Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft
File: DPSuqBZureCsfGkRvcnmnHB1TBQ.mft (raw, json)
Hash identifier: 17Y+CJaMZGs9EDZDgllJ/7jOIenEelEiGxVCdGkM55I=
Subject key identifier: 84:65:F3:71:2F:7D:8E:81:92:CE:10:AB:81:8C:2A:30:F3:4F:93:8B
Authority key identifier: 0C:F4:AE:A8:16:6E:AD:E0:AC:7C:69:11:BD:C9:E6:9C:70:75:4C:14
Certificate issuer: /CN=0cf4aea8166eade0ac7c6911bdc9e69c70754c14
Certificate serial: 019D37C03957BD79B5833C0A08AF0ABEA0E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DPSuqBZureCsfGkRvcnmnHB1TBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft
Manifest number: 0343
Signing time: Sun 29 Mar 2026 04:00:37 +0000
Manifest this update: Sun 29 Mar 2026 04:00:37 +0000
Manifest next update: Mon 30 Mar 2026 04:00:37 +0000
Files and hashes: 1: DPSuqBZureCsfGkRvcnmnHB1TBQ.crl (hash: xc/jxPWQXRcbmFgzaIT8jijoksJVMUoCTNQ8h8pafvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DPSuqBZureCsfGkRvcnmnHB1TBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:39:57:bd:79:b5:83:3c:0a:08:af:0a:be:a0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cf4aea8166eade0ac7c6911bdc9e69c70754c14
Validity
Not Before: Mar 29 04:00:37 2026 GMT
Not After : Mar 30 04:00:37 2026 GMT
Subject: CN=8465f3712f7d8e8192ce10ab818c2a30f34f938b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ca:d5:29:25:f3:fb:69:6a:49:ec:b1:72:ac:
cf:a7:64:9c:bf:cd:b7:0d:78:ec:cf:3d:45:aa:9a:
32:9d:91:31:6c:01:56:f4:74:7d:3a:df:a6:14:b7:
62:72:9b:0c:90:ef:32:5a:fe:08:9b:ee:d9:23:aa:
c2:73:a9:76:9d:80:42:44:f5:32:6d:40:18:a1:f7:
a0:8b:c1:ea:3d:c5:22:a4:16:f7:99:b2:6e:38:35:
96:ec:b4:f1:2b:a5:a2:8f:f4:20:77:dc:33:fc:b7:
45:d1:36:32:82:b0:2a:48:82:7d:a4:77:00:9c:1b:
55:ff:40:b0:08:bb:f5:45:9d:9d:0b:4d:4a:71:6d:
d3:43:43:8c:21:87:fd:49:82:f7:6f:b4:08:a1:7c:
9b:11:be:03:28:b8:ee:9c:bc:d1:de:25:a7:25:87:
94:ca:9a:4d:ad:4f:e5:8c:49:f2:bd:41:89:f0:37:
c1:85:e0:62:9b:45:82:9d:a2:69:87:e1:7e:8e:93:
f6:f7:79:75:f0:53:5c:28:54:05:7d:26:e8:81:31:
44:61:18:9e:0f:95:67:6c:aa:0a:75:be:e0:2d:df:
5c:08:cb:7b:9f:ca:79:21:22:97:6e:44:69:cb:a8:
67:5c:8e:5d:89:3a:75:ad:db:e1:61:ad:1c:06:07:
7d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:65:F3:71:2F:7D:8E:81:92:CE:10:AB:81:8C:2A:30:F3:4F:93:8B
X509v3 Authority Key Identifier:
keyid:0C:F4:AE:A8:16:6E:AD:E0:AC:7C:69:11:BD:C9:E6:9C:70:75:4C:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DPSuqBZureCsfGkRvcnmnHB1TBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7c:c5:f3:82:9f:20:df:94:8a:8c:16:6a:4c:95:42:e4:a7:
