Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
File: DudNGMQEmi2bgSwqWFXP63Wvpmc.mft (raw, json)
Hash identifier: 4o2dKh/fIC/bprAVF6cF4y0BpmB3cEe+ex3GH0QHJ9w=
Subject key identifier: FC:23:DA:5C:60:3E:90:FF:A7:60:7A:07:6B:50:7C:D4:EE:92:5E:C2
Authority key identifier: 0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
Certificate issuer: /CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Certificate serial: 01A1C556331523304D43E474FC0488CB78A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
Manifest number: 1AE6
Signing time: Tue 10 Nov 2026 12:02:03 +0000
Manifest this update: Tue 10 Nov 2026 12:02:03 +0000
Manifest next update: Wed 11 Nov 2026 12:02:03 +0000
Files and hashes: 1: DudNGMQEmi2bgSwqWFXP63Wvpmc.crl (hash: vCTR2lLt6VaJJkx8gY0R6ClKxH38HXo/OxawegQk+f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:56:33:15:23:30:4d:43:e4:74:fc:04:88:cb:78:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Validity
Not Before: Nov 10 12:02:03 2026 GMT
Not After : Nov 11 12:02:03 2026 GMT
Subject: CN=fc23da5c603e90ffa7607a076b507cd4ee925ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cc:c7:90:60:a4:8a:92:47:25:3f:dd:ff:30:
2c:c9:63:dc:6c:6d:5c:11:7c:2f:35:95:30:eb:e2:
d9:1f:c0:de:71:ec:ac:2c:cb:4b:3a:5b:72:5d:bf:
ab:13:22:24:76:35:4d:00:75:0b:78:27:68:93:47:
a6:1d:51:a8:d8:59:9e:ba:4d:3f:c4:53:e6:bb:b1:
bc:c6:90:b5:52:56:40:2e:9d:f8:d2:f7:22:01:77:
8f:75:02:f6:c8:36:57:15:20:36:78:6a:3f:59:83:
7e:c2:c1:ab:30:41:40:68:7c:88:44:38:29:09:c2:
bb:76:0d:79:35:e6:2c:b4:bf:8d:61:ce:5e:a8:0b:
71:cf:55:d6:ad:ab:bf:b8:09:4e:1d:31:ef:e6:85:
be:45:dd:ae:60:9e:a7:ee:e5:b8:eb:5c:68:a2:d8:
76:3c:a2:10:e8:72:99:82:52:a4:a3:19:e5:2b:ca:
b4:91:b9:ed:31:d0:51:9e:8d:b5:b0:be:10:d6:cd:
54:78:8f:94:e3:8a:ac:6b:d8:c5:fe:50:36:9c:9a:
d6:1f:dd:78:63:52:72:45:38:0e:e2:68:f7:a7:4b:
62:06:12:ab:2a:35:3e:98:1c:8c:0c:b5:22:3f:cf:
0a:fa:21:98:88:ef:80:b3:f5:91:48:65:16:10:c0:
b1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:23:DA:5C:60:3E:90:FF:A7:60:7A:07:6B:50:7C:D4:EE:92:5E:C2
X509v3 Authority Key Identifier:
keyid:0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:15:26:68:d7:17:26:5f:36:5d:cc:3c:80:7f:3b:34:72:67:
b5:95:3c:ca:fb:9b:1d:11:e7:0a:18:80:cd:34:76:75:85:98:
6b:8c:58:58:40:b3:94:05:76:c9:d2:51:f1:f7:e7:e3:ab:57:
fd:7a:f7:17:ae:41:63:34:01:f7:84:fb:5d:8e:1c:0a:8e:bf:
b8:2f:4a:01:97:0e:f7:5f:95:58:7f:34:06:d7:a7:bf:67:00:
49:7f:03:59:34:f0:52:50:f3:a6:0a:db:26:3c:7d:db:f2:01:
28:38:ad:8b:ac:16:f4:01:bc:c5:44:8d:a6:2f:7a:a6:57:7f:
1c:e8:80:f2:c5:e7:ed:e8:c6:fd:8f:16:de:71:f6:9e:85:bd:
78:e1:d2:6c:2c:c6:10:12:f5:52:a0:f2:15:fc:ba:6e:cd:d8:
a5:bf:9b:5f:f2:75:4a:0e:10:fd:1f:bf:89:7d:b1:31:8a:d6:
c0:19:9e:34:17:40:03:c8:78:8d:64:f8:02:2d:60:50:82:11:
5d:be:e1:b2:4a:a9:df:4b:c0:a8:f3:72:bd:dd:33:7d:b7:4b:
b2:e6:36:77:ea:52:3e:dd:b1:d3:34:50:dd:73:30:a8:21:92:
b6:15:d6:d1:5d:59:1c:06:7a:d8:cf:4f:f0:0f:96:11:1a:a3:
bf:2b:44:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 16:17:57 2026 by rpki-client