Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
File: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft (raw, json)
Hash identifier: O87Yi3SUU5tB2oc2TL4dCzAxr+P++i0GH/r0GZKloOc=
Subject key identifier: 00:4F:10:BF:04:6F:5E:31:A7:DD:22:A9:4F:FA:E8:6A:18:04:4D:CF
Authority key identifier: 08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
Certificate issuer: /CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Certificate serial: 01A127D5D8748B4A1F4D77D8C451D0A46C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
Manifest number: 179D
Signing time: Sat 10 Oct 2026 22:01:28 +0000
Manifest this update: Sat 10 Oct 2026 22:01:28 +0000
Manifest next update: Sun 11 Oct 2026 22:01:28 +0000
Files and hashes: 1: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl (hash: 9p5eJXZNn/e49JvqtsH6FbHNjK84j8tUoFvDDvfAw0c=)
2: zW8nttVSxzQC9vPeCiBB2Fi43Bw.roa (hash: BlLZPwRJ87Mpdgf8WIPNTg5b23WBV+U7XBJtnee3wHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:d5:d8:74:8b:4a:1f:4d:77:d8:c4:51:d0:a4:6c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Validity
Not Before: Oct 10 22:01:28 2026 GMT
Not After : Oct 11 22:01:28 2026 GMT
Subject: CN=004f10bf046f5e31a7dd22a94ffae86a18044dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d9:0d:8c:c2:7f:d6:ba:4b:b2:dd:12:d1:8f:
28:a0:0d:1c:92:6f:b6:fa:3b:36:26:07:f1:78:66:
f3:7a:40:5c:09:92:09:55:0e:9e:b2:bf:41:e3:a6:
a2:1f:83:de:ba:9a:f6:99:68:01:83:e6:63:8f:f4:
e3:b9:c3:8f:34:8e:47:77:31:18:5d:d9:56:01:90:
dc:73:12:25:3c:47:00:6e:34:0a:81:b8:b6:cd:ed:
33:11:55:46:f5:ea:60:73:9f:85:4d:70:dd:7a:f7:
59:34:0f:21:d2:70:18:1d:9a:6f:cc:df:e0:55:7f:
12:ef:96:af:55:e9:c7:8e:1f:43:d7:8b:51:8b:2f:
48:85:4e:4f:bb:1e:50:f0:07:27:b6:9a:80:87:05:
c3:a2:fa:69:00:83:6d:0e:60:89:44:31:22:9b:1e:
05:98:ea:0a:08:63:36:30:8c:8c:79:a9:e3:27:be:
05:2f:70:5f:6a:35:49:1b:49:14:e9:d9:b2:d3:5d:
26:1d:91:d6:e0:26:01:71:fa:76:99:3d:e1:64:86:
c3:8d:32:63:44:58:ff:51:c9:1f:9d:b1:f1:e9:4f:
b0:c4:da:5d:59:33:50:1f:27:7a:82:f1:aa:2c:7a:
64:69:7b:a7:99:e5:bf:9a:dd:99:ec:a8:16:d2:77:
d0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4F:10:BF:04:6F:5E:31:A7:DD:22:A9:4F:FA:E8:6A:18:04:4D:CF
X509v3 Authority Key Identifier:
keyid:08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:24:bb:0c:91:2d:60:6f:df:3f:ec:56:4e:75:84:e1:c4:fb:
a0:4c:c7:da:52:39:48:dc:f2:e0:a0:d3:89:58:79:a0:ac:ff:
