Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
File: DudNGMQEmi2bgSwqWFXP63Wvpmc.mft (raw, json)
Hash identifier: PmHQcz39bz3V8kgtFWy0V/Ch06OkEb9/xzlDS268+B8=
Subject key identifier: 20:B0:F4:67:F0:A5:5F:A4:FD:A9:3A:47:91:04:85:F3:21:59:2C:84
Authority key identifier: 0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
Certificate issuer: /CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Certificate serial: 019FA89A00ADE734F520D46C9601A0C0C803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
Manifest number: 19CE
Signing time: Tue 28 Jul 2026 12:01:32 +0000
Manifest this update: Tue 28 Jul 2026 12:01:32 +0000
Manifest next update: Wed 29 Jul 2026 12:01:32 +0000
Files and hashes: 1: DudNGMQEmi2bgSwqWFXP63Wvpmc.crl (hash: koe+yPpsxlEZ6IJc7OqOMKrPAnCSyQlgD18xvflgvgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:00:ad:e7:34:f5:20:d4:6c:96:01:a0:c0:c8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Validity
Not Before: Jul 28 12:01:32 2026 GMT
Not After : Jul 29 12:01:32 2026 GMT
Subject: CN=20b0f467f0a55fa4fda93a47910485f321592c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:94:91:d3:28:c7:e0:ed:da:6d:37:43:f2:7d:
b2:d1:12:45:d4:60:68:f7:31:41:9d:bd:5a:7b:5e:
bc:ab:bb:f3:39:3c:15:f8:d0:90:46:5c:4d:23:68:
06:59:63:bd:f4:b8:86:d4:2f:23:b7:70:9e:6f:c6:
fd:69:d2:a7:03:96:d0:a9:19:26:40:3c:70:45:9a:
70:b9:39:92:60:99:9e:6f:a9:f4:4d:97:6e:af:68:
e8:c6:64:66:23:ce:d6:8e:23:15:00:58:09:6b:b5:
0b:04:c6:e1:b9:27:b6:6a:f4:de:a3:17:86:8a:ca:
1d:33:14:72:8f:43:07:d7:49:4b:70:6d:c7:24:ef:
73:2c:67:ba:7e:16:c3:5c:27:93:3b:ee:7e:60:b2:
7a:7f:14:4e:4e:d6:b1:04:06:e2:70:45:9e:7c:26:
4f:d5:80:a1:2a:66:61:56:bc:9f:51:15:5f:c7:0f:
f0:bb:1a:d8:a4:e6:56:71:02:89:07:a3:d1:9d:6c:
5d:a0:dc:86:ac:98:ea:d6:b3:30:d5:bc:82:8a:f5:
b4:44:b3:e5:bb:8e:80:ad:da:a1:72:d2:ee:d1:25:
18:b4:b6:64:dc:8c:1d:0f:39:7e:84:04:fc:5c:d9:
74:c3:27:67:c9:f1:9a:ed:97:70:31:81:6c:76:f7:
51:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B0:F4:67:F0:A5:5F:A4:FD:A9:3A:47:91:04:85:F3:21:59:2C:84
X509v3 Authority Key Identifier:
keyid:0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e2:93:5b:98:ad:13:a4:52:4a:5f:e2:15:61:12:1d:be:1c:
58:a5:42:b9:47:d4:a4:77:21:e5:99:43:15:7d:b2:c8:ef:2b:
5d:cc:4f:38:16:cf:b3:c9:52:f5:dc:25:21:76:43:56:c5:01:
ee:0d:8f:3e:7a:41:c1:d3:d6:8b:e8:8a:9c:4f:73:46:cf:d5:
dd:2f:d2:3c:88:2b:6c:ce:a6:02:a5:73:62:84:d0:0d:cb:b9:
c9:9d:e7:ca:01:e3:6f:3b:05:6c:17:54:26:56:b6:82:a3:a2:
1c:a0:3a:f2:a2:07:bb:69:6b:9a:e6:93:f4:06:c5:f4:db:71:
a6:1a:32:74:66:d5:18:d4:09:e2:98:d1:52:84:ee:9b:c4:f9:
2e:d5:d4:be:49:2c:27:49:51:83:cd:82:92:7c:f8:10:6e:81:
8e:4d:cc:09:6c:db:96:1a:97:bf:dd:79:a2:4f:43:9f:04:03:
c5:ae:49:ec:ad:71:cc:30:b4:86:d4:b0:95:1d:23:fa:26:01:
fa:d8:c8:33:0e:a1:e6:0c:a7:05:56:7e:0f:0d:85:2b:99:6c:
9e:e8:7d:5f:bb:1a:78:9d:df:ae:2a:71:a0:e6:cb:86:c4:24:
00:df:47:cc:11:f2:8e:21:37:a9:3b:79:e8:ca:fb:96:d4:56:
e1:61:82:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:34 2026 by rpki-client