Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
File: CNUcrod99ApdOUEmBQcIQb0QLFQ.mft (raw, json)
Hash identifier: Y3BYjJxsKSaEIPdVF/V5idEZnBxkC2VPAPcrSL51v9g=
Subject key identifier: 28:D8:CE:86:37:1F:47:D5:72:2F:1B:19:F8:1F:7C:B7:6F:CE:32:C2
Authority key identifier: 08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
Certificate issuer: /CN=08d51cae877df40a5d39412605070841bd102c54
Certificate serial: 019E1C0F9DC66CE28B88E65C11E7320AB851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
Manifest number: 0323
Signing time: Tue 12 May 2026 12:00:45 +0000
Manifest this update: Tue 12 May 2026 12:00:45 +0000
Manifest next update: Wed 13 May 2026 12:00:45 +0000
Files and hashes: 1: CNUcrod99ApdOUEmBQcIQb0QLFQ.crl (hash: u+YDRid9W+6XsXLahoSjaqjQFH39wekRU8qD7j4cnVE=)
2: wChspLti7-H96hAD_O_aR2xGlUk.roa (hash: NJPOZCHiP1U9lJxw4IbfYsBGNK3w63ZZutoiHCbcNQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:9d:c6:6c:e2:8b:88:e6:5c:11:e7:32:0a:b8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d51cae877df40a5d39412605070841bd102c54
Validity
Not Before: May 12 12:00:45 2026 GMT
Not After : May 13 12:00:45 2026 GMT
Subject: CN=28d8ce86371f47d5722f1b19f81f7cb76fce32c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:5b:a4:86:ff:b0:19:f1:59:01:09:b0:92:
dc:ff:3c:bb:27:5b:fb:49:7b:50:8b:fd:2f:7f:98:
89:07:3d:55:64:d4:9e:29:cf:75:ed:9a:e2:ef:94:
77:82:a9:44:5c:63:59:fd:9d:d6:4d:ad:a0:86:50:
9c:a7:45:ae:40:7f:ad:8c:09:47:3d:07:0a:77:c8:
5a:84:5a:06:0a:51:cb:bb:ba:bd:e9:68:d8:82:63:
f1:ed:6a:93:5b:7b:c2:3f:21:e9:6d:68:16:00:48:
c0:cd:18:dc:d9:95:90:1e:5c:29:00:c8:5e:9d:ba:
db:ec:7b:a0:52:fc:30:4c:ae:7c:3f:fc:cb:05:32:
e9:95:68:44:22:6a:18:0c:1c:84:68:31:df:e2:8e:
80:56:40:6a:81:13:4d:35:6a:cb:9d:a4:ff:ea:01:
07:4c:5c:0f:f0:73:f0:8d:35:62:4c:65:ad:18:46:
d4:c5:57:73:ec:e6:2d:23:db:5a:fc:ff:7e:b5:2f:
8d:79:ce:5a:bb:a4:78:5d:65:72:a9:a5:b4:17:f7:
31:a3:a3:a1:0a:d4:31:d1:2e:08:b9:79:fe:68:01:
53:65:df:b6:b5:32:56:1a:d7:0c:02:8a:59:22:83:
6a:e2:60:e9:ed:45:86:5a:d0:a1:90:90:c4:0f:df:
41:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D8:CE:86:37:1F:47:D5:72:2F:1B:19:F8:1F:7C:B7:6F:CE:32:C2
X509v3 Authority Key Identifier:
keyid:08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:eb:66:aa:09:3b:ad:54:1c:99:4e:14:86:04:4a:a7:fc:40:
e8:81:f2:76:1b:42:4f:43:43:b3:9e:6c:d0:e8:2c:ac:0d:53:
01:aa:e9:86:1a:ca:28:0f:d2:e2:7d:26:32:29:98:46:e5:33:
93:20:1e:0f:63:55:c9:86:0b:52:1f:f4:8e:87:38:f5:e3:d7:
88:c0:7c:f9:67:be:78:b7:86:91:72:73:eb:12:f2:1d:7e:67:
5c:95:2a:a3:86:8a:27:8a:62:a3:0d:b8:52:a0:61:6d:69:82:
78:20:38:15:ce:23:33:6a:31:4a:42:8d:1c:c2:75:7f:71:5f:
04:7b:d5:a3:ed:fd:09:22:a8:98:56:92:c9:c7:29:53:aa:6f:
c7:57:90:42:1d:10:26:e0:f9:47:a3:d5:2d:0d:10:4c:ab:9e:
de:63:96:93:27:7a:e7:3b:ac:51:59:e9:34:5e:f3:e5:e4:d7:
0f:5d:98:f0:36:98:0e:57:05:fd:be:70:43:38:da:36:b8:3d:
3c:40:a4:ab:21:ab:31:1f:e9:9f:6b:52:9d:e7:3b:23:78:06:
d9:9d:70:bc:65:2c:b9:9c:88:72:56:2e:d9:b4:8b:90:ed:ff:
b2:7a:7c:d9:55:94:14:62:c4:49:06:a0:2d:53:a1:f9:f6:d9:
54:41:90:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:32 2026 by rpki-client