Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
File: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft (raw, json)
Hash identifier: NFCaoKOkHpMoYnDRg/fHS0ZGPe6Wai1phLJfr4VmOi4=
Subject key identifier: F6:6A:76:3E:92:F5:3A:57:6C:4B:CB:A2:F0:A4:83:E9:45:F0:AA:19
Authority key identifier: 08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
Certificate issuer: /CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Certificate serial: 019E30E09090823C4E028F94BB2782292E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
Manifest number: 1614
Signing time: Sat 16 May 2026 13:01:23 +0000
Manifest this update: Sat 16 May 2026 13:01:23 +0000
Manifest next update: Sun 17 May 2026 13:01:23 +0000
Files and hashes: 1: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl (hash: F2Ewt5oqT7/efYmaiNu/ZQKePckBdRAUJ8mA6r1t+84=)
2: zW8nttVSxzQC9vPeCiBB2Fi43Bw.roa (hash: BlLZPwRJ87Mpdgf8WIPNTg5b23WBV+U7XBJtnee3wHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:90:90:82:3c:4e:02:8f:94:bb:27:82:29:2e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Validity
Not Before: May 16 13:01:23 2026 GMT
Not After : May 17 13:01:23 2026 GMT
Subject: CN=f66a763e92f53a576c4bcba2f0a483e945f0aa19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:39:ac:39:b0:4e:a4:5a:23:bc:5e:22:5f:ac:
05:b6:df:fb:77:5e:fa:6b:5c:6d:dc:62:84:5d:5b:
91:aa:12:29:4e:3a:4c:67:4d:ff:03:82:2a:83:2e:
af:5a:bf:3a:31:96:d1:ea:44:9d:0d:3d:4f:0b:69:
38:c3:9b:de:54:5a:c9:f1:80:46:59:b5:96:a4:c1:
2f:43:4d:f7:b1:2e:bb:dc:ed:9f:2d:bc:29:60:1d:
f7:d8:17:90:c2:c2:f0:fa:92:c1:e7:7e:98:e4:89:
58:ce:4e:c9:dc:16:54:11:45:59:db:56:16:d2:92:
07:a4:c7:6f:50:38:aa:db:24:65:bc:1e:81:8d:85:
d9:98:ac:24:b5:fd:59:b6:0a:3c:6e:09:4f:77:19:
a5:62:de:36:d6:a4:c8:82:45:fe:4a:69:ab:7e:67:
90:81:da:c0:23:40:31:aa:75:17:47:d2:9a:ec:9b:
4b:14:13:3c:c3:2b:e0:8a:5f:80:15:5d:df:4a:d3:
86:ca:18:cd:b9:66:a9:a9:88:03:b1:69:a6:10:07:
51:2f:5d:3a:3f:74:9d:ad:fd:d6:36:cf:e0:98:47:
21:98:ea:89:e9:8b:06:22:51:92:a0:39:a4:ba:13:
99:ce:d8:90:6c:9f:37:13:3f:43:29:ad:3a:d9:54:
3b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6A:76:3E:92:F5:3A:57:6C:4B:CB:A2:F0:A4:83:E9:45:F0:AA:19
X509v3 Authority Key Identifier:
keyid:08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8d:93:a4:11:65:f9:ff:33:83:cb:4b:1f:32:1c:ca:9f:46:
f0:a0:86:23:a6:93:4c:9a:3a:ed:7d:d5:58:83:60:78:95:d2:
68:1c:ae:24:0b:bc:22:34:d7:e8:43:b9:d5:75:26:9a:53:da:
8f:c5:54:33:33:5f:c5:19:5a:97:78:05:03:ea:f1:32:06:67:
06:42:52:6d:73:b6:54:1c:b8:52:17:74:fa:60:93:cc:6f:ef:
55:b4:6f:15:6a:39:89:84:14:de:77:ea:a0:0b:79:c1:3c:b8:
be:94:7d:b9:b2:a6:aa:70:8c:ae:55:27:f8:21:81:ac:2a:62:
80:77:b3:38:5d:ac:be:7a:3e:5f:bd:f5:49:e5:2c:9f:52:54:
f2:01:de:b7:eb:ef:b6:03:8d:88:91:2b:8f:75:bf:09:47:59:
a8:60:3a:bc:f4:35:59:96:86:ec:0a:fb:17:1d:51:34:39:77:
55:be:2c:c1:f8:d0:43:c3:4d:00:4b:0e:dc:d5:ff:4f:9c:c9:
10:d6:3b:cf:97:32:b7:21:82:a1:33:48:e4:79:6a:70:94:9b:
6b:1a:e6:9f:5a:cb:af:e2:54:0a:87:4c:c1:73:55:8c:08:c0:
9b:84:b0:07:57:0f:3d:e3:3f:4e:bb:e7:a6:99:c6:18:bb:83:
f4:a1:9b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:31 2026 by rpki-client