Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
File: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft (raw, json)
Hash identifier: TL4KkVg1QfiNNuTH0y3+ZzvEEFbq8Ofyx5mCT2ySLd0=
Subject key identifier: 69:C7:DB:89:BF:06:17:49:56:85:0E:17:7F:27:4A:74:08:E6:98:97
Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Certificate serial: 019DA30ACEAC4434BD2F7957E5FACC6FF68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
Manifest number: 18C5
Signing time: Sun 19 Apr 2026 00:01:27 +0000
Manifest this update: Sun 19 Apr 2026 00:01:27 +0000
Manifest next update: Mon 20 Apr 2026 00:01:27 +0000
Files and hashes: 1: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl (hash: qzpfzSn5qZb45X5JQYf4vjpeQmdTp9cqjVBAiwoKVC4=)
2: ouslthZTAKifIxprW-deYjg0IV4.roa (hash: UcvHA4mOVxzyujtpXJcQefQpw5wOyvUPfvVySqUiIdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:ce:ac:44:34:bd:2f:79:57:e5:fa:cc:6f:f6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Validity
Not Before: Apr 19 00:01:27 2026 GMT
Not After : Apr 20 00:01:27 2026 GMT
Subject: CN=69c7db89bf06174956850e177f274a7408e69897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:98:9c:16:a4:96:00:37:1e:53:3d:17:3a:3b:
e8:df:7a:4c:ea:94:77:73:a1:a8:7b:d7:c4:4d:65:
ef:75:75:03:c1:f0:2d:0a:f2:f7:f5:26:21:d3:a7:
9e:f2:22:d6:4b:36:0c:17:9a:d5:bd:de:55:ea:6f:
8d:96:ab:29:4c:db:41:9b:75:24:7e:04:bd:78:44:
29:21:a0:e6:17:50:4a:1c:ed:50:a5:cb:89:db:fc:
04:45:8e:b0:4e:dc:66:60:c9:56:60:b7:73:07:5e:
ae:ce:41:7a:e3:22:b7:f0:c9:d1:11:32:34:e0:2d:
19:f2:74:90:76:2d:a2:ad:aa:24:86:92:37:1e:75:
87:09:67:92:91:68:15:81:97:42:90:ea:d5:33:e4:
78:ee:be:de:3a:39:67:99:d3:6a:4c:9b:b3:01:f7:
af:04:9c:dc:99:97:b9:6b:cc:20:97:f8:27:6f:43:
75:6a:63:0a:71:0d:4b:98:d7:ad:b2:49:ff:a2:1d:
02:47:94:fb:9e:8a:65:88:87:c0:e1:68:74:8e:f4:
37:6a:ab:06:f9:92:87:1f:95:4c:95:6a:d1:bc:af:
78:48:87:3e:a6:58:96:30:ea:fe:f9:78:98:60:6c:
85:d9:83:f6:1f:c0:00:a5:98:55:04:f6:56:a5:52:
fb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C7:DB:89:BF:06:17:49:56:85:0E:17:7F:27:4A:74:08:E6:98:97
X509v3 Authority Key Identifier:
keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:91:e6:56:f9:ef:6f:db:cb:b2:69:61:d2:6d:75:de:48:48:
7e:fd:50:5f:27:0e:06:e9:6c:96:bf:84:e9:c3:10:ff:43:91:
c9:37:c9:dd:44:be:7d:bf:cb:dc:5c:32:b4:3a:2c:99:48:a4:
fb:55:54:15:c0:29:49:50:81:1f:47:c5:f5:36:55:8f:4d:7b:
16:7d:18:43:53:e6:9d:8e:33:54:4c:48:c4:3c:53:97:2f:9d:
e1:42:72:88:c9:fc:da:94:95:07:e9:3e:8c:04:0e:c3:38:8a:
e7:86:1d:57:0b:a7:f4:d8:a1:e2:d6:65:d9:4e:04:61:b5:55:
02:58:c2:5c:aa:dc:b0:ec:74:b2:64:4a:10:96:47:2d:41:1f:
e8:91:02:1c:65:3e:75:33:bc:d9:5b:d9:fb:b5:1f:26:4f:0e:
5c:13:a1:60:13:19:11:3b:19:81:21:33:c9:3b:2c:2c:62:0f:
e4:3a:cf:15:99:2d:60:9b:68:15:b6:f4:c7:41:e8:0c:97:38:
80:a6:2d:4e:be:7e:94:d1:6b:fa:1e:b2:16:fd:72:9c:7f:f5:
72:d5:4d:96:ec:32:eb:a9:02:86:46:ee:ae:6f:1b:d3:cb:36:
33:71:86:1a:a7:cd:39:ec:79:93:cb:9f:24:2f:b3:93:96:61:
50:59:26:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jCs6sRDS9L3lX5frMb/aNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NGZhNTY3YzA3YTVhMmUxZjJjOGNiMjYxMWYxNzM2OTc4
NzFmNzgwHhcNMjYwNDE5MDAwMTI3WhcNMjYwNDIwMDAwMTI3WjAzMTEwLwYDVQQD
Eyg2OWM3ZGI4OWJmMDYxNzQ5NTY4NTBlMTc3ZjI3NGE3NDA4ZTY5ODk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45icFqSWADceUz0XOjvo33pM6pR3
c6Goe9fETWXvdXUDwfAtCvL39SYh06ee8iLWSzYMF5rVvd5V6m+NlqspTNtBm3Uk
fgS9eEQpIaDmF1BKHO1QpcuJ2/wERY6wTtxmYMlWYLdzB16uzkF64yK38MnRETI0
4C0Z8nSQdi2iraokhpI3HnWHCWeSkWgVgZdCkOrVM+R47r7eOjlnmdNqTJuzAfev
BJzcmZe5a8wgl/gnb0N1amMKcQ1LmNetskn/oh0CR5T7nopliIfA4Wh0jvQ3aqsG
+ZKHH5VMlWrRvK94SIc+pliWMOr++XiYYGyF2YP2H8AApZhVBPZWpVL7hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnH24m/BhdJVoUOF38nSnQI5piXMB8GA1UdIwQY
MBaAFAlPpWfAelouHyyMsmEfFzaXhx94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82ZGJhODMtYTRhNC00OTkxLWIyMGIt
YWVhMjUyZGM2M2IzLzEvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82ZGJhODMtYTRhNC00OTkxLWIyMGItYWVhMjUyZGM2M2Iz
LzEvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJHmVvnv
b9vLsmlh0m113khIfv1QXycOBulslr+E6cMQ/0ORyTfJ3US+fb/L3FwytDosmUik
+1VUFcApSVCBH0fF9TZVj017Fn0YQ1PmnY4zVExIxDxTly+d4UJyiMn82pSVB+k+
jAQOwziK54YdVwun9Nih4tZl2U4EYbVVAljCXKrcsOx0smRKEJZHLUEf6JECHGU+
dTO82VvZ+7UfJk8OXBOhYBMZETsZgSEzyTssLGIP5DrPFZktYJtoFbb0x0HoDJc4
gKYtTr5+lNFr+h6yFv1ynH/1ctVNluwy66kChkburm8b08s2M3GGGqfNOex5k8uf
JC+zk5ZhUFkmdA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:27 2026 by rpki-client