Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
File: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft (raw, json)
Hash identifier: Qp9WlZJ7IozmxUTAJV47Ej6fEtcJJ+Y7F93D2+Ydt0A=
Subject key identifier: A0:7C:08:30:28:B3:00:05:96:09:C5:1F:04:8E:81:38:9B:A3:D0:29
Authority key identifier: 0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
Certificate issuer: /CN=0d333f72d9e294543825be63729f8034a4517090
Certificate serial: 01A0021411B3BDAB06D1555B8694EB2EEDC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
Manifest number: 0DF7
Signing time: Fri 14 Aug 2026 21:01:04 +0000
Manifest this update: Fri 14 Aug 2026 21:01:04 +0000
Manifest next update: Sat 15 Aug 2026 21:01:04 +0000
Files and hashes: 1: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl (hash: mU2FT+1X7nIcsaKdhmnc9gvvDVrj0N7CZJWdZ478lyw=)
2: EPJNcfb9BYVxiCOl5XxrpQOfiyc.roa (hash: 3iBYjsoElN4nFr95B9VrvRH80hKHxRpzggq/IbclLdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:14:11:b3:bd:ab:06:d1:55:5b:86:94:eb:2e:ed:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d333f72d9e294543825be63729f8034a4517090
Validity
Not Before: Aug 14 21:01:04 2026 GMT
Not After : Aug 15 21:01:04 2026 GMT
Subject: CN=a07c083028b300059609c51f048e81389ba3d029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2a:0f:68:be:be:27:9b:ab:84:2a:d5:4f:cd:
86:50:d6:ae:d4:dd:89:91:5d:25:41:d0:05:dc:ed:
4f:fe:85:c9:08:8a:08:9a:94:4d:10:48:dc:38:91:
00:43:f0:76:26:c5:8d:b3:3a:16:f8:ba:d4:29:20:
91:29:53:1a:0d:8d:07:5a:8d:5a:c9:f1:f6:0b:79:
e6:10:fa:03:2c:7f:1f:f1:b6:59:b8:0d:2b:e4:b7:
14:63:a8:e7:2a:59:d0:0e:0c:71:1b:92:b2:9f:4c:
c8:40:5e:93:21:29:06:0c:d1:0c:57:91:02:63:83:
7f:96:38:b4:12:0a:a9:b8:9f:d4:21:0e:bb:cd:48:
f8:84:bd:54:f6:b7:65:69:30:a3:05:af:8e:48:28:
52:23:c7:63:b8:80:b8:79:ef:75:a6:b3:98:4f:2c:
26:a6:ec:2d:7c:10:7e:6f:05:99:dc:d1:ee:75:f2:
eb:27:24:d6:98:20:f9:38:ef:3c:7d:4a:c4:64:c2:
e0:ae:3f:36:e5:20:52:24:24:7f:15:36:69:26:b0:
de:cd:2a:16:a9:26:18:17:66:7e:e9:a5:03:d7:cd:
2b:19:c7:bc:3a:c5:dd:c2:f7:13:19:00:55:8b:d6:
c7:78:79:e0:73:b9:c1:18:7e:05:d7:a7:2b:26:f7:
7f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7C:08:30:28:B3:00:05:96:09:C5:1F:04:8E:81:38:9B:A3:D0:29
X509v3 Authority Key Identifier:
keyid:0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:bd:47:c0:96:6b:8d:91:ac:c7:7e:27:6f:2f:7c:b8:df:ba:
39:5b:7b:62:a7:dd:5f:f6:1d:92:5f:f9:52:20:3e:94:21:5a:
