Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
File: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft (raw, json)
Hash identifier: oHr4BE0RjCbEBktQgm5OugnHYDLS8TdhK/XaIQDImJ4=
Subject key identifier: C8:D7:75:8D:C9:66:A9:BA:9A:AC:2A:F3:EE:CF:17:D1:B7:CA:B3:F9
Authority key identifier: 0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
Certificate issuer: /CN=0d333f72d9e294543825be63729f8034a4517090
Certificate serial: 019EBF919E8A5513263955907DD06B108232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
Manifest number: 0D50
Signing time: Sat 13 Jun 2026 06:00:51 +0000
Manifest this update: Sat 13 Jun 2026 06:00:51 +0000
Manifest next update: Sun 14 Jun 2026 06:00:51 +0000
Files and hashes: 1: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl (hash: hyUaABhh4rsmcm5Kr3XWEquQtirhJgk+/QCsfs8O1AQ=)
2: EPJNcfb9BYVxiCOl5XxrpQOfiyc.roa (hash: 3iBYjsoElN4nFr95B9VrvRH80hKHxRpzggq/IbclLdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:9e:8a:55:13:26:39:55:90:7d:d0:6b:10:82:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d333f72d9e294543825be63729f8034a4517090
Validity
Not Before: Jun 13 06:00:51 2026 GMT
Not After : Jun 14 06:00:51 2026 GMT
Subject: CN=c8d7758dc966a9ba9aac2af3eecf17d1b7cab3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:2d:a9:99:15:66:ab:f5:e3:82:89:ff:87:
91:df:d4:a6:1a:fb:9f:25:82:00:3c:5b:8d:22:ad:
15:39:47:6f:8e:f5:c1:14:9e:d4:28:2a:ab:d3:7c:
08:2b:92:67:5c:90:c8:e8:22:50:df:1c:7a:c6:bc:
05:6a:96:9a:70:12:65:5f:7e:c3:10:38:1a:f8:43:
66:6e:2e:27:37:45:5f:d7:76:6f:26:37:4f:b6:bd:
08:84:48:34:c9:2d:fe:ea:94:3c:99:78:af:39:77:
ba:07:a6:6e:bb:6a:54:bc:fd:fb:a4:da:cb:5f:69:
dd:26:e1:da:d2:c4:1f:27:e7:51:08:f8:6f:5e:da:
81:b0:6c:74:b1:08:06:b5:68:05:9c:3e:65:c3:6d:
81:2c:32:fd:7c:a9:0c:07:3b:e2:8c:06:e6:e8:23:
51:86:db:58:0b:df:d7:57:57:eb:fb:db:86:54:13:
35:b1:d6:b9:42:36:62:e5:89:4f:73:81:74:07:62:
5b:b5:e8:c6:71:e2:13:f6:c7:6a:b5:d0:47:80:6f:
c5:c0:aa:3c:3b:f1:a9:94:02:80:f8:91:2e:65:15:
eb:ad:eb:7a:67:57:c7:28:ba:e2:8b:15:dc:7f:c2:
c3:99:c1:6e:8d:d7:1f:77:f2:db:f8:e3:44:aa:38:
e5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D7:75:8D:C9:66:A9:BA:9A:AC:2A:F3:EE:CF:17:D1:B7:CA:B3:F9
X509v3 Authority Key Identifier:
keyid:0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d1:de:45:2c:7c:3c:24:cc:e3:35:3e:11:d1:69:47:43:1e:
b0:a4:96:b7:14:e5:a4:24:df:7c:36:e0:10:16:2e:43:f4:24:
24:29:67:3b:3a:bc:11:52:2e:f4:f5:2c:39:35:e4:74:b0:7b:
1d:ff:8b:b8:4f:d4:66:15:8a:ea:5f:9b:65:77:a4:d7:24:f9:
8b:15:2e:22:d6:42:34:91:c1:69:a7:a9:5d:02:a0:82:62:99:
5a:ec:ca:55:35:2d:f5:35:b9:79:26:02:0c:c0:8f:55:28:14:
ea:78:2b:77:b6:04:45:dd:4b:e7:99:5f:38:1e:04:31:57:d7:
02:65:29:b2:0c:ae:6d:d1:13:f9:61:62:6b:3c:da:ea:4d:80:
ee:a8:bc:74:1c:2f:94:b5:e0:43:48:86:0d:3b:86:0c:15:9a:
9c:97:60:f6:31:3d:a7:36:ba:e6:c1:4f:1d:57:9b:44:f4:ea:
a1:4d:1d:bd:4b:2e:21:9d:e3:6f:83:36:80:dd:fb:b6:0e:bd:
50:ec:24:43:bd:78:ca:2f:0c:ad:d5:e1:93:39:da:81:67:47:
53:6f:31:2c:0f:61:8c:55:b1:c5:1b:10:86:11:5e:8c:83:ec:
f3:71:24:e8:0c:9e:14:40:b4:74:57:62:67:65:9d:0a:be:90:
f4:60:7e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:20:17 2026 by rpki-client