Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
File: oTRxtQAqTrZJYSXPWHN_Deutrns.mft (raw, json)
Hash identifier: zrrq8KDc6Pw/R6UwPGFMYYlQxzMhSRivtBdWQQx1uoY=
Subject key identifier: 70:9D:B7:4D:0E:D7:B0:28:D7:A1:03:61:76:26:79:BD:B2:41:A4:B5
Authority key identifier: A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
Certificate issuer: /CN=a13471b5002a4eb6496125cf58737f0debadae7b
Certificate serial: 019E1D231C40464010E12F2BBBC95F4BCA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
Manifest number: 088C
Signing time: Tue 12 May 2026 17:01:40 +0000
Manifest this update: Tue 12 May 2026 17:01:40 +0000
Manifest next update: Wed 13 May 2026 17:01:40 +0000
Files and hashes: 1: YMlojSojXsI2HBIediVAZQR53Uw.roa (hash: JmufbrfZpdywXGEriwFTpVhWPjQ10Wi0s4R9uPOJmgM=)
2: oTRxtQAqTrZJYSXPWHN_Deutrns.crl (hash: vq207tFa/PnT/R9clGXeK8VfQ5YkYj17lS7AVzsVJvI=)
3: ofNUkXwRdU2CygbCJb-JHa2iVxk.asa (hash: 2CgpH6bf+b3jg+rggjhpByWihzKk9amkpphMJMuERmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:1c:40:46:40:10:e1:2f:2b:bb:c9:5f:4b:ca:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13471b5002a4eb6496125cf58737f0debadae7b
Validity
Not Before: May 12 17:01:40 2026 GMT
Not After : May 13 17:01:40 2026 GMT
Subject: CN=709db74d0ed7b028d7a10361762679bdb241a4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2e:2b:33:3b:5c:44:90:91:f8:c9:e7:e2:23:
79:51:a5:ec:07:bf:b4:5e:58:d5:b7:d8:e9:19:60:
a1:79:4f:5f:91:75:6c:c7:90:bb:dd:c0:b4:5a:02:
2a:cb:69:50:cb:f6:30:ab:62:06:c1:ae:c5:a1:79:
9a:05:85:ae:90:0c:04:19:76:7b:fa:c9:56:b5:93:
10:6f:4e:c0:74:27:b9:04:f7:c2:d6:5a:b5:79:90:
ba:7d:fd:a9:6b:d5:e4:e5:4d:9a:aa:92:34:ff:07:
e7:dc:32:f9:61:26:64:16:78:f4:e2:f8:f0:9c:1a:
2e:9b:05:80:50:79:c0:1f:62:e3:f0:2f:22:93:91:
35:60:d3:3e:eb:97:36:0c:0e:c6:21:7b:f6:0f:57:
66:e3:34:90:b9:42:a7:9d:f6:ff:f4:67:2e:04:37:
d0:d5:19:62:bc:0b:65:e9:88:74:37:51:56:3f:bd:
e2:6c:22:0c:2c:56:a4:6e:4b:50:08:24:a4:6c:9c:
fd:6d:88:62:a8:92:e8:9d:57:aa:65:bd:25:e7:78:
b7:e0:71:0e:26:55:5c:9e:ad:53:53:b5:cd:6c:17:
92:42:b7:52:50:ec:d5:cc:eb:6a:62:fc:c7:86:46:
3b:3e:29:56:8c:cc:0d:46:a4:f2:8f:c3:08:cc:d7:
e4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9D:B7:4D:0E:D7:B0:28:D7:A1:03:61:76:26:79:BD:B2:41:A4:B5
X509v3 Authority Key Identifier:
keyid:A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b1:56:5e:8c:4e:ee:5b:2e:ce:64:87:3f:ac:0a:b7:df:3f:
d4:b5:18:42:c7:3d:69:8c:10:fc:21:04:5d:a9:32:00:b3:39:
47:04:4a:1e:f5:7a:ee:45:df:09:8f:b0:93:73:8a:99:fb:2e:
17:fa:27:9a:09:4a:7d:b7:08:5a:62:3d:d4:93:83:10:39:48:
ca:24:c0:93:1f:10:35:89:ea:25:00:2b:9e:d9:02:ba:bd:6e:
13:50:40:60:98:7e:fa:7d:80:f8:64:6d:9f:6f:5b:51:60:3e:
cc:a5:af:91:d7:5d:42:aa:52:ec:56:76:88:b9:41:88:9b:b6:
1b:ec:fb:ed:28:37:71:5a:ec:3b:bb:0c:de:25:3f:eb:04:83:
b7:04:e4:a1:c1:cd:a4:03:6f:ba:29:57:51:7e:d0:d6:2a:e7:
ad:ea:0c:c8:22:a9:1f:ca:d8:72:4e:77:6e:59:27:04:64:61:
63:38:87:22:34:40:30:2c:47:10:df:c8:63:8b:5d:1c:bf:7c:
68:3c:fa:7a:f5:af:d3:16:7c:79:a2:fe:8f:d3:03:00:0d:f3:
b5:a6:97:df:56:36:f3:23:93:47:76:15:dd:8a:4c:0f:39:aa:
ec:ed:8a:98:0d:71:6e:f8:44:45:29:34:d5:d7:49:39:7f:0b:
8b:e4:ff:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:06:26 2026 by rpki-client