Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
File: DudNGMQEmi2bgSwqWFXP63Wvpmc.mft (raw, json)
Hash identifier: NMYhkMjM+T17CwJsy5T6P98WrXoqZCuR0BnGvJ+no1I=
Subject key identifier: 93:41:E8:5A:59:AA:D4:82:50:93:8A:7E:67:B3:7A:0E:25:BD:35:1C
Authority key identifier: 0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
Certificate issuer: /CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Certificate serial: 01A0C28E0D98D233EE6835C60882FA8062CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
Manifest number: 1A60
Signing time: Mon 21 Sep 2026 06:01:24 +0000
Manifest this update: Mon 21 Sep 2026 06:01:24 +0000
Manifest next update: Tue 22 Sep 2026 06:01:24 +0000
Files and hashes: 1: DudNGMQEmi2bgSwqWFXP63Wvpmc.crl (hash: 75+f5hjau8NH7Rm3d/eHVBVF4EUQTkpQjUS8SHWxZLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8e:0d:98:d2:33:ee:68:35:c6:08:82:fa:80:62:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Validity
Not Before: Sep 21 06:01:24 2026 GMT
Not After : Sep 22 06:01:24 2026 GMT
Subject: CN=9341e85a59aad48250938a7e67b37a0e25bd351c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f5:21:c1:be:23:6d:df:89:cd:bb:2f:03:dc:
48:83:e4:ce:3f:2f:6e:c2:02:fc:0b:6a:2d:d5:73:
ff:c7:7f:1f:62:d2:ec:f5:a7:16:f2:af:51:9d:54:
10:aa:53:ee:4c:3a:e8:26:e1:af:d9:dd:21:6d:ac:
1a:ed:e4:dc:a1:7b:36:b3:f6:c2:d2:7c:bb:22:1e:
ed:f8:b5:06:3d:d6:ec:03:91:e0:de:68:1f:09:ad:
9a:a7:4e:c6:0d:f4:3c:2b:b3:1b:a2:45:97:05:b2:
75:4d:c9:8d:7d:4b:8b:43:d5:52:0b:b4:a2:9b:1a:
89:4a:09:ad:29:e6:2f:a3:69:91:f5:45:21:d3:82:
37:75:5a:f7:d3:75:0a:4f:34:6f:0f:30:ee:6b:39:
21:80:40:4a:51:e1:51:5d:64:0a:9f:c3:de:54:61:
8a:51:cf:3c:5d:a1:8a:16:e5:d2:84:23:4b:f1:e7:
cb:5a:0d:28:4a:1a:3e:84:1f:d9:be:e8:d4:f0:99:
db:53:13:b1:eb:95:8b:e9:d5:52:2f:fa:38:41:90:
0b:37:16:51:09:8b:f6:9d:5b:84:cc:e3:1a:49:2d:
a8:d7:65:15:81:cb:b4:7a:f8:5b:21:98:7c:18:ca:
9a:b9:9f:ea:12:11:0e:d8:ae:be:d6:d1:50:45:ad:
c1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:41:E8:5A:59:AA:D4:82:50:93:8A:7E:67:B3:7A:0E:25:BD:35:1C
X509v3 Authority Key Identifier:
keyid:0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:91:59:24:48:e0:79:c5:46:80:a4:84:03:b6:49:d7:5b:41:
f2:5e:4d:2a:a9:21:13:ef:fd:24:a5:51:af:91:fc:2d:51:a6:
47:72:21:9e:06:49:50:04:22:02:bf:1f:19:77:6c:50:a1:3b:
95:75:d3:ec:95:8d:e3:50:4c:d7:55:bb:bd:17:d6:f5:70:c6:
f6:cb:a5:b9:9b:92:a6:6c:53:18:51:46:52:51:39:c5:1b:31:
74:82:72:68:8a:e3:26:92:cc:00:71:c6:2e:c0:96:3f:e1:91:
48:e4:97:52:b2:c5:3d:62:be:5f:81:63:ad:d0:05:39:65:d6:
46:58:fd:fb:44:d0:8e:83:64:d9:d9:39:a0:a7:59:ec:2c:0d:
06:93:21:7a:b4:f2:f7:85:13:10:b7:8d:6c:ba:34:5d:e4:eb:
dc:77:de:7f:17:99:04:d9:04:cd:b9:f1:19:9e:30:28:35:18:
d9:dd:25:38:2f:1a:84:08:28:fb:0f:91:10:1d:6b:aa:cb:3b:
8f:28:be:b9:d6:e6:a2:95:57:64:81:17:e7:99:7c:da:af:c5:
47:f2:11:13:03:84:b3:53:29:9f:b0:63:5e:bb:ed:5a:5a:5f:
bd:b0:58:c5:15:ff:55:60:1a:78:12:d1:52:9b:1f:f9:2d:bd:
3e:15:9d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:31:58 2026 by rpki-client