Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
File: CNJq20T1SwmSx1PrF7q-gSsHSGM.mft (raw, json)
Hash identifier: 3BOXb2UWk1IKZpU5EgdYys91tRhpasas70Rp8Oo3smM=
Subject key identifier: B4:DA:AC:BF:F7:E3:D1:7D:3A:38:D0:EA:2E:C7:00:61:F6:0F:B7:62
Authority key identifier: 08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
Certificate issuer: /CN=08d26adb44f54b0992c753eb17babe812b074863
Certificate serial: 019D386596D138C8BD09A5E6AB665AED4EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:14 +0000
Manifest this update: Sun 29 Mar 2026 07:01:14 +0000
Manifest next update: Mon 30 Mar 2026 07:01:14 +0000
Files and hashes: 1: CNJq20T1SwmSx1PrF7q-gSsHSGM.crl (hash: guw1vV0YjreRwiMP5qDyr7caXLAFw25iw9TXznmvNig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:96:d1:38:c8:bd:09:a5:e6:ab:66:5a:ed:4e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d26adb44f54b0992c753eb17babe812b074863
Validity
Not Before: Mar 29 07:01:14 2026 GMT
Not After : Mar 30 07:01:14 2026 GMT
Subject: CN=b4daacbff7e3d17d3a38d0ea2ec70061f60fb762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ab:bd:ac:e8:1b:5c:8a:f7:8f:f5:82:e0:59:
f5:18:19:19:a6:f9:f6:72:fe:88:0a:01:e3:04:ae:
a9:54:24:cf:be:e4:c2:5f:14:5a:da:bc:4b:d9:07:
b1:06:fd:a3:28:e5:2a:6b:91:46:fd:73:bc:95:64:
9f:70:aa:42:1c:82:48:fd:ad:e3:2d:3d:2c:f6:61:
fd:f6:fa:33:f7:a4:e4:88:06:5c:1e:8d:3d:78:c4:
41:9c:43:5f:83:fc:a6:1c:88:e6:ce:10:51:00:45:
a3:68:26:07:67:a8:e6:34:ce:6c:9f:89:a5:54:25:
a7:3c:ab:dc:fb:ce:5f:b0:78:b1:ed:dc:4a:a8:29:
15:30:c5:4e:ae:d3:e9:ab:82:56:25:89:2f:0f:c1:
d4:25:a7:c3:dc:3e:f3:fd:dd:f0:a5:1d:d7:07:7c:
61:8f:1b:88:35:d9:3f:e0:b8:2c:25:41:83:ea:de:
47:a0:57:6f:2d:0b:90:92:12:6c:96:4d:d3:9e:74:
76:d6:d7:00:cf:a1:ce:89:50:45:62:c4:b5:6d:62:
79:e3:87:67:c4:ad:49:63:1b:78:3d:1a:03:d1:15:
30:0e:b7:0f:c7:2b:fb:55:a0:18:5d:d3:48:76:e5:
9e:ba:d5:28:c3:ed:7a:6b:6f:11:47:21:61:27:ff:
ce:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DA:AC:BF:F7:E3:D1:7D:3A:38:D0:EA:2E:C7:00:61:F6:0F:B7:62
X509v3 Authority Key Identifier:
keyid:08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:87:8d:38:71:2f:07:06:2b:26:6f:f4:83:41:0d:71:71:eb:
87:4d:b2:4f:d0:5b:4c:7d:8a:52:40:17:f9:e3:36:22:44:5c:
18:34:04:18:94:8d:44:46:22:b3:e5:72:e8:11:92:d0:90:c2:
90:a7:f4:ef:f4:52:cc:b1:2d:9d:37:32:88:af:a3:dc:c4:0d:
79:e7:b9:9a:97:6d:ce:96:f5:14:a6:20:73:59:8a:6d:32:a0:
56:60:b8:13:ce:7b:96:33:40:7d:92:1d:87:ce:0a:b4:e8:f4:
d1:7a:57:d9:19:aa:8e:a1:40:aa:a4:0b:0e:32:6e:6d:ea:32:
2c:d5:d9:f1:ee:e4:4a:d3:ca:f0:98:d9:16:c4:6f:a3:d5:95:
3f:d4:5a:13:bf:cd:34:01:cb:4f:cb:f0:ea:c5:4c:6c:ef:5d:
02:74:ff:73:b3:5f:01:1f:ba:0d:56:bc:fa:1c:23:3e:01:83:
94:1f:4d:7d:1b:bf:78:93:56:18:b0:5f:bb:62:63:4c:06:94:
33:7d:bf:8a:b8:e6:6a:d3:69:14:ad:7f:6f:4d:ac:07:c6:d9:
a1:d8:e1:73:9f:24:6f:2d:6e:3a:bc:37:af:ba:5a:b3:7a:1d:
88:f1:a2:8b:8f:f9:27:4a:92:2f:1d:27:46:56:0e:7e:ff:f7:
df:af:53:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:37 2026 by rpki-client