Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
File: CNUcrod99ApdOUEmBQcIQb0QLFQ.mft (raw, json)
Hash identifier: E4Osg+iT/ZPmKzXQ/LhhUrEVZwqUWfMZh2Qh/C8rg0c=
Subject key identifier: 91:D2:97:34:EC:6E:19:3F:20:FC:BD:75:11:73:AA:3C:89:D4:C1:9D
Authority key identifier: 08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
Certificate issuer: /CN=08d51cae877df40a5d39412605070841bd102c54
Certificate serial: 01A08BD5DB36299DF9BFC0CF4421F2818ED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
Manifest number: 0468
Signing time: Thu 10 Sep 2026 15:00:43 +0000
Manifest this update: Thu 10 Sep 2026 15:00:43 +0000
Manifest next update: Fri 11 Sep 2026 15:00:43 +0000
Files and hashes: 1: CNUcrod99ApdOUEmBQcIQb0QLFQ.crl (hash: YL/3EueF+qQ1lDov4YDnP2mQWaT/BYyfBdDwZE15Eag=)
2: rM87y2TNY04ZUBsvbWAK2PD2DFQ.roa (hash: izh62xNZPL6q8fNdrdzu8ymlwNgh6Iq+rgdBJDo2fDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:db:36:29:9d:f9:bf:c0:cf:44:21:f2:81:8e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d51cae877df40a5d39412605070841bd102c54
Validity
Not Before: Sep 10 15:00:43 2026 GMT
Not After : Sep 11 15:00:43 2026 GMT
Subject: CN=91d29734ec6e193f20fcbd751173aa3c89d4c19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:39:94:32:c3:56:85:0a:3b:5d:4c:b6:72:37:
7e:fb:ba:27:8e:31:70:25:50:7a:2f:6c:89:da:e4:
c9:67:0d:4b:23:f6:be:02:1c:b2:7b:98:92:b0:bf:
0a:15:9f:eb:5a:63:ef:06:5f:91:52:b6:39:34:4b:
f6:c4:91:d8:3e:46:e9:e2:0b:93:a9:96:e1:48:ba:
4d:32:2c:25:c1:1e:ea:42:5c:65:06:42:d6:d2:88:
94:ba:39:b7:20:da:ae:72:a3:bb:73:2d:c8:96:01:
ec:2c:a0:1e:32:d5:2c:1d:73:a8:15:ea:2e:aa:2b:
72:82:c0:1f:23:34:bd:fc:16:cf:69:ea:38:d5:bf:
a1:50:79:ba:94:bb:60:82:06:35:a8:28:80:5a:4f:
17:46:81:db:9e:b9:67:45:38:b5:32:2e:73:66:3b:
b9:04:b9:25:30:66:5c:09:7f:d6:fb:1f:9d:89:cf:
a4:a6:2f:d0:55:4f:2b:1d:c4:18:1a:5d:01:c8:dc:
5f:de:50:fb:84:60:2d:87:f9:a7:05:f8:d5:1a:e9:
7e:e4:cf:72:c1:10:47:df:16:ff:13:7c:0d:b1:bf:
0b:a6:55:bd:b5:46:e9:0e:46:74:0b:1f:f4:93:1e:
d7:ae:16:a9:ba:55:13:4c:36:13:14:27:c7:4f:c7:
e9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D2:97:34:EC:6E:19:3F:20:FC:BD:75:11:73:AA:3C:89:D4:C1:9D
X509v3 Authority Key Identifier:
keyid:08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:33:c5:af:08:17:9c:cc:cb:fd:09:87:a3:ad:bf:0b:80:19:
cd:e7:ca:c3:d0:2b:1e:dc:ee:5e:96:c8:52:b3:b2:fe:83:25:
62:06:35:30:53:75:3d:07:a6:6a:05:15:ac:7f:1b:1d:d4:ec:
6a:3c:2d:d9:e2:0b:1b:bc:ed:3b:8c:4d:4e:c4:20:54:65:f5:
26:21:77:b9:6a:e4:b6:0e:65:2e:dd:9a:eb:36:b5:71:2f:80:
ef:e5:81:0e:c4:4c:cb:02:38:8e:95:dc:4d:4a:4c:f6:a6:ed:
f2:52:e5:f8:e1:94:e2:d8:53:12:13:71:e4:a1:c7:59:35:c1:
4b:1d:1b:bb:dd:a2:1f:37:87:1c:99:fe:4f:9c:3e:ae:e7:ec:
81:8e:45:55:da:89:d4:20:30:ca:d7:3b:22:63:8d:89:d7:f4:
6f:96:da:92:34:d1:4d:70:ab:38:09:56:b2:30:1d:1c:20:c1:
bc:2f:86:f9:e0:e7:59:2a:f0:bd:68:4c:4f:0f:ed:f2:4b:1e:
58:45:5a:57:7c:8a:c6:a9:4a:ee:ed:c9:de:08:76:d8:50:b5:
11:6f:25:46:91:05:17:be:d6:e7:57:08:72:eb:dd:7a:29:33:
47:24:9d:f6:65:41:86:11:bc:f0:9a:01:91:e1:ac:6e:47:14:
e6:a1:b4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:27:06 2026 by rpki-client