Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
File: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft (raw, json)
Hash identifier: IVMAUcWPUskx8X1/xEaINCS6V+XVGMJVKAJDu/+6Huk=
Subject key identifier: F0:53:E2:5B:9D:E7:1B:FE:B9:48:41:CF:C7:45:63:BA:E9:2A:00:FA
Authority key identifier: 08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
Certificate issuer: /CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Certificate serial: 019D2A3B44C769C0CEB458511ED8A13FB87F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
Manifest number: 158C
Signing time: Thu 26 Mar 2026 13:00:20 +0000
Manifest this update: Thu 26 Mar 2026 13:00:20 +0000
Manifest next update: Fri 27 Mar 2026 13:00:20 +0000
Files and hashes: 1: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl (hash: AtxTHCUYgmwvGUaaCORTB+tMJNAiNlpp9rrDWSloWIM=)
2: zW8nttVSxzQC9vPeCiBB2Fi43Bw.roa (hash: BlLZPwRJ87Mpdgf8WIPNTg5b23WBV+U7XBJtnee3wHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:44:c7:69:c0:ce:b4:58:51:1e:d8:a1:3f:b8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Validity
Not Before: Mar 26 13:00:20 2026 GMT
Not After : Mar 27 13:00:20 2026 GMT
Subject: CN=f053e25b9de71bfeb94841cfc74563bae92a00fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:7d:94:61:ef:81:4f:5d:4d:82:5c:0d:aa:
7b:4e:1e:4b:51:23:79:f6:45:93:78:46:a0:1d:f1:
11:7e:3f:2a:20:61:b9:15:e8:61:a0:52:c8:2b:3f:
ea:5c:58:02:8f:55:c6:58:a1:c6:d0:fd:33:0b:b6:
11:bd:3e:08:e9:9c:72:89:d9:14:ff:b3:5e:9b:47:
85:26:70:58:2c:d9:b6:c3:33:37:5d:e8:d4:f7:8a:
c3:10:b3:39:06:96:f9:17:a8:9d:89:60:ff:3e:85:
ec:f2:43:96:26:69:83:70:de:1f:e0:a8:31:25:88:
fc:4a:42:d2:53:d0:04:5f:a3:66:1f:01:1d:72:c1:
c8:49:48:48:bb:8f:22:7c:40:31:83:1f:4e:52:ce:
80:3b:87:29:fe:0c:a6:6d:85:3a:83:94:cc:02:04:
a3:3c:d5:0b:8c:9e:15:7a:79:0b:d9:ec:29:83:3b:
aa:27:1f:81:a5:1d:85:5b:16:2b:1f:70:b8:77:12:
92:c8:5f:49:45:9e:53:0d:30:79:19:d1:92:35:04:
a4:3c:ca:c3:6e:ab:b1:65:93:4a:05:eb:bf:4b:26:
b9:52:36:89:a3:c6:3b:17:1f:7d:77:31:fa:d1:c3:
07:5d:71:e5:ea:be:83:83:de:97:7c:6f:ef:17:7d:
08:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:53:E2:5B:9D:E7:1B:FE:B9:48:41:CF:C7:45:63:BA:E9:2A:00:FA
X509v3 Authority Key Identifier:
keyid:08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:92:a8:b6:ed:98:43:2f:6d:ea:c6:58:4e:49:60:fd:3d:20:
47:ca:c3:92:66:66:1e:da:73:ba:9e:ea:72:64:d7:4c:42:4e:
f1:6f:fd:55:42:57:39:8a:93:af:99:74:89:31:ec:71:27:f5:
33:22:a7:df:8e:27:0e:45:9f:01:a3:17:bb:f2:42:cb:c8:f2:
5c:06:16:4c:83:c0:06:8a:dd:17:50:30:36:68:60:c0:79:4c:
ed:35:5c:c0:ab:bc:b8:9d:20:32:19:4b:bb:34:40:6f:cf:32:
f0:ad:57:41:ab:07:fb:e8:4a:fb:4c:86:95:51:2b:a1:72:0a:
8c:d9:9a:13:69:e2:02:39:58:27:e3:a8:1d:3d:c2:d2:95:66:
a9:78:39:f8:1d:9d:66:0f:50:cb:60:4f:b5:24:89:fe:37:32:
28:cd:9a:c4:42:9e:74:a6:94:59:97:16:aa:8f:69:e7:6c:1d:
71:85:8b:42:d3:e2:b5:c3:61:34:a7:44:c3:a8:54:37:a6:15:
ac:17:81:1b:7b:9b:1a:49:ff:11:4b:9d:45:cd:65:25:89:1d:
02:d7:18:5d:38:2a:43:ed:6b:f8:75:d2:5a:62:ac:4e:22:6e:
ad:b0:90:7d:f5:bf:e6:e9:de:32:7d:58:2b:1d:66:c9:f1:b8:
79:fc:28:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:48:26 2026 by rpki-client