Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
File: CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft (raw, json)
Hash identifier: thS3J6i42pZ0rwJgEfOHzwneHyrQo94wmugYZFyd0uc=
Subject key identifier: FF:84:5A:AD:61:12:BE:4F:BB:BC:09:9D:AB:1B:70:FC:5B:38:C4:4E
Authority key identifier: 08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
Certificate issuer: /CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Certificate serial: 019CAB6ACE9EB6DD81A3E33DB6BD54A2075D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
Manifest number: 0CDF
Signing time: Sun 01 Mar 2026 22:00:29 +0000
Manifest this update: Sun 01 Mar 2026 22:00:29 +0000
Manifest next update: Mon 02 Mar 2026 22:00:29 +0000
Files and hashes: 1: CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl (hash: RBRoE8Fc3Owqmi7DdaosIqJzFFKSs+h4BmQZWTtHGM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:ce:9e:b6:dd:81:a3:e3:3d:b6:bd:54:a2:07:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Validity
Not Before: Mar 1 22:00:29 2026 GMT
Not After : Mar 2 22:00:29 2026 GMT
Subject: CN=ff845aad6112be4fbbbc099dab1b70fc5b38c44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:24:2a:32:c5:e3:e2:cf:c1:c0:b9:69:1b:de:
d5:06:b5:2b:e1:81:50:0d:9e:43:60:e4:17:7c:1f:
2c:26:39:47:97:d6:59:b8:02:89:6f:88:a4:df:12:
d0:66:0a:bc:4a:44:32:3f:2b:78:a0:07:88:be:08:
39:61:5b:0a:ac:43:07:c9:e9:b0:08:c3:9f:99:df:
75:3e:f9:e5:8e:55:ea:d2:53:84:15:e3:fe:8b:4b:
46:d0:fc:60:32:49:10:32:92:85:02:d4:d8:62:62:
3b:d0:7e:d9:b5:00:37:31:10:75:eb:8f:b2:bb:12:
27:7f:8a:18:4d:d0:3b:24:e3:ca:0f:37:c1:c3:da:
aa:e8:63:c7:09:95:52:9b:9b:f2:d4:b3:d1:fa:3c:
3e:45:44:03:a0:a1:e2:02:7c:e0:73:47:9f:f9:ed:
2f:a6:08:d2:eb:87:95:9b:87:a4:91:9f:ef:84:0b:
1d:9b:74:20:17:6a:f6:15:85:e9:e1:e3:17:4e:45:
a5:96:90:99:e8:69:12:37:3b:88:ed:75:ca:32:dc:
40:b7:cc:62:98:e5:17:f3:e0:25:28:56:16:e6:76:
6e:ce:48:60:2f:dc:6f:a6:79:51:05:ea:11:c0:ff:
ac:eb:81:fe:0c:80:0c:11:3c:64:8a:55:3f:49:8c:
d8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:84:5A:AD:61:12:BE:4F:BB:BC:09:9D:AB:1B:70:FC:5B:38:C4:4E
X509v3 Authority Key Identifier:
keyid:08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:79:04:72:a4:e9:5b:00:4f:0a:3e:1c:17:63:5b:bc:60:48:
f2:cb:82:10:e7:da:34:36:75:b7:30:34:90:4c:1e:37:ba:58:
66:7e:a8:ee:e9:92:1e:d1:17:1d:5b:8a:6c:8e:ed:67:c1:7c:
3c:52:ca:50:3d:99:59:86:3d:06:78:e2:34:51:ba:63:19:41:
76:bc:2b:a0:1e:b3:11:d9:55:72:92:1f:f6:24:67:64:d5:dd:
8f:d5:66:43:5b:34:15:24:8a:19:bf:e9:1d:e0:45:23:15:01:
e1:99:36:f5:e6:5e:a9:e3:90:31:a0:8a:32:ea:d9:e1:24:5b:
f5:7c:6c:92:01:4f:3b:19:8a:cb:c9:45:f2:a3:c5:c1:78:ac:
ee:7c:05:1e:47:40:ab:74:97:6e:96:dd:ea:ff:f5:8e:31:af:
66:d8:91:c2:58:72:52:5b:ba:d8:0b:f6:38:40:31:4d:ff:8b:
6f:b7:ee:93:fb:9a:31:e3:09:7d:b3:2b:bb:8e:d6:5c:d4:bb:
a0:78:76:74:2d:e6:04:67:15:1b:7d:b2:90:9c:00:2e:4d:e9:
b7:4f:92:94:6f:c9:ad:e1:14:c4:be:8b:ad:a0:c1:7d:eb:5c:
22:91:d5:8f:14:5b:6c:c7:47:c1:26:05:77:f5:c6:10:a2:99:
39:e7:5b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:38 2026 by rpki-client