Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
File: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft (raw, json)
Hash identifier: Bu4F1ZwFRfptKgKdosvERlconTIK+cpRSHw++TuUaR4=
Subject key identifier: 19:8E:55:B8:C8:D4:50:7C:47:B5:62:66:9A:D7:71:15:48:FB:97:01
Authority key identifier: 0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
Certificate issuer: /CN=0d333f72d9e294543825be63729f8034a4517090
Certificate serial: 01A13CDC3BC19ABD000988B15A72F4BD9368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
Manifest number: 0E9A
Signing time: Thu 15 Oct 2026 00:00:28 +0000
Manifest this update: Thu 15 Oct 2026 00:00:28 +0000
Manifest next update: Fri 16 Oct 2026 00:00:28 +0000
Files and hashes: 1: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl (hash: NFBd+INAeE0wMW0RpKulKCog1AY1jvNtuKYBNWu2sEI=)
2: EPJNcfb9BYVxiCOl5XxrpQOfiyc.roa (hash: 3iBYjsoElN4nFr95B9VrvRH80hKHxRpzggq/IbclLdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 00:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:3b:c1:9a:bd:00:09:88:b1:5a:72:f4:bd:93:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d333f72d9e294543825be63729f8034a4517090
Validity
Not Before: Oct 15 00:00:28 2026 GMT
Not After : Oct 16 00:00:28 2026 GMT
Subject: CN=198e55b8c8d4507c47b562669ad7711548fb9701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:60:da:00:ef:55:53:91:4e:6a:71:a8:2e:45:
a1:7b:b3:d3:f4:9e:51:d0:4e:49:23:68:07:da:75:
95:5a:c8:fe:6e:5c:c6:59:31:7a:33:3f:84:af:93:
fe:3f:d5:aa:6f:a1:bd:cb:f0:e7:57:93:a3:e6:13:
8b:d3:23:0c:33:4f:88:06:13:35:38:06:3d:d2:cb:
8c:1f:f1:24:ff:06:90:5a:99:71:a5:09:79:4a:d6:
6c:89:9c:08:87:fe:ad:92:a3:bf:32:0e:c4:f7:81:
de:c8:89:9c:f3:77:01:b2:44:c1:ea:de:d9:a3:d7:
f4:1c:3e:ab:76:71:c5:d6:c9:54:f1:bb:6b:41:26:
65:ae:eb:47:14:bb:79:f2:37:92:fe:23:70:b7:2f:
94:be:65:44:91:9f:31:d4:e6:44:63:26:6a:84:ac:
d2:cc:f3:0a:ea:e2:b6:a6:b9:43:b0:f0:7e:aa:5c:
f4:3c:d2:d0:9e:ee:cd:d5:8b:53:98:24:11:55:ea:
d0:63:f2:57:c3:40:99:ca:cb:0a:76:b8:ca:6e:5f:
c1:9d:06:78:27:94:28:00:59:90:02:93:f0:27:58:
da:9f:da:ef:5e:f2:89:0b:22:42:08:5c:13:af:61:
74:59:09:5d:72:cc:e1:e4:09:dd:6a:ec:23:9b:14:
dc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8E:55:B8:C8:D4:50:7C:47:B5:62:66:9A:D7:71:15:48:FB:97:01
X509v3 Authority Key Identifier:
keyid:0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fa:28:4a:e3:e2:ae:bf:e5:16:ac:7b:78:56:b6:0c:60:ad:
13:18:df:71:11:27:72:31:83:5f:64:13:a9:78:1b:c9:e4:7d:
c2:bb:08:cf:71:b7:42:bf:af:67:76:13:1a:32:bd:94:52:d3:
9f:94:d2:b2:83:82:46:fd:73:8a:87:ef:01:10:1e:72:21:d0:
74:42:f8:26:e9:4a:6d:4c:28:ee:28:6b:e6:9b:aa:61:0e:1a:
8f:5a:c4:c6:6c:c1:2d:97:6e:47:eb:45:f1:91:5b:b6:be:3b:
a1:30:36:a5:63:03:66:c2:a4:c1:f7:90:8d:53:0c:e0:51:cb:
d5:35:16:1d:51:ec:74:70:3c:a2:95:84:73:30:77:02:9f:8a:
ee:1c:0b:39:75:5b:a0:f9:b8:68:33:41:0a:e4:ba:75:3b:eb:
40:91:25:78:27:03:96:0d:e1:73:23:69:97:61:7c:f8:76:61:
03:e8:30:f5:e4:a5:bf:86:c6:ec:e3:f4:5a:04:2b:e4:cf:ff:
48:70:3c:65:a2:91:ab:60:a8:0f:e5:0a:97:c9:7d:2b:0f:ce:
36:91:eb:6a:52:54:5f:ab:d5:89:b9:5b:72:9a:84:f0:47:21:
2e:73:39:36:eb:00:2b:e9:44:69:b2:74:35:b2:85:4c:ce:09:
55:62:65:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:35 2026 by rpki-client