Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
File: CNUcrod99ApdOUEmBQcIQb0QLFQ.mft (raw, json)
Hash identifier: eZA3ribyIJ+CZuK5anCfN3WjdygeLSoH9WmC2np5GDE=
Subject key identifier: FF:78:94:4B:46:C4:7B:50:E4:1F:7D:6F:A3:37:64:BF:FE:F3:75:04
Authority key identifier: 08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
Certificate issuer: /CN=08d51cae877df40a5d39412605070841bd102c54
Certificate serial: 019FABD1B5A9C3AD51A6F90F303CFA393AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
Manifest number: 03F4
Signing time: Wed 29 Jul 2026 03:01:15 +0000
Manifest this update: Wed 29 Jul 2026 03:01:15 +0000
Manifest next update: Thu 30 Jul 2026 03:01:15 +0000
Files and hashes: 1: CNUcrod99ApdOUEmBQcIQb0QLFQ.crl (hash: aA1fDV8feeYoV11waF3RJwViUh32TYrZN6eJWFHg21g=)
2: rM87y2TNY04ZUBsvbWAK2PD2DFQ.roa (hash: izh62xNZPL6q8fNdrdzu8ymlwNgh6Iq+rgdBJDo2fDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:b5:a9:c3:ad:51:a6:f9:0f:30:3c:fa:39:3a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d51cae877df40a5d39412605070841bd102c54
Validity
Not Before: Jul 29 03:01:15 2026 GMT
Not After : Jul 30 03:01:15 2026 GMT
Subject: CN=ff78944b46c47b50e41f7d6fa33764bffef37504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e9:85:e4:21:a9:8b:95:49:98:a8:2f:89:59:
83:f6:b3:db:5c:d2:71:68:37:6b:ca:4c:d1:51:c0:
3c:13:bc:04:64:9c:a9:91:f3:a4:4b:6d:1c:d7:35:
47:51:7d:e5:89:82:5a:cb:75:e8:77:4c:9e:29:f3:
a7:87:40:fe:14:50:a5:aa:2f:b7:1a:52:0a:6c:3b:
7d:c0:d4:51:6f:56:d9:18:a6:d7:68:a0:2c:55:d7:
8d:30:f1:ae:26:f8:62:ce:16:70:b1:ce:4e:83:ed:
85:44:4e:fe:4b:b0:26:73:8d:d3:fe:a3:ab:aa:97:
4b:59:da:7e:3e:b8:ad:67:c3:9f:5c:f8:3e:b8:25:
35:2c:78:d1:16:04:31:94:df:88:ea:71:ec:0c:1c:
a8:d6:ae:bd:a2:d7:77:1c:57:c7:e2:b8:89:5d:6e:
3e:2c:e9:55:57:6d:e7:86:16:59:87:f5:b4:75:e7:
ce:9b:05:90:2f:84:6b:63:97:9a:31:32:3c:82:ff:
eb:99:e7:92:64:c9:6f:5b:08:9f:b1:4c:35:73:b9:
56:a2:c3:06:fb:ef:4f:83:f6:75:7e:f8:37:a8:68:
30:92:72:92:fa:1a:82:14:e3:c5:dc:f6:ea:90:de:
1a:c8:a4:be:90:ca:78:bc:45:f7:51:10:1f:90:7a:
d3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:78:94:4B:46:C4:7B:50:E4:1F:7D:6F:A3:37:64:BF:FE:F3:75:04
X509v3 Authority Key Identifier:
keyid:08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a4:bf:93:bf:94:3d:bc:0d:35:58:ef:1a:a3:51:37:56:42:
fd:54:42:fa:e9:0f:7f:dd:3e:37:99:c4:a5:e3:d3:f2:62:bd:
71:ee:ef:70:ab:84:7d:a9:5a:c8:76:f5:84:99:ee:4f:92:85:
a4:8f:34:8f:15:7a:47:ae:aa:c5:87:17:c2:ea:60:35:c9:1c:
76:2b:da:89:3a:31:d2:61:ae:a1:1f:66:3e:77:ab:3f:d2:74:
82:8f:aa:b1:58:0b:79:0a:1f:4d:9b:77:d2:d2:72:ab:1f:b6:
d5:47:17:45:c6:52:0c:03:67:20:ec:b6:10:ce:86:f5:d4:df:
6c:6e:eb:14:81:f1:5c:52:48:e5:31:cf:0f:a8:35:9c:0d:91:
6b:f5:8c:ae:d3:a3:70:2b:b8:2c:50:2b:46:79:10:38:e7:d6:
21:2a:12:af:2b:35:51:f4:8a:89:c1:9d:da:bc:84:92:e5:ce:
12:6b:49:e1:eb:b7:36:ef:1b:bc:37:ba:c5:c2:17:60:46:cd:
fe:72:65:03:92:aa:cc:fd:7d:95:af:9f:b1:8f:59:66:97:b2:
75:0f:e7:6c:01:b9:6e:ff:53:a3:8a:ce:b9:16:9a:3b:f6:68:
30:02:07:8e:ee:4d:bc:04:97:00:65:42:d4:cf:6f:de:5a:2f:
8b:36:3a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:48:13 2026 by rpki-client