Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
File: CNJq20T1SwmSx1PrF7q-gSsHSGM.mft (raw, json)
Hash identifier: raVwvr5wM991yHnQKixs12DdZs1iBHSWPSoD4ceAdi8=
Subject key identifier: B1:12:92:34:AF:30:71:62:E1:6A:C1:30:61:F8:7E:45:A5:DD:80:B5
Authority key identifier: 08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
Certificate issuer: /CN=08d26adb44f54b0992c753eb17babe812b074863
Certificate serial: 019D9AE305DD2C2E4D2F7C5FCC560FD88364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 10:01:02 +0000
Manifest this update: Fri 17 Apr 2026 10:01:02 +0000
Manifest next update: Sat 18 Apr 2026 10:01:02 +0000
Files and hashes: 1: CNJq20T1SwmSx1PrF7q-gSsHSGM.crl (hash: wrYlaVfO+iF89vpRjrpY3SSwPazKnKEBtUfZvDG73bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:05:dd:2c:2e:4d:2f:7c:5f:cc:56:0f:d8:83:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d26adb44f54b0992c753eb17babe812b074863
Validity
Not Before: Apr 17 10:01:02 2026 GMT
Not After : Apr 18 10:01:02 2026 GMT
Subject: CN=b1129234af307162e16ac13061f87e45a5dd80b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b2:a4:c5:82:7d:67:80:32:2c:d5:e3:75:99:
50:8a:4f:8f:42:97:90:61:b1:7b:32:e5:be:b4:24:
94:34:18:bd:78:f8:d0:3a:f5:79:37:2e:7d:f7:13:
18:59:6d:39:15:28:fa:4b:67:e3:88:5c:a9:7a:52:
aa:43:7d:2c:5e:e5:84:ce:09:3b:6a:73:b2:37:a8:
e6:9b:7b:e6:df:e7:f8:0c:a7:0b:b0:44:59:2d:1d:
4a:0c:90:51:99:9d:9f:07:de:a1:b5:21:13:d6:69:
b7:0c:49:db:eb:b4:58:1b:3c:da:bb:2e:06:54:a7:
b3:57:23:af:2c:ab:35:16:96:fe:68:0d:55:5f:de:
33:f7:44:95:b0:70:dd:35:a9:9f:0f:1a:6f:94:f4:
97:2f:73:b4:0e:44:51:1b:04:c2:0d:69:3d:42:9f:
07:95:10:16:ce:2e:d5:9c:0a:7f:b7:39:5f:03:d7:
29:69:58:b6:1e:9f:b8:bc:8c:9b:38:4c:05:b0:3d:
a6:d2:62:6f:6f:fd:aa:c9:35:8f:4b:90:69:f0:55:
da:ff:5a:d0:82:8f:b3:94:28:58:fd:e2:6f:df:27:
18:ba:d4:db:9c:d2:4e:35:db:5c:a3:3a:e3:31:28:
7e:47:c5:81:9b:4b:a0:1f:51:32:b6:9f:8c:cf:28:
9d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:12:92:34:AF:30:71:62:E1:6A:C1:30:61:F8:7E:45:A5:DD:80:B5
X509v3 Authority Key Identifier:
keyid:08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:00:aa:9d:9a:3f:41:99:a8:c0:18:f7:35:ea:68:33:ed:10:
17:c8:d4:60:46:9b:44:9a:77:9b:a0:c2:07:df:fb:7c:a2:c9:
da:48:1d:01:66:e2:de:9d:3e:c0:54:16:43:c7:1e:83:af:1a:
dc:1a:6b:be:81:2c:e9:5a:25:8d:b1:32:41:a2:d6:96:d2:90:
b1:7d:4f:da:5b:db:00:9f:95:43:77:7a:87:00:eb:1c:b5:03:
d7:06:4f:51:ae:aa:a2:98:8b:de:4f:43:47:0c:0e:ea:b8:53:
73:d4:9b:69:03:15:5c:a8:58:95:10:18:a0:92:19:1c:92:fa:
3c:70:19:f8:72:fb:c2:46:6a:2e:29:18:ed:78:0e:0e:74:a5:
5f:da:2e:7b:7e:d7:27:d7:1c:49:d8:3d:18:57:45:49:09:97:
3e:15:5c:d6:c1:3c:06:7a:ee:9b:8d:ac:69:65:0e:66:e0:0f:
9f:7c:cc:ed:42:74:98:82:5f:7e:c9:f8:e1:d3:0e:27:0e:fc:
62:ec:4d:17:ec:3c:3d:f6:a2:be:a2:b9:71:8f:1e:e6:74:23:
70:c1:4b:ea:40:58:7f:ca:ad:52:e8:ba:6e:43:49:7a:41:20:
b5:4e:cf:3d:23:0c:bf:fb:77:45:16:a2:6b:b1:07:2b:e8:d7:
d9:28:ee:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:34 2026 by rpki-client