Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
File: CNJq20T1SwmSx1PrF7q-gSsHSGM.mft (raw, json)
Hash identifier: IHhcfA1RHq1NvJmSxnM5dQ9oVplHwy0FRe9JrO14Wtk=
Subject key identifier: E3:9D:F1:C7:86:EF:4A:19:62:53:88:AA:C0:3D:52:9A:17:77:81:99
Authority key identifier: 08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
Certificate issuer: /CN=08d26adb44f54b0992c753eb17babe812b074863
Certificate serial: 01A13DB806F054139701ADBAF9CF9435936F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
Manifest number: 1AA1
Signing time: Thu 15 Oct 2026 04:00:32 +0000
Manifest this update: Thu 15 Oct 2026 04:00:32 +0000
Manifest next update: Fri 16 Oct 2026 04:00:32 +0000
Files and hashes: 1: CNJq20T1SwmSx1PrF7q-gSsHSGM.crl (hash: lf0/iGyw0U6luHeWwS5UNJ8w0xe/CLOQoGW8amb5fHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:06:f0:54:13:97:01:ad:ba:f9:cf:94:35:93:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d26adb44f54b0992c753eb17babe812b074863
Validity
Not Before: Oct 15 04:00:32 2026 GMT
Not After : Oct 16 04:00:32 2026 GMT
Subject: CN=e39df1c786ef4a19625388aac03d529a17778199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:05:e7:64:4e:89:1e:56:a4:83:de:48:d0:
ea:1b:23:09:83:34:f3:71:53:cf:05:68:50:72:2e:
f0:4c:d3:59:10:05:fd:50:f4:9e:57:25:0a:47:3c:
d4:39:07:d3:65:95:a0:5c:2f:73:3d:a2:a9:ce:41:
1f:09:2a:fc:67:00:18:10:13:90:43:8b:cb:23:09:
03:a8:db:f2:5c:14:a9:bc:93:1e:2f:40:d8:85:8a:
85:e1:51:45:26:8b:fc:8d:73:63:96:cd:ce:6a:e6:
31:33:7f:67:58:bd:1d:cf:49:31:15:90:04:72:b6:
a2:dd:cd:3f:62:cd:89:90:3d:bf:7d:76:a3:bf:37:
2a:7e:56:5c:fb:ec:45:53:96:cc:a4:9a:f4:e7:b5:
1b:95:52:94:e5:b7:17:60:4a:5b:81:32:af:3d:cb:
33:64:6e:d0:0f:e6:68:59:73:0c:af:cc:1e:24:05:
63:df:62:bc:32:4d:98:72:72:64:09:f4:0a:a0:88:
0c:d5:72:13:d3:8e:ca:ec:bf:3f:af:38:eb:85:9f:
1e:f2:f0:4d:c0:a9:ec:00:e7:be:1b:7e:76:46:2d:
05:e5:f9:d9:6e:88:ef:e2:df:d9:c8:6b:a7:31:28:
6b:bc:81:19:a0:68:94:07:55:d5:5e:ad:7c:a6:e2:
fe:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9D:F1:C7:86:EF:4A:19:62:53:88:AA:C0:3D:52:9A:17:77:81:99
X509v3 Authority Key Identifier:
keyid:08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:7f:62:45:eb:2c:61:59:ea:59:42:7c:7e:7b:d0:c0:09:88:
e8:f1:d2:79:15:62:60:cb:a1:98:1a:81:d9:76:92:3e:98:2a:
19:15:5d:36:12:2e:93:31:3a:1d:eb:ec:40:9a:fd:f8:ba:e5:
2e:6d:a6:fb:15:6d:90:cb:51:f4:ed:64:b9:d1:0a:c9:6d:d8:
d8:9b:7f:d7:ad:fd:20:10:0c:31:42:1c:63:73:36:66:17:c8:
39:77:64:96:f8:02:22:45:c3:af:37:81:fd:4c:55:9a:d3:b0:
4c:9e:44:86:90:d9:bd:b9:12:65:ae:dd:83:bd:40:80:32:da:
a1:68:c9:db:f1:bc:a2:93:02:a9:57:8d:7b:0e:ac:44:7e:6b:
e7:5e:b5:94:a7:01:8a:d5:e0:80:31:6b:52:e1:c9:4c:0f:60:
01:05:85:fb:33:77:cf:8e:5c:ac:bd:70:ac:33:03:6a:bc:3f:
c5:62:ef:e2:e1:f6:8f:21:e6:86:64:64:f8:c5:22:5c:a4:14:
73:dd:c5:40:ec:d9:13:37:5b:c3:b4:fd:c8:bf:20:d9:1e:8b:
fe:62:f5:d9:09:a0:53:01:fd:d9:25:fd:3e:00:b2:3e:ac:e5:
f6:af:dc:96:da:16:ce:42:58:87:76:13:88:93:ad:a9:37:7e:
ed:21:3d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:41 2026 by rpki-client