05:27:f8:fe:10:d0:29:8c:2d:e6:58:73:5e:2a:72:d5:8a:4a:
92:7e:28:14:32:31:73:3c:df:56:8f:bf:b6:81:62:57:8a:85:
c5:a0:e0:07:5a:b7:72:0c:3e:b7:23:69:bd:5e:57:a3:88:97:
57:cb:4c:32:29:41:6e:54:8d:1c:65:68:5e:ad:8c:6a:f1:51:
4f:40:f7:c6:4c:28:60:92:aa:da:b1:bb:a9:34:9c:ab:2b:79:
73:5c:f7:79:8d:0b:d4:bc:3c:96:fe:27:14:6d:ec:8a:86:c3:
14:3f:02:61:11:54:98:e1:38:c1:f1:d9:36:97:e3:5a:7e:a9:
ca:a9:b4:34:9d:65:9f:1a:89:da:22:85:54:d7:57:5c:49:3b:
94:c5:01:4d:90:78:7c:47:c7:8c:42:e5:4c:72:01:d8:d3:43:
75:01:14:8a:f4:ee:3e:0d:b6:62:01:3a:18:78:3d:4f:3e:29:
28:4f:88:13:11:8b:66:52:ff:6c:ab:c9:39:17:0e:8a:37:0e:
c0:4c:12:16:d1:52:a8:a8:c9:3d:73:b8:4e:3e:9f:68:22:0b:
28:52:d7:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEn1dh0i0ofTXfYxFHQpGwWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OWZjZjJhYjZlNmRiYzE2MzRlZTU5MWZjMWI3NGE0MWRl
M2VhNWYwHhcNMjYxMDEwMjIwMTI4WhcNMjYxMDExMjIwMTI4WjAzMTEwLwYDVQQD
EygwMDRmMTBiZjA0NmY1ZTMxYTdkZDIyYTk0ZmZhZTg2YTE4MDQ0ZGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNkNjMJ/1rpLst0S0Y8ooA0ckm+2
+js2JgfxeGbzekBcCZIJVQ6esr9B46aiH4Peupr2mWgBg+Zjj/TjucOPNI5HdzEY
XdlWAZDccxIlPEcAbjQKgbi2ze0zEVVG9epgc5+FTXDdevdZNA8h0nAYHZpvzN/g
VX8S75avVenHjh9D14tRiy9IhU5Pux5Q8AcntpqAhwXDovppAINtDmCJRDEimx4F
mOoKCGM2MIyMeanjJ74FL3BfajVJG0kU6dmy010mHZHW4CYBcfp2mT3hZIbDjTJj
RFj/UckfnbHx6U+wxNpdWTNQHyd6gvGqLHpkaXunmeW/mt2Z7KgW0nfQLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABPEL8Eb14xp90iqU/66GoYBE3PMB8GA1UdIwQY
MBaAFAifzyq25tvBY07lkfwbdKQd4+pfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0pfUEtyYm0yOEZqVHVXUl9CdDBwQjNqNmw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80YTI3M2MtZjA1My00MWY4LTg3MTUt
M2MwYjkyNTRhNmY4LzEvQ0pfUEtyYm0yOEZqVHVXUl9CdDBwQjNqNmw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi80YTI3M2MtZjA1My00MWY4LTg3MTUtM2MwYjkyNTRhNmY4
LzEvQ0pfUEtyYm0yOEZqVHVXUl9CdDBwQjNqNmw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAiS7DJEt
YG/fP+xWTnWE4cT7oEzH2lI5SNzy4KDTiVh5oKz/BSf4/hDQKYwt5lhzXipy1YpK
kn4oFDIxczzfVo+/toFiV4qFxaDgB1q3cgw+tyNpvV5Xo4iXV8tMMilBblSNHGVo
Xq2MavFRT0D3xkwoYJKq2rG7qTScqyt5c1z3eY0L1Lw8lv4nFG3siobDFD8CYRFU
mOE4wfHZNpfjWn6pyqm0NJ1lnxqJ2iKFVNdXXEk7lMUBTZB4fEfHjELlTHIB2NND
dQEUivTuPg22YgE6GHg9Tz4pKE+IExGLZlL/bKvJORcOijcOwEwSFtFSqKjJPXO4
Tj6faCILKFLXjQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 08:58:25 2026 by rpki-client