Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
File: CNUcrod99ApdOUEmBQcIQb0QLFQ.mft (raw, json)
Hash identifier: GvcRPLHbE0q0JUUjMkARiE9sVNI25PEtciy7EEiocWM=
Subject key identifier: 7B:63:AC:09:FC:DF:CF:E2:92:FC:0D:6A:CD:07:C7:E3:0C:66:34:7C
Authority key identifier: 08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
Certificate issuer: /CN=08d51cae877df40a5d39412605070841bd102c54
Certificate serial: 019DA453A182DDDEC2FFF8C64C93C09BD03E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
Manifest number: 02E5
Signing time: Sun 19 Apr 2026 06:00:37 +0000
Manifest this update: Sun 19 Apr 2026 06:00:37 +0000
Manifest next update: Mon 20 Apr 2026 06:00:37 +0000
Files and hashes: 1: CNUcrod99ApdOUEmBQcIQb0QLFQ.crl (hash: U26kcYIYCpd8Qm44Fo5O5UqrQ/tBscXVbakEV+QY8Dk=)
2: wChspLti7-H96hAD_O_aR2xGlUk.roa (hash: NJPOZCHiP1U9lJxw4IbfYsBGNK3w63ZZutoiHCbcNQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:a1:82:dd:de:c2:ff:f8:c6:4c:93:c0:9b:d0:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d51cae877df40a5d39412605070841bd102c54
Validity
Not Before: Apr 19 06:00:37 2026 GMT
Not After : Apr 20 06:00:37 2026 GMT
Subject: CN=7b63ac09fcdfcfe292fc0d6acd07c7e30c66347c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ae:f2:7d:dd:1e:2f:c8:8f:75:e3:2d:a4:16:
b8:6b:2b:f6:7d:5c:7d:f2:19:97:f9:bc:df:3c:71:
01:ec:a8:59:56:18:5e:da:d8:e7:b2:98:0f:85:25:
46:2e:02:6c:9b:79:33:74:fb:3b:b9:7b:bf:ea:87:
28:40:51:3e:7f:b1:e0:cf:a3:d9:a6:73:3b:3b:80:
a4:15:7f:22:25:b0:ec:1b:38:9e:d1:2c:0e:ce:98:
fd:2b:6d:53:36:0d:f5:a5:77:25:a2:eb:89:ad:a9:
7c:de:16:cd:1a:7c:ef:93:7a:db:a4:1f:45:c7:43:
5c:a0:69:0f:2c:47:9c:f6:ae:75:ca:50:1a:bc:ba:
15:0e:fd:87:0b:76:6f:94:38:65:13:8d:27:b0:0f:
46:49:0b:52:7f:b8:6b:c4:2c:cf:f6:b1:d5:cf:51:
7d:18:31:ef:1e:82:b6:7d:23:3b:70:b7:bc:44:2f:
1a:c2:91:aa:e0:7c:b3:0a:76:23:26:17:dc:55:3a:
a4:2e:6b:86:9c:7c:da:0f:98:76:1f:c2:50:13:86:
cb:c4:6c:50:1e:b4:bf:e6:4b:6f:b2:80:fa:af:f0:
77:fc:29:6d:59:8a:67:ae:48:2e:cb:48:ed:49:25:
59:97:43:0c:ff:49:d0:28:fc:bb:70:62:7c:62:f1:
2d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:63:AC:09:FC:DF:CF:E2:92:FC:0D:6A:CD:07:C7:E3:0C:66:34:7C
X509v3 Authority Key Identifier:
keyid:08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a9:57:b9:a0:dc:56:bf:c9:67:95:17:e4:f6:eb:a6:5d:8f:
91:48:7a:6b:02:d1:01:9e:ec:ad:8c:a3:18:9c:3f:28:3e:10:
cc:98:15:fe:2c:26:60:86:90:5e:e6:1a:71:01:ff:88:76:a7:
34:88:e3:ac:79:03:61:d2:ae:44:a9:9c:d9:c9:59:b7:14:57:
f6:68:2d:0f:25:a2:dd:ab:66:70:77:97:f2:8c:65:80:2f:57:
31:dd:7a:75:17:10:91:71:33:9d:44:d5:d9:78:18:24:fb:9e:
7a:f3:63:ec:68:59:cd:d4:b9:0e:a2:3b:4d:f1:b0:78:14:11:
25:74:5b:7d:56:fe:21:7d:4e:59:af:a0:62:33:ac:e3:3e:a5:
66:48:bf:8e:79:c3:52:98:5c:90:96:52:66:0a:98:57:ed:db:
23:9b:bf:ba:3a:68:0c:d9:37:6c:ff:36:bd:d7:86:65:6e:e2:
14:ac:ce:80:ff:ad:c1:03:a2:f4:b4:2e:93:ed:ae:c8:43:b3:
74:eb:78:66:09:c5:f1:d2:cc:d1:14:66:9e:ce:de:55:f3:33:
73:46:b1:8d:76:4e:63:1b:0d:12:6c:58:d8:15:a7:b8:cb:85:
52:48:94:df:cc:ec:2e:4b:13:d8:80:16:25:b3:b7:0a:8f:db:
fb:af:1f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:30:54 2026 by rpki-client