
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
File: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft (raw, json)
Hash identifier: 7DnKwNEReB0Lg9H+X3ksaQKdX7gr7ItJzW1hr3mK2Yw=
Subject key identifier: 81:33:EB:56:C4:40:ED:70:88:E5:BE:90:99:A5:01:B0:58:6D:3C:32
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial: 019EE39E3853056739FF743E7F8021A474EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
Manifest number: 1973
Signing time: Sat 20 Jun 2026 06:00:57 +0000
Manifest this update: Sat 20 Jun 2026 06:00:57 +0000
Manifest next update: Sun 21 Jun 2026 06:00:57 +0000
Files and hashes: 1: 1dppl4E5LeYed1_ddeBSXFRftKA.roa (hash: pN3g9tWO1Nl1OAJCCKTDocJwUcz7cU9lRTyplesScF8=)
2: 7hii_CBkhWFEcR7PBsbgDyXmQ9Y.roa (hash: VParP3CSdlBKMMaiiyOgc9apoYvJ3aLSGeumM5G2suQ=)
3: 9LHK8v8-9Ckf2KLnnMlZEiqUMBM.roa (hash: 0BBbEj9KrnkzQ7LI3Ja4k/fn10TEbD/JLEqh/Y7YN5Q=)
4: 9zJS2sLQdMyIEXItDHnz9vENCZc.roa (hash: smANRs03fyEMELSZXfc50FOww78+6TO01q3PcjqHhg0=)
5: MARvCBJj6pQzGNHhjfVRnTPDXRw.roa (hash: W1iO+ZpTnMCy3mYaAEE8YESIC/Lb3z77r6zn9zHVz2Q=)
6: NpN7l3_hUP3xVFpljOuMEBlStvc.roa (hash: T5g6uyNIkE7SmOO57cpKy2aBBJDWlR4fSl0bwzLwido=)
7: PJovINnr20-leWA7kJPKMBrKmtg.roa (hash: 3MaNZNbZej5H9oqAeSz+6mwaBQ79zqRtFjAY7Mq3TKk=)
8: ZffOLXHzTQQ9w6R4Acsptb5X-ZQ.roa (hash: nT41EZi54SNK5Qom8A2J9oxN87+LC+L6D9g8JwOo3+E=)
9: b25kHpS94xs5d-Cb2gg_RWdRdqA.roa (hash: UnoS92iWWLeA3lFor4dioIwIwXhzelHfz1mr8ZCSkhY=)
10: cA6GYxFNrQzJXvnUUCTkZ74uPLY.roa (hash: 9ZlPADtkA5tNsCz6vf4xeuKDXE0oMu2t/mqNk4DDlVc=)
11: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl (hash: L7tL0hsFiyxNI5SFOMZw/Cc5frTLqXrtVRjQd83yWRA=)
12: laLTLAZUfnJXL9IgOMNUJBbcIYM.roa (hash: qH+8NsTPRO3q9UjCnJr8tq7a5R+TvAmnEtSTXrLT0C0=)
13: oX2NoeenvY6od0noJwHOC0vVDFU.roa (hash: PaRvm0af3RdwqkLgxZ1C0CNPV7CmkxdUeLl6SbuiQd4=)
14: r2fhwRZgDnJ42tEzYpq9QARdwNg.roa (hash: UN6m1b3Vnp+W6gqg/ChwnnprYWWgYrCXDJiUYFQZheM=)
15: sPqeNjwkgKgIPC9F-wg4yZRw5vo.roa (hash: gkiNfTfDhe6OjPwvNFzi/YKFCVBUpR1D9DW8GG28M8I=)
16: ww6ypu6XKZLBnCmu95aBOLrx3W4.roa (hash: MJWr+hVoOJcU+dBCIlq6NQXj1hTEMRYcYO7YQk9u0qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e3:9e:38:53:05:67:39:ff:74:3e:7f:80:21:a4:74:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Validity
Not Before: Jun 20 06:00:57 2026 GMT
Not After : Jun 21 06:00:57 2026 GMT
Subject: CN=8133eb56c440ed7088e5be9099a501b0586d3c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:27:4e:12:e5:22:5e:ba:87:2e:c8:0f:0f:df:
8e:6e:1e:7c:e8:00:68:87:41:ba:89:59:41:4d:5f:
a5:fa:5d:ea:97:9e:79:03:34:39:36:e0:6f:45:74:
1c:11:8d:a7:e0:c6:45:08:75:c8:f2:a1:cb:bf:40:
1b:66:f2:24:08:5b:ab:ad:ac:b6:ff:5b:7c:1c:f3:
aa:ee:9a:5d:e4:ae:70:2a:84:ac:33:ac:99:8a:a6:
12:77:cd:bb:31:5f:af:91:a5:ed:66:17:89:2d:17:
c5:3f:c9:17:d2:54:28:c7:89:33:56:e3:44:77:b7:
