Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
File: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft (raw, json)
Hash identifier: V+kKwQqaFq1qMZsfeedzAFJex2fraUwld54hHtTfcuk=
Subject key identifier: 35:C9:4B:F8:FA:D4:DD:61:AA:A3:5F:B9:9C:E7:BA:9E:F2:1B:CE:83
Authority key identifier: 08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
Certificate issuer: /CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Certificate serial: 019FA975C04D4FFE8B39C18C4722E5B187E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
Manifest number: 16D7
Signing time: Tue 28 Jul 2026 16:01:34 +0000
Manifest this update: Tue 28 Jul 2026 16:01:34 +0000
Manifest next update: Wed 29 Jul 2026 16:01:34 +0000
Files and hashes: 1: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl (hash: r0yZ06qCEoQEPAY/Ao7m3rltFra2B9zMB5Ja4XWiXBg=)
2: zW8nttVSxzQC9vPeCiBB2Fi43Bw.roa (hash: BlLZPwRJ87Mpdgf8WIPNTg5b23WBV+U7XBJtnee3wHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:c0:4d:4f:fe:8b:39:c1:8c:47:22:e5:b1:87:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Validity
Not Before: Jul 28 16:01:34 2026 GMT
Not After : Jul 29 16:01:34 2026 GMT
Subject: CN=35c94bf8fad4dd61aaa35fb99ce7ba9ef21bce83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:09:3f:2b:61:47:3b:8f:3f:59:d3:96:4f:0b:
63:24:56:cf:10:94:81:39:8d:0c:37:fa:2b:40:2a:
ec:32:43:a5:dd:29:53:04:8e:69:66:ee:dd:c8:13:
3f:70:7c:a5:55:f4:f7:67:03:7c:57:16:8c:a1:18:
41:ab:35:af:9d:d2:14:36:3f:28:84:d8:a1:64:a1:
7b:ba:83:5f:50:b4:de:34:23:6c:13:39:b7:97:fe:
11:12:9d:17:24:c7:04:8b:fd:2b:fa:0d:d8:9b:bc:
f4:3a:33:b7:cf:0a:ef:61:92:3f:92:13:23:cb:56:
62:51:78:6b:59:35:c2:44:cb:85:03:33:a0:b5:0e:
ee:97:41:9b:11:f0:96:0c:db:7b:43:24:e4:32:56:
bb:b6:f9:87:a1:19:73:b2:a7:83:d8:a8:45:44:91:
5f:aa:83:1b:e6:e1:d5:a5:09:8b:2c:eb:c9:77:4a:
0e:f1:5e:ae:84:44:09:7f:eb:67:c6:5d:0b:8a:5b:
3e:9f:3e:39:b7:37:14:80:51:26:ee:37:be:57:3e:
6b:30:b8:8a:d0:fe:a6:1d:19:dd:15:cb:4e:80:63:
b6:c2:44:6e:4c:bd:11:03:64:d6:6a:68:d8:34:af:
d0:22:6a:fb:f5:47:8c:00:a0:be:42:ee:7e:c1:3c:
ff:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C9:4B:F8:FA:D4:DD:61:AA:A3:5F:B9:9C:E7:BA:9E:F2:1B:CE:83
X509v3 Authority Key Identifier:
keyid:08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c1:2c:e9:1a:b6:4b:2a:eb:7d:64:e1:53:ab:53:af:ec:ef:
24:16:70:01:d5:5e:66:40:25:18:76:01:74:2a:78:13:87:ac:
ba:3f:4e:41:e3:e9:33:ae:65:0d:09:1d:c0:9b:e6:d9:59:d2:
c4:19:75:17:6f:10:35:d2:73:b9:73:0f:19:3a:d0:fe:e2:c7:
6c:69:cf:4c:e3:fe:df:b9:d7:19:0d:65:68:67:58:98:9f:9c:
22:26:e3:ec:b6:f7:e2:06:04:a8:6a:d4:07:cd:81:0d:08:fc:
91:fd:99:9e:0f:ff:e2:8e:9e:13:56:7c:f5:69:6c:03:3d:9f:
a8:d2:04:ee:92:ef:2c:83:19:f3:c7:7f:0b:1d:ec:f1:77:85:
03:49:c0:f1:0c:c6:5e:28:73:b3:80:9f:d5:8c:7c:f9:20:bb:
55:59:22:a1:21:25:c2:ce:f1:03:04:c9:5d:7d:23:25:b4:45:
a6:ca:91:a0:87:87:8d:37:e5:4d:b5:3d:da:1a:40:c5:bd:3a:
e7:3b:db:e6:34:97:67:4d:67:5a:7c:3a:83:7e:73:ce:bb:a1:
b8:b2:fc:f1:a3:fa:5c:f9:5d:f8:2f:d7:9f:b5:e7:22:a6:7a:
1d:cd:d0:7b:6f:83:ab:a9:0b:86:3c:3a:d2:b8:b7:31:4e:b4:
39:18:a4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:41 2026 by rpki-client