Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
File: CNJq20T1SwmSx1PrF7q-gSsHSGM.mft (raw, json)
Hash identifier: 6q7qd8dRO2esLn0k163FkhlyF0JfT7ZHOqBBuvsAWAI=
Subject key identifier: 81:21:F9:E9:8C:F4:EA:3A:8E:E6:A3:61:29:C5:99:C3:D0:74:A3:65
Authority key identifier: 08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
Certificate issuer: /CN=08d26adb44f54b0992c753eb17babe812b074863
Certificate serial: 019E1E35F669E9C96089A587A18A96BC91EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
Manifest number: 1903
Signing time: Tue 12 May 2026 22:01:53 +0000
Manifest this update: Tue 12 May 2026 22:01:53 +0000
Manifest next update: Wed 13 May 2026 22:01:53 +0000
Files and hashes: 1: CNJq20T1SwmSx1PrF7q-gSsHSGM.crl (hash: DquvHsEQex/KXCItkGW27QHgBgUXYQsw6JxhVqN+5FE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:f6:69:e9:c9:60:89:a5:87:a1:8a:96:bc:91:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d26adb44f54b0992c753eb17babe812b074863
Validity
Not Before: May 12 22:01:53 2026 GMT
Not After : May 13 22:01:53 2026 GMT
Subject: CN=8121f9e98cf4ea3a8ee6a36129c599c3d074a365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c1:12:67:e7:6e:57:a1:50:e7:f8:2c:53:80:
76:96:07:38:65:89:de:a0:53:2e:de:94:ae:10:af:
d5:02:27:55:4e:31:df:bb:7a:c8:a9:5e:91:ba:1a:
c3:04:aa:de:46:53:d0:d2:17:d4:80:45:61:ee:00:
d0:25:7f:b6:83:9d:ac:cd:88:b4:1d:36:54:a2:2c:
4e:f7:ba:7e:a9:8d:48:a7:07:a6:b1:88:d4:94:b8:
98:4b:86:b0:59:7f:13:39:eb:91:fd:5f:9a:c8:37:
11:a7:4e:c0:57:30:49:ff:11:38:c2:5d:fa:ec:f9:
b8:21:2b:2a:e7:cd:61:b5:45:51:ba:92:68:d2:9d:
11:94:52:27:ed:62:e2:d3:01:5a:80:a5:3a:fb:5c:
09:e1:00:dc:72:d9:f6:67:93:51:41:12:58:fd:1b:
ef:0a:30:1f:f0:b8:e6:34:ea:89:39:79:03:3c:54:
5d:7c:26:fa:a3:d1:23:af:df:ce:e3:13:b8:b1:d4:
c4:44:81:fe:b6:63:d4:df:c2:d7:25:f6:b8:0d:22:
97:70:4f:40:38:5d:8b:5b:6b:0a:5b:c1:9b:82:26:
b7:cc:4b:6d:6a:84:7e:50:02:81:43:32:7c:2e:70:
0f:d4:72:8f:0f:c8:8e:e4:ee:5b:6b:d9:aa:e8:cf:
24:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:21:F9:E9:8C:F4:EA:3A:8E:E6:A3:61:29:C5:99:C3:D0:74:A3:65
X509v3 Authority Key Identifier:
keyid:08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4c:48:e7:2c:23:e2:f7:79:7c:65:3b:66:ab:80:45:2b:69:
79:59:52:72:fb:0c:7e:5a:82:42:28:78:36:9f:34:5b:39:da:
0f:a0:a8:d1:32:df:24:3d:90:62:4b:13:95:e0:08:1b:51:2c:
1a:cc:c5:24:2a:cc:d1:89:f6:66:9f:10:41:1d:1f:d2:fd:8d:
5c:47:6d:1f:68:fe:a9:08:8a:00:2c:c6:ee:86:86:22:35:c0:
df:2f:fc:d1:dc:4c:0f:b9:f9:f8:f8:bf:ce:c5:e5:13:bb:03:
e5:0b:5a:7d:a8:5c:eb:5c:dd:40:20:8b:e2:bd:9e:4c:7f:13:
bb:e2:a3:2d:64:b6:dc:f4:d4:8e:d6:0e:e8:f7:69:fe:f3:c2:
6c:a1:15:4d:21:8a:5d:85:3e:63:7c:01:a5:66:b5:06:65:58:
14:8e:e6:b4:ea:ea:f2:51:53:0c:26:f1:4a:88:63:ed:65:76:
8f:3a:da:68:25:46:6c:42:58:94:3b:7c:cb:19:03:d4:27:2f:
e5:a9:e6:40:af:94:b3:3e:54:92:df:12:23:06:45:99:2e:13:
76:ef:3e:dc:3c:1a:72:1c:d1:10:87:56:87:4c:d9:4e:e0:22:
85:52:84:20:ed:e3:5c:68:f3:ad:74:04:a9:3f:b6:80:b9:ff:
75:09:8d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:45 2026 by rpki-client