Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
File: CNUcrod99ApdOUEmBQcIQb0QLFQ.mft (raw, json)
Hash identifier: qQTQxnkAI2ePYr8hZKJdbX8nlmp3qAM6xyHk4S4rplA=
Subject key identifier: 34:A8:C5:50:E2:4C:56:05:B1:12:D1:7F:C3:3A:9E:05:BD:D2:FB:C3
Authority key identifier: 08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
Certificate issuer: /CN=08d51cae877df40a5d39412605070841bd102c54
Certificate serial: 019CE36CA52B5C80C14181DA9F9FC9B700AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
Manifest number: 0281
Signing time: Thu 12 Mar 2026 19:01:13 +0000
Manifest this update: Thu 12 Mar 2026 19:01:13 +0000
Manifest next update: Fri 13 Mar 2026 19:01:13 +0000
Files and hashes: 1: CNUcrod99ApdOUEmBQcIQb0QLFQ.crl (hash: 1m9BU4ZLWbhYKkzR4CErayu8lIesZ/fXJJkrz9rHQv4=)
2: uYeeyVnjpGhjZdAO0mHr7CJqfHg.roa (hash: FzLvKxr2COoLVWAh9ki2g9wdf08Gaszu8cu07a51Scw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:6c:a5:2b:5c:80:c1:41:81:da:9f:9f:c9:b7:00:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d51cae877df40a5d39412605070841bd102c54
Validity
Not Before: Mar 12 19:01:13 2026 GMT
Not After : Mar 13 19:01:13 2026 GMT
Subject: CN=34a8c550e24c5605b112d17fc33a9e05bdd2fbc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b1:67:9f:e1:d7:7b:13:b2:e6:0d:40:0c:ea:
ba:d4:fe:2a:a5:10:84:5a:9e:24:0e:6a:2a:fd:37:
5d:80:95:82:72:97:1e:e6:f5:ec:1f:11:5b:38:63:
81:aa:38:9f:74:56:98:f8:b7:16:e3:0b:1d:06:ba:
a8:88:d1:6c:3c:40:8a:77:37:c1:5d:3d:95:ef:f7:
61:6f:16:3c:c3:60:ee:9a:39:09:ed:c1:e4:a7:e9:
41:26:f1:5a:90:fa:b7:21:62:46:6d:80:20:5f:50:
d6:d0:a6:c9:fd:a3:94:ca:d2:48:1d:a5:c0:1d:38:
b0:8d:d2:09:b2:30:2f:3a:68:3c:11:f3:2d:ea:91:
02:58:14:5e:5f:2d:e0:e7:2c:3e:17:4a:3e:17:3f:
70:80:83:d9:85:c5:03:38:96:a5:be:9e:e9:95:a8:
fe:3e:d3:52:d4:e3:77:63:6c:fc:b2:78:64:ac:ff:
de:8a:e6:80:99:5b:91:cb:a3:34:53:2c:5c:9d:6a:
f5:5d:1a:ec:71:8e:81:6a:d7:74:13:cd:03:37:84:
b4:f4:3c:02:d3:22:2a:cb:71:a0:96:a1:f3:0c:22:
be:dd:0b:f7:e5:10:85:1f:76:70:69:06:73:7d:f1:
7c:4b:54:d0:f2:49:69:80:48:31:59:01:18:12:33:
66:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A8:C5:50:E2:4C:56:05:B1:12:D1:7F:C3:3A:9E:05:BD:D2:FB:C3
X509v3 Authority Key Identifier:
keyid:08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:67:e1:81:f4:48:a4:de:b5:32:3b:d4:e4:c6:0d:91:60:41:
07:15:72:a6:74:27:4f:b9:fc:83:6d:f8:63:a0:c5:04:e6:81:
