Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
File: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft (raw, json)
Hash identifier: bvzI+Yf/+VjThl0L10TPKoqlyuChi2qMTIzAN4WiFqQ=
Subject key identifier: 29:11:4C:37:0C:70:E4:BF:62:68:EB:B9:60:2F:AD:4A:D2:DF:03:8B
Authority key identifier: 08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
Certificate issuer: /CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Certificate serial: 01A144CDAB4A392B29E7A59C01B0B6A0AD89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
Manifest number: 17AC
Signing time: Fri 16 Oct 2026 13:01:31 +0000
Manifest this update: Fri 16 Oct 2026 13:01:31 +0000
Manifest next update: Sat 17 Oct 2026 13:01:31 +0000
Files and hashes: 1: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl (hash: B6foqLrZMYCMESxWbJ7gzBFP3dnJQMYHlwA4EFyWO4w=)
2: zW8nttVSxzQC9vPeCiBB2Fi43Bw.roa (hash: BlLZPwRJ87Mpdgf8WIPNTg5b23WBV+U7XBJtnee3wHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:cd:ab:4a:39:2b:29:e7:a5:9c:01:b0:b6:a0:ad:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Validity
Not Before: Oct 16 13:01:31 2026 GMT
Not After : Oct 17 13:01:31 2026 GMT
Subject: CN=29114c370c70e4bf6268ebb9602fad4ad2df038b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:86:26:88:35:ee:6c:c7:06:35:d4:08:3c:
fe:0a:f4:63:a1:90:85:cc:67:94:8f:76:1d:ab:97:
bf:e3:e5:fa:01:03:0c:70:f9:df:80:c9:f8:1a:8a:
f5:a2:52:0d:c4:21:95:d4:86:b9:d7:2c:b0:ce:37:
56:e8:54:e0:39:b2:d8:4f:2e:be:43:4c:af:ec:99:
7d:6b:45:ac:0b:4c:f4:3a:58:3f:c4:d8:27:fd:19:
99:46:2b:5e:44:49:39:68:11:1d:d2:fe:7e:a0:f3:
a4:69:d2:39:b1:9c:ca:62:82:7f:60:27:8a:75:43:
ba:ce:bd:c1:09:64:cb:c2:1f:83:cc:f5:61:ec:77:
df:08:0f:d8:c4:36:2b:7a:ec:b2:07:49:f6:bf:2f:
42:f4:2a:af:c0:5f:64:7f:42:4e:aa:e5:0f:4b:d0:
d7:fa:b3:4b:be:9b:44:7b:63:f4:1d:3f:b6:0c:2b:
9a:de:e2:75:42:84:26:25:64:e7:23:f4:18:ee:2b:
96:90:a5:09:0d:d3:9e:a6:7d:43:8b:cc:8b:5a:1a:
83:11:7e:4c:cf:a9:45:cc:e5:cb:34:16:ce:2b:69:
6e:09:ea:38:f4:07:1f:8e:83:ce:4e:6f:01:f2:2f:
ed:98:a9:58:b1:82:65:e9:00:ec:9a:6d:1a:65:04:
a7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:11:4C:37:0C:70:E4:BF:62:68:EB:B9:60:2F:AD:4A:D2:DF:03:8B
X509v3 Authority Key Identifier:
keyid:08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e9:25:0b:c1:48:d2:c4:4e:dc:11:b7:f8:dd:79:9e:13:9c:
7d:d3:ab:28:f4:44:77:c5:b6:08:b7:5e:9f:a6:6c:c2:c3:b6:
67:7e:74:23:88:50:df:5a:3c:7e:10:12:91:6e:15:1c:db:ec:
58:81:2f:fe:d6:55:b2:aa:a9:6c:07:ea:22:0a:9f:46:13:05:
fe:9e:5f:e1:d9:31:20:dc:51:30:e2:d7:92:67:0f:7b:b9:e9:
85:e9:a1:00:e8:94:8c:bb:85:a0:43:4e:ba:a8:83:d9:2b:0a:
23:62:da:dc:22:9a:43:71:af:0d:8b:64:bf:4a:34:7c:ad:0c:
26:5d:35:4d:aa:dc:f0:53:9a:ac:ae:c2:bf:90:1f:81:9c:cb:
25:7f:15:fc:25:10:ed:5d:b3:43:c6:9c:6f:6b:7d:f5:ec:57:
b5:05:b8:eb:65:60:0c:30:d6:51:77:29:b3:ba:2d:de:bd:3c:
76:73:9c:cc:f1:72:76:d3:1d:29:b2:28:04:92:b8:4f:01:57:
87:76:47:7b:83:85:4f:84:12:d8:11:4c:8e:5c:76:fd:93:95:
36:0a:71:95:11:22:ea:e7:c7:b5:59:4e:53:e9:bb:1c:f6:0b:
d3:5a:10:90:62:ec:87:9f:04:fc:55:71:bc:f0:db:0a:95:47:
78:a3:66:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 18:35:13 2026 by rpki-client