Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
File: CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft (raw, json)
Hash identifier: GMxcHNDA4NGI0GUTW2muo/ABgnIyIzIo1CTdzpOLXOE=
Subject key identifier: 32:68:94:ED:47:E5:07:DF:3B:3E:B8:B1:02:21:23:F6:EC:74:B6:DF
Authority key identifier: 08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
Certificate issuer: /CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Certificate serial: 01A1DA261783525213C3F4C7330D1C1A6433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
Manifest number: 0F8E
Signing time: Sat 14 Nov 2026 13:01:31 +0000
Manifest this update: Sat 14 Nov 2026 13:01:31 +0000
Manifest next update: Sun 15 Nov 2026 13:01:31 +0000
Files and hashes: 1: CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl (hash: Fddos5P/P2Nvu0gh46pdSN9stdZGUV6m38nnUR2vD94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:26:17:83:52:52:13:c3:f4:c7:33:0d:1c:1a:64:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Validity
Not Before: Nov 14 13:01:31 2026 GMT
Not After : Nov 15 13:01:31 2026 GMT
Subject: CN=326894ed47e507df3b3eb8b1022123f6ec74b6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:96:bf:3b:7c:5a:a6:03:7e:e2:68:ef:8e:13:
49:52:66:e0:73:c5:6b:bb:fa:e3:3c:b4:f3:75:2b:
d8:70:36:15:7c:a6:c8:66:cd:0c:bc:a3:ee:fe:8d:
e9:c1:11:b2:e6:cc:e1:6a:a6:7d:c4:b8:79:45:74:
19:cc:f2:6e:8b:17:92:bc:a9:27:7a:33:d8:24:fc:
71:9d:99:85:00:b4:e9:94:72:bc:2e:b6:62:d1:a0:
2d:02:5b:bd:a2:7a:94:81:bb:be:9a:c4:0b:62:3d:
16:f9:9b:31:89:1a:4f:05:0d:39:69:36:0e:a9:39:
bd:c6:b5:c5:fe:60:46:aa:28:93:d3:f2:9a:6d:20:
35:6e:d3:93:6f:44:f3:28:fa:7f:cc:35:28:52:cb:
2f:a1:6f:bf:14:26:7b:38:5e:00:2d:1a:a1:97:b0:
e7:63:ff:cb:2e:ee:2f:40:2c:e5:5f:7b:77:d5:48:
28:d3:d0:b2:93:bd:27:1d:51:70:12:f8:34:9d:44:
fd:45:51:01:91:a2:ae:8d:19:dd:c4:8d:bc:b0:e7:
12:a8:11:b9:1e:f3:4a:93:38:72:95:16:a8:a3:fc:
e4:21:cc:c8:ab:79:c7:e5:38:63:c1:16:2a:be:ff:
90:2a:c7:97:8a:51:df:21:39:8b:ed:27:6a:08:27:
f5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:68:94:ED:47:E5:07:DF:3B:3E:B8:B1:02:21:23:F6:EC:74:B6:DF
X509v3 Authority Key Identifier:
keyid:08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d1:a9:1f:eb:5b:77:ad:d2:d6:1d:29:f0:db:07:59:47:87:
02:ce:42:d0:82:ac:28:44:68:0f:81:c1:b2:94:f9:ad:ec:42:
71:5a:43:31:38:7b:17:3e:d4:51:d3:05:8a:c1:19:2f:0e:d4:
ad:2f:bd:48:9f:5a:c4:c5:2b:0d:28:4e:21:b2:46:5e:8e:bb:
83:06:29:57:9c:d8:11:88:21:1a:97:6e:c8:cd:42:f0:08:f5:
a2:f2:71:b4:21:08:19:c4:91:62:b9:6c:87:43:e5:35:d2:6b:
30:c1:11:17:6c:27:0d:51:ab:3a:a5:e8:9e:cd:94:8f:0b:f7:
a9:20:54:35:3c:67:15:f3:09:98:7a:6c:99:5c:e8:ef:e9:de:
0a:f2:62:fa:72:a3:7f:a6:90:e8:d1:80:31:cf:5b:7d:c0:53:
f0:98:5a:4f:19:3d:01:85:7a:54:e2:2e:9f:26:9d:ad:51:2f:
ac:6d:e3:1b:de:92:a3:4f:e1:8b:1d:73:d1:eb:5f:ee:38:6f:
69:63:c4:c1:3e:55:d3:4a:d7:5e:c5:84:bc:20:69:91:25:4a:
57:ab:65:28:3f:ba:2f:89:f3:27:bf:95:50:09:ce:b6:ef:4f:
14:f4:78:74:29:2f:8a:f0:7d:10:8c:b6:8b:cc:36:7a:73:af:
b1:df:9f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:48:16 2026 by rpki-client