7f:eb:38:5b:f0:22:c7:26:30:e8:e8:4d:89:82:d7:8e:a8:fe:
4c:cb:ce:00:de:e8:e7:42:dd:03:27:e3:97:e5:3b:e4:ec:b6:
d2:1d:79:c3:69:53:6c:c2:35:f2:f1:fa:f6:40:8d:1b:8f:5a:
c2:a7:f4:fd:45:c3:38:b0:f7:05:0a:3d:e4:9b:25:63:e6:d5:
d8:52:d3:97:e1:81:2c:3b:4b:6a:8b:cd:28:92:da:3a:3f:24:
d1:c0:74:fd:64:5b:91:ec:0f:24:0d:cc:bf:7f:2d:fe:7e:5f:
cb:e7:f2:6d:43:44:21:06:2b:99:fd:74:41:f0:7e:aa:89:ef:
f6:31:f2:e5:d1:1f:d2:98:fc:d2:82:0f:a7:02:32:26:36:6b:
00:59:ef:0e:a2:d6:06:69:e5:19:03:c6:df:d4:8c:a4:04:58:
95:72:e3:69:cb:e4:1a:3f:34:e0:71:d7:99:71:60:c0:a8:0c:
96:7b:a9:cd:ae:cc:d9:c0:80:64:f2:89:33:30:ad:74:de:26:
fc:f5:b4:a0:cc:bf:6c:10:6d:64:e4:17:e5:e2:28:ab:3f:1a:
57:7a:2c:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzjbKUrXIDBQYHan5/JtwCuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDUxY2FlODc3ZGY0MGE1ZDM5NDEyNjA1MDcwODQxYmQx
MDJjNTQwHhcNMjYwMzEyMTkwMTEzWhcNMjYwMzEzMTkwMTEzWjAzMTEwLwYDVQQD
EygzNGE4YzU1MGUyNGM1NjA1YjExMmQxN2ZjMzNhOWUwNWJkZDJmYmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7Fnn+HXexOy5g1ADOq61P4qpRCE
Wp4kDmoq/TddgJWCcpce5vXsHxFbOGOBqjifdFaY+LcW4wsdBrqoiNFsPECKdzfB
XT2V7/dhbxY8w2DumjkJ7cHkp+lBJvFakPq3IWJGbYAgX1DW0KbJ/aOUytJIHaXA
HTiwjdIJsjAvOmg8EfMt6pECWBReXy3g5yw+F0o+Fz9wgIPZhcUDOJalvp7plaj+
PtNS1ON3Y2z8snhkrP/eiuaAmVuRy6M0UyxcnWr1XRrscY6Batd0E80DN4S09DwC
0yIqy3GglqHzDCK+3Qv35RCFH3ZwaQZzffF8S1TQ8klpgEgxWQEYEjNm6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSoxVDiTFYFsRLRf8M6ngW90vvDMB8GA1UdIwQY
MBaAFAjVHK6HffQKXTlBJgUHCEG9ECxUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05VY3JvZDk5QXBkT1VFbUJRY0lRYjBRTEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hNmIwMDktMmQwYi00OGRkLTgyNWUt
NGI0ZDFhZDk2YzBlLzEvQ05VY3JvZDk5QXBkT1VFbUJRY0lRYjBRTEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9hNmIwMDktMmQwYi00OGRkLTgyNWUtNGI0ZDFhZDk2YzBl
LzEvQ05VY3JvZDk5QXBkT1VFbUJRY0lRYjBRTEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2fhgfRI
pN61MjvU5MYNkWBBBxVypnQnT7n8g234Y6DFBOaBf+s4W/AixyYw6OhNiYLXjqj+
TMvOAN7o50LdAyfjl+U75Oy20h15w2lTbMI18vH69kCNG49awqf0/UXDOLD3BQo9
5JslY+bV2FLTl+GBLDtLaovNKJLaOj8k0cB0/WRbkewPJA3Mv38t/n5fy+fybUNE
IQYrmf10QfB+qonv9jHy5dEf0pj80oIPpwIyJjZrAFnvDqLWBmnlGQPG39SMpARY
lXLjacvkGj804HHXmXFgwKgMlnupza7M2cCAZPKJMzCtdN4m/PW0oMy/bBBtZOQX
5eIoqz8aV3osZw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 05:54:00 2026 by rpki-client