Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
File: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft (raw, json)
Hash identifier: 0M+9bVpZ0J3SfXnf2VjEkxR6pZ353Wt0JSIMMeokAqw=
Subject key identifier: 8E:DD:7B:AE:9C:46:CC:86:99:42:C1:0F:AE:8A:00:9B:3A:03:FB:14
Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Certificate serial: 01A0C858FCB7BCE4F8284BEFF17F31CC5EA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
Manifest number: 1A66
Signing time: Tue 22 Sep 2026 09:01:10 +0000
Manifest this update: Tue 22 Sep 2026 09:01:10 +0000
Manifest next update: Wed 23 Sep 2026 09:01:10 +0000
Files and hashes: 1: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl (hash: 01Il7QsXyvGPtPgdlX1hpCTXfzHOXo6lzFBEwHuCeDE=)
2: ouslthZTAKifIxprW-deYjg0IV4.roa (hash: UcvHA4mOVxzyujtpXJcQefQpw5wOyvUPfvVySqUiIdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:fc:b7:bc:e4:f8:28:4b:ef:f1:7f:31:cc:5e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Validity
Not Before: Sep 22 09:01:10 2026 GMT
Not After : Sep 23 09:01:10 2026 GMT
Subject: CN=8edd7bae9c46cc869942c10fae8a009b3a03fb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:de:5f:3d:c9:1c:04:0e:40:83:00:b1:83:fe:
24:47:16:27:69:7e:c9:8c:1e:63:02:36:76:33:f0:
e8:2e:37:f3:48:d0:3f:55:47:44:2e:f5:b0:62:b7:
24:fe:c5:b5:70:07:bb:23:ab:6f:71:c8:3e:fb:87:
63:b3:50:ef:ef:d8:31:0b:57:8c:7b:c1:87:2b:36:
63:8e:4f:46:14:72:16:49:52:7a:26:83:b2:c2:e3:
d3:fb:2b:05:d9:2d:4b:46:f2:7a:57:62:18:2c:ce:
3a:2c:63:92:15:df:96:78:89:6c:62:49:48:19:c9:
ad:85:d6:a4:fe:27:35:a0:90:7d:54:87:62:a2:7d:
ed:51:03:04:93:21:85:d4:f2:b5:e9:c7:d6:7f:2e:
22:cb:a3:dd:d4:27:ff:29:ae:47:2d:56:e0:ec:95:
9b:30:56:98:4e:35:95:8e:09:d0:93:0d:02:a0:10:
cb:3d:b6:ac:d2:7d:12:ee:61:f3:06:29:51:78:7f:
1e:29:d3:0b:5e:da:7d:57:da:a3:4c:bc:b8:b8:d6:
0c:00:78:3d:4c:f9:93:67:ba:20:02:94:cb:29:09:
c3:3e:66:3e:3f:29:b2:d8:ca:41:46:e0:62:43:cd:
1a:b7:1b:c7:b6:64:07:9d:56:dc:5b:a7:d1:21:af:
1d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DD:7B:AE:9C:46:CC:86:99:42:C1:0F:AE:8A:00:9B:3A:03:FB:14
X509v3 Authority Key Identifier:
keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ba:e3:bb:e2:b7:2b:d7:74:4f:78:c8:6a:81:ed:94:50:92:
3a:08:97:82:fc:28:3d:28:7e:0c:7a:3a:d6:fb:8f:b6:7e:63:
80:2a:19:09:bf:e6:c6:58:dc:a1:35:88:71:fb:80:9c:24:70:
d3:51:db:b2:0c:fa:7a:e6:16:ad:50:62:2b:cb:c1:9d:6a:0a:
ed:85:16:ef:c4:59:52:e5:ea:97:b4:c7:5b:db:a5:ce:43:3b:
4c:b4:1f:6e:51:a0:ea:1c:8c:04:a7:fc:80:82:57:de:62:2c:
31:c5:88:94:4c:5a:92:ee:6f:8f:f4:e7:6f:eb:21:f5:21:47:
a5:88:79:34:db:46:94:6b:e6:bc:7f:c7:cb:f4:65:04:1b:39:
d3:db:c7:43:f8:00:0e:a9:ef:de:c8:ff:a6:e8:ee:d2:14:14:
ec:a2:be:38:59:fb:f6:ba:4a:ad:ce:4f:a0:61:a5:c0:85:a1:
b8:07:0c:fd:7f:41:94:d4:dd:14:58:3f:10:fb:75:79:f7:f3:
7d:a7:3f:f2:f9:09:fc:ea:be:24:e8:8d:df:78:f8:f4:7b:10:
73:1e:49:28:3c:0e:70:d4:f6:c1:04:a6:e2:32:4a:af:5d:cc:
15:fc:e8:10:53:ec:c4:e4:02:4f:bb:93:83:69:d7:e8:31:fb:
76:a6:a7:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIWPy3vOT4KEvv8X8xzF6iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NGZhNTY3YzA3YTVhMmUxZjJjOGNiMjYxMWYxNzM2OTc4
NzFmNzgwHhcNMjYwOTIyMDkwMTEwWhcNMjYwOTIzMDkwMTEwWjAzMTEwLwYDVQQD
Eyg4ZWRkN2JhZTljNDZjYzg2OTk0MmMxMGZhZThhMDA5YjNhMDNmYjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2d5fPckcBA5AgwCxg/4kRxYnaX7J
jB5jAjZ2M/DoLjfzSNA/VUdELvWwYrck/sW1cAe7I6tvccg++4djs1Dv79gxC1eM
e8GHKzZjjk9GFHIWSVJ6JoOywuPT+ysF2S1LRvJ6V2IYLM46LGOSFd+WeIlsYklI
Gcmthdak/ic1oJB9VIdion3tUQMEkyGF1PK16cfWfy4iy6Pd1Cf/Ka5HLVbg7JWb
MFaYTjWVjgnQkw0CoBDLPbas0n0S7mHzBilReH8eKdMLXtp9V9qjTLy4uNYMAHg9
TPmTZ7ogApTLKQnDPmY+Pymy2MpBRuBiQ80atxvHtmQHnVbcW6fRIa8dowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7de66cRsyGmULBD66KAJs6A/sUMB8GA1UdIwQY
MBaAFAlPpWfAelouHyyMsmEfFzaXhx94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82ZGJhODMtYTRhNC00OTkxLWIyMGIt
YWVhMjUyZGM2M2IzLzEvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82ZGJhODMtYTRhNC00OTkxLWIyMGItYWVhMjUyZGM2M2Iz
LzEvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7rju+K3
K9d0T3jIaoHtlFCSOgiXgvwoPSh+DHo61vuPtn5jgCoZCb/mxljcoTWIcfuAnCRw
01Hbsgz6euYWrVBiK8vBnWoK7YUW78RZUuXql7THW9ulzkM7TLQfblGg6hyMBKf8
gIJX3mIsMcWIlExaku5vj/Tnb+sh9SFHpYh5NNtGlGvmvH/Hy/RlBBs509vHQ/gA
Dqnv3sj/puju0hQU7KK+OFn79rpKrc5PoGGlwIWhuAcM/X9BlNTdFFg/EPt1effz
fac/8vkJ/Oq+JOiN33j49HsQcx5JKDwOcNT2wQSm4jJKr13MFfzoEFPsxOQCT7uT
g2nX6DH7dqaniA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:10:55 2026 by rpki-client