Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
File: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft (raw, json)
Hash identifier: zRwL5P/06pSH3A/Z/Y1kxcmpmf0+p7wS9pNq3hZ6s2s=
Subject key identifier: DA:2F:4C:36:42:F1:DB:D8:59:14:9A:1E:D8:85:BE:8B:DA:B9:F8:EF
Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Certificate serial: 01A0D7CD37ACDA563D934DC438E4D502C3BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
Manifest number: 1A6E
Signing time: Fri 25 Sep 2026 09:02:25 +0000
Manifest this update: Fri 25 Sep 2026 09:02:25 +0000
Manifest next update: Sat 26 Sep 2026 09:02:25 +0000
Files and hashes: 1: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl (hash: LUKL3AAAvsoTqZJkcG7iN3KjZkl3SBKQ6OoJVK0xMXA=)
2: ouslthZTAKifIxprW-deYjg0IV4.roa (hash: UcvHA4mOVxzyujtpXJcQefQpw5wOyvUPfvVySqUiIdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cd:37:ac:da:56:3d:93:4d:c4:38:e4:d5:02:c3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Validity
Not Before: Sep 25 09:02:25 2026 GMT
Not After : Sep 26 09:02:25 2026 GMT
Subject: CN=da2f4c3642f1dbd859149a1ed885be8bdab9f8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:50:be:5d:45:71:d9:2c:04:66:72:ac:f1:8a:
d6:1e:2d:0b:a2:a2:22:60:9c:8a:c1:98:69:b7:95:
2f:a9:02:0a:5d:17:03:7f:62:58:a4:d7:d7:d7:5a:
8a:81:aa:67:8b:65:65:ee:11:11:b4:b3:e3:3b:d9:
ce:23:be:d6:33:0a:cd:b3:a6:20:5d:90:16:0d:a4:
e8:7b:36:a3:ff:e9:bb:1f:21:0a:95:dc:bb:a0:b2:
c2:9d:53:e8:c6:81:e0:ca:c0:03:56:a5:c5:ad:17:
1a:c8:86:dd:2d:8d:f0:88:e2:b5:1f:48:fb:98:86:
0e:d3:ef:81:e0:5c:32:2a:c4:f9:eb:b0:45:0c:f6:
a9:e9:e8:00:e7:0a:f7:4b:b7:e9:29:fa:0d:b5:74:
93:a2:fa:1e:af:62:77:ab:32:7b:91:02:a7:48:fc:
d3:65:eb:22:ea:5a:8e:0e:78:b1:60:6f:57:38:b2:
8f:4f:ea:2a:00:48:8b:cb:11:03:d3:95:64:0f:f9:
31:1e:1a:84:31:08:2e:db:83:91:7e:15:95:93:cb:
b8:f3:dc:21:d3:be:f9:67:d8:eb:c4:f1:a5:71:5b:
2d:ea:12:82:99:3f:64:4d:02:3c:68:9e:3c:bf:21:
13:0d:e3:6f:52:9a:20:e5:08:d1:99:f1:1b:01:b7:
12:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2F:4C:36:42:F1:DB:D8:59:14:9A:1E:D8:85:BE:8B:DA:B9:F8:EF
X509v3 Authority Key Identifier:
keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2b:e3:a1:49:3b:ed:27:fc:a2:87:d5:6a:d3:50:9b:10:42:
9e:b5:e3:ed:11:ca:a7:8b:8c:f1:fe:40:2c:43:6e:36:df:e6:
86:2b:a0:cd:02:d3:80:04:e5:f2:85:86:88:34:1f:2f:58:09:
0b:58:be:d7:35:cd:a7:91:3e:4a:14:0b:73:14:9c:18:ba:6b:
9a:65:7c:b5:f2:95:db:e3:fd:bb:d9:83:bf:b7:9b:33:d6:ce:
46:83:28:a4:f3:72:bf:7f:b3:d0:3e:01:37:ac:e4:86:5c:be:
f4:2a:80:46:48:c1:1d:31:a1:1b:4b:db:9b:9f:06:7f:25:62:
ce:d9:ad:ca:7a:3a:60:06:15:65:5d:75:c7:e6:19:ab:8e:63:
ba:bf:64:1b:86:87:12:12:7f:1b:9c:d3:e6:8b:b9:bf:e3:c0:
54:27:3c:9d:3a:8c:1e:10:30:cd:fe:5c:e5:f4:14:a4:0d:56:
63:f8:bc:4e:09:7a:ab:4a:4e:f3:82:22:65:68:8a:56:55:15:
8a:e7:1c:16:68:4d:29:27:e5:a7:2e:e6:b9:7d:f4:50:b9:1e:
13:7d:76:e3:63:65:47:b1:3a:ba:a4:8d:fb:70:af:08:4c:27:
e0:52:4d:c4:a7:3d:5b:fc:bc:d0:37:af:02:f1:97:93:f5:04:
4b:68:2a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:52:32 2026 by rpki-client