Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
File: oTRxtQAqTrZJYSXPWHN_Deutrns.mft (raw, json)
Hash identifier: 0cvQmRYcTOdVSDM91YSmuGPO5ZDcRcg3yh6AsTFEuOM=
Subject key identifier: 89:9F:6B:52:69:BD:FD:3F:44:B6:EE:67:A8:5E:1D:B5:D3:2F:44:11
Authority key identifier: A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
Certificate issuer: /CN=a13471b5002a4eb6496125cf58737f0debadae7b
Certificate serial: 019F8FEBCE8F107A61DF194932566F381F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
Manifest number: 094C
Signing time: Thu 23 Jul 2026 17:00:23 +0000
Manifest this update: Thu 23 Jul 2026 17:00:23 +0000
Manifest next update: Fri 24 Jul 2026 17:00:23 +0000
Files and hashes: 1: YMlojSojXsI2HBIediVAZQR53Uw.roa (hash: JmufbrfZpdywXGEriwFTpVhWPjQ10Wi0s4R9uPOJmgM=)
2: oTRxtQAqTrZJYSXPWHN_Deutrns.crl (hash: QOd96FEJ2C0XKYUq3csCrzr7oT7Wrg6DnvvtgsGOZwE=)
3: ofNUkXwRdU2CygbCJb-JHa2iVxk.asa (hash: 2CgpH6bf+b3jg+rggjhpByWihzKk9amkpphMJMuERmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:ce:8f:10:7a:61:df:19:49:32:56:6f:38:1f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13471b5002a4eb6496125cf58737f0debadae7b
Validity
Not Before: Jul 23 17:00:23 2026 GMT
Not After : Jul 24 17:00:23 2026 GMT
Subject: CN=899f6b5269bdfd3f44b6ee67a85e1db5d32f4411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9f:a8:a8:26:c8:b0:98:e9:92:bb:37:87:57:
53:c2:f9:20:8f:88:77:08:f4:b2:d9:74:4e:f7:19:
31:5d:96:92:a1:1c:68:37:7f:00:c1:71:11:42:80:
b7:32:31:65:b1:1f:01:41:92:92:39:4c:bd:7b:38:
13:af:2a:8b:57:67:c4:29:93:e2:63:4f:d8:ef:f3:
21:7a:8e:5a:25:e5:3f:71:12:b5:06:3f:09:18:92:
a1:e1:ee:dd:e4:c1:63:33:97:e1:89:b5:d2:08:2b:
75:30:3b:b7:ee:22:ff:ea:ab:35:fd:46:f9:ff:ed:
b8:84:cb:93:57:08:b8:a5:66:20:54:30:0d:a0:3c:
da:4c:77:7d:c7:86:d5:55:5a:c4:9c:cd:92:e4:a6:
97:e2:ec:6d:bb:7c:23:2a:bc:f3:87:10:51:75:68:
11:be:95:c0:ec:40:ac:a9:86:dd:8e:30:d3:48:03:
7c:43:a4:07:33:fe:4f:c9:bb:08:ff:e4:74:29:1d:
8c:5b:5f:69:d5:56:5e:70:18:71:4b:4a:fe:a2:e4:
c4:d0:c3:ba:ff:29:7c:86:24:61:93:a2:6b:ee:a2:
c8:7b:a9:37:9a:1e:39:d9:90:51:7a:fc:70:3b:73:
ec:4b:27:6b:15:fd:fe:10:c3:ac:1f:90:fc:7c:7f:
37:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9F:6B:52:69:BD:FD:3F:44:B6:EE:67:A8:5E:1D:B5:D3:2F:44:11
X509v3 Authority Key Identifier:
keyid:A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d4:04:c5:b0:31:63:b9:bb:24:b4:cf:a3:da:65:12:7a:ca:
e5:39:ad:e5:c1:b3:98:12:d8:19:4f:37:11:83:65:90:13:4e:
e7:00:3f:22:11:3c:24:6b:5c:80:2c:e1:db:90:4c:45:d4:af:
69:73:d5:27:f2:c4:0f:6f:47:2f:9d:a0:89:6f:bb:b3:b3:51:
ab:d4:92:54:49:b9:0a:18:7b:f8:9f:77:1c:65:a3:01:2f:b1:
77:a5:07:5e:f0:4d:b7:61:cf:6a:a6:20:27:3c:98:2f:41:b6:
1e:a3:67:cd:a9:1d:67:a5:37:0f:98:91:88:91:6c:28:d6:cd:
6d:a0:ad:51:92:14:5e:13:b8:40:5e:1c:97:13:c0:b8:4a:d8:
21:e2:a2:17:98:93:6f:f4:76:d9:e9:f3:16:4e:53:96:20:11:
05:03:8a:03:67:90:e1:bf:b9:a0:db:ab:e6:3f:24:dd:9e:63:
1e:74:e5:f8:b1:48:66:c0:d8:ef:23:48:c4:bf:39:fc:21:79:
c5:df:2b:42:47:cb:58:4b:66:dd:87:cd:db:ae:25:77:51:a7:
d3:54:29:01:bb:95:4b:f3:93:c0:48:cf:11:58:ef:b5:5c:b2:
3a:d6:6a:9e:9d:13:05:2e:19:66:e3:94:84:bd:8d:9d:17:a7:
b9:5a:bd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:14:28 2026 by rpki-client