Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
File: CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft (raw, json)
Hash identifier: T8T++GVyBK6GX82wNm/BLyIYm1F0wN3sPLqGGDEsIK0=
Subject key identifier: E4:BA:EC:4F:4D:E6:01:14:14:25:78:FD:EA:10:E5:9C:90:50:FE:BD
Authority key identifier: 08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
Certificate issuer: /CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Certificate serial: 01A13FA7AFCA07C4A2B74776178B3C25B7B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
Manifest number: 0F3E
Signing time: Thu 15 Oct 2026 13:01:56 +0000
Manifest this update: Thu 15 Oct 2026 13:01:56 +0000
Manifest next update: Fri 16 Oct 2026 13:01:56 +0000
Files and hashes: 1: CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl (hash: hLSWNTsIGMwlQBEbz/o2ntoLZQEcxp7Gyv2JfnPBdJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:af:ca:07:c4:a2:b7:47:76:17:8b:3c:25:b7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Validity
Not Before: Oct 15 13:01:56 2026 GMT
Not After : Oct 16 13:01:56 2026 GMT
Subject: CN=e4baec4f4de60114142578fdea10e59c9050febd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2e:e9:e6:bc:18:9b:be:0f:66:22:e5:8d:0b:
00:97:2f:a7:3c:0c:d9:31:92:ea:53:0a:52:22:4b:
44:d9:f9:b0:07:ec:6b:e8:fb:0f:11:01:f8:ab:d6:
52:e6:86:37:b4:f7:22:34:48:54:f2:19:1a:4a:dc:
d5:cf:30:21:9f:51:14:7f:42:cf:04:cc:c1:93:d0:
e1:a4:f4:9d:b1:40:0e:ea:15:51:fa:63:05:89:95:
b3:b8:a9:fe:f5:11:95:3d:8c:be:1d:60:94:26:cf:
11:20:8a:9b:c8:bb:57:04:dc:61:23:fb:52:e5:bf:
93:e0:5f:18:b6:ec:82:59:6d:a9:c1:96:35:b9:a5:
cc:a9:74:07:4c:8b:31:73:5f:36:f5:6f:bd:8b:72:
d6:a3:9d:d7:49:4a:cf:d0:55:8d:d8:a0:51:98:17:
3a:fc:9e:3b:d5:58:4e:b5:e1:73:23:23:a1:c4:70:
1b:0c:9d:3c:6b:b8:ed:56:3c:59:f8:7b:e5:32:16:
8e:6f:57:6a:9d:15:8d:e3:9c:74:e2:6b:d3:8d:ec:
02:aa:b7:12:9b:58:b6:93:07:9b:2e:b0:29:36:c7:
a7:4a:86:6a:c8:7e:76:f3:e2:c4:55:07:1e:17:4d:
a6:a4:59:55:d7:af:1c:18:72:01:5f:66:81:80:61:
16:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BA:EC:4F:4D:E6:01:14:14:25:78:FD:EA:10:E5:9C:90:50:FE:BD
X509v3 Authority Key Identifier:
keyid:08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fb:c9:26:be:de:f1:4e:a8:05:67:29:f2:9d:a0:22:21:fd:
4d:8c:96:6b:09:46:cc:f2:12:43:bb:d4:c1:f7:35:91:5b:67:
ff:53:4a:f4:c9:83:7f:28:4c:a1:8f:68:13:db:f2:30:bb:1a:
0d:72:e3:a7:d7:fd:7c:97:bd:14:c3:a7:49:e0:e5:0f:dd:a0:
68:69:7c:3d:ff:45:0d:9b:4d:a8:4b:ed:5b:b5:f5:3b:30:0d:
07:fb:fa:1e:f0:1a:51:bd:62:65:11:50:1a:2a:81:7f:21:31:
e7:fa:44:6d:bf:af:28:55:5e:be:51:24:8c:dc:15:8a:07:3e:
9d:be:d9:f7:37:ae:71:21:f2:6a:b4:a3:0e:d7:b7:ab:d8:75:
f6:1d:86:5d:fc:20:23:4c:e0:9e:61:26:e0:6e:b1:8b:d4:6b:
9d:ea:09:f5:2d:bf:0c:d7:56:5a:33:12:7c:ed:7e:79:ba:aa:
ce:59:59:4d:27:4b:5d:82:e3:57:8d:e6:8f:50:53:d8:3a:70:
13:a4:5d:89:25:e3:c7:21:97:55:5f:ad:a4:87:f5:5a:2c:2d:
ea:1b:6b:60:23:50:ad:c6:97:ea:f5:31:6e:c7:32:b3:2e:03:
eb:d2:d9:54:85:5f:7f:c3:9b:a8:aa:52:0d:02:ad:0f:97:a3:
87:42:53:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:34:54 2026 by rpki-client