Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
File: oTRxtQAqTrZJYSXPWHN_Deutrns.mft (raw, json)
Hash identifier: yuf92mRzA+K7bwQdf2vmJ+wIio5jME5V8kpZ7BR7tYc=
Subject key identifier: EB:E1:2F:DA:75:D7:F3:35:5D:FE:D4:76:0B:36:5B:C3:27:96:51:56
Authority key identifier: A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
Certificate issuer: /CN=a13471b5002a4eb6496125cf58737f0debadae7b
Certificate serial: 01A03FA9A698D084AF9D16A5AF170AA43D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
Manifest number: 09A7
Signing time: Wed 26 Aug 2026 20:01:17 +0000
Manifest this update: Wed 26 Aug 2026 20:01:17 +0000
Manifest next update: Thu 27 Aug 2026 20:01:17 +0000
Files and hashes: 1: YMlojSojXsI2HBIediVAZQR53Uw.roa (hash: JmufbrfZpdywXGEriwFTpVhWPjQ10Wi0s4R9uPOJmgM=)
2: oTRxtQAqTrZJYSXPWHN_Deutrns.crl (hash: WPZcWO/vHSItslNQzvv8wrQ/GmlwzSHoU8iGTXzhzNU=)
3: ofNUkXwRdU2CygbCJb-JHa2iVxk.asa (hash: 2CgpH6bf+b3jg+rggjhpByWihzKk9amkpphMJMuERmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:a6:98:d0:84:af:9d:16:a5:af:17:0a:a4:3d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13471b5002a4eb6496125cf58737f0debadae7b
Validity
Not Before: Aug 26 20:01:17 2026 GMT
Not After : Aug 27 20:01:17 2026 GMT
Subject: CN=ebe12fda75d7f3355dfed4760b365bc327965156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:de:09:56:be:e4:d8:34:8c:3a:39:0e:1f:4c:
f0:7f:36:8d:29:6d:fe:53:fb:be:2e:fb:0f:ef:52:
65:73:11:0e:b3:97:a2:4b:93:35:6e:ba:8d:15:12:
1e:df:e3:52:2a:78:c0:5c:0b:b0:20:8b:9f:09:62:
2b:4b:4d:9f:8a:19:d6:e5:ab:45:69:54:dc:f4:76:
95:e9:d7:f0:d5:b0:e9:f5:e0:7f:83:83:9e:1a:69:
75:2a:07:25:e7:08:70:20:52:37:3b:2f:0a:9b:ed:
34:e3:9a:9d:c2:85:ac:39:8e:a1:11:c4:c4:28:cc:
e4:3c:46:80:f8:9c:a2:37:c1:99:4e:d2:f9:69:27:
0e:69:be:2e:f5:45:61:6d:c9:88:f5:e8:88:fe:ff:
ad:a1:79:1a:00:d4:53:56:22:7a:82:db:4b:ad:ce:
97:28:bf:ba:f2:c3:e6:76:e0:42:3b:5b:39:25:8a:
5a:8b:e0:e1:ae:04:2f:fa:72:72:1c:d8:5e:5b:c3:
75:eb:d9:33:55:54:3a:12:89:3c:db:48:7f:2a:b9:
f1:76:7f:75:14:a1:65:7a:08:cb:37:61:e8:94:66:
bf:4b:36:59:b7:d3:b9:09:35:d9:42:36:05:7f:de:
af:d1:6b:64:e9:e0:09:a4:53:8a:a7:40:ad:73:1b:
5c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E1:2F:DA:75:D7:F3:35:5D:FE:D4:76:0B:36:5B:C3:27:96:51:56
X509v3 Authority Key Identifier:
keyid:A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:23:4e:1c:13:f5:fe:39:a7:8d:10:ea:12:c2:bd:6c:79:71:
29:19:da:b0:a4:12:3c:d5:c6:fc:aa:8b:67:b9:37:11:df:39:
78:3d:95:09:e1:ea:c2:09:4b:9d:af:d1:bf:84:98:3a:22:f6:
c5:55:5b:f6:0f:fd:3e:70:75:dc:ea:9a:0a:83:8d:d6:c0:81:
96:b6:ab:b1:15:0c:86:3b:b9:0b:c6:8c:e8:e0:05:97:c5:21:
05:65:95:ef:25:9e:a2:0b:c8:d9:e8:a2:91:56:34:67:70:af:
03:07:f8:4c:de:e6:80:91:28:8a:8b:3a:db:6d:3e:24:9c:43:
4a:94:4e:56:2d:7d:41:dd:8f:be:4a:a7:3c:74:41:b9:25:83:
9a:ea:12:da:f8:dc:d8:43:5f:ac:98:46:fc:4c:8a:bc:2a:ea:
97:40:b2:6c:37:8b:75:ff:fa:b9:58:b8:24:df:13:a1:25:05:
d3:27:1d:99:bd:22:16:ab:4c:91:1f:f4:21:75:70:fc:d4:7f:
f8:38:89:f8:9c:3a:50:25:85:51:d6:af:2a:16:b6:bd:92:16:
b5:37:fd:9f:b5:82:87:fa:a4:03:1c:c0:39:56:9f:a9:97:5f:
0c:71:b3:1e:06:fb:92:a7:cc:e9:5a:02:6d:df:7d:53:2e:47:
6b:29:98:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:28:22 2026 by rpki-client