Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
File: CNUcrod99ApdOUEmBQcIQb0QLFQ.mft (raw, json)
Hash identifier: x8AfU9zuNGGr42nkPwzZH9DzYKBnibqOEF8eCrfpvII=
Subject key identifier: 43:96:7F:26:2F:46:14:01:F9:86:A1:C8:6F:F7:73:02:23:BD:52:3A
Authority key identifier: 08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
Certificate issuer: /CN=08d51cae877df40a5d39412605070841bd102c54
Certificate serial: 019DCED02078216914B579FF00A130D7A538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
Manifest number: 02FB
Signing time: Mon 27 Apr 2026 12:00:39 +0000
Manifest this update: Mon 27 Apr 2026 12:00:39 +0000
Manifest next update: Tue 28 Apr 2026 12:00:39 +0000
Files and hashes: 1: CNUcrod99ApdOUEmBQcIQb0QLFQ.crl (hash: x8XeTsX9TPofpDaB1TQlZ86sQtUHrV2vSUn8Lt/iCgM=)
2: wChspLti7-H96hAD_O_aR2xGlUk.roa (hash: NJPOZCHiP1U9lJxw4IbfYsBGNK3w63ZZutoiHCbcNQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:20:78:21:69:14:b5:79:ff:00:a1:30:d7:a5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d51cae877df40a5d39412605070841bd102c54
Validity
Not Before: Apr 27 12:00:39 2026 GMT
Not After : Apr 28 12:00:39 2026 GMT
Subject: CN=43967f262f461401f986a1c86ff7730223bd523a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a2:ba:57:d2:bc:ed:df:d7:56:07:a7:19:82:
85:7e:a1:d9:10:12:84:c6:8e:5b:73:77:41:99:92:
86:6e:ef:97:8d:66:22:67:57:af:84:45:a9:4e:ef:
b0:67:e0:83:9d:0e:67:c7:99:04:1e:d5:f6:97:d5:
51:0c:00:9d:74:56:2a:de:2f:84:f5:88:5c:43:26:
65:8e:af:21:52:90:8b:38:84:4b:be:9b:40:17:d8:
53:cf:d5:5f:1f:16:1a:5a:90:09:b8:cc:c7:ff:31:
20:21:c2:3f:9a:c6:8b:2d:fb:bb:ba:e2:f3:5c:6e:
cc:20:a6:ac:c3:80:c8:c3:16:f1:9e:d6:a8:68:84:
9f:99:95:c2:84:4e:8d:7b:4a:75:ad:ca:24:12:e0:
20:57:4b:38:58:27:e6:2d:31:4e:67:48:4c:53:3d:
4c:35:9c:17:eb:9d:1a:48:8f:95:55:e9:bf:d0:3b:
c0:9d:6c:2f:3c:d3:73:97:17:df:9e:b4:5b:70:50:
d2:6b:7d:b6:7f:a5:45:ef:b8:70:c7:52:ac:9d:38:
ba:f6:94:e5:9e:5c:a1:de:13:20:31:8d:55:8c:47:
09:ae:57:3d:5e:c1:b1:fb:c8:26:b1:a6:e3:22:83:
91:10:28:3b:77:33:f9:93:ac:f9:03:99:cf:c9:d0:
9f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:96:7F:26:2F:46:14:01:F9:86:A1:C8:6F:F7:73:02:23:BD:52:3A
X509v3 Authority Key Identifier:
keyid:08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1f:68:18:9d:22:fa:73:70:2b:69:e6:bb:83:0d:d9:61:0e:
04:ca:d9:e5:69:94:3d:a0:fb:19:13:b2:07:27:0a:0f:80:15:
86:c0:fd:85:57:8f:d9:b8:4d:3b:a3:5b:8d:26:8c:89:4b:be:
cf:74:2d:f4:da:91:8a:05:79:b8:1c:81:fb:7d:2d:10:b0:d6:
2f:43:00:e6:55:ff:c4:02:d6:d3:c3:b8:1d:e2:92:8d:0b:72:
b0:af:d8:c9:85:27:42:84:b6:ef:8b:77:f4:cd:3b:b6:a0:f8:
cf:87:1c:c6:fb:ec:49:ac:19:2b:f5:a1:41:1b:e6:01:65:66:
f3:20:14:3e:2f:22:c7:f2:fe:fb:56:6f:85:5e:a7:9d:1e:25:
61:87:9c:2f:4d:89:46:d5:4c:50:55:c7:94:e6:4c:25:71:b4:
ea:0d:33:3f:d4:f6:2c:e9:3b:df:15:7a:92:64:ff:73:d0:44:
6c:18:2b:40:36:c6:06:53:d0:38:f7:65:8e:e7:29:79:55:d9:
8e:da:e6:d1:ef:43:1f:26:99:f6:b2:d6:3e:36:69:f1:9e:27:
26:eb:9a:c2:8d:f9:fc:5a:f9:e8:36:91:80:a5:16:ea:c0:24:
ab:7e:be:9c:e1:5b:0e:c0:96:2e:8f:7e:59:65:35:c7:24:5c:
32:8b:9a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:20:18 2026 by rpki-client