Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
File: CNUcrod99ApdOUEmBQcIQb0QLFQ.mft (raw, json)
Hash identifier: mfOjETTirlbO3t5ZKm78mdZ+3LCmjLNG2wTWoKgahr0=
Subject key identifier: 61:53:B7:B8:EA:92:1F:35:7F:61:C4:3D:CA:E5:D0:CA:7D:DD:78:A7
Authority key identifier: 08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
Certificate issuer: /CN=08d51cae877df40a5d39412605070841bd102c54
Certificate serial: 01A0C5C59DA3845A42755FC73BE0A917F2BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
Manifest number: 0486
Signing time: Mon 21 Sep 2026 21:00:57 +0000
Manifest this update: Mon 21 Sep 2026 21:00:57 +0000
Manifest next update: Tue 22 Sep 2026 21:00:57 +0000
Files and hashes: 1: CNUcrod99ApdOUEmBQcIQb0QLFQ.crl (hash: 9Jl/eJkFFq/yssJ2JKXo6+sSSeghYrBYJRGAZW9cmoI=)
2: rM87y2TNY04ZUBsvbWAK2PD2DFQ.roa (hash: izh62xNZPL6q8fNdrdzu8ymlwNgh6Iq+rgdBJDo2fDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:9d:a3:84:5a:42:75:5f:c7:3b:e0:a9:17:f2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d51cae877df40a5d39412605070841bd102c54
Validity
Not Before: Sep 21 21:00:57 2026 GMT
Not After : Sep 22 21:00:57 2026 GMT
Subject: CN=6153b7b8ea921f357f61c43dcae5d0ca7ddd78a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:37:0c:ea:73:eb:47:b6:5a:fc:83:8f:54:d1:
3a:23:41:97:95:98:6c:5b:f0:b1:c4:3d:36:1f:0a:
95:97:c2:1b:b3:db:34:a4:fd:d7:66:9e:0d:49:2d:
ab:84:3d:b8:0a:b5:ca:9f:21:05:eb:87:ef:22:7c:
72:67:32:ec:6a:25:48:87:99:0e:48:08:01:90:c7:
2b:8e:18:19:6a:be:72:65:ce:59:d2:fc:e8:2b:d6:
bf:b4:a4:b3:4b:ad:f5:96:1f:52:ac:51:dc:58:35:
1f:d1:3e:ad:d4:6b:ca:1d:9d:78:52:d7:bc:c3:ff:
72:1d:a8:f3:d4:27:87:cf:d2:c8:f8:79:c5:dc:ad:
2a:af:0c:d0:32:dd:38:fe:fe:6e:d2:29:94:a2:33:
cd:ec:b2:5c:1a:49:67:52:2c:57:65:50:8e:a0:8f:
79:42:fd:1f:19:4a:91:2c:b0:2c:21:60:ca:32:7a:
af:20:f2:0c:0a:b4:10:48:f3:24:18:30:97:3a:e7:
8b:b3:b8:30:7c:73:c6:01:8a:fb:d2:79:f3:29:33:
50:3c:4e:7f:b2:c8:3b:e3:ff:5f:f4:26:fd:bb:f0:
45:9c:72:87:39:ad:f9:b1:f9:13:15:e8:e7:5e:11:
ce:f3:9d:d2:d8:b2:7c:d9:a3:af:4a:2f:c5:51:db:
78:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:53:B7:B8:EA:92:1F:35:7F:61:C4:3D:CA:E5:D0:CA:7D:DD:78:A7
X509v3 Authority Key Identifier:
keyid:08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b2:df:17:b3:ab:be:58:cb:69:dc:13:2b:f3:65:34:ac:cb:
79:e1:3f:56:ed:ba:33:f7:81:c8:a5:42:18:ec:88:51:be:29:
