Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
File: CNJq20T1SwmSx1PrF7q-gSsHSGM.mft (raw, json)
Hash identifier: ZWOenhRLub/CvivoMLV/mga682gvRDKpnFBBDM+hQnk=
Subject key identifier: C9:8D:94:FB:E9:B6:50:20:76:2D:89:2E:37:3E:7F:4B:AA:C0:31:84
Authority key identifier: 08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
Certificate issuer: /CN=08d26adb44f54b0992c753eb17babe812b074863
Certificate serial: 01A0D192B963FCD9BE4D915EC301B5823039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
Manifest number: 1A69
Signing time: Thu 24 Sep 2026 04:00:48 +0000
Manifest this update: Thu 24 Sep 2026 04:00:48 +0000
Manifest next update: Fri 25 Sep 2026 04:00:48 +0000
Files and hashes: 1: CNJq20T1SwmSx1PrF7q-gSsHSGM.crl (hash: aDFWMjRaJSft+bPFH+74ma0PxTF0Zg9nPdo4foaYbrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:b9:63:fc:d9:be:4d:91:5e:c3:01:b5:82:30:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d26adb44f54b0992c753eb17babe812b074863
Validity
Not Before: Sep 24 04:00:48 2026 GMT
Not After : Sep 25 04:00:48 2026 GMT
Subject: CN=c98d94fbe9b65020762d892e373e7f4baac03184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3c:d0:40:0d:6b:c2:f1:e3:0b:f5:d5:ef:88:
1f:95:2a:2e:5e:13:8f:7c:01:70:06:47:fc:13:9f:
3c:d5:3b:a2:27:dd:f2:0f:12:11:e3:31:d9:86:1a:
09:a7:90:8c:3c:b6:15:c0:2d:36:e5:3e:75:df:fd:
99:b7:3e:ba:8d:ba:a1:2d:fc:bc:4b:37:dd:a2:c4:
d8:0d:1b:58:df:23:57:6c:ca:ff:7f:db:53:cb:b0:
08:5a:39:27:7c:fa:8d:88:5b:2c:15:3f:ae:38:55:
3a:f9:2a:67:7d:d1:25:5a:c0:cf:4e:eb:86:5a:5d:
73:c5:3f:7a:26:3c:96:bd:44:ab:2a:85:21:4d:b4:
2c:c4:b0:6c:69:68:20:49:46:6e:ee:9b:45:96:c1:
c5:24:83:07:27:cd:2c:c4:83:86:8e:64:b1:20:5b:
9d:1f:93:92:19:89:c5:22:81:0d:0d:b0:13:44:2f:
1a:a8:4b:48:7e:af:4b:bf:0b:cb:8e:4a:41:30:55:
68:c0:49:5c:e6:f1:01:46:8d:5b:e6:66:4c:8c:68:
2f:49:75:92:34:82:65:16:40:80:a3:9d:f9:9f:95:
65:86:49:75:30:9c:94:c3:b3:12:4d:d9:26:c5:d6:
97:bb:01:9c:91:93:33:af:5d:d8:11:31:51:6e:a9:
0a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8D:94:FB:E9:B6:50:20:76:2D:89:2E:37:3E:7F:4B:AA:C0:31:84
X509v3 Authority Key Identifier:
keyid:08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:73:b3:d9:ac:44:ef:ad:9a:01:2d:c2:62:14:b4:96:22:e9:
3a:63:c0:e3:20:12:0d:4c:4d:aa:37:a3:42:07:d3:05:7f:9d:
c2:9f:52:c1:bf:25:5c:e3:2d:71:4d:6b:d5:d6:9b:89:2d:45:
27:7b:df:05:14:32:d5:31:be:95:7c:57:63:f8:31:dd:a3:0a:
c0:7d:0c:13:74:58:ee:31:ef:12:91:a2:2a:9e:6f:80:b3:84:
22:41:85:34:5c:af:41:e1:2d:d3:e9:fe:ca:3f:ea:2c:b3:44:
ce:0a:94:16:72:2b:b5:8b:b5:78:30:1d:53:39:df:9a:63:1a:
fc:4c:33:12:8c:61:f9:d7:b2:cd:00:34:f4:81:5c:8d:42:69:
c6:b5:20:1a:1d:2c:97:0d:ab:7e:b9:be:15:df:96:fc:9a:ce:
a2:b4:57:ef:67:6b:b7:87:66:b5:c8:7c:1d:9b:28:25:e6:e4:
21:d4:6b:86:2b:ee:c7:88:93:d2:df:17:3d:ca:6e:4b:d9:33:
dc:08:10:ca:02:af:cb:54:b0:f3:b3:b7:43:ac:c9:54:a5:45:
83:4c:0f:8e:e5:de:4f:f9:33:41:db:e4:1f:13:35:9e:eb:6b:
ae:b2:99:94:d1:b9:63:f0:56:9b:78:29:13:16:e0:b5:a0:82:
eb:d1:f0:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRkrlj/Nm+TZFewwG1gjA5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDI2YWRiNDRmNTRiMDk5MmM3NTNlYjE3YmFiZTgxMmIw
NzQ4NjMwHhcNMjYwOTI0MDQwMDQ4WhcNMjYwOTI1MDQwMDQ4WjAzMTEwLwYDVQQD
EyhjOThkOTRmYmU5YjY1MDIwNzYyZDg5MmUzNzNlN2Y0YmFhYzAzMTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDzQQA1rwvHjC/XV74gflSouXhOP
fAFwBkf8E5881TuiJ93yDxIR4zHZhhoJp5CMPLYVwC025T513/2Ztz66jbqhLfy8
SzfdosTYDRtY3yNXbMr/f9tTy7AIWjknfPqNiFssFT+uOFU6+SpnfdElWsDPTuuG
Wl1zxT96JjyWvUSrKoUhTbQsxLBsaWggSUZu7ptFlsHFJIMHJ80sxIOGjmSxIFud
H5OSGYnFIoENDbATRC8aqEtIfq9LvwvLjkpBMFVowElc5vEBRo1b5mZMjGgvSXWS
NIJlFkCAo535n5Vlhkl1MJyUw7MSTdkmxdaXuwGckZMzr13YETFRbqkKJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmNlPvptlAgdi2JLjc+f0uqwDGEMB8GA1UdIwQY
MBaAFAjSattE9UsJksdT6xe6voErB0hjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hY2U4ZGQtZDNhOC00MmYwLWEzYzMt
Y2NlNDlhOTMxYzllLzEvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hY2U4ZGQtZDNhOC00MmYwLWEzYzMtY2NlNDlhOTMxYzll
LzEvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHOz2axE
762aAS3CYhS0liLpOmPA4yASDUxNqjejQgfTBX+dwp9Swb8lXOMtcU1r1dabiS1F
J3vfBRQy1TG+lXxXY/gx3aMKwH0ME3RY7jHvEpGiKp5vgLOEIkGFNFyvQeEt0+n+
yj/qLLNEzgqUFnIrtYu1eDAdUznfmmMa/EwzEoxh+deyzQA09IFcjUJpxrUgGh0s
lw2rfrm+Fd+W/JrOorRX72drt4dmtch8HZsoJebkIdRrhivux4iT0t8XPcpuS9kz
3AgQygKvy1Sw87O3Q6zJVKVFg0wPjuXeT/kzQdvkHxM1nutrrrKZlNG5Y/BWm3gp
ExbgtaCC69Hwtw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 15:11:14 2026 by rpki-client