Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
File: CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft (raw, json)
Hash identifier: XtbGnvJluOHNqb4UPHnWAc7JZv5YOtNANPQX6eNMTZo=
Subject key identifier: 60:64:A4:21:47:0D:8F:40:B5:FE:6D:E0:9F:1F:C7:EC:79:37:D2:43
Authority key identifier: 08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
Certificate issuer: /CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Certificate serial: 01A00101E9B11948D631CE1F2AF4AB2D3A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
Manifest number: 0E99
Signing time: Fri 14 Aug 2026 16:01:37 +0000
Manifest this update: Fri 14 Aug 2026 16:01:37 +0000
Manifest next update: Sat 15 Aug 2026 16:01:37 +0000
Files and hashes: 1: CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl (hash: iFwvGycqaOYSEzVIxd/Cnf5h9x/gutnVqbBQ1k8RTZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:e9:b1:19:48:d6:31:ce:1f:2a:f4:ab:2d:3a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Validity
Not Before: Aug 14 16:01:37 2026 GMT
Not After : Aug 15 16:01:37 2026 GMT
Subject: CN=6064a421470d8f40b5fe6de09f1fc7ec7937d243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:31:ea:8e:96:4b:9c:2f:97:13:35:36:18:17:
2a:e3:7b:b4:03:26:04:4f:05:ee:72:61:c9:45:7e:
8c:ff:58:78:da:2b:ad:da:19:c4:14:d1:a0:71:ed:
aa:02:33:99:ef:7c:94:d4:f1:4e:f6:9d:8f:d4:84:
a9:b2:60:37:44:a2:5a:97:b6:43:a6:7e:69:87:1b:
94:ae:b4:4e:dd:13:f9:43:cd:f7:5e:30:f1:33:b3:
02:56:2a:74:e3:7a:5c:08:2d:67:6e:5b:6c:47:65:
5e:46:fb:ad:1e:5a:21:01:b3:17:df:62:73:d3:22:
dd:21:b8:ba:67:89:72:ad:af:10:72:c5:50:87:f7:
93:c8:8f:a3:94:5d:eb:73:1c:b4:33:61:60:1c:ef:
2d:79:a0:b0:50:93:87:d5:b2:01:c3:bc:85:7f:c7:
20:3b:75:49:30:b3:1b:28:30:3f:3e:e6:52:67:2f:
a3:c9:fe:d8:0a:21:31:c7:6d:9d:93:4f:79:44:d0:
8f:bd:6a:4b:0e:43:5c:4a:09:8d:49:75:c7:11:fa:
03:80:f1:a6:8b:3b:18:58:7a:cc:2b:65:f2:a8:75:
31:c0:2f:90:0b:a8:09:2f:95:05:13:2b:5f:19:1b:
29:1e:d5:94:5c:b3:85:73:ee:3c:6b:4b:3e:e2:77:
04:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:64:A4:21:47:0D:8F:40:B5:FE:6D:E0:9F:1F:C7:EC:79:37:D2:43
X509v3 Authority Key Identifier:
keyid:08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:60:8e:07:d4:d8:8b:70:74:bd:b4:8e:79:25:ed:dd:30:ec:
2e:0f:8d:d7:e4:3d:72:5a:ba:4d:33:c6:00:93:9a:94:4d:5f:
20:a7:6a:a9:67:a0:20:3e:ca:b5:63:91:16:67:61:4b:e8:cd:
de:da:a2:38:93:ce:64:e9:2f:87:4e:03:4f:ba:c5:25:dd:29:
f9:7b:fd:9f:40:e7:6a:03:94:97:d3:66:95:a1:bb:53:c7:55:
25:4a:bc:86:44:a0:ab:da:b3:e7:81:57:54:73:e4:15:89:d2:
18:6a:d7:dd:91:a7:a9:e7:d5:f7:3b:55:c9:06:e3:53:bf:55:
51:17:36:9f:74:82:a5:84:17:8d:4b:49:21:67:52:6c:3c:a0:
4e:2d:37:d4:4d:ee:d3:d6:63:1a:ec:16:8b:b0:23:2d:f6:9a:
0e:26:53:ea:4b:a5:22:ca:70:6a:75:77:61:d5:26:70:06:e7:
65:67:fe:d4:89:b9:04:45:56:cf:af:7b:19:53:65:1e:63:a2:
ed:3f:01:bc:23:53:ea:bd:a5:ec:fb:81:fa:4a:73:73:88:f4:
26:07:6f:8a:e4:18:24:4d:be:5e:a8:6e:6d:4d:04:b5:78:ac:
76:b7:50:68:13:5a:a6:5b:fb:72:32:85:11:fd:f0:d3:2c:af:
01:13:5d:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAemxGUjWMc4fKvSrLTpcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDI3ZmRjOTBmODBmODA5NzJjMTI1YmQ0MWVkYjBhZTgz
MzRhYTAwHhcNMjYwODE0MTYwMTM3WhcNMjYwODE1MTYwMTM3WjAzMTEwLwYDVQQD
Eyg2MDY0YTQyMTQ3MGQ4ZjQwYjVmZTZkZTA5ZjFmYzdlYzc5MzdkMjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzHqjpZLnC+XEzU2GBcq43u0AyYE
TwXucmHJRX6M/1h42iut2hnEFNGgce2qAjOZ73yU1PFO9p2P1ISpsmA3RKJal7ZD
pn5phxuUrrRO3RP5Q833XjDxM7MCVip043pcCC1nbltsR2VeRvutHlohAbMX32Jz
0yLdIbi6Z4lyra8QcsVQh/eTyI+jlF3rcxy0M2FgHO8teaCwUJOH1bIBw7yFf8cg
O3VJMLMbKDA/PuZSZy+jyf7YCiExx22dk095RNCPvWpLDkNcSgmNSXXHEfoDgPGm
izsYWHrMK2XyqHUxwC+QC6gJL5UFEytfGRspHtWUXLOFc+48a0s+4ncECwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBkpCFHDY9Atf5t4J8fx+x5N9JDMB8GA1UdIwQY
MBaAFAjSf9yQ+A+AlywSW9Qe2wroM0qgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05KXzNKRDRENENYTEJKYjFCN2JDdWd6U3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82NjJkYmUtNTkzNy00NmZhLThkOTYt
OTEwNTQxMTU1ZmVmLzEvQ05KXzNKRDRENENYTEJKYjFCN2JDdWd6U3FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC82NjJkYmUtNTkzNy00NmZhLThkOTYtOTEwNTQxMTU1ZmVm
LzEvQ05KXzNKRDRENENYTEJKYjFCN2JDdWd6U3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamCOB9TY
i3B0vbSOeSXt3TDsLg+N1+Q9clq6TTPGAJOalE1fIKdqqWegID7KtWORFmdhS+jN
3tqiOJPOZOkvh04DT7rFJd0p+Xv9n0DnagOUl9NmlaG7U8dVJUq8hkSgq9qz54FX
VHPkFYnSGGrX3ZGnqefV9ztVyQbjU79VURc2n3SCpYQXjUtJIWdSbDygTi031E3u
09ZjGuwWi7AjLfaaDiZT6kulIspwanV3YdUmcAbnZWf+1Im5BEVWz697GVNlHmOi
7T8BvCNT6r2l7PuB+kpzc4j0JgdviuQYJE2+XqhubU0EtXisdrdQaBNaplv7cjKF
Ef3w0yyvARNd2Q==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:03 2026 by rpki-client