Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
File: CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft (raw, json)
Hash identifier: CkTgd6dhCxtrtE0hCBY156Mj+LjS9GHK01kxTN6Lit0=
Subject key identifier: EB:E0:FC:E4:4D:7E:97:3F:6C:50:1E:A8:74:3B:93:18:88:6E:31:4B
Authority key identifier: 08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
Certificate issuer: /CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Certificate serial: 019D98F43342C4D83E70A71ABC2FF03706F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
Manifest number: 0D5A
Signing time: Fri 17 Apr 2026 01:00:33 +0000
Manifest this update: Fri 17 Apr 2026 01:00:33 +0000
Manifest next update: Sat 18 Apr 2026 01:00:33 +0000
Files and hashes: 1: CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl (hash: 0kFy7IFdRpK3Pvp41VQUp57tHbeuUXjRUR7Y8RhqkaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:33:42:c4:d8:3e:70:a7:1a:bc:2f:f0:37:06:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Validity
Not Before: Apr 17 01:00:33 2026 GMT
Not After : Apr 18 01:00:33 2026 GMT
Subject: CN=ebe0fce44d7e973f6c501ea8743b9318886e314b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e2:ea:60:7a:af:96:4b:39:d0:03:0d:7d:bf:
93:d4:85:10:7d:03:62:f4:a6:f1:d2:d2:87:1e:f8:
1d:b2:1c:08:44:99:90:6d:4e:57:db:1a:f4:85:83:
a6:e8:22:53:13:d3:bb:eb:99:f2:11:a4:9c:0a:cb:
94:a4:0a:44:3b:31:23:17:d3:68:2e:e9:b8:82:4c:
7d:5e:f8:53:5c:ae:d6:ac:dd:e7:8d:eb:ce:bd:31:
5d:61:bd:d6:2f:bf:22:b3:cd:26:45:ef:84:59:5f:
30:7f:b5:a6:40:4b:ce:f0:63:fc:fc:27:c2:67:5b:
00:6d:22:46:4b:22:d3:89:27:92:3d:a4:d2:17:aa:
0d:fc:dd:6a:ce:49:71:0b:fc:2e:2f:3d:cd:3f:6a:
5f:b2:3f:65:50:64:2a:17:8c:46:5a:68:32:ec:d5:
c6:ba:be:f4:a1:b7:7b:7d:27:c0:80:f1:a0:57:5f:
59:10:69:b2:67:f9:c5:a3:ca:c5:4e:61:4d:ba:f0:
a1:0d:c5:16:3e:3c:4b:6e:16:6c:c8:b0:e9:cf:3a:
68:97:84:dd:51:d1:e2:f1:0b:20:af:f7:7e:c8:ea:
0e:e2:00:68:a1:4b:e8:58:8d:03:db:be:f6:65:18:
c9:6e:d8:00:6d:24:ec:e8:0e:d8:13:ca:58:f3:86:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E0:FC:E4:4D:7E:97:3F:6C:50:1E:A8:74:3B:93:18:88:6E:31:4B
X509v3 Authority Key Identifier:
keyid:08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:aa:b7:66:ec:b8:95:50:4b:5f:63:a3:a1:c9:12:76:a1:2c:
88:45:39:45:07:c8:8c:b2:61:65:8b:1b:81:a9:cf:26:91:a6:
c1:a8:5e:ac:ef:37:95:28:ba:c0:bd:b4:fb:50:ae:ef:de:72:
5e:fd:5f:c4:05:45:e7:d3:59:b0:d6:b8:08:cb:8c:69:84:33:
84:7a:6d:30:22:aa:d8:67:a7:a5:eb:3f:89:1b:e1:12:7a:e0:
9c:5f:e3:08:dd:17:5e:0c:5e:ef:f0:f6:d4:97:bb:7c:51:35:
d3:e0:e9:aa:09:16:6f:02:c1:52:66:e1:2d:02:a9:39:c6:e6:
7a:96:38:d8:21:c8:b2:43:86:58:c2:f6:6c:a1:48:27:c6:c2:
0e:3c:d3:5e:8f:52:93:47:f7:3a:5e:7c:1e:8e:00:d2:2f:78:
0f:c8:2d:fb:a8:6e:eb:1c:6d:6a:30:72:4a:61:31:66:f6:de:
aa:58:13:88:ce:c2:a6:79:72:db:cc:45:43:13:a5:64:db:83:
27:04:27:58:bf:eb:26:a8:94:f7:bf:b2:4c:9b:f8:6d:b9:cc:
0c:55:37:6f:32:bc:d5:b3:3b:76:1d:2f:e5:18:b3:0e:58:3c:
56:d1:13:89:04:22:a7:4f:ff:65:ee:5d:75:a4:db:68:bf:3e:
40:49:e6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:42:43 2026 by rpki-client