Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
File: CNUcrod99ApdOUEmBQcIQb0QLFQ.mft (raw, json)
Hash identifier: LXtDoni8mT3qohxthAGaEDVprBgcXEbYQLLln4lsh+k=
Subject key identifier: E8:9B:CB:28:76:0C:57:A4:84:24:F6:90:7B:52:11:53:E2:BF:3F:5F
Authority key identifier: 08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
Certificate issuer: /CN=08d51cae877df40a5d39412605070841bd102c54
Certificate serial: 019DD0BF1B1AA34773E56BDE8B1D07F29E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
Manifest number: 02FC
Signing time: Mon 27 Apr 2026 21:01:18 +0000
Manifest this update: Mon 27 Apr 2026 21:01:18 +0000
Manifest next update: Tue 28 Apr 2026 21:01:18 +0000
Files and hashes: 1: CNUcrod99ApdOUEmBQcIQb0QLFQ.crl (hash: wCUSoRs/khlrOd4mf88bPIEmPGh0TwLZSmF8I6skVW4=)
2: wChspLti7-H96hAD_O_aR2xGlUk.roa (hash: NJPOZCHiP1U9lJxw4IbfYsBGNK3w63ZZutoiHCbcNQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:bf:1b:1a:a3:47:73:e5:6b:de:8b:1d:07:f2:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d51cae877df40a5d39412605070841bd102c54
Validity
Not Before: Apr 27 21:01:18 2026 GMT
Not After : Apr 28 21:01:18 2026 GMT
Subject: CN=e89bcb28760c57a48424f6907b521153e2bf3f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:75:b9:e2:14:0c:4d:8e:47:6f:39:f2:41:b1:
d1:b3:e2:80:e3:3d:4d:f9:02:e0:58:62:3c:8e:dd:
e0:6d:94:4b:6d:d6:e6:ee:19:49:f3:22:ca:4e:d1:
68:55:cb:04:eb:f8:f7:51:9e:8b:2a:52:0e:d8:7d:
39:d3:bd:dc:6d:95:24:66:ac:47:90:cb:d7:f1:58:
23:37:57:7a:fa:b9:46:bc:fa:05:5d:17:38:3f:21:
75:53:cc:f7:f7:8d:11:d8:d2:06:10:6b:3b:82:08:
af:0e:f7:d1:91:03:fa:5b:58:ba:2c:68:32:dd:98:
ff:eb:90:f5:60:7a:a2:22:65:f5:ac:0e:91:b4:c8:
0e:d7:8b:e3:83:62:5e:66:e9:69:7b:21:32:eb:cb:
19:93:bc:a8:8a:62:ce:43:e8:82:76:3d:c2:0c:99:
7f:e0:d8:f7:d9:51:2c:d9:98:86:e0:5c:84:3c:df:
be:41:34:fc:42:f7:59:8e:60:f0:54:03:ef:f1:68:
8a:e2:eb:67:77:15:63:b8:2d:d3:45:26:40:7a:9f:
11:c9:7d:94:1f:87:bd:53:6a:0c:68:48:13:53:18:
36:91:19:de:23:2d:37:cb:3e:43:6a:c9:b3:95:71:
f4:9d:8f:8e:91:11:70:fb:28:08:56:98:3e:45:6f:
5e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9B:CB:28:76:0C:57:A4:84:24:F6:90:7B:52:11:53:E2:BF:3F:5F
X509v3 Authority Key Identifier:
keyid:08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:05:a1:b2:19:a6:a3:56:5c:01:97:b2:7b:63:c5:39:fb:69:
ed:40:e6:4d:98:a6:e0:05:c9:9c:0c:49:ef:17:64:01:3b:74:
66:83:80:a9:40:45:b8:5f:e4:78:63:7f:1f:b5:1b:e4:1c:5a:
5b:b5:4b:40:59:4e:ee:b1:3e:25:e7:d9:97:de:80:2b:b4:13:
fd:06:cb:c1:a1:59:89:a3:3c:b5:c5:de:0d:17:b8:91:9b:ee:
83:4c:48:d1:a6:e0:7d:f0:95:6b:1a:f9:0a:63:6f:c2:84:86:
c7:25:2e:e1:1d:44:77:d8:74:3e:52:13:8a:91:18:04:8c:52:
f7:e2:e8:95:85:97:0b:6c:e2:ce:ac:45:3a:e5:c0:67:a3:7a:
ca:b6:98:fd:b8:e8:ab:35:0e:81:ff:e1:11:2d:11:07:b0:e1:
e6:c7:2d:39:8e:76:9e:03:df:a0:2b:73:89:48:85:3c:3a:55:
14:e7:a8:8c:ab:6c:44:1a:98:10:d3:ba:45:e6:34:30:c2:30:
45:98:4a:9b:90:2f:bb:08:88:2c:82:17:cd:95:f1:46:d7:d3:
b8:6b:b0:52:2c:6b:da:ff:e4:e0:ba:97:2e:0c:c3:13:ff:4c:
13:cd:1d:15:cf:38:1e:3c:e0:15:5e:c3:64:32:fa:a3:f1:df:
7e:8c:17:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:23:21 2026 by rpki-client