Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
File: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft (raw, json)
Hash identifier: q2CyG6OmJOdta4bgepzjhTYKCt312YUGn7XG8FPFDB4=
Subject key identifier: 72:3C:84:06:44:E5:CF:20:96:43:7E:D0:45:2B:2B:82:8D:46:7F:35
Authority key identifier: 0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
Certificate issuer: /CN=0d333f72d9e294543825be63729f8034a4517090
Certificate serial: 01A0C143AC6CA4A9EE621A40294BB0327D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
Manifest number: 0E5A
Signing time: Mon 21 Sep 2026 00:00:32 +0000
Manifest this update: Mon 21 Sep 2026 00:00:32 +0000
Manifest next update: Tue 22 Sep 2026 00:00:32 +0000
Files and hashes: 1: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl (hash: yhKQoowfzuea7DcwFo3FW9dtJnb5MeKEnAXzKNC5vik=)
2: EPJNcfb9BYVxiCOl5XxrpQOfiyc.roa (hash: 3iBYjsoElN4nFr95B9VrvRH80hKHxRpzggq/IbclLdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:43:ac:6c:a4:a9:ee:62:1a:40:29:4b:b0:32:7d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d333f72d9e294543825be63729f8034a4517090
Validity
Not Before: Sep 21 00:00:32 2026 GMT
Not After : Sep 22 00:00:32 2026 GMT
Subject: CN=723c840644e5cf2096437ed0452b2b828d467f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:59:56:25:fd:b6:e1:97:74:b1:64:a5:2f:
45:c3:b2:c8:83:7c:62:71:66:e4:f5:23:13:00:36:
05:f2:84:13:da:1c:91:c2:96:af:28:0a:1e:8e:f3:
fc:6a:95:90:ea:51:32:53:a0:64:3a:07:d8:1f:0d:
74:71:64:3f:14:30:38:bc:88:64:ca:a5:bb:a0:35:
bb:5e:67:b3:03:b7:d1:ac:66:c5:da:26:d0:38:a1:
87:64:df:56:de:81:e1:0f:82:1d:93:af:30:5f:b2:
c4:92:7c:25:34:d1:90:01:46:cb:bc:11:53:31:5d:
82:92:9c:03:67:92:c2:72:cc:4f:93:b6:8a:c4:1a:
5f:60:1d:a3:a6:93:7d:b4:cc:df:01:3c:ac:2d:36:
42:8d:3e:65:c4:08:54:47:70:14:f9:ed:08:c0:02:
89:09:07:3a:87:e4:26:4c:68:33:be:d0:da:e1:83:
f7:60:4a:ce:ba:14:47:f5:3e:b6:24:6d:3a:23:30:
20:0c:fe:f5:b8:df:0b:94:79:cb:1c:bd:49:fc:03:
46:b3:e8:8f:5a:b9:7b:29:ab:5d:ec:8b:e3:1e:6b:
d7:99:34:51:d2:f1:55:10:ea:95:7d:6a:a9:f5:51:
26:62:7e:32:09:ac:d8:b1:e5:ef:b2:1b:b1:ee:c6:
23:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3C:84:06:44:E5:CF:20:96:43:7E:D0:45:2B:2B:82:8D:46:7F:35
X509v3 Authority Key Identifier:
keyid:0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:bb:af:e0:2e:e5:ec:6c:da:87:ad:c4:01:f9:b4:c9:9b:b9:
88:a9:a4:a9:fd:ed:47:3a:de:11:a6:6d:09:48:71:eb:8c:25:
f3:9d:9c:e7:68:41:7a:d6:58:41:0a:e6:3f:a4:79:89:f8:52:
6d:29:d0:41:08:ec:e4:44:17:38:22:e4:16:aa:64:53:19:d4:
ff:a6:34:a3:c3:67:03:16:2c:d6:11:de:18:17:b2:7d:ed:93:
e0:86:2a:46:7a:89:2a:4e:41:5e:93:4c:6c:f1:e4:c4:5e:6d:
c0:35:bd:e4:29:e5:43:12:06:42:11:38:09:cd:80:9c:1b:69:
dd:64:dc:30:cc:2d:88:23:3a:68:dd:a8:9a:84:8e:b1:bd:41:
14:4d:83:d3:b0:2b:79:6c:9d:a7:38:84:02:5f:98:5e:59:4d:
bc:0d:f4:dd:3e:fa:0e:8c:58:cc:96:b7:5d:c6:3c:c5:ae:8c:
dd:f9:23:ed:c6:f2:97:8c:7b:fc:41:a3:30:3a:98:5b:bb:c2:
86:ac:33:fc:7c:ae:47:68:0e:da:7a:65:76:1b:79:45:ca:27:
65:2f:17:08:a1:10:42:95:74:9f:8c:16:a1:a8:ce:1c:77:8a:
25:70:81:93:59:c1:a6:f2:35:c8:df:65:e3:88:c7:94:d2:2e:
cb:a7:da:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:42:18 2026 by rpki-client