c4:b5:34:de:22:ad:82:b8:d2:cb:8a:64:fa:61:d0:4b:a4:c4:
ce:f6:98:07:b5:be:7a:26:4f:16:be:75:14:a5:3b:1f:5f:85:
66:fa:bf:04:cf:ee:8a:3d:0a:b9:e3:ba:86:86:ea:ec:50:5e:
26:1f:c4:c9:27:46:6c:4b:1c:b3:93:ba:4a:90:89:58:aa:f9:
4e:ea:88:cc:76:a5:21:f0:78:8a:65:b3:94:53:42:ea:df:67:
80:c4:6b:88:1b:e1:c1:96:96:52:1c:fd:12:d4:13:30:28:5d:
5b:3e:a7:64:1e:0d:55:c7:7f:1b:19:fd:c5:83:f5:0f:00:38:
3b:72:fb:04:1c:d4:17:07:f1:e9:50:cd:9a:f8:4c:16:7f:2d:
8c:c2:0d:93:57:7c:dd:c9:bc:b5:4e:7b:d6:dc:74:f1:94:de:
3f:66:31:bf:35:e5:aa:a0:15:21:ae:20:ac:48:2c:03:46:5b:
74:a0:37:d5:36:e4:cf:95:f7:fd:00:dc:31:8e:de:e5:43:2f:
77:36:ba:16:31:5f:9f:99:3d:be:a2:84:54:cf:f6:13:27:c7:
6f:fa:cf:c8:73:33:07:6a:4c:c7:61:55:c8:44:46:54:d2:d4:
8c:6a:ab:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wDlXvXm1gzwKCK8KvqDlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZjRhZWE4MTY2ZWFkZTBhYzdjNjkxMWJkYzllNjljNzA3
NTRjMTQwHhcNMjYwMzI5MDQwMDM3WhcNMjYwMzMwMDQwMDM3WjAzMTEwLwYDVQQD
Eyg4NDY1ZjM3MTJmN2Q4ZTgxOTJjZTEwYWI4MThjMmEzMGYzNGY5MzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8rVKSXz+2lqSeyxcqzPp2Scv823
DXjszz1FqpoynZExbAFW9HR9Ot+mFLdicpsMkO8yWv4Im+7ZI6rCc6l2nYBCRPUy
bUAYofegi8HqPcUipBb3mbJuODWW7LTxK6Wij/Qgd9wz/LdF0TYygrAqSIJ9pHcA
nBtV/0CwCLv1RZ2dC01KcW3TQ0OMIYf9SYL3b7QIoXybEb4DKLjunLzR3iWnJYeU
yppNrU/ljEnyvUGJ8DfBheBim0WCnaJph+F+jpP293l18FNcKFQFfSbogTFEYRie
D5VnbKoKdb7gLd9cCMt7n8p5ISKXbkRpy6hnXI5diTp1rdvhYa0cBgd9dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRl83EvfY6Bks4Qq4GMKjDzT5OLMB8GA1UdIwQY
MBaAFAz0rqgWbq3grHxpEb3J5pxwdUwUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFBTdXFCWnVyZUNzZkdrUnZjbm1uSEIxVEJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84YWRmMTktMDg2OS00NmZiLTkyYjMt
ZjBkN2IyNzc0ZDNlLzEvRFBTdXFCWnVyZUNzZkdrUnZjbm1uSEIxVEJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84YWRmMTktMDg2OS00NmZiLTkyYjMtZjBkN2IyNzc0ZDNl
LzEvRFBTdXFCWnVyZUNzZkdrUnZjbm1uSEIxVEJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHzF84Kf
IN+UiowWakyVQuSnxLU03iKtgrjSy4pk+mHQS6TEzvaYB7W+eiZPFr51FKU7H1+F
Zvq/BM/uij0KueO6hobq7FBeJh/EySdGbEscs5O6SpCJWKr5TuqIzHalIfB4imWz
lFNC6t9ngMRriBvhwZaWUhz9EtQTMChdWz6nZB4NVcd/Gxn9xYP1DwA4O3L7BBzU
Fwfx6VDNmvhMFn8tjMINk1d83cm8tU571tx08ZTeP2YxvzXlqqAVIa4grEgsA0Zb
dKA31Tbkz5X3/QDcMY7e5UMvdza6FjFfn5k9vqKEVM/2EyfHb/rPyHMzB2pMx2FV
yERGVNLUjGqrqQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:11 2026 by rpki-client