Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
File: CNUcrod99ApdOUEmBQcIQb0QLFQ.mft (raw, json)
Hash identifier: o0UJ04Yxt43tRvbZWmf7qiWvrTUSmhlzs6cF8gcju+4=
Subject key identifier: 9D:B5:04:14:62:6E:5B:11:69:70:22:A5:61:21:DA:07:D2:03:F4:A2
Authority key identifier: 08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
Certificate issuer: /CN=08d51cae877df40a5d39412605070841bd102c54
Certificate serial: 01A1DFBA798A74DF5531B77FCB50B10C9504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
Manifest number: 0518
Signing time: Sun 15 Nov 2026 15:01:42 +0000
Manifest this update: Sun 15 Nov 2026 15:01:42 +0000
Manifest next update: Mon 16 Nov 2026 15:01:42 +0000
Files and hashes: 1: CNUcrod99ApdOUEmBQcIQb0QLFQ.crl (hash: sbTshxltaTfQOlMd2C2c5B6mzPHNpJkHqVo3Y+ptz2E=)
2: rM87y2TNY04ZUBsvbWAK2PD2DFQ.roa (hash: izh62xNZPL6q8fNdrdzu8ymlwNgh6Iq+rgdBJDo2fDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:79:8a:74:df:55:31:b7:7f:cb:50:b1:0c:95:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d51cae877df40a5d39412605070841bd102c54
Validity
Not Before: Nov 15 15:01:42 2026 GMT
Not After : Nov 16 15:01:42 2026 GMT
Subject: CN=9db50414626e5b11697022a56121da07d203f4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:62:83:e5:06:3e:1c:71:fe:32:bb:de:a7:
50:62:26:e8:66:3f:b2:86:78:01:d6:58:e4:0a:23:
00:f4:8f:d1:54:8f:89:64:b3:44:df:dd:65:a7:b3:
aa:d2:3a:7b:47:e6:a1:83:c3:ba:a2:7c:c7:cf:70:
a2:d6:df:c2:66:3b:98:25:7a:ab:07:44:15:04:0b:
74:31:5f:94:c4:7d:5d:a3:e6:49:87:eb:49:bb:99:
d6:4a:4c:04:29:00:19:89:ae:98:8b:02:52:ad:92:
c7:3b:23:df:c5:b2:53:0d:d8:f7:54:07:3e:56:b9:
96:8f:f9:af:38:a4:71:8d:57:ad:83:b9:e3:00:05:
2f:95:39:13:6a:92:e1:20:74:80:81:03:4b:05:bc:
89:41:b6:14:c0:4a:80:94:3d:41:e0:18:58:87:75:
9b:db:30:68:17:95:d6:ff:eb:45:97:76:4a:69:65:
66:04:ea:c1:8c:59:9d:7a:a9:d8:a9:2c:a8:8a:5e:
fb:cb:f3:4b:bd:7d:76:8a:14:e5:2e:5c:2a:ee:64:
3b:ed:ff:4e:2b:8a:ec:31:32:84:cb:5a:aa:b0:6c:
83:27:ce:4c:b6:28:6c:91:4e:74:3d:d7:95:fa:d7:
36:29:8a:aa:a1:47:7d:bf:cd:52:ca:64:e0:14:7f:
38:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B5:04:14:62:6E:5B:11:69:70:22:A5:61:21:DA:07:D2:03:F4:A2
X509v3 Authority Key Identifier:
keyid:08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:89:c5:a0:d6:e4:84:ff:f2:db:c3:b2:16:b8:d8:15:77:94:
c5:43:9b:39:66:c2:82:5b:13:00:69:47:47:19:ef:ac:16:89:
7b:3f:16:5b:68:53:c6:71:70:ce:a0:06:ed:65:1f:bb:8b:8d:
47:4e:a5:1e:ea:69:4d:4d:84:48:db:1b:d7:95:9a:61:ba:2f:
87:3e:7d:9f:04:94:e9:61:e3:d2:2e:67:fe:04:e7:02:2e:0c:
fa:8f:41:98:d5:1c:8f:55:6a:85:fd:1a:28:98:30:96:47:c5:
8c:5f:de:6f:56:9b:5e:0b:1b:64:a6:6d:38:7b:f0:01:01:28:
0a:51:a7:14:b7:db:dd:b1:46:23:b1:17:cf:e4:b6:51:2f:94:
7a:a6:08:ba:ee:4d:2b:64:ed:57:2f:1d:11:d6:e9:20:ea:4b:
0e:54:62:e0:fe:44:83:ca:a6:8c:34:7f:8f:d4:4c:74:9f:08:
40:46:f2:9c:52:1a:1e:b0:11:64:a7:df:8e:b5:ea:3c:40:cf:
2f:59:e9:aa:89:ed:4e:c2:90:11:f4:1f:c7:46:b0:7d:5a:50:
5b:6d:66:d7:1d:bb:95:e9:08:70:cb:a3:00:d7:ed:a3:36:8e:
d3:ec:36:4e:8d:b8:5f:ad:7c:52:0b:97:de:f4:3b:bd:ef:e9:
4a:b1:21:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:40:31 2026 by rpki-client