Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
File: DudNGMQEmi2bgSwqWFXP63Wvpmc.mft (raw, json)
Hash identifier: VG47SJf4MpLc6czZ2X8QYN8DsAxg3lsjHnxeAURPyWg=
Subject key identifier: AE:94:F3:45:4A:EB:F1:E5:02:DE:8E:76:67:66:D3:CD:02:31:67:AC
Authority key identifier: 0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
Certificate issuer: /CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Certificate serial: 019CABDA0447C0200D7908D0A4095B86F16E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
Manifest number: 1842
Signing time: Mon 02 Mar 2026 00:01:57 +0000
Manifest this update: Mon 02 Mar 2026 00:01:57 +0000
Manifest next update: Tue 03 Mar 2026 00:01:57 +0000
Files and hashes: 1: DudNGMQEmi2bgSwqWFXP63Wvpmc.crl (hash: K4cbMzy2/oLcTpbQQzspj4SM3fejXTY30MxHMisVRqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:04:47:c0:20:0d:79:08:d0:a4:09:5b:86:f1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Validity
Not Before: Mar 2 00:01:57 2026 GMT
Not After : Mar 3 00:01:57 2026 GMT
Subject: CN=ae94f3454aebf1e502de8e766766d3cd023167ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cf:07:c2:fe:63:4a:ab:0a:6e:47:ca:81:9d:
d4:b1:01:4e:ef:4a:83:6d:3e:68:82:bc:cc:21:13:
f6:73:da:dc:11:0e:70:e3:92:6a:10:7e:e4:2e:af:
04:11:dd:a3:47:2d:6c:35:08:19:74:2d:47:96:d1:
be:fc:66:ed:e0:7f:8d:4a:ee:aa:04:37:3f:a7:79:
2f:ef:79:ef:0c:cc:88:83:fb:bf:ad:89:b4:12:b0:
c4:4e:c6:96:7c:1d:87:c6:3d:c5:2b:a4:e2:23:ec:
ff:19:c0:dd:14:27:fa:05:48:af:a0:cd:10:4a:53:
76:2b:65:15:9c:74:16:97:a5:69:bb:30:63:c6:3f:
d1:ba:1a:be:1e:8c:56:05:e6:5b:44:d3:cd:ce:c7:
30:71:ae:44:c2:28:84:bb:d9:d4:ba:ea:07:c5:31:
78:50:eb:89:72:6b:8d:d6:84:8c:a8:83:1c:1e:a2:
50:47:c1:b0:37:04:af:42:76:16:1f:e8:49:a1:f4:
7c:09:7d:80:9c:1d:36:fa:bb:94:5e:a8:c9:51:f6:
62:d8:fe:e7:e9:5a:58:89:86:91:2e:a5:be:da:c4:
32:86:73:e3:ae:f5:43:29:34:9d:2a:c4:c3:94:ba:
cd:cc:5f:8e:28:fc:76:bb:b3:3f:e0:c8:bf:38:66:
d6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:94:F3:45:4A:EB:F1:E5:02:DE:8E:76:67:66:D3:CD:02:31:67:AC
X509v3 Authority Key Identifier:
keyid:0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f5:ea:db:57:04:a8:ad:60:65:ec:37:e8:39:f8:70:cc:67:
ed:ce:46:82:c1:63:f9:21:b7:31:da:80:06:c6:81:83:e5:24:
04:07:95:b5:43:00:71:f4:85:0f:e4:04:22:fa:9a:43:b9:ff:
a1:87:bc:f0:52:08:2b:c8:a7:98:31:b7:c4:f0:29:1b:2e:cb:
2c:d1:a5:5a:33:b3:c6:e6:a0:4c:ff:13:95:e7:27:52:d4:45:
00:e8:f7:90:57:33:d9:32:d9:f4:e5:b2:cb:21:d0:41:c1:9e:
9a:b7:61:cf:78:01:a4:a7:d9:b3:c9:73:86:70:80:3c:9b:b5:
72:38:4e:f7:67:41:15:55:cf:ea:51:a0:ce:fc:fb:68:ea:99:
d3:cf:83:06:01:23:b4:69:ce:58:1c:95:65:66:2d:9b:b9:40:
55:32:16:85:45:9a:8f:1a:e8:9d:8d:c8:5c:c2:90:23:e6:ee:
89:35:a1:ca:4c:f7:ac:b0:0e:e8:b6:fd:40:b4:7f:69:fb:3a:
47:bb:4b:80:62:b0:15:b2:89:ef:91:63:5c:e4:80:30:95:88:
21:2d:5a:41:40:b4:0a:e0:0e:45:08:19:82:35:6b:d3:21:f4:
0b:8b:dd:59:f8:2a:24:77:9b:09:0f:f6:e4:0e:5b:54:78:aa:
13:6f:f5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:49:32 2026 by rpki-client