Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
File: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft (raw, json)
Hash identifier: y0pfNF73NyuMHHMsHLzclCDvA0VIVu5Jg1R27RtdXUc=
Subject key identifier: B6:1F:B7:F4:B6:47:41:B0:74:92:3F:B5:08:00:12:38:18:EA:21:92
Authority key identifier: 08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
Certificate issuer: /CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Certificate serial: 019CACB57DDCD601328E576F9C33A4B1567D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
Manifest number: 154B
Signing time: Mon 02 Mar 2026 04:01:41 +0000
Manifest this update: Mon 02 Mar 2026 04:01:41 +0000
Manifest next update: Tue 03 Mar 2026 04:01:41 +0000
Files and hashes: 1: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl (hash: tqWufU7vzacsFO9CRrBWNn6eipamFqfbn1vww6aI0cE=)
2: zW8nttVSxzQC9vPeCiBB2Fi43Bw.roa (hash: BlLZPwRJ87Mpdgf8WIPNTg5b23WBV+U7XBJtnee3wHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:7d:dc:d6:01:32:8e:57:6f:9c:33:a4:b1:56:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Validity
Not Before: Mar 2 04:01:41 2026 GMT
Not After : Mar 3 04:01:41 2026 GMT
Subject: CN=b61fb7f4b64741b074923fb50800123818ea2192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:fd:25:ee:f9:7c:51:01:ea:25:9c:4a:cd:
32:6c:7f:2a:d4:c9:76:87:1c:bb:2d:71:cc:77:c1:
d1:a9:4b:cc:02:62:40:b3:b0:64:06:f0:c3:b1:4f:
bf:a5:ea:b3:fb:de:60:6c:89:c6:25:d8:98:12:6b:
e2:77:67:1c:90:82:60:f6:ce:fc:d5:51:12:6a:78:
0a:5f:b6:88:fb:6c:0a:95:f5:2b:c2:8b:a3:ba:c2:
0d:e9:b6:ea:cf:03:50:72:65:b4:47:a9:69:3f:74:
dc:83:cc:98:bc:0d:67:f8:ed:52:75:14:8f:bb:04:
d5:7c:53:e6:c0:11:a5:0d:5e:9c:ec:03:cf:42:3d:
5e:a7:3e:c4:b9:17:dd:0f:a4:7e:06:ea:ef:08:55:
3a:ee:68:9a:66:81:1e:e7:c5:e2:57:ff:79:d0:65:
f8:1b:f3:3b:0a:2d:cb:d6:da:5d:d8:36:24:11:75:
05:a6:58:f7:80:ac:4f:ea:05:80:5d:6c:58:7a:c7:
63:bf:1d:df:8f:ee:5a:aa:4a:4f:ae:cd:0b:72:81:
d9:eb:dc:24:bf:28:33:54:b9:cc:6b:2f:2b:0d:41:
90:4e:f6:27:a6:5a:aa:f2:21:1d:43:23:2b:69:82:
c6:d9:fb:ad:a2:0c:7a:7a:17:42:d7:60:c9:bd:c2:
72:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1F:B7:F4:B6:47:41:B0:74:92:3F:B5:08:00:12:38:18:EA:21:92
X509v3 Authority Key Identifier:
keyid:08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:b2:15:2a:6f:35:df:2d:5a:4c:e6:68:18:c3:38:4f:38:ca:
03:2e:c9:25:f9:81:79:47:ba:13:aa:1a:5f:91:1a:e4:81:b8:
44:bc:02:40:3b:3d:86:26:f2:1d:bd:d5:e4:2f:73:6f:d9:f6:
0f:5c:ce:40:99:45:10:5d:88:92:07:f7:da:85:30:b6:7b:01:
13:b6:44:0c:f6:2b:32:f6:90:a2:ed:7f:15:09:17:6c:60:fa:
89:6f:23:81:ff:c2:19:04:72:34:8a:c2:d1:88:0c:51:55:81:
ec:2a:d3:02:72:64:5e:92:00:49:06:c6:2a:9f:5a:1e:99:7e:
2d:88:9d:f4:79:83:02:16:e1:7a:e0:21:92:3f:53:05:dd:f0:
75:b9:fd:ae:6d:87:1a:9c:35:36:6b:b3:82:a0:6a:35:d1:a6:
67:e8:02:fb:64:ec:1d:69:42:3c:23:e6:80:cf:8e:38:ac:4c:
95:9a:11:79:f4:4a:5c:2e:10:f7:0c:e5:d5:bf:80:c7:cf:30:
d3:cd:f9:77:ee:20:c4:9d:52:81:cd:e9:ad:0d:fc:35:45:35:
18:9b:ff:0c:82:d5:03:78:4b:91:c1:6c:f7:f5:38:9c:35:c3:
0a:26:77:55:ac:1f:6e:bc:fa:70:bd:b3:a8:d9:95:15:a3:9a:
ef:11:d0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:26 2026 by rpki-client