Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
File: CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft (raw, json)
Hash identifier: zTR055oozXffuiEMDXSIB+uhmBJ9RlEXDxAKyd3YWLo=
Subject key identifier: BA:10:DC:98:D8:B5:39:A2:C2:1E:7A:B6:91:FC:EC:4E:2E:F4:85:B4
Authority key identifier: 08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
Certificate issuer: /CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Certificate serial: 019EBE7F9447F3672F7CCDEC85376E9BC8B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
Manifest number: 0DF2
Signing time: Sat 13 Jun 2026 01:01:32 +0000
Manifest this update: Sat 13 Jun 2026 01:01:32 +0000
Manifest next update: Sun 14 Jun 2026 01:01:32 +0000
Files and hashes: 1: CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl (hash: XgGLnJFwOTsTl9U+6VQyjlTCD9RwNR3/MJV0BTplj6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:94:47:f3:67:2f:7c:cd:ec:85:37:6e:9b:c8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Validity
Not Before: Jun 13 01:01:32 2026 GMT
Not After : Jun 14 01:01:32 2026 GMT
Subject: CN=ba10dc98d8b539a2c21e7ab691fcec4e2ef485b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ef:08:ed:23:49:1d:cb:a3:0c:13:5b:03:88:
fc:24:fc:0b:90:03:50:49:7b:55:9e:01:5f:38:a3:
54:86:51:b2:b3:93:77:71:28:6e:c8:a7:d4:29:85:
58:c4:5b:ec:ea:c6:e0:60:4c:32:a4:ba:10:1c:6a:
83:81:90:e7:ab:56:26:7e:34:41:c5:10:a4:88:c0:
eb:f3:0b:9d:c0:ec:01:b8:17:16:29:c7:6b:d3:dd:
8b:20:bd:8a:3e:26:bc:20:49:c0:95:28:83:11:88:
e4:3d:f3:8c:9f:de:13:1b:3f:41:04:39:57:29:7b:
14:d4:15:cc:f7:ad:37:b5:2c:a3:ea:4f:58:83:a4:
96:42:a1:7d:57:aa:28:ef:99:57:dc:94:76:96:e2:
fa:72:3b:55:04:41:42:e9:19:6a:71:b9:17:84:1a:
b3:72:80:db:dc:9b:e2:10:99:cb:60:cd:64:03:8b:
95:78:50:96:ce:9a:95:25:07:db:f3:8d:72:16:31:
e0:fd:7f:a6:df:ab:5a:df:34:19:a8:21:22:c9:f2:
a2:ca:e2:84:53:b8:f9:d2:e6:6f:a7:7a:28:47:f4:
f5:71:2e:c0:4c:f8:4d:47:f2:ba:14:69:13:91:7c:
03:55:a0:c8:43:05:cf:d8:bb:55:14:56:57:a7:3b:
e5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:10:DC:98:D8:B5:39:A2:C2:1E:7A:B6:91:FC:EC:4E:2E:F4:85:B4
X509v3 Authority Key Identifier:
keyid:08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:2f:62:ee:34:f2:9c:d8:36:59:f8:b3:74:0b:0c:e3:96:7e:
0f:0f:e7:e7:54:7c:18:e4:2b:dd:ee:70:da:9c:ed:e2:ad:1d:
3d:29:01:8c:18:f0:27:6a:24:3f:d6:ca:45:e2:c6:6d:16:67:
47:3f:f5:0b:4d:cb:09:5e:46:96:32:a0:95:14:2f:33:f2:28:
d9:ce:f4:24:cf:8f:fb:4c:01:8e:4c:9d:d8:76:f8:23:93:92:
9c:41:9a:40:39:38:9d:0d:9f:1e:e5:19:e3:02:61:c5:1b:77:
22:d9:61:dd:9f:ae:dc:e7:61:cb:db:34:92:7b:49:6a:11:3c:
88:0c:b5:83:11:8a:50:4a:c8:0d:2e:d7:3d:cf:6d:50:a6:a2:
b9:2b:81:b5:4e:70:45:b8:b6:3d:8e:a2:74:fd:5c:cc:57:03:
10:97:20:05:e4:43:12:57:f1:dc:14:82:13:49:1b:63:52:91:
5f:25:79:61:98:fc:87:a2:8e:3a:44:54:17:dd:4a:03:40:5c:
d0:ba:1d:fa:f3:81:02:5e:29:96:55:58:b8:7e:22:5f:b9:f9:
d5:c2:61:60:f6:55:49:60:ba:f2:ad:c5:88:8c:00:74:d4:2a:
7e:26:fa:1d:56:15:06:cc:72:43:1a:ac:3f:7b:cb:cb:d5:b7:
db:18:55:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:54:51 2026 by rpki-client