Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
File: CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft (raw, json)
Hash identifier: MH5A2PhNR1+00Qp8Ox/Kp4br1u2ELAOq1uGJt7OaoS0=
Subject key identifier: 81:1E:04:7E:BD:A5:6C:4D:8C:D4:9F:CB:3C:BD:50:F7:B2:75:17:02
Authority key identifier: 08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
Certificate issuer: /CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Certificate serial: 01A141961521308A43A2DB72B5561C5F539A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
Manifest number: 0F3F
Signing time: Thu 15 Oct 2026 22:01:57 +0000
Manifest this update: Thu 15 Oct 2026 22:01:57 +0000
Manifest next update: Fri 16 Oct 2026 22:01:57 +0000
Files and hashes: 1: CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl (hash: xXdjQoH6J7wJil4yWgf+0rP3E/uq39wG6Gmh6ED/Nd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 22:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:96:15:21:30:8a:43:a2:db:72:b5:56:1c:5f:53:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Validity
Not Before: Oct 15 22:01:57 2026 GMT
Not After : Oct 16 22:01:57 2026 GMT
Subject: CN=811e047ebda56c4d8cd49fcb3cbd50f7b2751702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9c:3b:fb:aa:3d:8d:87:5a:53:93:fc:75:31:
2a:cd:cb:05:28:ee:ce:c0:b3:c8:88:7c:31:9c:2e:
17:ef:d4:7a:74:be:17:78:04:28:e1:57:95:a4:67:
3c:1f:a8:08:ff:d7:1b:e4:af:29:74:7f:70:e9:40:
41:c9:5a:4b:6d:5b:84:28:f4:6d:e8:4f:72:49:d0:
de:04:69:d5:c8:60:da:d2:26:8d:64:67:1b:44:fd:
80:aa:48:0f:7c:b8:e4:b6:a5:ef:d0:a0:29:ec:d1:
b2:0b:7d:72:ac:60:b4:28:37:32:4a:70:f5:92:85:
17:28:61:56:42:da:88:32:98:7e:08:16:28:82:c9:
3f:72:4c:f7:36:8e:f7:81:7b:f7:06:2a:37:ae:67:
e1:61:00:d1:4f:dc:7c:f4:e4:eb:e9:be:6a:c0:b0:
ef:48:ab:cd:cc:99:b5:0e:d7:32:b9:b2:90:bd:86:
35:a1:b5:dc:76:1f:ff:13:58:cb:44:10:0b:cd:21:
13:dd:86:da:da:fa:59:3c:dd:bf:50:9e:68:f3:56:
b8:4e:70:d0:b9:ab:57:fe:66:62:5e:37:2e:53:66:
af:0d:63:29:00:ba:95:21:8c:81:70:86:39:01:ce:
ca:a9:53:2d:0a:97:b0:f8:f6:36:70:8d:8e:7c:cf:
c8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1E:04:7E:BD:A5:6C:4D:8C:D4:9F:CB:3C:BD:50:F7:B2:75:17:02
X509v3 Authority Key Identifier:
keyid:08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f7:60:f5:7d:38:19:c7:13:5c:22:12:47:03:0f:a7:ae:09:
c9:e1:0d:bb:bb:65:ea:bd:89:76:98:fe:a7:36:4f:40:93:df:
c8:76:95:da:51:0b:0e:b0:09:81:fc:14:d0:9a:b1:60:cc:e9:
28:31:67:c6:64:72:fc:b5:a9:80:17:cf:be:8a:46:fd:30:2f:
fd:e2:86:c8:b2:e6:ce:fd:b4:37:c3:86:2c:e5:65:ee:4c:ce:
1a:eb:5c:c5:ec:20:73:88:4a:14:ed:ee:6b:be:51:90:3b:8f:
54:68:a9:72:fc:c8:08:4e:0b:7d:08:55:8a:c8:ea:35:4c:4b:
6d:bc:e7:08:2d:b4:cd:3f:34:41:f2:81:9b:3a:a9:6f:fb:e7:
c9:76:ee:20:08:93:68:eb:58:8f:42:e7:85:35:f8:0c:e8:23:
b1:8c:55:bc:9f:b0:7a:6a:01:1e:71:5c:69:18:22:84:4c:85:
f5:98:82:87:9a:6c:97:6f:47:70:f0:aa:f4:17:82:c4:4e:46:
de:2e:8e:a4:2f:cd:61:c4:bb:0a:3f:03:01:3e:dc:3b:2a:16:
31:1f:2d:ef:85:c4:b3:23:80:dc:98:13:d5:d2:2d:b8:fc:ea:
2e:3f:40:bb:1e:31:94:a1:a6:bb:b9:2c:0a:cc:42:fe:2a:6a:
61:ff:18:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 05:41:16 2026 by rpki-client