Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
File: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft (raw, json)
Hash identifier: BFGUNQktZXJ5Zgsg87Rjnmc+WlqEm3ffouACniNI0vc=
Subject key identifier: 40:45:98:A2:01:69:CB:FA:E6:70:71:EE:E3:BB:C0:54:D2:E4:49:11
Authority key identifier: 0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
Certificate issuer: /CN=0d333f72d9e294543825be63729f8034a4517090
Certificate serial: 01A1DD26CD8A032C70A57B0CD107CCE80FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
Manifest number: 0EED
Signing time: Sun 15 Nov 2026 03:01:10 +0000
Manifest this update: Sun 15 Nov 2026 03:01:10 +0000
Manifest next update: Mon 16 Nov 2026 03:01:10 +0000
Files and hashes: 1: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl (hash: t2rvIkRe5apSsUNKWkK5PmODxoMRZ6U0Njuviwyf2Pw=)
2: EPJNcfb9BYVxiCOl5XxrpQOfiyc.roa (hash: 3iBYjsoElN4nFr95B9VrvRH80hKHxRpzggq/IbclLdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:cd:8a:03:2c:70:a5:7b:0c:d1:07:cc:e8:0f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d333f72d9e294543825be63729f8034a4517090
Validity
Not Before: Nov 15 03:01:10 2026 GMT
Not After : Nov 16 03:01:10 2026 GMT
Subject: CN=404598a20169cbfae67071eee3bbc054d2e44911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:19:22:5a:32:b9:42:c5:d9:f4:3e:af:c5:
8f:3b:74:e2:7f:69:75:d0:ab:64:53:bf:75:f1:69:
e9:9b:52:18:38:ff:a9:2a:cc:0c:41:eb:29:45:f2:
62:97:35:ec:bb:0e:79:7b:af:39:bd:bd:f5:51:96:
6a:8b:77:a7:d2:d2:51:20:91:da:3b:21:90:b4:22:
e5:44:ce:07:ed:bd:b8:48:a1:81:ef:e4:1b:be:b8:
9b:23:cf:7b:76:bd:f5:cb:7e:66:6e:1c:ec:6a:42:
44:41:43:be:25:50:76:1d:c8:41:3b:c0:d9:29:2d:
b8:eb:49:16:1d:4e:72:b8:a4:f6:8a:6e:79:67:93:
cf:37:87:0d:f6:0c:9f:4e:97:9c:93:89:a8:dc:74:
be:12:5c:14:31:13:0f:18:e2:53:25:22:05:32:d1:
c8:cb:d6:78:26:41:4b:d4:37:14:3c:03:b4:4f:6c:
4f:a1:39:23:a3:c6:d7:75:81:48:cc:95:83:fd:c0:
c3:55:0d:d5:55:65:97:d8:ff:4a:9d:da:86:a2:5a:
54:dd:e3:18:e7:9b:cb:4d:f8:9d:93:0e:42:5e:c9:
01:cb:a3:75:c2:50:cb:e5:49:65:02:d4:70:7c:a4:
4e:bd:4b:4a:a2:de:51:98:4f:e6:b4:87:76:86:c4:
05:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:45:98:A2:01:69:CB:FA:E6:70:71:EE:E3:BB:C0:54:D2:E4:49:11
X509v3 Authority Key Identifier:
keyid:0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0a:88:a7:2c:40:6d:9e:6e:47:cb:e4:24:d7:4c:f1:81:27:
f1:37:af:3d:f9:3a:89:23:84:08:ed:73:e7:5f:f1:64:ff:15:
7b:60:bb:89:3c:88:65:86:ae:2b:c4:f7:29:80:39:12:a2:a2:
97:ed:79:46:84:f2:e8:79:2b:45:0b:28:56:c6:02:20:16:67:
fa:e4:ce:b3:ed:7d:3b:49:71:e6:52:ae:57:67:df:cc:c3:15:
12:c5:8b:b1:ae:5b:46:8c:df:45:f9:18:8e:47:32:99:62:0e:
c9:34:42:1a:61:ed:a8:e7:b9:81:ce:55:da:ea:3e:04:be:a3:
57:d5:fc:35:c1:e9:2c:7a:8e:a9:37:98:2c:30:9e:5f:03:44:
4b:e9:c1:98:09:99:77:9f:e9:56:ec:bc:bd:5c:c9:4f:16:bb:
2a:8f:e4:52:ef:e5:1b:62:e7:5e:cf:af:0e:a2:28:de:34:e1:
4d:a0:a9:ee:8d:3a:c8:ba:d9:c8:f5:bd:a2:43:93:f1:5d:12:
c1:a3:ac:74:f2:38:c3:6c:2a:33:1d:01:90:b8:13:c2:2f:d0:
4c:69:af:7f:34:15:5d:12:34:a4:61:56:a7:7c:99:78:a3:09:
3d:a0:a7:55:3b:2f:9d:c6:9e:8f:08:10:44:93:e6:7e:da:1c:
ba:50:4f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:08:13 2026 by rpki-client