJmZDU0NThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHVRbPPMmjbDuu4PeQgKNPwFqWyC
lVHl3+qLezFsJ4V7eHMsP3iFbVQGOMkMNH7GCFc2AUY6Tmb7gos2J6eEJWKcDzdH
82Mu8iXL205LsryDmcc0fL76gLeM7UmRAjvJA/GJBmXXvfPUJ6TwqmAdo0mFmPhw
r4TSG/ZLZGJMF1Mm3TokYj2zqKMEH0jHKi8ru5EuZWUfbM4+usQjDXr4gXEKxDkf
JPPMtsywDHeDDGHghw2yMo0uDj4NCpiLYDhk6Op4gP6qccOsr1ZssvPksm2GMhaS
VnEhsStq19RbG/O3Pw3aVT3XNsB3gzF3FsIpvreUTrYuXDC+b/Ao1Jn9TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWeDScZf8na6VwbjUVn5VK/1UWNMB8GA1UdIwQY
MBaAFKE0cbUAKk62SWElz1hzfw3rra57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1RSeHRRQXFUclpKWVNYUFdITl9EZXV0cm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9kOWU4N2ItNDUwYS00MTUyLWEyNDIt
ZDY5MTBiMjFhYjQyLzEvb1RSeHRRQXFUclpKWVNYUFdITl9EZXV0cm5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9kOWU4N2ItNDUwYS00MTUyLWEyNDItZDY5MTBiMjFhYjQy
LzEvb1RSeHRRQXFUclpKWVNYUFdITl9EZXV0cm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7wbsp94
zbCgMwIglhSVax5F2qIgvRPpAR8nyKWErvSVBmuCspfI96zkJnnneUEJvSzrBCc1
vSOrT4UE5s1daB7wHXr1bhrp2OKvynoUGZ9hp6033OZZB/oI7SN8IJFqyasmtnxl
0T5Iqe+whrNY8433xzV/enR3Ry0ws9Q4N9VsVuQXUG6cRj+WlacXnmadaxuPfzsl
cKK4D4k8mQk9H/+d1LYuupmsgn3oQXZwW+FyAlCmpxBoB6MET7LPEK6m3FpR5ere
SAHFNt2lWoMT1SGvL1283AqfyJ2/zmPqY3BmVfjBHLAA9Qj3ZAUNxwP19xBBOnno
AzxEHw17ycAk/Q==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:57:51 2026 by rpki-client