Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
File: CNJq20T1SwmSx1PrF7q-gSsHSGM.mft (raw, json)
Hash identifier: u/Rq1d458l/SOYFFxAzFaFdrg8Xu0ipCXxwDVn/HtVQ=
Subject key identifier: B6:86:F2:50:46:77:AA:D8:DD:38:F7:B2:0B:61:E1:DD:64:4E:5A:54
Authority key identifier: 08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
Certificate issuer: /CN=08d26adb44f54b0992c753eb17babe812b074863
Certificate serial: 019F8F10DDE89CC4E9624EF215E65E5175B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
Manifest number: 19C2
Signing time: Thu 23 Jul 2026 13:01:14 +0000
Manifest this update: Thu 23 Jul 2026 13:01:14 +0000
Manifest next update: Fri 24 Jul 2026 13:01:14 +0000
Files and hashes: 1: CNJq20T1SwmSx1PrF7q-gSsHSGM.crl (hash: 3B3AkrbM84kqXwV4Z/1kw9e+7PuoTAdT0f0mpgZXgyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:dd:e8:9c:c4:e9:62:4e:f2:15:e6:5e:51:75:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d26adb44f54b0992c753eb17babe812b074863
Validity
Not Before: Jul 23 13:01:14 2026 GMT
Not After : Jul 24 13:01:14 2026 GMT
Subject: CN=b686f2504677aad8dd38f7b20b61e1dd644e5a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d3:d2:01:6a:40:07:a7:5b:8d:fb:44:ef:d3:
f6:98:95:da:a1:ed:3b:ac:5f:55:2f:90:b3:50:5c:
f6:65:34:e5:b8:e2:84:ac:b8:fe:51:c8:c5:40:95:
27:3b:9e:83:0b:fd:60:a1:b1:e2:a8:0d:98:f3:7d:
b8:52:a0:d0:de:39:8e:c9:0d:14:42:89:af:d4:f7:
29:78:fe:8d:e7:8d:88:76:2b:3c:6d:2e:8d:e8:f4:
2e:ac:2b:dd:3b:f5:51:9e:7a:20:5d:5f:b4:a3:cd:
ed:c9:7d:0a:a3:c1:99:9f:47:1d:78:43:08:94:e2:
16:b9:09:ba:11:d8:d4:cc:7a:13:bc:45:e5:7e:c4:
49:ee:01:a3:ed:69:4f:5d:25:b4:15:12:c2:ea:69:
7a:34:3e:d2:c0:5c:f5:c9:44:18:5b:1e:1d:31:11:
0b:e5:3c:42:0b:48:c6:9f:39:c9:63:67:20:7f:50:
9c:b8:80:73:3c:05:9b:62:db:4a:b4:88:85:26:62:
6b:6a:e2:6d:56:92:e2:4f:d3:6e:ff:1b:7a:05:c2:
0a:bd:21:12:bb:3b:ff:07:85:ba:84:ea:fa:8f:30:
a2:fb:3a:2f:38:e5:6e:4f:8a:fa:0b:c7:78:f2:be:
81:bb:9d:24:ff:25:77:a5:3f:7c:af:8d:d9:06:82:
62:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:86:F2:50:46:77:AA:D8:DD:38:F7:B2:0B:61:E1:DD:64:4E:5A:54
X509v3 Authority Key Identifier:
keyid:08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:7b:fd:d5:12:ad:41:77:01:95:c1:83:5b:cd:9a:0c:37:ce:
cb:b2:02:26:fa:59:c8:0e:ca:3e:b1:f2:e7:b3:b8:bb:bb:0e:
83:4c:6d:66:25:e5:98:40:47:ac:3e:73:83:8b:6b:6a:41:78:
d1:7a:a3:62:e8:5f:29:cb:59:4a:13:ef:f0:c9:71:ca:62:00:
7f:46:d5:ec:ae:5d:77:d0:50:d1:e1:17:f4:49:66:8e:c3:d9:
1a:c1:0a:ab:9a:90:ed:03:38:0a:ca:4a:60:8a:d9:1a:33:ce:
2e:6e:9f:e3:22:99:d9:10:12:1e:c9:63:4e:3e:ee:7c:51:42:
78:25:f3:9f:4d:d0:70:b5:e6:16:bc:75:a9:ac:e6:db:89:16:
f0:2d:90:7b:4a:c0:0a:15:18:b4:52:af:7b:fb:4b:9f:f0:63:
0f:95:4a:80:0c:1e:f7:8e:7a:47:ca:cd:60:e3:d3:fb:6b:f8:
23:54:44:9a:95:60:50:36:94:35:63:7c:56:8d:47:b9:77:15:
1d:b4:43:75:80:5a:61:3e:0c:82:cf:d2:6e:d5:5b:6f:06:42:
ae:b8:bd:53:3a:42:0d:4f:dc:31:6a:69:06:8b:14:7e:01:f9:
01:27:8a:99:4a:44:e3:ac:12:91:ee:1b:43:53:18:ef:07:47:
45:34:cd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:05 2026 by rpki-client