35:6f:0f:c3:57:84:56:38:7a:17:ea:a5:bd:55:36:3a:11:3b:
c5:25:2b:c5:b8:72:d5:c3:f6:ca:1d:b8:8d:3d:62:fc:1c:98:
b8:b6:d5:0b:fc:81:2d:03:c0:76:3f:bc:3c:1e:7c:3b:73:1a:
fc:e2:12:53:cd:6c:92:2a:40:f3:27:38:ca:53:a9:b3:78:e4:
33:12:48:c3:f2:3c:5a:3e:d4:7e:2a:a8:08:69:a8:92:d6:b2:
09:01:0e:c4:47:64:62:68:4d:4e:e6:76:ed:7a:7e:6c:db:9b:
17:41:9e:e2:23:b4:45:ce:60:25:37:92:f3:e2:0a:fe:35:01:
ae:41:d8:21:72:b6:a2:92:f8:98:1d:4b:bc:38:d1:db:2b:e8:
e8:79:bd:0b:b8:55:9b:2e:d4:16:0c:fb:ec:33:3a:0e:a0:e5:
73:b7:a7:a0:23:a9:74:8e:a5:e9:b8:e2:9b:e9:f7:f8:3a:26:
61:1a:fd:c8:f6:29:b1:b3:89:b6:b9:93:fa:54:d8:d0:ea:9e:
b2:25:79:dc:03:46:35:49:11:e1:f8:95:60:6a:95:97:ac:53:
0c:d8:9e:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACFBGzvasG0VVbhpTrLu3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMzMzZjcyZDllMjk0NTQzODI1YmU2MzcyOWY4MDM0YTQ1
MTcwOTAwHhcNMjYwODE0MjEwMTA0WhcNMjYwODE1MjEwMTA0WjAzMTEwLwYDVQQD
EyhhMDdjMDgzMDI4YjMwMDA1OTYwOWM1MWYwNDhlODEzODliYTNkMDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCoPaL6+J5urhCrVT82GUNau1N2J
kV0lQdAF3O1P/oXJCIoImpRNEEjcOJEAQ/B2JsWNszoW+LrUKSCRKVMaDY0HWo1a
yfH2C3nmEPoDLH8f8bZZuA0r5LcUY6jnKlnQDgxxG5Kyn0zIQF6TISkGDNEMV5EC
Y4N/lji0EgqpuJ/UIQ67zUj4hL1U9rdlaTCjBa+OSChSI8djuIC4ee91prOYTywm
puwtfBB+bwWZ3NHudfLrJyTWmCD5OO88fUrEZMLgrj825SBSJCR/FTZpJrDezSoW
qSYYF2Z+6aUD180rGce8OsXdwvcTGQBVi9bHeHngc7nBGH4F16crJvd/gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKB8CDAoswAFlgnFHwSOgTibo9ApMB8GA1UdIwQY
MBaAFA0zP3LZ4pRUOCW+Y3KfgDSkUXCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFRNX2N0bmlsRlE0SmI1amNwLUFOS1JSY0pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NWZlYTItYTNkOS00OTJmLThlNDQt
ODk0ZGZhNWRmMDE3LzEvRFRNX2N0bmlsRlE0SmI1amNwLUFOS1JSY0pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC82NWZlYTItYTNkOS00OTJmLThlNDQtODk0ZGZhNWRmMDE3
LzEvRFRNX2N0bmlsRlE0SmI1amNwLUFOS1JSY0pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALb1HwJZr
jZGsx34nby98uN+6OVt7YqfdX/Ydkl/5UiA+lCFaNW8Pw1eEVjh6F+qlvVU2OhE7
xSUrxbhy1cP2yh24jT1i/ByYuLbVC/yBLQPAdj+8PB58O3Ma/OISU81skipA8yc4
ylOps3jkMxJIw/I8Wj7UfiqoCGmoktayCQEOxEdkYmhNTuZ27Xp+bNubF0Ge4iO0
Rc5gJTeS8+IK/jUBrkHYIXK2opL4mB1LvDjR2yvo6Hm9C7hVmy7UFgz77DM6DqDl
c7enoCOpdI6l6bjim+n3+DomYRr9yPYpsbOJtrmT+lTY0OqesiV53ANGNUkR4fiV
YGqVl6xTDNieag==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:22:12 2026 by rpki-client