Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
File: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft (raw, json)
Hash identifier: /GAl0y4JQcnkbaKmm/XgsNZoaFwq8FRn6cNZxWtQ5OU=
Subject key identifier: 20:FB:C0:1F:AF:D0:B8:DB:F0:84:D1:71:11:72:C2:1C:C7:4D:35:95
Authority key identifier: 08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
Certificate issuer: /CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Certificate serial: 01A137488FBDBE94B3DBFED4AFFCC5A3745F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
Manifest number: 17A5
Signing time: Tue 13 Oct 2026 22:01:04 +0000
Manifest this update: Tue 13 Oct 2026 22:01:04 +0000
Manifest next update: Wed 14 Oct 2026 22:01:04 +0000
Files and hashes: 1: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl (hash: h7GN8BQfdIJ8m0yJz9dpvSggDonk9ucROhO2dXWX+uE=)
2: zW8nttVSxzQC9vPeCiBB2Fi43Bw.roa (hash: BlLZPwRJ87Mpdgf8WIPNTg5b23WBV+U7XBJtnee3wHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:48:8f:bd:be:94:b3:db:fe:d4:af:fc:c5:a3:74:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Validity
Not Before: Oct 13 22:01:04 2026 GMT
Not After : Oct 14 22:01:04 2026 GMT
Subject: CN=20fbc01fafd0b8dbf084d1711172c21cc74d3595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b5:68:99:72:ac:fd:34:09:7b:01:cf:64:75:
12:a3:28:36:62:5e:ec:1a:c0:36:50:7e:91:a5:e5:
23:67:e5:c2:ed:bf:2e:3c:3b:03:ca:38:6c:be:be:
6b:14:e9:60:90:69:75:8d:df:44:60:ef:22:3c:11:
00:ae:2d:04:91:76:85:35:8f:e7:7f:42:b4:3b:dd:
7c:81:bd:ff:4d:2b:06:43:d1:43:2a:5d:9e:6e:f8:
bf:ac:37:eb:36:47:ed:92:25:dd:15:eb:f1:48:13:
f7:19:9d:6c:aa:b7:d5:c7:24:d1:38:13:fd:e3:f4:
fd:4a:d7:04:90:6d:f7:92:a0:0e:0c:12:ec:dc:24:
78:b4:5d:33:9d:49:11:f5:29:ba:de:e3:ee:10:86:
b8:23:57:3c:be:5c:46:12:f9:4c:48:18:48:41:11:
29:92:a9:6a:de:d4:70:1b:0c:2e:8c:d7:ba:09:e9:
cf:b2:bd:51:f3:a6:be:bc:10:b9:f8:58:2f:0a:1e:
f1:65:ef:68:fd:37:2d:62:48:16:2e:c7:cc:bb:a3:
99:3d:ba:fb:e7:6d:78:5c:e6:0d:c7:1b:73:67:f6:
ce:e9:73:e8:b7:0e:c1:2f:4d:d4:d5:df:3a:eb:fb:
a7:d6:e6:9f:1b:54:1d:53:13:ff:40:c4:f5:d6:22:
ff:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FB:C0:1F:AF:D0:B8:DB:F0:84:D1:71:11:72:C2:1C:C7:4D:35:95
X509v3 Authority Key Identifier:
keyid:08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:72:35:b2:58:44:bb:50:b9:58:6b:29:c2:23:18:2d:55:d6:
62:34:23:bc:5e:a8:e3:21:2e:21:2f:b9:39:af:14:cf:cc:26:
a4:3e:39:ac:5c:9e:66:2d:fc:b3:25:7c:af:c0:a9:64:83:ff:
4f:f4:6f:e5:c6:ca:b2:3c:8d:49:ce:05:46:19:c9:14:15:b1:
30:e8:53:6b:b9:7f:61:68:6c:2b:1c:af:f9:a8:59:f4:3d:71:
12:6f:5a:a2:a4:5a:9d:d3:69:e7:6e:e4:fd:ca:f8:08:c8:37:
8f:92:03:fc:ef:1d:86:71:48:53:be:41:74:e1:e8:7c:71:76:
c3:4a:eb:67:3b:19:4b:c4:9e:21:a1:e6:e5:39:b0:c6:42:73:
59:e1:78:cc:e1:09:91:f7:3a:35:09:06:96:7f:6d:76:9d:68:
35:e5:47:b0:3f:19:aa:fc:97:24:3f:0f:aa:e0:b9:e8:70:86:
33:03:75:f1:06:97:c9:52:cf:50:ee:d6:cd:85:fe:1c:1c:b8:
d4:04:ef:ee:c7:04:b2:d1:e1:ed:69:fe:89:e9:f0:7a:bf:e3:
7e:49:59:8b:6c:d8:f2:b6:e3:26:75:a1:ce:f0:b5:41:10:1e:
e1:25:c4:fc:52:e6:10:33:d8:c7:a6:2c:fc:ce:f5:4e:3e:8a:
45:47:ef:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:11:48 2026 by rpki-client