Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
File: DudNGMQEmi2bgSwqWFXP63Wvpmc.mft (raw, json)
Hash identifier: fYK3VIvk6xIzEAkvtYbFdi889WN4O5ENRrNQeTk3J24=
Subject key identifier: 93:02:E1:94:DA:49:D7:B6:35:B4:12:FF:02:2D:A0:B9:AA:54:71:3C
Authority key identifier: 0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
Certificate issuer: /CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Certificate serial: 019D38D3A58FA310A2BAF611AF8C3E1E5C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 09:01:27 +0000
Manifest this update: Sun 29 Mar 2026 09:01:27 +0000
Manifest next update: Mon 30 Mar 2026 09:01:27 +0000
Files and hashes: 1: DudNGMQEmi2bgSwqWFXP63Wvpmc.crl (hash: ugFlCf4wSscqtbCYJZfamGIxz2j2M1U2osXYVoCKuwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a5:8f:a3:10:a2:ba:f6:11:af:8c:3e:1e:5c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Validity
Not Before: Mar 29 09:01:27 2026 GMT
Not After : Mar 30 09:01:27 2026 GMT
Subject: CN=9302e194da49d7b635b412ff022da0b9aa54713c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2b:f2:59:62:3b:de:f9:e4:29:5d:5c:7d:4c:
87:a1:c4:38:0b:83:2a:a6:74:08:ef:f0:8f:22:30:
05:6a:a0:43:1d:9f:6d:de:62:b6:0d:85:da:51:ed:
98:68:64:06:46:94:6c:14:9a:60:f7:a5:d2:25:42:
92:4c:43:60:c5:51:e7:b7:77:4d:94:e5:ec:01:06:
13:eb:45:c3:6a:9a:e2:3b:b9:54:6a:97:2b:cd:f4:
a2:c1:95:a3:57:60:86:06:33:80:8e:1b:5a:9a:ee:
d4:0f:d5:61:42:ca:62:6e:a4:88:ec:35:3b:2f:bb:
ab:6d:a7:0a:2f:fb:26:b4:5b:ba:04:34:bf:78:e1:
4a:08:b6:bc:fa:63:24:89:a0:64:6e:c7:f6:c2:fe:
e9:06:08:84:50:d0:6a:2f:76:5c:9c:38:1f:fd:d0:
28:e1:7b:44:07:f2:b5:02:85:18:b3:5b:34:89:76:
1c:13:43:f7:24:e4:c1:a0:bc:ae:92:d5:61:36:ee:
ea:f4:1a:17:78:04:28:ff:9a:fe:e4:21:b1:2d:2a:
df:85:98:c2:97:99:79:fe:7f:27:0a:83:20:69:85:
5e:4d:3d:e7:1c:c4:91:eb:8a:60:81:bb:30:e5:95:
05:dd:2b:f4:93:06:16:d8:35:5e:ce:cb:31:51:8c:
01:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:02:E1:94:DA:49:D7:B6:35:B4:12:FF:02:2D:A0:B9:AA:54:71:3C
X509v3 Authority Key Identifier:
keyid:0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:db:94:33:94:63:a7:2a:9b:bb:71:58:d9:6f:30:41:d0:43:
f8:89:58:95:0e:0a:3e:1f:15:e4:da:c1:44:f1:55:e6:25:d1:
4d:36:a0:11:ff:ea:5b:bd:07:c5:e9:f4:b9:bc:3d:de:39:5b:
6c:22:1f:b8:43:c5:25:36:16:88:12:6f:96:43:b0:91:68:cf:
6b:4c:d1:b0:dd:e4:74:8c:b5:ea:f8:5d:7d:03:89:a8:54:9c:
47:c6:54:6a:38:31:90:9d:9a:a9:49:dd:fe:eb:d9:85:6a:61:
b9:1e:2d:b6:d6:ed:0d:42:f8:8e:10:06:05:37:69:37:56:21:
55:65:90:f7:78:69:f5:b7:d2:d7:92:31:cb:b6:1b:6d:b4:55:
78:c1:20:36:07:19:4b:09:58:2a:74:dd:c6:59:7c:5d:9c:12:
cf:71:41:fa:22:0b:9b:0f:35:c3:a7:61:e6:4f:c7:d7:ee:17:
86:c8:1c:95:db:9d:6c:33:3b:70:a0:d2:17:4e:e7:52:9a:96:
48:b9:aa:8a:34:ef:5f:e4:03:dc:ba:51:22:1a:cc:76:c1:72:
55:64:34:75:fe:14:33:c0:3b:dc:85:76:c5:e7:21:38:62:5f:
f1:44:f2:d5:cc:87:48:c6:68:75:36:cc:fa:1f:23:f3:43:d0:
68:ee:3d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:40 2026 by rpki-client