Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
File: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft (raw, json)
Hash identifier: 51ToM97mGpNjxWewWl/p3Dw6opF2tntG7bJmv4h0OCY=
Subject key identifier: 82:33:02:2F:6E:59:A4:34:6B:87:36:24:1D:DF:3D:AC:4C:57:37:73
Authority key identifier: 0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
Certificate issuer: /CN=0d333f72d9e294543825be63729f8034a4517090
Certificate serial: 019CAC7DDBC5A8EABF24A29C030A51586298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
Manifest number: 0C3D
Signing time: Mon 02 Mar 2026 03:00:55 +0000
Manifest this update: Mon 02 Mar 2026 03:00:55 +0000
Manifest next update: Tue 03 Mar 2026 03:00:55 +0000
Files and hashes: 1: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl (hash: fJVVuz9Ek+vE6aSUs878ZF3hz9zAqL+AHuoqeorOtWc=)
2: EPJNcfb9BYVxiCOl5XxrpQOfiyc.roa (hash: 3iBYjsoElN4nFr95B9VrvRH80hKHxRpzggq/IbclLdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:db:c5:a8:ea:bf:24:a2:9c:03:0a:51:58:62:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d333f72d9e294543825be63729f8034a4517090
Validity
Not Before: Mar 2 03:00:55 2026 GMT
Not After : Mar 3 03:00:55 2026 GMT
Subject: CN=8233022f6e59a4346b8736241ddf3dac4c573773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:87:3d:2d:bb:1f:89:ab:56:a2:98:d3:b1:a9:
9c:37:07:98:45:c1:f6:e9:98:f0:ae:2f:8b:dc:bc:
f5:f3:51:18:36:65:29:3e:72:7d:95:a2:2e:55:56:
d4:48:b8:0e:f0:2e:ee:f4:6f:5c:81:41:15:62:81:
84:8e:92:51:2d:1a:3a:40:9c:3b:96:00:6b:8b:50:
d1:a9:97:ba:a1:5e:f1:44:ff:92:b9:05:32:f9:10:
4b:8f:59:2a:6d:4e:a5:a3:b4:bf:67:ee:24:c8:26:
ad:bb:20:0f:7d:29:8f:f2:ea:68:d6:be:12:cf:a4:
80:74:cf:b0:42:de:49:32:d8:eb:f4:c0:26:23:92:
75:4c:e3:63:c6:63:48:96:8f:14:36:52:eb:3d:a9:
ec:2a:20:08:c9:b3:f7:95:48:48:e1:5d:f7:d6:27:
76:94:47:ea:89:ad:8e:a7:a1:c4:d5:0f:f2:7f:c1:
a2:e7:e3:ef:83:ba:a6:bb:f1:db:ac:20:13:7e:fe:
e4:2e:a6:d0:be:e4:c8:b1:9f:42:95:22:89:0e:ca:
77:f7:3f:02:b8:d2:80:dd:3d:af:6e:18:e6:9e:97:
b1:76:89:dc:eb:6d:b8:8a:c4:ba:65:00:73:31:d2:
95:0d:f4:2b:9d:74:43:29:65:5a:58:84:7c:1c:d6:
ff:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:33:02:2F:6E:59:A4:34:6B:87:36:24:1D:DF:3D:AC:4C:57:37:73
X509v3 Authority Key Identifier:
keyid:0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9a:36:17:6f:9f:f2:62:3f:c9:15:de:8d:47:19:31:e1:b3:
74:dc:e6:e3:20:eb:ba:9e:23:f4:64:3e:6b:04:08:08:72:5e:
41:d9:da:dd:7a:83:12:bd:e6:c3:45:b8:19:3a:af:65:05:1c:
90:4c:11:67:ea:bd:f4:d0:87:06:ac:e2:bc:db:d9:0b:a2:e3:
bc:15:ee:d9:09:86:53:d2:d3:75:9e:35:85:f7:b8:e0:94:2e:
fb:09:0a:6c:d0:1e:06:e1:0f:9a:a4:3d:bd:c4:fd:0b:9b:d4:
34:6a:6c:7a:af:ef:f9:d5:65:63:77:35:59:40:e1:78:0c:a5:
8b:36:b1:1a:0c:7e:1c:33:fc:81:a3:09:a4:0c:91:ee:75:fd:
a1:62:a0:37:76:6a:d3:9f:d2:02:a4:03:fb:55:d8:31:4d:b7:
f6:3c:e5:52:c3:0e:c9:e8:90:62:44:49:18:5b:a1:d7:f0:03:
28:b2:3a:54:fd:21:d3:88:f8:c6:72:70:63:1e:55:87:62:45:
eb:4f:89:5b:5c:9d:86:44:45:71:16:a9:30:d0:4e:99:3a:d6:
0b:18:7e:31:12:b6:6c:92:46:b1:bf:26:6e:89:b1:1f:44:72:
52:11:68:72:17:2c:67:75:4d:d0:fe:b6:38:ed:f4:91:88:50:
50:30:65:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:24 2026 by rpki-client