Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
File: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft (raw, json)
Hash identifier: XVXQ2aGROGWfdAuAUL5Sx+hJtJZN1OLnT7m9b0xrJlQ=
Subject key identifier: 8B:7D:F8:8C:97:CC:FF:2B:13:0A:C3:04:38:5C:13:96:B5:B1:4B:6C
Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Certificate serial: 019E1EA31ADFAFC510FC327A0A326AFDC15A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
Manifest number: 1905
Signing time: Wed 13 May 2026 00:01:06 +0000
Manifest this update: Wed 13 May 2026 00:01:06 +0000
Manifest next update: Thu 14 May 2026 00:01:06 +0000
Files and hashes: 1: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl (hash: /KiSYbfHMQzhzKj6W8tD428kKI4o5KJ3zRi/MWkqpEw=)
2: ouslthZTAKifIxprW-deYjg0IV4.roa (hash: UcvHA4mOVxzyujtpXJcQefQpw5wOyvUPfvVySqUiIdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:1a:df:af:c5:10:fc:32:7a:0a:32:6a:fd:c1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Validity
Not Before: May 13 00:01:06 2026 GMT
Not After : May 14 00:01:06 2026 GMT
Subject: CN=8b7df88c97ccff2b130ac304385c1396b5b14b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6e:23:c7:b0:35:c4:1b:e7:ad:35:5f:90:35:
7a:c2:29:1a:3f:ec:7d:9e:78:a8:67:db:b0:7f:43:
e1:71:3f:90:0a:fb:79:35:17:41:69:66:8c:c4:2b:
ba:ad:0a:4d:02:46:c7:a2:3e:a4:a0:80:62:e6:0f:
21:cc:76:09:ff:65:5e:2f:d4:89:a5:dc:a3:27:93:
b8:a1:ef:e2:66:91:fd:ca:ab:ec:01:7a:f6:cb:e3:
9c:45:8c:70:dc:6b:b5:5a:6a:2e:ec:9b:54:8d:ae:
ed:b9:69:7e:ce:ce:db:7e:54:d3:a7:84:47:37:4d:
a2:67:47:cf:bc:26:14:89:b1:63:0b:33:df:5a:c3:
26:1f:b6:66:8d:5d:da:df:72:89:c5:d5:fa:24:01:
8d:0b:e2:85:cc:26:76:62:f9:15:7b:8f:b6:be:e8:
57:13:a2:86:31:5f:32:56:0c:5b:81:e8:79:dd:f4:
8d:28:39:74:64:fe:0b:7a:4e:48:fa:39:1a:d9:e2:
e4:dc:81:f4:57:5e:d5:3d:2a:59:5c:38:17:34:1a:
74:1a:3c:d7:31:97:f6:4a:3a:6a:40:da:ee:33:59:
49:f7:fa:b4:32:54:b8:ff:63:d2:43:bd:a5:74:fa:
39:84:10:c3:4d:da:67:04:cf:7d:ab:bb:d5:8f:58:
d7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7D:F8:8C:97:CC:FF:2B:13:0A:C3:04:38:5C:13:96:B5:B1:4B:6C
X509v3 Authority Key Identifier:
keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:bc:b8:0e:ba:d3:0f:3c:6b:11:c0:78:08:e1:8f:69:b4:6a:
0e:e2:76:0b:24:7c:73:bc:43:53:a4:d1:bb:a3:4b:45:8c:80:
4e:35:6e:06:ce:1c:af:35:a7:6f:e1:95:d3:ef:0e:fe:6e:55:
49:42:35:9e:cb:5f:a7:dd:1f:52:0f:1b:45:5e:43:6c:da:75:
25:eb:22:eb:8b:ea:a3:c4:e7:c6:08:be:d8:c2:dc:79:d4:d5:
0b:b7:77:d8:98:f4:41:04:1d:43:ed:03:1d:84:a9:fd:e5:5e:
1d:3d:73:de:65:47:82:6e:25:a8:8c:c0:6b:6f:37:a6:1a:59:
9b:4b:6f:a5:cd:61:d9:3e:d4:df:af:fc:1a:1a:24:9c:98:80:
ec:5f:7a:7d:b4:83:00:ab:25:13:26:c8:6a:43:bb:ad:df:a7:
9d:6c:90:30:6b:d1:29:f0:f4:92:0d:f3:22:22:f6:85:cf:77:
8e:ce:cd:b5:2c:d7:b5:f5:22:20:42:03:51:2c:89:cc:c5:b6:
d6:c4:9b:45:9c:49:ab:67:f0:bf:bd:4e:74:ac:52:4d:e6:55:
aa:17:f7:08:c5:32:85:31:11:91:96:7d:e6:41:7a:52:0f:62:
24:cd:10:d7:c3:a9:ed:e7:d8:49:71:2c:14:c7:6b:26:3a:d7:
b2:38:c5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:08:03 2026 by rpki-client