Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
File: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft (raw, json)
Hash identifier: ar2aBZ2fVkOwR4xxqhf0tMQp0oE4blr9ukEaYtcWmV8=
Subject key identifier: CF:85:41:67:8C:5F:5B:DA:F3:1F:94:00:4B:0B:F1:0C:A8:94:43:E1
Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Certificate serial: 01A0016F8F9EA2486C710CFA658D0138F7CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
Manifest number: 19FF
Signing time: Fri 14 Aug 2026 18:01:23 +0000
Manifest this update: Fri 14 Aug 2026 18:01:23 +0000
Manifest next update: Sat 15 Aug 2026 18:01:23 +0000
Files and hashes: 1: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl (hash: LWAESja+K7EsX9A9r9ss9BtCl4WPuJbwsVdDrbS+QHA=)
2: ouslthZTAKifIxprW-deYjg0IV4.roa (hash: UcvHA4mOVxzyujtpXJcQefQpw5wOyvUPfvVySqUiIdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:8f:9e:a2:48:6c:71:0c:fa:65:8d:01:38:f7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Validity
Not Before: Aug 14 18:01:23 2026 GMT
Not After : Aug 15 18:01:23 2026 GMT
Subject: CN=cf8541678c5f5bdaf31f94004b0bf10ca89443e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2e:37:d0:8e:62:0d:8c:17:bb:b5:64:95:17:
5e:c6:37:ab:d1:03:e2:38:9c:4e:84:c0:e9:e8:75:
34:2d:77:e7:3b:2a:09:f1:29:06:83:ad:70:8e:c9:
87:8e:14:25:ad:26:04:9a:ba:46:eb:a5:c2:e6:11:
6b:89:a8:60:85:ab:b6:b9:51:74:70:7e:53:3b:c6:
c4:f6:65:76:10:cc:c3:17:f2:e9:8d:6d:92:e2:38:
54:2c:24:ee:7c:8a:8f:d5:97:24:9d:d2:5a:1d:1e:
e8:23:e7:c8:db:f1:0d:90:43:83:6a:3e:20:13:7b:
25:c2:9e:0c:36:0e:ca:9a:89:16:ed:13:ca:c8:f1:
f0:14:44:81:1d:d4:14:f4:f7:79:b5:9c:30:8a:aa:
b2:24:b2:b7:a5:fb:90:af:30:c7:03:87:f5:d6:27:
1e:84:91:23:f0:55:9c:e6:39:22:57:ed:16:0b:38:
f4:1d:13:d2:67:9f:3c:c8:1d:0b:89:b0:c6:3e:8c:
4f:4a:be:8d:76:2b:f5:82:70:b8:59:77:c1:9f:84:
25:c6:1a:b0:26:fa:e3:d8:d3:46:f8:65:ba:95:71:
51:7b:19:0f:55:cc:6e:fc:d9:33:10:47:7b:e5:57:
d2:23:81:de:c0:b0:ac:04:07:9e:bb:4a:83:95:ec:
99:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:85:41:67:8C:5F:5B:DA:F3:1F:94:00:4B:0B:F1:0C:A8:94:43:E1
X509v3 Authority Key Identifier:
keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:68:cd:5d:f4:42:7d:30:f5:5a:f9:46:fa:d9:d0:bf:c0:10:
3d:cb:0a:fe:0d:36:f7:cf:89:70:5a:de:38:8a:49:40:b9:20:
9c:27:46:f5:72:5c:cf:8e:2b:0f:c5:dc:18:7a:a8:82:79:60:
59:04:22:3e:90:d1:2b:56:90:34:46:5e:f8:ec:97:36:02:a9:
2b:c6:bf:5e:28:a8:77:71:c0:2c:9d:82:18:36:33:ef:30:a9:
0f:65:0a:a8:27:4c:f1:94:0a:da:45:e3:9e:92:36:f7:34:02:
d2:9f:52:9e:91:c2:68:f7:b0:d3:ba:df:8d:59:5c:27:b9:c3:
c1:7a:84:64:81:bc:89:fb:d7:e5:34:5b:f1:b6:0a:50:6a:cc:
93:53:12:a8:c3:4d:a4:a5:70:4e:f9:2e:d6:55:d5:82:9d:a7:
b7:8b:57:fc:73:63:07:43:54:11:96:39:4c:e3:98:8f:e9:2f:
e3:ee:59:ed:ee:34:c1:5f:b6:16:c3:78:5a:2b:93:c2:a7:5e:
76:6a:f3:5b:26:0c:3a:17:4d:7b:a5:10:9e:0f:16:86:dc:9b:
b1:26:82:c9:fc:a2:a1:05:5e:dd:79:49:26:c9:91:36:b5:b3:
6f:81:a1:b9:8f:4a:60:c9:d1:1b:a1:ef:e4:b3:d3:d2:04:d7:
34:66:d7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:30 2026 by rpki-client