Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
File: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft (raw, json)
Hash identifier: myIgRkotwoH+zXg7PkrMZeSguQHQ5YFmdzslE9xVLhg=
Subject key identifier: D3:8C:81:20:79:14:F4:F0:18:BF:06:37:F1:6A:5B:93:00:9A:96:7C
Authority key identifier: 08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
Certificate issuer: /CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Certificate serial: 01A0005CABCF07F0903C0A85A67907987DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
Manifest number: 1704
Signing time: Fri 14 Aug 2026 13:01:08 +0000
Manifest this update: Fri 14 Aug 2026 13:01:08 +0000
Manifest next update: Sat 15 Aug 2026 13:01:08 +0000
Files and hashes: 1: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl (hash: XyodjaO5H78/WEZvIQ7BwjDf1Wedl0N+FtfuB3iO2uE=)
2: zW8nttVSxzQC9vPeCiBB2Fi43Bw.roa (hash: BlLZPwRJ87Mpdgf8WIPNTg5b23WBV+U7XBJtnee3wHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:ab:cf:07:f0:90:3c:0a:85:a6:79:07:98:7d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Validity
Not Before: Aug 14 13:01:08 2026 GMT
Not After : Aug 15 13:01:08 2026 GMT
Subject: CN=d38c81207914f4f018bf0637f16a5b93009a967c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:00:94:72:17:19:fd:05:f9:47:f6:c6:4c:
6a:e3:dc:89:5c:19:c2:69:76:6e:75:b8:45:0d:68:
54:33:cd:43:06:38:33:2e:c9:bc:e9:de:b0:fd:f8:
9b:21:02:ae:44:a1:1a:a0:2a:68:fb:4a:e7:82:25:
cd:4c:71:11:3b:40:91:90:44:04:0b:05:9b:39:4b:
0c:4b:f7:79:8d:c4:25:bb:2b:a0:c8:6b:2d:44:80:
02:3c:7f:50:6e:25:6a:4e:c4:ee:e0:89:c7:85:80:
b3:b5:fa:6f:38:a2:db:09:9b:b0:a2:e6:94:ef:14:
fe:b2:7e:27:76:99:ff:d6:f6:54:d3:f1:90:d0:48:
06:55:d0:49:b5:6b:da:90:1a:ca:82:ad:87:e2:41:
e6:7b:f7:5e:14:19:4f:26:32:a1:98:60:4e:c9:81:
76:44:bf:d5:ac:7a:71:91:8e:1f:c4:ef:05:bf:68:
25:71:54:da:6c:79:5b:81:f5:84:50:59:53:2d:34:
fb:35:e2:93:00:31:be:3c:56:63:1d:e4:f5:f8:c4:
84:2a:0a:e3:2c:f1:45:52:ab:f4:f9:08:db:7f:a9:
16:b3:7a:09:b8:ce:aa:6e:6b:04:5d:80:bc:07:be:
3d:dc:07:76:52:81:f2:a7:9c:a0:5d:f0:ad:64:eb:
5d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8C:81:20:79:14:F4:F0:18:BF:06:37:F1:6A:5B:93:00:9A:96:7C
X509v3 Authority Key Identifier:
keyid:08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:a8:2d:c6:5d:13:b2:74:f2:06:ec:70:5c:86:fd:86:e3:39:
61:89:b2:60:3d:8b:69:f0:fb:22:b9:27:d3:e7:de:29:92:04:
5d:78:44:f0:8a:f7:5f:48:45:b1:1d:9b:a3:d4:e5:5e:d7:ae:
c0:32:aa:3f:97:17:98:34:7e:8e:9b:e6:df:f1:56:1b:75:56:
df:27:60:83:0b:26:ee:d2:28:7f:e3:ec:60:fc:ef:78:d8:15:
5b:20:65:4e:fc:f3:c3:04:e4:e6:dc:e8:c7:a7:ce:16:7c:48:
c0:0a:8a:35:5d:3c:29:3a:be:70:57:fd:29:2c:8e:bf:dd:49:
2e:73:af:ed:86:41:12:67:a6:58:31:59:ef:1a:81:c6:f0:c5:
4d:23:7b:51:ae:a6:15:7f:f5:36:43:9c:cf:df:cb:ad:fd:d2:
ef:0c:dc:db:67:45:9a:0a:3f:70:a9:bd:86:8f:ed:14:19:94:
df:62:90:69:c3:01:50:a8:50:df:cc:83:b4:9c:39:19:f4:e6:
8f:4d:0d:5c:8d:07:1e:b6:3b:b9:6b:97:7f:b3:4d:44:a9:7e:
c3:f3:16:3e:eb:a5:b0:6d:b4:39:75:22:a2:a9:14:18:0a:df:
84:9e:b4:be:1f:e3:06:b7:10:54:6e:a9:8b:9f:91:dc:b9:4e:
91:24:41:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXKvPB/CQPAqFpnkHmH2rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OWZjZjJhYjZlNmRiYzE2MzRlZTU5MWZjMWI3NGE0MWRl
M2VhNWYwHhcNMjYwODE0MTMwMTA4WhcNMjYwODE1MTMwMTA4WjAzMTEwLwYDVQQD
EyhkMzhjODEyMDc5MTRmNGYwMThiZjA2MzdmMTZhNWI5MzAwOWE5NjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6gAlHIXGf0F+Uf2xkxq49yJXBnC
aXZudbhFDWhUM81DBjgzLsm86d6w/fibIQKuRKEaoCpo+0rngiXNTHERO0CRkEQE
CwWbOUsMS/d5jcQluyugyGstRIACPH9QbiVqTsTu4InHhYCztfpvOKLbCZuwouaU
7xT+sn4ndpn/1vZU0/GQ0EgGVdBJtWvakBrKgq2H4kHme/deFBlPJjKhmGBOyYF2
RL/VrHpxkY4fxO8Fv2glcVTabHlbgfWEUFlTLTT7NeKTADG+PFZjHeT1+MSEKgrj
LPFFUqv0+Qjbf6kWs3oJuM6qbmsEXYC8B7493Ad2UoHyp5ygXfCtZOtdPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOMgSB5FPTwGL8GN/FqW5MAmpZ8MB8GA1UdIwQY
MBaAFAifzyq25tvBY07lkfwbdKQd4+pfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0pfUEtyYm0yOEZqVHVXUl9CdDBwQjNqNmw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80YTI3M2MtZjA1My00MWY4LTg3MTUt
M2MwYjkyNTRhNmY4LzEvQ0pfUEtyYm0yOEZqVHVXUl9CdDBwQjNqNmw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi80YTI3M2MtZjA1My00MWY4LTg3MTUtM2MwYjkyNTRhNmY4
LzEvQ0pfUEtyYm0yOEZqVHVXUl9CdDBwQjNqNmw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3Kgtxl0T
snTyBuxwXIb9huM5YYmyYD2LafD7Irkn0+feKZIEXXhE8Ir3X0hFsR2bo9TlXteu
wDKqP5cXmDR+jpvm3/FWG3VW3ydggwsm7tIof+PsYPzveNgVWyBlTvzzwwTk5tzo
x6fOFnxIwAqKNV08KTq+cFf9KSyOv91JLnOv7YZBEmemWDFZ7xqBxvDFTSN7Ua6m
FX/1NkOcz9/Lrf3S7wzc22dFmgo/cKm9ho/tFBmU32KQacMBUKhQ38yDtJw5GfTm
j00NXI0HHrY7uWuXf7NNRKl+w/MWPuulsG20OXUioqkUGArfhJ60vh/jBrcQVG6p
i5+R3LlOkSRBFw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:51 2026 by rpki-client