Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft
File: DPSuqBZureCsfGkRvcnmnHB1TBQ.mft (raw, json)
Hash identifier: 8R17xwwUOoSIOW1l9qC6zx8/m8R4G/malE1t37U2DJw=
Subject key identifier: 89:3E:70:14:01:A6:83:6B:53:30:94:B3:E9:52:73:97:85:92:F3:47
Authority key identifier: 0C:F4:AE:A8:16:6E:AD:E0:AC:7C:69:11:BD:C9:E6:9C:70:75:4C:14
Certificate issuer: /CN=0cf4aea8166eade0ac7c6911bdc9e69c70754c14
Certificate serial: 019D2A3B41A3EE4E94F7AC1D7A17F709B9BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DPSuqBZureCsfGkRvcnmnHB1TBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft
Manifest number: 033C
Signing time: Thu 26 Mar 2026 13:00:19 +0000
Manifest this update: Thu 26 Mar 2026 13:00:19 +0000
Manifest next update: Fri 27 Mar 2026 13:00:19 +0000
Files and hashes: 1: DPSuqBZureCsfGkRvcnmnHB1TBQ.crl (hash: vFpuMr7oHidGj7fu4tHStR+UWa8UyUXqsF+QfaepjZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DPSuqBZureCsfGkRvcnmnHB1TBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:41:a3:ee:4e:94:f7:ac:1d:7a:17:f7:09:b9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cf4aea8166eade0ac7c6911bdc9e69c70754c14
Validity
Not Before: Mar 26 13:00:19 2026 GMT
Not After : Mar 27 13:00:19 2026 GMT
Subject: CN=893e701401a6836b533094b3e95273978592f347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:a8:0d:3c:06:36:49:6c:e6:9f:85:d3:c3:
bc:92:96:a8:ad:21:96:d5:ea:5a:59:10:eb:3a:f1:
46:63:b2:b3:9e:7b:fd:81:20:de:4e:cb:0d:f9:32:
6f:9e:9f:6d:97:a1:22:40:60:b5:6c:f4:bf:a6:3f:
af:ac:51:fa:45:c0:8a:3e:90:40:3d:ca:9c:7a:b9:
e0:b0:3f:df:5b:a4:a7:2a:81:c2:ff:2f:ad:58:20:
18:bc:09:88:b4:83:ee:96:02:ba:2c:c6:08:11:ec:
a5:9d:23:a2:fa:c0:53:9f:0e:cd:2b:63:df:79:99:
ca:5d:e0:a1:7e:d2:6b:1e:e7:0a:8b:aa:c9:20:63:
a1:d2:79:2e:82:bc:d4:15:e7:66:20:ae:98:b9:01:
af:30:ac:78:b9:ea:09:b6:9a:92:24:d2:89:c0:80:
f8:76:fe:68:7b:b7:67:54:18:da:5f:ed:24:4e:2a:
fb:63:4b:2a:f7:c6:7d:cb:95:3e:3d:2f:eb:7c:c9:
53:dd:b8:cb:79:1c:ef:f7:9e:dc:60:91:36:13:c2:
7b:f3:e6:22:21:1e:06:43:ba:f9:f5:27:11:17:e5:
5d:b9:91:fb:7d:4a:19:48:36:78:d2:d6:5b:d8:82:
46:f9:d3:6c:64:a2:b7:58:bf:ff:46:d4:ea:c1:5a:
79:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3E:70:14:01:A6:83:6B:53:30:94:B3:E9:52:73:97:85:92:F3:47
X509v3 Authority Key Identifier:
keyid:0C:F4:AE:A8:16:6E:AD:E0:AC:7C:69:11:BD:C9:E6:9C:70:75:4C:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DPSuqBZureCsfGkRvcnmnHB1TBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:61:b8:e6:a8:c0:d1:36:6a:5d:12:d3:da:c1:d6:e1:2d:46:
5d:2f:a0:b8:ea:06:fc:39:40:16:73:97:46:23:d0:b0:03:f3:
4a:f9:2e:14:85:b3:71:10:82:15:bd:d2:c5:07:4b:be:8a:9c:
53:33:9c:81:52:a0:01:78:aa:f4:e1:02:fb:2e:58:b3:c4:d7:
c8:e0:f8:0c:ff:2d:30:86:ee:d5:b9:f0:94:ff:89:dc:7b:af:
6b:87:1b:7b:8c:6a:70:99:2b:3b:99:9f:51:13:33:01:46:48:
ce:37:b4:8f:79:d8:d0:53:cb:7d:df:e3:01:fc:a1:4c:e1:d4:
9e:2b:83:7d:b1:37:56:c3:ed:01:90:96:1a:39:c5:4f:6e:b0:
56:3a:4e:21:ef:2d:41:31:5b:9e:8a:2e:7a:94:05:59:de:49:
4c:2f:45:da:74:61:22:e5:89:f7:dc:63:d5:2f:90:1a:d7:23:
fe:f7:18:63:e2:ac:de:fe:6f:4f:a6:32:14:26:e9:fa:12:64:
4e:f0:ab:c7:8a:5a:51:1b:8a:5e:76:02:13:bf:7f:99:2a:63:
52:4b:ef:c5:f9:de:29:08:bd:f4:8a:55:3e:9c:71:4f:9e:60:
49:02:9e:5f:41:7b:99:4d:84:c5:46:1a:0c:34:6b:59:7b:a4:
62:e1:58:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:44:44 2026 by rpki-client