Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
File: CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft (raw, json)
Hash identifier: prfxeVXtiq5P4/7stvT/+yqvrsnJCUa48ev9c/0PwSg=
Subject key identifier: 69:D6:84:DA:B2:B1:05:E5:CB:ED:B8:C0:DE:64:10:21:E3:75:CA:1A
Authority key identifier: 08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
Certificate issuer: /CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Certificate serial: 019E1E34D295DC6CC640E0958FC0A484561C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
Manifest number: 0D9F
Signing time: Tue 12 May 2026 22:00:38 +0000
Manifest this update: Tue 12 May 2026 22:00:38 +0000
Manifest next update: Wed 13 May 2026 22:00:38 +0000
Files and hashes: 1: CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl (hash: yb33HtvBj02jP/WwjEdx8x3Arl53JyMWqpW7BB2DspE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:d2:95:dc:6c:c6:40:e0:95:8f:c0:a4:84:56:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Validity
Not Before: May 12 22:00:38 2026 GMT
Not After : May 13 22:00:38 2026 GMT
Subject: CN=69d684dab2b105e5cbedb8c0de641021e375ca1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e7:77:5a:7a:b9:87:86:60:a9:73:dc:f6:7e:
36:5b:12:47:d1:2a:85:44:e1:0f:f0:cd:a9:20:d7:
8a:1a:64:b0:16:09:f4:2d:29:ec:ea:27:dc:3f:97:
fc:8a:a4:c9:47:98:f0:1e:66:07:43:84:95:88:aa:
7b:33:23:32:4a:9d:6f:80:71:14:88:82:08:80:f1:
94:73:04:7c:35:58:f1:93:75:ab:5a:d3:a3:56:28:
66:fc:9c:0a:9c:ec:8d:62:a1:4e:19:8c:f3:56:d9:
9a:30:38:14:9c:cf:09:bd:ea:80:8e:9a:8f:11:ff:
aa:a5:a4:31:b0:d1:8e:93:1e:75:77:77:c7:d1:99:
62:09:6a:74:80:c6:80:b7:cd:ab:16:db:f1:39:f0:
39:95:e8:56:fd:cd:dc:8b:09:dd:fa:bf:40:68:98:
d2:ef:b5:89:eb:7d:83:3e:d2:5d:9d:74:f7:38:da:
74:31:c7:dc:7e:c9:e0:33:c8:e4:3d:ea:10:e0:ef:
61:76:5b:4d:61:57:7a:eb:df:31:4f:45:7c:52:0f:
01:13:f4:3e:1a:5c:6f:05:04:a1:36:fd:61:70:45:
4a:5d:86:fc:af:09:79:bd:4f:e0:79:4c:f0:85:c1:
2f:25:4c:c6:5a:86:8c:32:13:ba:fd:76:7f:1e:9d:
08:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D6:84:DA:B2:B1:05:E5:CB:ED:B8:C0:DE:64:10:21:E3:75:CA:1A
X509v3 Authority Key Identifier:
keyid:08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:6b:97:37:b2:a9:55:98:5c:fe:a0:0b:17:7d:39:df:bb:87:
14:09:58:bf:50:ac:89:c3:54:1c:d0:ec:71:7e:93:85:92:1e:
ea:d1:e7:30:a0:57:3a:5f:56:14:16:3e:b3:f6:dc:d2:a8:54:
3e:d3:b5:d8:d9:00:b3:9a:d6:5d:f8:80:1e:60:d0:fd:6b:91:
8c:43:df:c1:0f:fc:cd:5f:41:e2:d0:42:62:0f:dc:e9:84:fc:
7a:2b:2f:19:0c:e9:77:30:87:c8:ab:59:4c:ce:e9:d9:10:00:
ad:c2:17:a7:22:eb:e2:db:cb:b0:0f:cf:f3:e3:af:a5:74:17:
ad:f3:13:df:97:e5:6e:2f:2b:b4:49:5e:e7:2d:32:f2:65:62:
73:0d:b3:f8:e0:41:13:af:0b:80:65:29:70:20:d9:b2:dc:48:
2c:e0:e1:98:71:27:ce:7d:ab:86:54:5b:31:7a:89:c0:99:e8:
2b:18:f2:53:95:9f:9e:4f:ee:0d:de:32:d3:35:bd:3e:78:f8:
c4:52:04:e4:78:11:e1:e2:bc:c1:c6:02:6a:03:31:fb:49:68:
cd:e6:1d:13:f6:ab:02:71:6e:eb:83:90:8c:c4:f1:35:92:25:
8a:c1:85:04:78:d4:89:9c:1d:cb:11:85:d8:1d:1d:43:1b:d2:
04:71:ce:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:31:46 2026 by rpki-client