Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
File: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft (raw, json)
Hash identifier: /DO09oJT0KF0oRfsoUcy4EZf8KwXL5PIIEJIBTUGg2U=
Subject key identifier: 4A:A1:5B:43:DA:A6:94:72:53:04:A9:34:0F:66:23:98:D5:AF:1D:B0
Authority key identifier: 0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
Certificate issuer: /CN=0d333f72d9e294543825be63729f8034a4517090
Certificate serial: 019D9818A4C5DB66C19FC8F9C7E948BFE0E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
Manifest number: 0CB7
Signing time: Thu 16 Apr 2026 21:00:45 +0000
Manifest this update: Thu 16 Apr 2026 21:00:45 +0000
Manifest next update: Fri 17 Apr 2026 21:00:45 +0000
Files and hashes: 1: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl (hash: FY4esxFq8xBv0XJNWsV9Vj3ivez8RoiIXquxtk+yAMc=)
2: EPJNcfb9BYVxiCOl5XxrpQOfiyc.roa (hash: 3iBYjsoElN4nFr95B9VrvRH80hKHxRpzggq/IbclLdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:a4:c5:db:66:c1:9f:c8:f9:c7:e9:48:bf:e0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d333f72d9e294543825be63729f8034a4517090
Validity
Not Before: Apr 16 21:00:45 2026 GMT
Not After : Apr 17 21:00:45 2026 GMT
Subject: CN=4aa15b43daa694725304a9340f662398d5af1db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:b7:1e:be:55:7b:ce:d9:b0:1a:25:fa:0f:
79:98:a3:9e:e5:ce:d1:09:a8:2a:00:79:ed:9e:a6:
bb:ed:e0:9e:7d:c5:9f:00:5e:54:bc:a3:e1:50:9f:
fd:a0:44:1a:e8:e0:48:dc:e9:d9:d8:8c:c0:55:3e:
85:f8:92:75:55:7f:9c:77:2e:95:2c:89:00:c5:7e:
30:3f:6c:b5:2d:26:14:05:cc:ca:88:b1:4c:6c:d5:
b5:26:91:f9:fe:da:6f:5a:42:82:d3:15:20:27:b3:
70:8a:e5:4b:8e:3f:2c:75:11:dd:3d:a9:1f:5d:6e:
59:d1:bd:24:11:48:e9:3b:d5:c2:a1:9a:5e:5a:04:
e2:47:fd:4e:b4:c9:03:bf:57:09:b5:77:e9:c6:d3:
7f:28:2b:1b:d2:63:4a:32:59:98:30:cf:ee:15:14:
5a:08:ae:26:e0:e0:36:a5:50:c3:85:ef:5d:ad:40:
4b:86:74:4c:46:0e:91:8b:aa:6a:3d:2e:ee:0b:15:
b7:51:1f:47:22:7a:03:b8:a3:11:19:46:ad:63:00:
3e:90:c2:5b:96:26:22:86:3f:09:fd:41:a2:4d:82:
24:06:16:e9:26:dd:ca:ca:30:b9:39:14:c7:36:36:
b1:14:12:3a:0c:2c:69:11:df:dc:38:97:fa:6a:fb:
8d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A1:5B:43:DA:A6:94:72:53:04:A9:34:0F:66:23:98:D5:AF:1D:B0
X509v3 Authority Key Identifier:
keyid:0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e8:85:a9:3d:0d:b0:80:ce:e8:a7:d5:0e:81:09:35:98:f3:
9d:fb:82:9f:44:2a:0a:dd:40:e4:42:1a:4d:72:e0:f8:bd:5a:
db:c0:6c:46:03:02:69:0a:dd:d3:7f:27:2e:e4:f9:b8:55:a2:
64:bb:77:74:01:2c:96:06:60:71:22:44:70:e4:83:7e:4b:e3:
50:84:01:24:bc:e8:fd:c1:e4:0e:84:89:c7:b7:2d:41:6c:9e:
b0:03:7b:b8:e6:34:59:fa:47:c2:76:45:d4:99:55:30:6e:b2:
b0:0a:79:d9:49:12:8c:a8:c4:cc:ef:da:31:76:8b:ba:da:b0:
6f:76:fe:a5:11:21:a2:9b:39:a4:de:65:48:2b:cb:25:3e:e8:
9c:c3:40:5d:d3:be:0e:78:ae:f6:ea:66:fb:57:7c:a8:20:68:
ab:d1:36:0b:49:03:56:43:db:64:12:3a:eb:d0:4b:d5:9b:4f:
f9:ea:41:eb:37:98:6b:39:81:1c:81:2b:b0:9d:b7:97:77:d5:
dd:42:29:c6:24:dd:34:31:58:e3:e2:00:29:d2:d0:97:50:fa:
da:55:1a:b4:6f:ef:40:87:fb:f0:72:cd:02:22:8d:66:53:47:
7f:46:fc:9c:3f:01:d8:21:6b:bc:50:5e:b1:a6:7c:df:f5:70:
ff:50:2b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:44 2026 by rpki-client