Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
File: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft (raw, json)
Hash identifier: CGTdI2XgwUm6P1Ry7oxGEjSGJkGN6mgOFDXN1uXTSpU=
Subject key identifier: 97:84:16:40:2D:38:69:10:B9:11:31:83:04:C4:BE:E0:D2:19:D0:4B
Authority key identifier: 0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
Certificate issuer: /CN=0d333f72d9e294543825be63729f8034a4517090
Certificate serial: 019FA93E806CC039913EC911AC76873D4DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
Manifest number: 0DC9
Signing time: Tue 28 Jul 2026 15:01:13 +0000
Manifest this update: Tue 28 Jul 2026 15:01:13 +0000
Manifest next update: Wed 29 Jul 2026 15:01:13 +0000
Files and hashes: 1: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl (hash: MCbAdN4XcpKMBThQLiQfFrLGiqrBkL4dc/Cd05MZbAc=)
2: EPJNcfb9BYVxiCOl5XxrpQOfiyc.roa (hash: 3iBYjsoElN4nFr95B9VrvRH80hKHxRpzggq/IbclLdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:80:6c:c0:39:91:3e:c9:11:ac:76:87:3d:4d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d333f72d9e294543825be63729f8034a4517090
Validity
Not Before: Jul 28 15:01:13 2026 GMT
Not After : Jul 29 15:01:13 2026 GMT
Subject: CN=978416402d386910b911318304c4bee0d219d04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:04:49:5d:d6:73:13:14:1e:13:64:b4:02:ab:
81:a3:4d:da:0b:85:7f:84:9f:69:a7:5a:c3:76:66:
df:e5:b9:be:04:9b:fc:28:62:0b:df:da:d8:bc:ee:
e1:ed:ca:87:95:05:e4:e0:ad:28:84:51:a2:9e:20:
7c:7a:4f:92:ba:24:dd:cd:6a:5f:16:be:6d:5b:a4:
5b:1a:53:50:cc:b1:89:18:70:ca:c0:c6:2d:11:39:
81:b6:24:52:fd:8c:dc:54:8e:bb:f6:8c:2e:4c:10:
59:29:f4:f5:ab:27:e3:12:b3:26:4e:4f:32:6b:e9:
2f:1b:82:11:a9:42:bf:aa:e0:2d:67:43:b9:9f:82:
84:af:86:69:1e:c4:97:68:3c:ba:b4:5c:03:79:51:
99:12:26:16:c3:42:c9:e7:fe:77:89:a5:2b:a5:3c:
e2:f2:d0:af:1e:19:df:34:57:22:ba:1b:08:56:a2:
fb:05:ce:23:34:21:7e:4e:0c:60:ae:9c:08:c0:0f:
c8:cb:02:d7:ac:6a:d9:ae:12:0d:4a:72:11:af:67:
58:52:21:5a:c5:75:cd:34:7c:c1:0b:b9:ac:e9:46:
32:27:9e:9a:45:e0:1a:1b:3f:0b:a6:f1:42:c2:50:
24:62:8b:8e:74:ab:78:07:66:08:80:ef:e2:7e:b4:
42:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:84:16:40:2D:38:69:10:B9:11:31:83:04:C4:BE:E0:D2:19:D0:4B
X509v3 Authority Key Identifier:
keyid:0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:10:81:f6:4b:0e:40:b3:85:62:0e:da:49:f4:f0:2c:13:7b:
37:28:84:27:3a:18:e0:c1:a4:36:fe:61:e4:16:c3:d0:5d:40:
11:55:54:ba:0a:1c:70:e9:9f:fe:da:a1:23:62:d8:c3:3f:84:
53:ca:19:a7:e7:3e:23:43:8a:b1:c0:28:d2:59:b9:e8:6f:fc:
69:23:f6:3f:31:8d:2b:9c:27:c3:8f:68:92:bb:f1:cf:5a:fc:
43:65:01:03:3d:b2:a7:15:07:39:75:2a:ff:6c:8a:52:c1:d5:
ac:75:ba:c0:67:01:8b:46:e4:f1:fd:07:bc:b6:4f:6e:50:2d:
dc:37:ed:5c:93:50:73:4d:df:7c:1e:2a:85:63:6b:7a:57:aa:
23:c4:e8:47:18:d0:ed:88:7a:bb:4a:1a:74:c0:2c:df:88:a1:
fa:44:c3:e1:50:6c:55:ea:ff:38:19:da:7e:e6:7f:75:3b:82:
d9:aa:6b:01:a6:d7:4b:ac:b2:5d:3f:5b:55:7f:9c:d7:24:1e:
42:e3:09:30:61:05:3b:50:53:7e:27:9c:e6:c3:38:b0:cf:93:
37:2f:40:ea:52:51:fc:d6:c1:5c:5b:8f:77:07:58:65:0a:d9:
13:57:c2:97:57:fd:0b:7a:9f:25:35:fb:39:be:c3:a2:43:ef:
c2:75:8b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:37 2026 by rpki-client