Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
File: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft (raw, json)
Hash identifier: La3J/HqaGhoKD4oiOHa6r23eQnGX5of/wZL0eWochUo=
Subject key identifier: 11:23:F2:C9:2E:E8:F2:C0:BA:CF:15:2C:D5:A1:8C:99:DF:A0:5E:89
Authority key identifier: 08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
Certificate issuer: /CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Certificate serial: 019EBDDA1DCB1C7F653CA3FEB3562B9D0F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
Manifest number: 165D
Signing time: Fri 12 Jun 2026 22:00:48 +0000
Manifest this update: Fri 12 Jun 2026 22:00:48 +0000
Manifest next update: Sat 13 Jun 2026 22:00:48 +0000
Files and hashes: 1: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl (hash: Sy61nlHE8LcYxBZLon+iDNXPMvCO2vHp9S+RZVCXJQc=)
2: zW8nttVSxzQC9vPeCiBB2Fi43Bw.roa (hash: BlLZPwRJ87Mpdgf8WIPNTg5b23WBV+U7XBJtnee3wHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:1d:cb:1c:7f:65:3c:a3:fe:b3:56:2b:9d:0f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Validity
Not Before: Jun 12 22:00:48 2026 GMT
Not After : Jun 13 22:00:48 2026 GMT
Subject: CN=1123f2c92ee8f2c0bacf152cd5a18c99dfa05e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:95:36:a0:e1:dc:38:52:ef:1b:d9:db:28:a6:
c1:05:3f:2b:1b:9b:ca:60:b9:4d:51:66:f3:c8:f1:
84:ea:0a:ea:84:53:52:52:2f:d9:12:04:8e:72:4d:
e2:10:b7:e2:eb:50:42:03:78:0d:28:fa:57:01:d9:
aa:82:d1:7c:68:45:a4:a8:d8:29:00:73:e5:51:99:
94:5a:7e:df:48:f8:1c:a0:13:a2:af:a8:59:76:99:
d4:1b:ca:d6:ff:99:69:71:3e:98:64:77:b6:65:98:
e2:4a:7c:a7:cc:54:85:b4:d7:0d:47:e6:11:5a:cf:
b9:19:c4:c3:6f:d3:a9:85:9a:4c:fa:cc:0a:99:dd:
44:d8:0d:28:94:9d:5f:77:ce:54:09:65:c5:ac:09:
b2:ca:88:7e:92:44:18:c4:08:2a:ac:97:fd:b2:4e:
70:d6:99:48:65:b4:6b:40:dd:48:ab:eb:1d:45:d1:
34:23:fe:10:0b:08:da:20:b3:bb:39:43:81:6f:3d:
83:40:de:15:e2:c2:c4:9a:38:11:de:60:83:79:e9:
86:06:c9:2c:40:52:e3:ee:a6:f7:6d:e2:3d:fe:24:
a4:90:d4:3f:01:3e:db:e0:41:e6:ca:29:b6:85:03:
47:14:fb:87:19:5c:02:e5:83:83:75:b5:e5:8b:5a:
41:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:23:F2:C9:2E:E8:F2:C0:BA:CF:15:2C:D5:A1:8C:99:DF:A0:5E:89
X509v3 Authority Key Identifier:
keyid:08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:86:d8:05:39:91:71:42:b1:e0:ad:15:59:62:c7:be:4f:37:
d2:97:e3:7e:d0:06:04:79:dd:ba:cd:37:35:78:2d:97:19:50:
17:21:c6:36:3e:37:51:36:ba:93:a5:d6:23:c2:09:57:d5:ba:
18:8d:04:b5:7e:f7:52:61:fd:a9:71:9d:8b:ca:5d:19:90:72:
68:4d:f9:d7:7c:57:52:1b:5f:5a:4f:5a:6e:ce:4c:c1:e8:67:
af:ad:d2:a4:ef:78:8c:cb:3a:77:42:e7:b8:2c:b4:a1:e0:ef:
1f:46:73:b0:32:2e:a6:51:0a:5d:92:d0:34:a6:3c:b5:7b:3b:
bc:a6:f8:80:b3:79:28:b5:e2:49:86:f6:01:a5:15:fd:b6:26:
b2:0a:ed:03:fe:2d:b0:36:e1:72:8f:c4:9b:7a:74:e7:92:05:
6a:d8:19:5c:26:aa:73:c8:8c:ad:3b:00:64:4e:d3:9f:c8:a1:
34:20:ad:f3:c5:3f:55:93:85:cf:ab:f3:05:ae:f6:06:3e:31:
cc:f8:b0:fa:11:fe:92:ba:02:8e:d1:45:29:d1:81:30:2e:67:
63:ed:51:86:7a:da:74:2b:4f:0b:c4:cc:9d:6b:fc:4e:2f:fd:
16:67:da:df:85:7e:03:ef:a4:fc:34:88:d8:1a:d0:f1:e2:1a:
05:fd:41:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:36:47 2026 by rpki-client