Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
File: oTRxtQAqTrZJYSXPWHN_Deutrns.mft (raw, json)
Hash identifier: kIn4y37A1mZjRH6NMnyCu5wWfnvZYo9w5FfZ/P1NNdk=
Subject key identifier: AB:F0:F2:2C:79:41:22:BB:E1:F5:DA:6A:16:8A:62:3F:E8:19:05:8C
Authority key identifier: A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
Certificate issuer: /CN=a13471b5002a4eb6496125cf58737f0debadae7b
Certificate serial: 019D25F1584D168AAB3B28728BF44753C188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
Manifest number: 080C
Signing time: Wed 25 Mar 2026 17:01:06 +0000
Manifest this update: Wed 25 Mar 2026 17:01:06 +0000
Manifest next update: Thu 26 Mar 2026 17:01:06 +0000
Files and hashes: 1: YMlojSojXsI2HBIediVAZQR53Uw.roa (hash: JmufbrfZpdywXGEriwFTpVhWPjQ10Wi0s4R9uPOJmgM=)
2: oTRxtQAqTrZJYSXPWHN_Deutrns.crl (hash: vYgRoAYqOMy1SRx0akbzxnbQoQP1rJ4PnKespBF2yA0=)
3: ofNUkXwRdU2CygbCJb-JHa2iVxk.asa (hash: 2CgpH6bf+b3jg+rggjhpByWihzKk9amkpphMJMuERmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:58:4d:16:8a:ab:3b:28:72:8b:f4:47:53:c1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13471b5002a4eb6496125cf58737f0debadae7b
Validity
Not Before: Mar 25 17:01:06 2026 GMT
Not After : Mar 26 17:01:06 2026 GMT
Subject: CN=abf0f22c794122bbe1f5da6a168a623fe819058c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:48:ea:59:df:da:b6:be:f5:1f:a0:d8:1e:d4:
62:3c:a1:ae:c5:28:7d:aa:43:97:c0:83:80:56:c5:
18:03:64:11:be:45:ab:a2:4e:05:bb:e5:8e:d5:57:
32:6b:7b:14:9e:0d:32:07:b6:bc:8d:35:de:62:79:
23:e4:87:6a:ca:a3:63:8b:40:9d:ec:1f:b3:7b:58:
76:44:4c:9e:e9:0e:67:b1:01:b3:97:f8:04:ef:e7:
52:65:15:fd:58:0f:b9:f2:f0:78:b7:95:0e:43:45:
c3:50:4d:70:17:47:5b:f3:70:ad:51:70:47:d7:a9:
7a:ab:c4:09:5b:34:3e:e5:03:b1:01:00:f9:c7:20:
dd:99:d6:c8:08:91:a9:47:3c:bb:a2:30:05:ae:98:
6c:fa:94:84:58:d1:3f:d6:f2:05:d8:74:75:cb:7a:
1b:bb:68:18:53:5b:fa:5a:be:7c:ed:55:4b:c5:1f:
eb:8e:8c:29:c0:b7:8d:43:04:ed:fb:a5:62:e8:2c:
84:cb:f2:19:2f:49:1f:a9:41:57:bf:7d:25:36:4e:
ab:ee:da:34:da:fe:90:5a:1e:81:3b:97:cc:bd:db:
c6:da:0d:60:b2:59:af:00:f2:fb:20:1f:58:89:6a:
3f:7c:37:64:88:da:bf:09:58:2f:cc:66:2c:e0:72:
d0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F0:F2:2C:79:41:22:BB:E1:F5:DA:6A:16:8A:62:3F:E8:19:05:8C
X509v3 Authority Key Identifier:
keyid:A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:56:dd:ad:7f:d8:07:ea:2b:0a:cb:23:a7:15:eb:e2:b4:f0:
4e:ec:42:82:c9:60:3c:1b:80:e4:20:5f:4b:e9:3b:de:72:02:
7d:ff:96:b5:5d:12:c1:6f:e6:c3:67:1b:eb:62:f5:78:ab:8a:
54:7a:32:77:cf:4e:c2:96:f3:83:e1:30:3b:e3:5e:ed:cc:81:
9a:29:de:89:39:f6:0a:ca:6c:20:6f:2a:20:c6:c7:51:26:f0:
76:74:e8:d6:f0:4e:99:e4:87:d7:c4:33:02:64:9a:64:db:17:
96:2b:f4:7b:da:1f:5c:bd:ad:63:5b:59:7f:75:45:e7:ea:92:
d3:b2:65:3f:c8:75:9e:69:eb:fe:0c:59:e3:f8:05:bb:a7:a3:
a3:bc:ba:98:cd:b0:4f:f1:57:bb:3c:44:34:4b:20:ef:92:65:
08:6d:54:c2:26:db:bd:42:43:fa:e5:45:6c:c2:12:81:8f:07:
4a:1e:c4:0a:87:32:6a:45:71:04:fc:81:91:98:63:9b:67:53:
9f:0a:48:ca:e7:4e:d7:ba:ad:23:4e:98:ec:f1:33:21:9c:4a:
ed:74:3d:b9:4b:ed:2f:87:f9:6d:fe:15:4b:a7:02:04:6f:fe:
35:e9:14:50:a0:28:77:b8:c0:6b:f1:34:5a:72:9e:bd:2e:16:
85:f9:9a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:19:29 2026 by rpki-client