Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
File: DudNGMQEmi2bgSwqWFXP63Wvpmc.mft (raw, json)
Hash identifier: M/NKfr3SUWu4HUUnItxgFvhvY2WXzPj5iQD0jtsentE=
Subject key identifier: 36:66:C8:2D:C7:3E:9C:80:DC:54:BD:4D:E5:1D:6C:D7:17:95:B8:D5
Authority key identifier: 0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
Certificate issuer: /CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Certificate serial: 019D277259092D96E9076ABD0682471A1C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 00:01:38 +0000
Manifest this update: Thu 26 Mar 2026 00:01:38 +0000
Manifest next update: Fri 27 Mar 2026 00:01:38 +0000
Files and hashes: 1: DudNGMQEmi2bgSwqWFXP63Wvpmc.crl (hash: 1QcNMDSUF73rgzkUT164108mJ+bhDT6uOcSa6HZRCVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:59:09:2d:96:e9:07:6a:bd:06:82:47:1a:1c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Validity
Not Before: Mar 26 00:01:38 2026 GMT
Not After : Mar 27 00:01:38 2026 GMT
Subject: CN=3666c82dc73e9c80dc54bd4de51d6cd71795b8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:17:15:ec:eb:ae:f8:b7:34:e7:95:36:bc:26:
a3:3b:fe:60:43:18:79:1b:79:c0:d7:60:f0:ac:c8:
79:6e:3f:93:d3:88:1f:85:dd:31:15:c9:f9:6d:ec:
a3:22:22:ca:2b:25:a3:b5:76:83:03:2f:cd:c6:ce:
a7:ae:fb:95:9f:94:ea:0b:e3:75:b2:e3:f9:ce:f8:
a8:28:f0:67:51:61:5f:90:1b:af:86:de:da:4b:f7:
cd:ac:92:17:7f:3e:f7:35:49:5c:cb:07:3c:d3:41:
f4:4c:ca:6a:6e:e0:28:68:21:0f:93:10:5e:37:61:
98:d3:e5:c5:57:26:01:1b:fe:bf:04:01:90:ea:22:
4c:e4:5c:68:d4:9b:ee:52:17:c7:fc:29:9e:4c:c6:
1d:67:68:29:56:38:45:c9:13:65:bf:c4:b2:e7:7b:
5e:0b:72:14:78:64:d7:d6:73:74:23:f4:08:97:ec:
e1:4f:41:8e:73:2a:2f:72:86:ad:07:38:4d:43:53:
7a:4c:b5:73:86:13:e6:57:92:ba:38:a4:ee:99:24:
de:09:48:22:ee:40:c5:3c:b4:f6:f1:b4:dc:24:b8:
a3:11:f5:ff:c1:c7:a7:64:2b:7a:ca:b9:34:a1:61:
6b:d1:98:aa:d8:7f:40:c6:e0:1e:a3:f4:80:e1:4e:
5f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:66:C8:2D:C7:3E:9C:80:DC:54:BD:4D:E5:1D:6C:D7:17:95:B8:D5
X509v3 Authority Key Identifier:
keyid:0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:41:4a:c7:3b:21:6f:a4:6c:bd:50:78:d9:b0:31:d7:96:22:
42:05:09:56:ec:5e:37:8a:dc:1c:8d:6b:fa:ac:26:e7:21:fb:
ae:f7:bb:0f:d8:d6:c3:94:0a:67:4e:66:48:5a:6e:d4:f9:c4:
80:f2:ab:2a:b9:a9:69:22:ac:b7:c9:0b:4e:d7:79:7c:8d:87:
67:13:27:68:21:9e:57:c8:17:cb:09:9e:a8:09:9e:2a:0c:39:
4d:18:d0:d5:d6:e5:dd:e0:54:0e:20:19:f2:23:8d:f2:cd:2f:
a4:2a:bc:15:4a:d0:6d:ff:63:b2:0a:ab:09:b7:fd:ab:8d:0f:
34:81:75:54:93:f5:2f:91:0d:52:37:c2:87:aa:ab:68:4d:ce:
d1:e7:27:6f:de:e2:e9:22:06:fe:d1:e5:a0:ef:0a:9e:c9:9b:
06:f8:e3:33:86:11:1b:ff:49:5b:86:0c:50:94:0a:b9:d3:9b:
35:26:4a:be:09:cd:29:65:59:52:50:8c:18:67:41:16:53:d0:
4f:7c:fa:af:b8:e3:08:5f:46:58:72:e7:64:c9:16:39:8e:a8:
b9:c1:1f:b4:9e:f6:a6:09:37:e0:2e:98:0d:ea:41:04:aa:11:
64:bf:76:99:4a:02:a2:fc:b5:ee:2e:4b:fd:83:07:6f:f6:f3:
7a:08:8c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:50:42 2026 by rpki-client