Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
File: CNUcrod99ApdOUEmBQcIQb0QLFQ.mft (raw, json)
Hash identifier: 5Ol1H/mHGUAMwrrfNtkefGvVzuYnsStrOzztj9EVxJE=
Subject key identifier: 70:A2:02:DC:CD:6F:76:4A:11:88:C2:B2:10:4A:75:01:C7:D3:95:48
Authority key identifier: 08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
Certificate issuer: /CN=08d51cae877df40a5d39412605070841bd102c54
Certificate serial: 019D2703F76B3CAF1428725B31C93D9C5E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
Manifest number: 02A4
Signing time: Wed 25 Mar 2026 22:01:04 +0000
Manifest this update: Wed 25 Mar 2026 22:01:04 +0000
Manifest next update: Thu 26 Mar 2026 22:01:04 +0000
Files and hashes: 1: CNUcrod99ApdOUEmBQcIQb0QLFQ.crl (hash: zaX1qkQs/uvLtdwaRCgH1caoIRuiMhiBEc75kbvjwbM=)
2: uYeeyVnjpGhjZdAO0mHr7CJqfHg.roa (hash: FzLvKxr2COoLVWAh9ki2g9wdf08Gaszu8cu07a51Scw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:f7:6b:3c:af:14:28:72:5b:31:c9:3d:9c:5e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d51cae877df40a5d39412605070841bd102c54
Validity
Not Before: Mar 25 22:01:04 2026 GMT
Not After : Mar 26 22:01:04 2026 GMT
Subject: CN=70a202dccd6f764a1188c2b2104a7501c7d39548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4a:1c:94:29:2f:69:77:10:27:ed:8a:8c:c9:
15:4f:37:76:1d:a3:45:ef:46:1a:5c:46:f0:a1:d7:
7a:9c:7a:38:91:61:40:66:c7:28:4a:8a:4d:38:e6:
59:a8:df:df:a7:37:aa:89:c2:44:77:7d:00:b5:eb:
1f:37:45:7d:5c:ae:e8:c8:e3:74:1f:11:36:1c:16:
51:10:b1:85:08:ca:55:7f:e6:73:ff:88:32:94:3b:
22:47:f5:cf:b1:c3:29:c8:5d:42:80:6e:43:2b:1d:
d6:28:5f:31:69:09:0b:27:47:49:9c:3e:7f:82:93:
08:9d:90:cc:50:5a:68:9c:4e:58:a0:a4:6b:9c:83:
7b:1e:89:5b:a6:bd:d7:5c:9f:c9:a7:42:ba:e5:1e:
3f:49:a5:b8:c4:81:35:04:7c:10:22:93:06:d9:b9:
3b:7d:52:b9:bd:51:dd:2b:20:60:b5:fe:1c:ec:4b:
86:f8:5b:06:a7:bd:9c:1b:18:c2:75:fe:72:ee:3c:
33:d4:f5:ef:fa:ef:88:aa:50:2b:aa:76:8a:80:d1:
97:b3:8e:7d:f1:51:7b:18:6d:d9:de:2f:08:9e:df:
c0:1b:51:d4:63:b3:c5:89:b5:c5:28:fc:8c:97:58:
fa:ae:bc:7f:ad:d6:51:bb:0a:0f:95:f4:66:a4:6e:
b2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A2:02:DC:CD:6F:76:4A:11:88:C2:B2:10:4A:75:01:C7:D3:95:48
X509v3 Authority Key Identifier:
keyid:08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:64:e2:90:96:8e:99:fa:ca:bd:c1:35:e5:0d:cd:f4:3c:39:
b6:e2:03:bd:cd:61:cc:8e:4e:9f:4c:76:46:bd:b5:14:e5:37:
f4:f7:09:13:04:2d:57:1b:da:b1:b9:bf:13:23:ba:c5:79:53:
04:8e:d7:4f:e8:1d:c5:fd:d5:f3:59:f1:fd:ec:e8:2b:bb:52:
57:58:3f:28:7a:ab:1f:a5:b4:e6:07:cf:9d:85:68:3f:1e:9b:
ff:13:21:97:41:d2:b5:7a:ef:10:d7:03:f6:ff:82:5b:b2:c9:
24:88:f1:65:3a:28:2f:5c:fe:6a:fc:bd:d3:cc:5c:55:de:23:
75:47:0c:3b:11:52:c0:66:e3:b8:50:e6:8d:25:fb:58:fd:81:
ed:20:db:37:6c:01:7a:a0:2e:78:27:0f:f9:7f:b6:5c:02:a3:
c4:43:da:33:22:af:bc:9a:6f:62:ff:a8:03:6c:80:08:4c:c6:
77:c4:cb:45:3b:27:02:78:2c:d3:a6:4f:11:21:c6:06:40:ca:
5c:a0:27:e3:75:29:fc:d8:ae:aa:74:1f:42:2a:6b:43:5b:23:
d2:a3:83:71:01:4a:a3:af:3b:9b:fa:01:d1:74:15:64:01:9c:
60:de:f1:50:e3:c3:29:b1:cd:72:98:a9:b8:48:9c:dc:30:16:
e5:39:39:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:29:45 2026 by rpki-client