Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
File: DudNGMQEmi2bgSwqWFXP63Wvpmc.mft (raw, json)
Hash identifier: i/sRHZMUeQsr/ndD7ypOtYqaQejNJs7Epc1uja9ul58=
Subject key identifier: FF:1F:B9:05:DD:80:68:32:7C:A0:98:8B:BF:FD:02:2A:9E:4F:DA:E5
Authority key identifier: 0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
Certificate issuer: /CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Certificate serial: 01A0016EFC623B5AF11A8F846BD0C077A1C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
Manifest number: 19FC
Signing time: Fri 14 Aug 2026 18:00:45 +0000
Manifest this update: Fri 14 Aug 2026 18:00:45 +0000
Manifest next update: Sat 15 Aug 2026 18:00:45 +0000
Files and hashes: 1: DudNGMQEmi2bgSwqWFXP63Wvpmc.crl (hash: TTSqBUKOUu4pO5gOyDATqT7gbTz1yc3mvGJ6lpgTvb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6e:fc:62:3b:5a:f1:1a:8f:84:6b:d0:c0:77:a1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Validity
Not Before: Aug 14 18:00:45 2026 GMT
Not After : Aug 15 18:00:45 2026 GMT
Subject: CN=ff1fb905dd8068327ca0988bbffd022a9e4fdae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:69:11:a4:eb:34:8c:4b:dc:72:8c:4d:e5:
f6:93:50:ac:f7:0f:ec:36:2e:cf:e0:11:f2:3f:ff:
65:79:d9:78:ab:e5:3e:d6:7e:d0:67:71:ac:97:eb:
e2:8c:92:e1:99:dd:88:91:9e:d1:03:59:8e:dc:27:
88:af:dc:b4:ab:33:d5:09:f8:52:06:46:d7:36:81:
1b:c0:75:9f:ee:c7:8a:9c:bd:67:39:62:09:e9:fe:
d9:1a:02:e5:ec:35:fc:57:61:22:1e:e3:85:cf:48:
2b:76:81:74:9b:ae:2f:71:8f:d7:71:3a:b4:b8:d0:
8e:49:54:88:50:d8:90:2f:7a:78:4f:15:33:5b:fa:
73:f1:ed:9c:a6:fb:87:b4:01:32:39:a5:63:5c:e1:
8e:b5:c2:98:6c:e4:c1:26:af:f6:a2:d5:96:5b:1c:
a4:f4:2c:f2:ed:d3:b5:90:a7:56:b6:e3:ab:69:ba:
59:99:7b:70:98:e1:64:e8:0f:57:75:a3:c2:2f:b3:
3b:ef:78:c5:91:de:06:52:df:ea:bf:22:e6:cc:9e:
77:d7:da:91:30:56:d1:e5:a5:bf:5e:d1:cf:28:09:
44:4b:f9:e6:8a:cb:c2:fc:b9:99:c6:ca:e8:05:13:
dc:4d:1d:23:f3:bb:77:0e:66:63:c7:7a:2e:b8:52:
c4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1F:B9:05:DD:80:68:32:7C:A0:98:8B:BF:FD:02:2A:9E:4F:DA:E5
X509v3 Authority Key Identifier:
keyid:0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e3:d7:d1:80:8c:8f:6a:64:ec:a7:e8:4b:8b:11:9f:fd:ff:
5d:ea:0f:aa:81:38:cc:b9:71:3f:3c:7d:62:1f:8b:82:be:b1:
79:f0:33:db:fd:3c:e9:d7:89:ef:08:e3:08:06:b1:86:76:28:
e7:3a:25:d0:fe:ec:a9:d2:de:d5:5f:4b:a9:e2:71:e0:46:1c:
65:60:43:8c:0b:9d:6b:8e:c2:61:bb:44:e3:8a:9d:bc:e3:17:
85:76:56:ab:db:94:c7:15:64:12:ca:62:cd:34:72:66:9d:65:
0a:26:b2:a8:c9:04:c6:7f:84:d5:5b:61:ab:7a:c5:11:ba:48:
2b:b6:24:b1:62:4c:b4:c7:7c:95:68:a8:0a:4b:fe:a1:eb:ca:
ae:86:e3:2e:ab:3e:a9:3f:9d:a2:75:d3:39:cf:4c:ef:8c:d4:
25:ed:aa:1a:be:43:b8:92:1e:32:8d:47:c5:c7:98:f8:d4:bd:
71:92:f2:a9:ae:1f:1e:61:1e:88:7e:2d:7d:42:f1:ab:8a:c1:
73:e0:44:28:ba:6b:b4:63:2d:55:48:b5:e4:40:f0:fa:d6:7d:
ba:04:61:e3:4d:73:3f:47:36:00:23:ae:c2:b3:9c:16:c8:22:
d3:d5:06:11:6c:9b:39:3e:e1:b7:c1:23:28:36:7c:86:4a:bf:
e8:fb:e1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:03 2026 by rpki-client