Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
File: DudNGMQEmi2bgSwqWFXP63Wvpmc.mft (raw, json)
Hash identifier: 2o+1CC+sXTQ/n3umCFqs+eAWJy41iptAVSfA0mCYESc=
Subject key identifier: 5F:C3:9E:42:25:DF:EF:67:E3:48:8D:81:CA:39:79:AC:13:F1:9E:1E
Authority key identifier: 0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
Certificate issuer: /CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Certificate serial: 01A14014EA58DF4F85B13A0E4FF0B3F05A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
Manifest number: 1AA1
Signing time: Thu 15 Oct 2026 15:01:14 +0000
Manifest this update: Thu 15 Oct 2026 15:01:14 +0000
Manifest next update: Fri 16 Oct 2026 15:01:14 +0000
Files and hashes: 1: DudNGMQEmi2bgSwqWFXP63Wvpmc.crl (hash: BRxtPkb8delV+4Bt0RXHjY7jiwQHPB4zyzgeBgs9/ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:14:ea:58:df:4f:85:b1:3a:0e:4f:f0:b3:f0:5a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Validity
Not Before: Oct 15 15:01:14 2026 GMT
Not After : Oct 16 15:01:14 2026 GMT
Subject: CN=5fc39e4225dfef67e3488d81ca3979ac13f19e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:96:08:b7:89:53:09:b6:25:f3:19:fd:b8:
ad:d6:74:d6:62:a7:8b:93:55:5d:7c:24:6b:1c:cb:
17:be:7c:07:af:f7:32:f6:ce:25:d7:ad:2f:44:2e:
de:ab:9a:02:77:64:fa:94:5e:71:ed:30:9c:70:0b:
5d:5b:3c:82:2b:81:02:a3:2f:79:f4:3b:69:28:5a:
37:85:d6:60:1f:29:26:c4:eb:ad:a5:99:9f:e5:48:
18:68:c7:55:03:f1:38:76:04:38:3e:ed:34:02:a7:
ba:a8:ed:55:c0:65:be:fc:ad:4c:af:79:12:fd:76:
42:b8:8d:99:c2:82:59:56:93:3b:f0:62:6f:0e:cf:
08:5e:df:23:c0:85:3b:c4:ac:7a:26:ea:01:ed:ee:
66:53:58:ae:14:7c:b7:b5:ad:2b:42:dd:f1:48:80:
7e:ee:8b:32:bd:33:22:01:54:b3:dc:50:83:f1:39:
43:99:1c:a8:29:7e:a1:30:97:e3:e0:f7:02:08:cb:
f8:27:67:2f:a3:aa:8f:31:58:99:44:1c:5c:69:ef:
28:2e:9f:a9:d3:b6:3d:09:7d:f9:b3:4f:0c:b6:19:
67:3b:0f:f6:72:e5:41:a8:1d:c8:b0:6e:aa:24:52:
f0:de:4a:8f:6e:e1:ea:7f:6f:3c:dd:2e:8a:e6:0a:
f8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C3:9E:42:25:DF:EF:67:E3:48:8D:81:CA:39:79:AC:13:F1:9E:1E
X509v3 Authority Key Identifier:
keyid:0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:46:53:15:67:ca:c3:71:44:05:b5:6e:d5:0f:23:b4:0b:88:
e6:c4:8c:9a:99:88:a8:bd:23:bc:fa:e9:62:8a:fd:d2:c0:7b:
5c:99:f8:f3:e1:d5:f2:69:f3:b3:29:a9:ea:ab:07:d7:6e:86:
75:a9:21:5c:66:3c:02:a5:17:b3:a1:84:1f:a6:b1:0c:cb:80:
ba:f8:f0:12:51:55:6d:65:24:c3:bf:9b:f2:32:50:83:52:fe:
a5:a1:47:5e:6c:d6:9a:c9:e3:e3:a5:f2:54:cd:f7:3b:1b:09:
bd:9d:3f:10:6f:25:1a:32:24:4a:02:39:17:f1:0a:be:c7:c5:
07:a5:c8:30:79:7a:cc:5a:0c:d7:c9:53:e3:df:cd:81:67:79:
c4:09:83:7d:db:38:4a:c6:22:55:4e:c3:2a:ff:c5:ba:af:25:
a0:e5:e7:19:ea:9e:b2:f0:f5:7c:b5:fa:4f:ec:a3:a5:70:fc:
14:a5:88:0c:2d:57:cf:50:7f:0e:cd:5f:9a:f9:36:3b:6d:50:
7a:7e:86:c2:20:b7:70:62:f0:e7:94:12:d7:e9:91:b4:f7:45:
61:24:13:99:aa:44:6b:a0:79:39:5d:3c:dd:41:3f:37:57:d2:
32:0a:0c:f8:05:cf:c5:cb:e4:eb:ba:fc:a6:d1:46:d6:3c:3f:
8d:92:2e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:22:11 2026 by rpki-client