Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
File: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft (raw, json)
Hash identifier: 775TLp69FBAnMab9LqcxQd25a3+ecK/6zvKmyYYDvdg=
Subject key identifier: A9:81:D7:04:30:08:C0:A1:5C:F4:08:50:25:F4:F2:88:BD:EA:24:41
Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Certificate serial: 019D38D3CFC7F53915BD7C807183788B002A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 09:01:38 +0000
Manifest this update: Sun 29 Mar 2026 09:01:38 +0000
Manifest next update: Mon 30 Mar 2026 09:01:38 +0000
Files and hashes: 1: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl (hash: pwyaveeFYCn4CehFgEePLLPsHtw+DovrvLSHxmzE03U=)
2: ouslthZTAKifIxprW-deYjg0IV4.roa (hash: UcvHA4mOVxzyujtpXJcQefQpw5wOyvUPfvVySqUiIdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:cf:c7:f5:39:15:bd:7c:80:71:83:78:8b:00:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Validity
Not Before: Mar 29 09:01:38 2026 GMT
Not After : Mar 30 09:01:38 2026 GMT
Subject: CN=a981d7043008c0a15cf4085025f4f288bdea2441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:53:2b:eb:b0:c9:a4:db:8f:84:8f:12:55:47:
7a:9b:ff:d1:23:59:57:be:dc:42:19:7f:e9:fc:45:
f2:93:b2:c3:3b:cd:08:0d:a4:8f:6f:e1:7c:35:84:
e2:b9:4d:95:54:d9:ea:12:b1:7d:4c:84:15:85:94:
52:e8:e8:04:b8:5b:10:55:ee:1d:0d:fb:8c:b0:9f:
b3:cd:15:3d:8f:9a:d0:ac:39:c5:f5:43:a3:4f:10:
e1:8b:49:2a:1f:e6:a1:4c:a4:98:e7:1c:e6:d1:57:
86:2b:f0:2d:eb:65:9c:93:07:6a:83:bd:86:0b:cb:
92:8c:24:eb:1d:22:fc:46:c9:de:29:26:6c:c9:90:
34:b7:ea:54:bc:a3:17:7b:74:14:6c:7a:0e:23:bc:
f7:8d:ee:f2:97:98:71:c3:c9:18:0e:fc:be:d3:8a:
d6:05:b8:5b:50:18:c6:ee:20:9b:27:7d:63:4a:fe:
df:5a:ee:39:93:db:6b:b7:51:72:f4:8f:a3:1f:23:
6f:35:bd:b6:6a:fd:86:37:fa:a3:b8:80:81:85:e0:
b9:e1:c9:fe:9c:6a:b8:7f:cf:5b:60:01:6a:43:6f:
59:72:14:0f:0c:62:69:1c:51:1a:31:fc:cf:47:60:
2c:d1:cf:3a:2f:ae:37:ff:15:4d:98:04:53:e1:3b:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:81:D7:04:30:08:C0:A1:5C:F4:08:50:25:F4:F2:88:BD:EA:24:41
X509v3 Authority Key Identifier:
keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6d:eb:82:3d:2d:14:5e:32:a1:5a:e9:73:e4:7e:3b:48:21:
f2:c0:9f:2c:9f:ed:7b:14:a5:52:93:ed:4c:1f:0b:eb:62:e3:
45:8d:00:86:0a:eb:60:50:4a:1b:69:26:a5:30:d9:3c:d5:8f:
73:40:54:cf:43:8d:ad:59:97:48:bc:bb:7e:28:d8:7d:4f:52:
34:35:70:9b:20:f3:cf:7f:8b:fc:e3:1b:04:58:c9:62:e3:15:
41:7f:e6:e1:4a:ce:06:4c:78:82:0e:dd:20:ce:df:66:cf:fd:
37:b8:77:bc:d0:d6:d4:c4:bc:a2:ea:27:14:15:86:12:b5:0a:
19:eb:1f:26:ab:3c:08:c5:1d:11:b2:2d:01:22:c6:c9:1b:fb:
91:a9:b0:e1:af:69:62:96:15:ff:98:4b:e7:e0:39:39:29:7d:
da:9f:59:bf:d1:22:a6:c6:e0:73:81:42:f6:63:75:c4:d8:e5:
33:fc:cc:f0:73:69:a6:29:10:8e:02:60:8b:03:b9:7c:a3:27:
35:bb:ec:ba:48:b1:f4:9e:5f:c8:df:65:3c:29:89:b1:a1:c5:
b5:2e:ba:71:d3:a2:1a:8d:55:17:9f:82:e1:06:9d:e0:ec:a6:
bf:e8:bd:68:bc:43:7e:27:4c:0b:37:8a:a7:05:65:62:a8:64:
5f:95:d3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:37 2026 by rpki-client