Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
File: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft (raw, json)
Hash identifier: 25FOk4LuXI8191a6KJ+mBOpdEwJW+tuze6tAkWaaNXk=
Subject key identifier: 3E:28:B0:9E:C9:6B:01:C7:C2:89:EB:F7:66:86:DA:86:0A:E1:64:70
Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Certificate serial: 019FA899826F323F68F2B4FCD50B6D96D405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 12:01:00 +0000
Manifest this update: Tue 28 Jul 2026 12:01:00 +0000
Manifest next update: Wed 29 Jul 2026 12:01:00 +0000
Files and hashes: 1: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl (hash: Y7gkf7NtpecwZM8Smo+JZUu/4yk5XIqIGKQcMjxfl08=)
2: ouslthZTAKifIxprW-deYjg0IV4.roa (hash: UcvHA4mOVxzyujtpXJcQefQpw5wOyvUPfvVySqUiIdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:82:6f:32:3f:68:f2:b4:fc:d5:0b:6d:96:d4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Validity
Not Before: Jul 28 12:01:00 2026 GMT
Not After : Jul 29 12:01:00 2026 GMT
Subject: CN=3e28b09ec96b01c7c289ebf76686da860ae16470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fb:bf:05:b1:9e:f0:1b:52:f4:92:29:7b:f7:
00:aa:b6:96:e8:c3:9c:75:3d:e4:01:7a:44:57:aa:
0f:37:1f:d6:20:ff:4a:4e:28:57:b6:df:60:27:34:
81:b6:e4:d7:ae:08:0c:ce:ee:9b:e5:0f:ac:fe:30:
b5:dd:e9:41:8b:4b:20:5f:49:53:d0:57:21:dc:76:
82:3c:ff:a5:fd:89:df:d0:26:dd:62:94:50:f9:8f:
27:fa:e6:ec:be:51:73:f3:bd:93:73:e0:f7:c5:67:
07:5e:ea:4c:53:a3:75:e0:87:01:f3:8b:ba:56:cb:
4d:42:f9:16:86:4d:1a:6e:12:38:63:83:89:6c:4f:
e7:e8:9a:9d:7c:fb:65:09:b9:16:14:4e:a4:ae:2a:
b8:06:af:9c:ab:d3:8c:9c:88:84:19:97:54:cf:00:
08:65:8e:40:b6:51:9a:93:53:cc:e7:96:ee:89:10:
c5:5c:82:de:c6:6a:52:66:12:75:70:87:0f:9d:69:
00:a4:ce:54:31:5b:20:c3:1e:b7:ac:8f:96:b4:7d:
1d:a7:8c:d1:f7:ac:60:d6:76:0f:48:ea:f2:8b:ac:
ec:d4:85:c5:72:cb:63:8b:c8:f9:ae:6a:ce:cd:96:
6a:2d:a0:0e:73:2f:4c:3f:7a:59:02:c7:10:08:04:
c8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:28:B0:9E:C9:6B:01:C7:C2:89:EB:F7:66:86:DA:86:0A:E1:64:70
X509v3 Authority Key Identifier:
keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:12:60:79:fc:61:c2:e4:0e:4b:65:e2:10:9e:b4:c2:da:81:
4f:6d:7a:4b:16:a6:83:92:63:84:9d:ea:1d:62:5c:b3:5e:96:
ef:3c:7c:99:cb:47:51:bd:b7:64:82:86:c2:00:17:03:d9:d8:
9c:8a:f8:48:04:1b:e4:42:66:4a:fb:5f:e2:61:08:de:d6:da:
d2:87:77:3b:27:fd:08:9c:16:37:0a:79:39:39:dd:33:ef:f9:
45:3c:98:23:27:65:43:78:f3:1b:24:10:ca:e1:ca:9a:33:91:
e8:f1:0c:4d:e8:39:93:0d:f8:c0:29:51:d8:e4:71:54:9e:36:
d0:2a:6d:c9:bf:d4:74:bb:02:84:c0:51:c0:58:ab:cf:96:dd:
24:bb:dd:fa:1c:a5:87:d7:bc:24:a1:ee:cf:33:a9:12:9e:f1:
0b:c6:9b:8f:0b:de:05:1b:9c:ec:10:a7:f5:d8:9c:52:ec:94:
d2:fc:cc:d5:38:4f:1f:c9:92:60:76:1e:76:73:8f:00:49:81:
9b:80:c8:09:0a:a9:86:42:b5:96:95:d7:03:ff:8c:5d:78:73:
e4:04:d8:7b:d1:58:72:1f:cc:86:a7:ff:19:9b:50:f0:f4:1e:
ae:39:55:73:88:46:55:83:ab:11:6d:3d:2d:d3:64:b1:25:1b:
fa:aa:e2:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omYJvMj9o8rT81QttltQFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NGZhNTY3YzA3YTVhMmUxZjJjOGNiMjYxMWYxNzM2OTc4
NzFmNzgwHhcNMjYwNzI4MTIwMTAwWhcNMjYwNzI5MTIwMTAwWjAzMTEwLwYDVQQD
EygzZTI4YjA5ZWM5NmIwMWM3YzI4OWViZjc2Njg2ZGE4NjBhZTE2NDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvu/BbGe8BtS9JIpe/cAqraW6MOc
dT3kAXpEV6oPNx/WIP9KTihXtt9gJzSBtuTXrggMzu6b5Q+s/jC13elBi0sgX0lT
0Fch3HaCPP+l/Ynf0CbdYpRQ+Y8n+ubsvlFz872Tc+D3xWcHXupMU6N14IcB84u6
VstNQvkWhk0abhI4Y4OJbE/n6JqdfPtlCbkWFE6kriq4Bq+cq9OMnIiEGZdUzwAI
ZY5AtlGak1PM55buiRDFXILexmpSZhJ1cIcPnWkApM5UMVsgwx63rI+WtH0dp4zR
96xg1nYPSOryi6zs1IXFcstji8j5rmrOzZZqLaAOcy9MP3pZAscQCATIdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4osJ7JawHHwonr92aG2oYK4WRwMB8GA1UdIwQY
MBaAFAlPpWfAelouHyyMsmEfFzaXhx94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82ZGJhODMtYTRhNC00OTkxLWIyMGIt
YWVhMjUyZGM2M2IzLzEvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82ZGJhODMtYTRhNC00OTkxLWIyMGItYWVhMjUyZGM2M2Iz
LzEvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhJgefxh
wuQOS2XiEJ60wtqBT216Sxamg5JjhJ3qHWJcs16W7zx8mctHUb23ZIKGwgAXA9nY
nIr4SAQb5EJmSvtf4mEI3tba0od3Oyf9CJwWNwp5OTndM+/5RTyYIydlQ3jzGyQQ
yuHKmjOR6PEMTeg5kw34wClR2ORxVJ420Cptyb/UdLsChMBRwFirz5bdJLvd+hyl
h9e8JKHuzzOpEp7xC8abjwveBRuc7BCn9dicUuyU0vzM1ThPH8mSYHYednOPAEmB
m4DICQqphkK1lpXXA/+MXXhz5ATYe9FYch/Mhqf/GZtQ8PQerjlVc4hGVYOrEW09
LdNksSUb+qriSw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:18 2026 by rpki-client