Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
File: CNUcrod99ApdOUEmBQcIQb0QLFQ.mft (raw, json)
Hash identifier: dfb3b8EHRT9Ga/PQjiAPAHWCedCDz3DPv7GsRYvYozM=
Subject key identifier: CB:22:6F:21:97:F7:86:29:63:01:70:42:E8:82:F7:F3:C5:E5:DF:3F
Authority key identifier: 08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
Certificate issuer: /CN=08d51cae877df40a5d39412605070841bd102c54
Certificate serial: 01A0CB9091F2CF54F12A73ABEE6AE149E5D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
Manifest number: 0489
Signing time: Wed 23 Sep 2026 00:00:44 +0000
Manifest this update: Wed 23 Sep 2026 00:00:44 +0000
Manifest next update: Thu 24 Sep 2026 00:00:44 +0000
Files and hashes: 1: CNUcrod99ApdOUEmBQcIQb0QLFQ.crl (hash: nLqNZTYhrvLqDMmeK99z2+0y0iPeZ2WL3ymwHAX3pzQ=)
2: rM87y2TNY04ZUBsvbWAK2PD2DFQ.roa (hash: izh62xNZPL6q8fNdrdzu8ymlwNgh6Iq+rgdBJDo2fDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:91:f2:cf:54:f1:2a:73:ab:ee:6a:e1:49:e5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d51cae877df40a5d39412605070841bd102c54
Validity
Not Before: Sep 23 00:00:44 2026 GMT
Not After : Sep 24 00:00:44 2026 GMT
Subject: CN=cb226f2197f7862963017042e882f7f3c5e5df3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8b:37:0a:e4:eb:21:72:f3:fb:19:59:f0:45:
38:7a:77:bf:bf:76:69:3e:e8:2f:89:4a:04:83:88:
b3:55:d7:4d:75:0e:3d:a6:b4:81:a9:7a:08:e7:2f:
8e:a7:4d:c1:6f:ba:78:7f:ed:a1:96:02:56:17:8d:
c5:21:8d:91:f9:b8:c5:ef:48:2b:cd:aa:84:6c:88:
48:1f:89:d3:81:40:d7:42:34:6b:da:f4:55:15:78:
f9:b9:28:1f:5d:95:16:76:31:62:c0:82:f8:9a:cc:
1c:41:d5:bb:80:47:75:7b:12:b6:c9:11:c1:0d:fc:
a2:cd:c0:3c:4b:55:9e:fb:99:3f:98:31:22:f3:d8:
5a:22:e4:8d:43:c9:5f:0b:8b:d3:35:ff:82:12:f1:
73:7b:0f:d1:06:42:8b:3d:9e:93:23:32:54:3c:f1:
87:f0:fe:4b:b6:41:4d:cb:1f:26:81:3e:cb:ae:03:
aa:6b:28:33:88:82:54:fd:dd:e1:14:35:77:8b:83:
ee:ea:c7:ad:a2:42:e4:49:0c:4b:18:ad:6b:f0:34:
a0:66:c9:cf:1d:12:42:7c:13:18:b2:a3:56:02:db:
37:3e:29:7e:06:07:3f:d6:22:91:03:92:ca:ce:f5:
1b:65:bd:b0:a7:9b:6b:96:28:5b:fd:63:9a:20:ce:
a7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:22:6F:21:97:F7:86:29:63:01:70:42:E8:82:F7:F3:C5:E5:DF:3F
X509v3 Authority Key Identifier:
keyid:08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:04:54:7b:f7:15:53:81:e7:95:b0:14:a9:87:6c:c8:81:45:
74:41:fa:34:33:14:df:ce:43:fe:ab:0c:f6:ab:30:ff:d5:c3:
c0:54:3e:5f:60:d5:92:91:42:98:3a:e8:8a:10:e2:01:7d:09:
38:15:ba:ae:b0:bf:3a:e4:28:86:64:52:67:ed:8e:ac:21:da:
dc:b5:6b:e2:37:26:74:23:96:e5:12:ac:5b:ef:d5:db:3b:79:
11:fe:96:aa:88:8c:a4:75:7a:0f:50:d2:4a:8a:53:70:b8:b7:
4b:05:cf:d2:a1:b6:f8:ae:58:aa:1f:30:3a:6f:fc:22:a4:9b:
32:34:5a:a4:a0:e5:92:7e:d6:14:8d:10:86:86:6d:88:27:57:
3a:97:fe:a8:d1:cf:ee:a8:ac:1d:80:7c:44:8d:ce:c5:04:cf:
c5:bd:c8:c0:f4:77:33:a6:36:dc:9f:2e:2b:c1:e6:de:26:89:
f2:56:00:3f:01:9d:86:d5:8e:cb:5a:c9:6a:a4:77:cd:51:09:
17:ff:83:fd:3a:7e:87:2f:65:65:91:16:2d:da:40:f1:d1:10:
ae:bd:e3:69:71:77:af:eb:50:a5:f8:6c:3c:33:d4:da:69:40:
ba:cb:a1:eb:0a:59:2e:fb:80:e4:e2:70:90:28:22:99:3d:95:
72:92:d5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:08:45 2026 by rpki-client