db:e2:46:35:b9:4c:82:db:00:da:2f:f4:7e:c9:64:
3c:5f:c5:a7:4d:ef:b3:50:2e:01:fb:9b:ff:67:94:
a4:80:63:06:08:02:1c:e3:ae:c0:04:ce:77:04:07:
05:cb:b3:af:f7:25:c2:e8:3c:d3:c1:15:35:7d:c7:
b4:08:ca:9d:19:fa:69:f3:11:e4:4d:00:53:1e:8b:
0c:12:05:17:c5:07:1d:c1:17:5a:2f:c6:b3:fd:57:
0a:4b:bb:02:af:ec:8c:32:cc:4a:cf:e6:8b:5d:cd:
0f:59:92:3f:88:e8:6d:7b:08:c9:95:9c:1e:e0:44:
a3:34:3e:f9:46:fb:e8:25:7e:8c:0c:e9:b3:fc:05:
83:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:33:EB:56:C4:40:ED:70:88:E5:BE:90:99:A5:01:B0:58:6D:3C:32
X509v3 Authority Key Identifier:
keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:32:68:a4:ed:07:60:6d:df:67:e4:fb:27:c8:38:56:0d:6a:
15:31:e8:c2:9a:8f:3a:e8:f6:09:71:b8:01:ac:48:c9:86:fa:
ea:32:41:b7:b6:68:33:82:b6:94:1e:85:fa:4c:74:f0:08:61:
e3:9a:0e:4a:dd:27:6c:a1:a9:f4:3d:35:16:5c:51:08:be:2b:
02:2d:e5:ac:20:8d:8a:b3:f9:d6:78:fb:76:5b:d0:52:ea:c2:
04:6f:7a:78:b4:28:b9:e2:cc:7f:d4:bd:18:d8:72:f3:e3:34:
89:01:4c:8b:bb:f4:aa:f1:8d:b3:85:46:67:b0:76:32:ae:50:
c8:f1:6a:e4:94:8b:dd:49:cd:1f:ec:9c:17:2f:75:78:42:9f:
ac:68:5a:c4:de:2d:e1:4f:2f:c4:c5:73:c0:62:f0:09:ea:12:
0b:3c:53:7a:92:ae:d6:a9:eb:23:55:dc:99:d8:60:d7:6d:e2:
f3:d9:17:70:ef:e8:d9:e5:65:be:b1:88:04:3c:be:37:14:6c:
e1:f1:61:09:3b:1d:63:48:e4:b6:c6:1a:ff:e2:eb:c5:1a:91:
39:98:d6:c8:61:55:af:0d:be:ec:2e:98:3f:a6:0c:21:42:e6:
5d:21:76:f7:77:3d:2d:bc:26:e7:f6:71:7e:7f:c6:fe:48:98:
7a:dd:b8:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7jnjhTBWc5/3Q+f4AhpHTvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl
ZjRmZWEwHhcNMjYwNjIwMDYwMDU3WhcNMjYwNjIxMDYwMDU3WjAzMTEwLwYDVQQD
Eyg4MTMzZWI1NmM0NDBlZDcwODhlNWJlOTA5OWE1MDFiMDU4NmQzYzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ydOEuUiXrqHLsgPD9+Obh586ABo
h0G6iVlBTV+l+l3ql555AzQ5NuBvRXQcEY2n4MZFCHXI8qHLv0AbZvIkCFurray2
/1t8HPOq7ppd5K5wKoSsM6yZiqYSd827MV+vkaXtZheJLRfFP8kX0lQox4kzVuNE
d7fb4kY1uUyC2wDaL/R+yWQ8X8WnTe+zUC4B+5v/Z5SkgGMGCAIc467ABM53BAcF
y7Ov9yXC6DzTwRU1fce0CMqdGfpp8xHkTQBTHosMEgUXxQcdwRdaL8az/VcKS7sC
r+yMMsxKz+aLXc0PWZI/iOhtewjJlZwe4ESjND75RvvoJX6MDOmz/AWDDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEz61bEQO1wiOW+kJmlAbBYbTwyMB8GA1UdIwQY
MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt
YTY1MjMzYjNlOTc1LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1
LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTJopO0H
YG3fZ+T7J8g4Vg1qFTHowpqPOuj2CXG4AaxIyYb66jJBt7ZoM4K2lB6F+kx08Ahh
45oOSt0nbKGp9D01FlxRCL4rAi3lrCCNirP51nj7dlvQUurCBG96eLQoueLMf9S9
GNhy8+M0iQFMi7v0qvGNs4VGZ7B2Mq5QyPFq5JSL3UnNH+ycFy91eEKfrGhaxN4t
4U8vxMVzwGLwCeoSCzxTepKu1qnrI1Xcmdhg123i89kXcO/o2eVlvrGIBDy+NxRs
4fFhCTsdY0jktsYa/+LrxRqROZjWyGFVrw2+7C6YP6YMIULmXSF293c9Lbwm5/Zx
fn/G/kiYet24lg==
-----END CERTIFICATE-----
Generated at Sat Jun 20 13:36:29 2026 by rpki-client