e0:83:cb:87:bd:70:80:b4:4a:c9:e3:dc:5b:7f:9d:b7:b6:4e:
d4:c7:12:58:81:05:a2:2c:5c:9f:e9:41:09:87:23:07:7f:36:
34:85:32:c0:b4:a1:61:28:17:f9:33:ab:79:53:a5:7d:8c:80:
83:25:94:0d:0a:9c:31:61:0c:31:66:2c:9d:d9:fe:00:bc:63:
45:c0:16:6c:a0:9a:cc:3a:a5:12:ac:24:20:a7:33:94:a6:4f:
7c:8a:39:d2:f8:39:0a:4d:d5:f5:17:ec:1f:01:0d:b2:7f:65:
54:05:c9:71:ec:62:83:5d:b0:d6:02:cc:76:34:46:60:38:37:
81:ca:c5:18:66:39:72:42:4b:ad:f8:a1:8b:47:6a:0c:99:5d:
ea:b2:ea:2a:cc:a8:c7:ec:84:23:30:9a:e3:82:9e:f0:ad:70:
50:b7:3b:44:c5:01:4f:eb:15:89:f0:93:d7:4a:d9:7e:c9:cc:
2c:a9:c6:2b:1e:86:5a:aa:cb:72:9f:d2:73:1e:04:fb:b4:0a:
2f:78:19:a2:00:37:ba:e8:14:94:b0:3e:c8:c3:a7:35:c3:68:
b2:e1:59:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFxZ2jhFpCdV/HO+CpF/K7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDUxY2FlODc3ZGY0MGE1ZDM5NDEyNjA1MDcwODQxYmQx
MDJjNTQwHhcNMjYwOTIxMjEwMDU3WhcNMjYwOTIyMjEwMDU3WjAzMTEwLwYDVQQD
Eyg2MTUzYjdiOGVhOTIxZjM1N2Y2MWM0M2RjYWU1ZDBjYTdkZGQ3OGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DcM6nPrR7Za/IOPVNE6I0GXlZhs
W/CxxD02HwqVl8Ibs9s0pP3XZp4NSS2rhD24CrXKnyEF64fvInxyZzLsaiVIh5kO
SAgBkMcrjhgZar5yZc5Z0vzoK9a/tKSzS631lh9SrFHcWDUf0T6t1GvKHZ14Ute8
w/9yHajz1CeHz9LI+HnF3K0qrwzQMt04/v5u0imUojPN7LJcGklnUixXZVCOoI95
Qv0fGUqRLLAsIWDKMnqvIPIMCrQQSPMkGDCXOueLs7gwfHPGAYr70nnzKTNQPE5/
ssg74/9f9Cb9u/BFnHKHOa35sfkTFejnXhHO853S2LJ82aOvSi/FUdt4kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFTt7jqkh81f2HEPcrl0Mp93XinMB8GA1UdIwQY
MBaAFAjVHK6HffQKXTlBJgUHCEG9ECxUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05VY3JvZDk5QXBkT1VFbUJRY0lRYjBRTEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hNmIwMDktMmQwYi00OGRkLTgyNWUt
NGI0ZDFhZDk2YzBlLzEvQ05VY3JvZDk5QXBkT1VFbUJRY0lRYjBRTEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9hNmIwMDktMmQwYi00OGRkLTgyNWUtNGI0ZDFhZDk2YzBl
LzEvQ05VY3JvZDk5QXBkT1VFbUJRY0lRYjBRTEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7LfF7Or
vljLadwTK/NlNKzLeeE/Vu26M/eByKVCGOyIUb4p4IPLh71wgLRKyePcW3+dt7ZO
1McSWIEFoixcn+lBCYcjB382NIUywLShYSgX+TOreVOlfYyAgyWUDQqcMWEMMWYs
ndn+ALxjRcAWbKCazDqlEqwkIKczlKZPfIo50vg5Ck3V9RfsHwENsn9lVAXJcexi
g12w1gLMdjRGYDg3gcrFGGY5ckJLrfihi0dqDJld6rLqKsyox+yEIzCa44Ke8K1w
ULc7RMUBT+sVifCT10rZfsnMLKnGKx6GWqrLcp/Scx4E+7QKL3gZogA3uugUlLA+
yMOnNcNosuFZSQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:19:47 2026 by rpki-client