Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
File: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft (raw, json)
Hash identifier: RAKfdt3omP82z/7J3JmYdxE5+nyEv7esf09R4ocnK3Y=
Subject key identifier: 7E:4F:2E:46:A5:E5:B6:F1:DE:8D:BC:C3:67:33:68:93:E4:D4:98:3D
Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Certificate serial: 01A13E25E5786801AD927585AC0A9A6E734E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 06:00:33 +0000
Manifest this update: Thu 15 Oct 2026 06:00:33 +0000
Manifest next update: Fri 16 Oct 2026 06:00:33 +0000
Files and hashes: 1: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl (hash: sRDLQRubWgWqchvoH/e0Z1MAhZD0FFrHZjIegKbmHtg=)
2: ouslthZTAKifIxprW-deYjg0IV4.roa (hash: UcvHA4mOVxzyujtpXJcQefQpw5wOyvUPfvVySqUiIdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:e5:78:68:01:ad:92:75:85:ac:0a:9a:6e:73:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Validity
Not Before: Oct 15 06:00:33 2026 GMT
Not After : Oct 16 06:00:33 2026 GMT
Subject: CN=7e4f2e46a5e5b6f1de8dbcc367336893e4d4983d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:29:e1:92:f3:17:96:bf:d4:76:f5:91:36:20:
e0:68:ca:00:70:02:c5:c0:a8:1c:a7:5f:4e:5c:a6:
b5:0c:89:f8:d7:3f:31:08:f3:a1:88:ce:56:48:44:
a8:2e:fc:9f:5f:3a:8c:0e:e7:c2:50:a1:d0:01:e0:
23:01:00:3a:3e:b7:89:71:57:89:79:5f:6b:d8:87:
70:d0:c6:de:ac:b3:8e:55:1c:5b:3f:79:cb:91:a5:
a0:97:98:bf:3e:96:1c:24:f8:8f:8b:45:04:bc:c7:
5c:bb:3c:f7:8e:b2:a8:cc:1e:d5:d4:24:4f:3d:55:
d5:b3:c4:1f:43:fd:53:32:fb:ff:27:3c:6c:ee:8c:
15:3b:f3:4a:04:ac:e5:5e:45:08:37:c0:58:ca:0c:
f3:77:4a:80:df:52:a3:75:de:38:55:8a:3e:d4:19:
6e:b4:e9:b9:85:9c:24:8c:ea:5e:fb:16:29:dd:98:
80:b2:a4:64:ef:3d:d6:32:15:25:a5:f5:35:ac:0b:
da:42:1f:a6:30:19:8e:ef:dd:56:55:5c:aa:00:16:
df:8b:b3:1f:cf:d2:4d:54:3b:f2:02:ae:08:ba:88:
dc:7d:d6:7c:b3:bc:c8:70:74:d5:55:b9:3c:67:2f:
d0:1d:b3:12:db:dc:14:83:4a:5b:28:64:6f:ff:0a:
b8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4F:2E:46:A5:E5:B6:F1:DE:8D:BC:C3:67:33:68:93:E4:D4:98:3D
X509v3 Authority Key Identifier:
keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2f:7f:5d:f7:0b:10:73:a3:9a:45:ac:f6:36:67:c2:43:3a:
99:6b:5f:3a:e2:82:b6:a2:a2:3e:30:be:d3:9c:f4:0b:d8:39:
9e:af:8d:c8:8f:73:48:79:fc:a7:15:37:26:cd:a2:69:d6:47:
2a:e0:47:30:7c:c5:49:b3:d2:77:68:f4:a7:db:a1:58:f4:37:
dc:e7:d6:83:43:9b:5d:99:03:99:a0:ab:57:c9:46:3d:0a:dc:
fc:92:7d:e6:50:d8:8f:be:8c:3f:cf:a9:c0:b2:3a:6e:5d:fc:
f5:d7:c2:03:59:58:a1:6c:ab:a1:77:6f:33:4e:06:fe:ef:89:
3a:71:9d:18:77:95:89:8b:c3:26:06:02:68:d1:25:f0:24:c3:
02:ac:a3:5c:eb:04:5b:e9:3c:df:74:b2:07:f7:af:0e:d8:c0:
85:1f:13:35:c7:1e:ec:0a:30:e4:13:18:76:da:50:a4:ca:c6:
fd:80:c1:15:d0:39:d4:66:57:ff:75:1b:56:00:c3:47:1e:b1:
8d:d2:9d:76:96:dc:6c:49:88:85:7c:e3:42:05:5e:ae:56:a9:
1f:92:b4:26:21:6f:68:6d:20:41:32:78:5d:88:2d:21:7d:e1:
97:79:4f:fc:2f:4b:c0:88:bc:38:35:5a:52:8f:55:f4:6f:22:
8e:ed:17:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:35:04 2026 by rpki-client