Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
File: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft (raw, json)
Hash identifier: +OLCn48hXv8PzyunWf/Eoc/cwZ3elkXMx34XelN9de4=
Subject key identifier: 64:AC:BB:21:3A:4B:BD:66:A9:B1:28:E5:FD:EB:A6:7E:FA:B6:9E:10
Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Certificate serial: 019CA9EAAC47A70EB26A0606EB6585BB6564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 15:00:54 +0000
Manifest this update: Sun 01 Mar 2026 15:00:54 +0000
Manifest next update: Mon 02 Mar 2026 15:00:54 +0000
Files and hashes: 1: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl (hash: z5XMFgPyKHg+EfDBlD1sABiyOGH8x4cgPrH8gs02PEQ=)
2: ouslthZTAKifIxprW-deYjg0IV4.roa (hash: UcvHA4mOVxzyujtpXJcQefQpw5wOyvUPfvVySqUiIdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:ac:47:a7:0e:b2:6a:06:06:eb:65:85:bb:65:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Validity
Not Before: Mar 1 15:00:54 2026 GMT
Not After : Mar 2 15:00:54 2026 GMT
Subject: CN=64acbb213a4bbd66a9b128e5fdeba67efab69e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5d:72:53:58:7a:6a:e9:a5:56:ba:c0:ac:06:
2d:09:62:f0:ec:34:5c:7a:6f:41:d6:c8:39:ce:90:
ec:24:ff:45:39:2d:8f:b0:eb:d9:83:73:11:f6:b1:
93:4e:3f:92:ad:59:22:b2:02:e2:fb:05:25:71:ef:
98:73:66:50:de:31:08:be:1c:4d:11:a3:31:00:a3:
c0:4e:9f:ca:48:4d:a1:4c:71:08:f9:68:f0:94:72:
70:b4:92:ec:70:f3:40:d8:09:90:ab:af:46:00:da:
cc:f2:ce:e6:38:98:01:03:00:43:74:8e:20:4e:c4:
ad:0e:48:82:2a:00:23:18:c1:85:a3:87:76:b9:96:
44:99:62:d9:2a:e5:d6:c5:ac:0b:23:e6:29:a3:02:
16:bd:5f:ac:e9:4c:53:5e:47:6e:f4:0f:fd:8b:e5:
98:81:df:89:43:72:8a:eb:22:cc:57:9d:6a:1e:b6:
b9:b1:c0:34:b5:67:d6:c9:ee:90:83:a0:1f:bd:b3:
f2:05:93:00:ec:8f:01:06:76:67:e0:50:9c:c5:76:
98:2c:fb:e7:d0:71:4b:04:01:91:df:f3:2c:0b:b3:
12:da:c6:63:f8:cf:98:a7:2d:dd:4e:de:74:96:d1:
44:94:88:e9:b0:9e:46:ab:f8:33:85:8b:e6:86:ac:
ed:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AC:BB:21:3A:4B:BD:66:A9:B1:28:E5:FD:EB:A6:7E:FA:B6:9E:10
X509v3 Authority Key Identifier:
keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:3a:3f:16:52:e0:19:e0:a6:86:27:20:e4:8b:63:43:69:3a:
f7:0d:6c:90:01:53:cc:6b:9a:2f:2d:0a:16:dc:2c:dd:1f:76:
0b:ed:d0:2b:2c:e5:9c:de:e0:b2:e6:78:7c:49:bd:54:4e:68:
c9:93:26:ac:46:2d:50:7f:df:f3:82:c0:11:23:32:39:62:62:
f1:e9:27:e9:6b:49:08:3c:13:cc:3f:5d:d1:d7:d0:b8:6e:9e:
0e:5f:00:f4:23:6a:b4:27:12:aa:0e:08:48:47:4c:bc:03:bc:
08:91:39:31:90:42:11:da:15:5c:92:a6:c2:17:40:a9:9b:7e:
59:d5:25:a8:c6:81:a6:f9:e7:0a:fb:65:55:8a:8e:63:88:05:
00:00:d5:50:6e:fd:74:90:8e:c1:1d:03:e1:fc:c5:08:64:42:
07:81:65:12:ec:01:d3:1e:ae:e8:69:57:b8:dc:44:e0:73:ca:
4d:22:e9:27:4a:b5:84:75:57:16:b2:fd:30:49:67:a2:b9:4e:
ae:7c:df:ce:18:f0:6f:42:f3:66:ce:cb:99:db:8a:24:00:16:
76:38:7f:fc:5c:7f:aa:7d:a5:3c:79:7a:98:62:b4:03:e5:35:
5a:33:b4:ba:05:8d:a1:35:5f:1e:e4:da:0e:19:ff:d1:35:2e:
79:ed:af:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:13 2026 by rpki-client