Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
File: JRXoeSpCT_cswXkpeOLNTNvtpNA.mft (raw, json)
Hash identifier: Y/31gQsVmAxwdDZRiSIy5S7ppnupbIba5xHlozpmQLY=
Subject key identifier: F3:CD:BF:BC:4F:9E:81:AC:98:BC:48:4D:D1:2E:81:D7:71:3A:92:CE
Authority key identifier: 25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
Certificate issuer: /CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Certificate serial: 019D25F1006E2494686EF37F3D800BB8E54D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
Manifest number: 072D
Signing time: Wed 25 Mar 2026 17:00:44 +0000
Manifest this update: Wed 25 Mar 2026 17:00:44 +0000
Manifest next update: Thu 26 Mar 2026 17:00:44 +0000
Files and hashes: 1: 0dTl6UGk0kVr0p7yhdhl2mMbMHQ.roa (hash: UNu75LsKIseFbQAMf40egmXKjAANp+52TwIOp5EMRiw=)
2: JRXoeSpCT_cswXkpeOLNTNvtpNA.crl (hash: PbSIWwHioZYtDfnEgqo/TqgcBbGH/EWnTtdy+TWfUsc=)
3: v7HxL3ym-JSGYnJ5OLK_LWKEkwk.roa (hash: btWBp9iO8STmT4P+DcwKknpMMsc20/dgw5WRtt6GDJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:00:6e:24:94:68:6e:f3:7f:3d:80:0b:b8:e5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Validity
Not Before: Mar 25 17:00:44 2026 GMT
Not After : Mar 26 17:00:44 2026 GMT
Subject: CN=f3cdbfbc4f9e81ac98bc484dd12e81d7713a92ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e7:97:03:eb:ab:14:45:b7:94:51:58:bd:5a:
54:7e:4e:00:a1:7f:64:57:7a:06:8e:f9:9c:b0:c9:
22:94:5c:f7:74:2c:8c:4b:1c:6e:41:ae:92:80:e5:
5a:b7:d5:39:d3:32:39:c9:7c:e1:e3:38:34:27:71:
86:11:2e:84:6b:4c:67:84:49:f6:37:3d:aa:3f:ce:
d0:a8:5a:1a:ef:aa:0f:39:b3:fe:7e:cf:dc:de:a6:
f8:f5:36:ab:18:8d:de:eb:e9:73:ac:43:e9:ee:0f:
ed:05:a4:a1:b8:1e:a1:d1:2c:36:b5:38:b6:cd:3e:
3f:8e:10:99:7a:89:c6:3a:01:3c:38:8c:40:71:6e:
80:af:93:0c:b1:cf:f4:35:16:a2:96:50:17:82:72:
bf:da:03:6a:ac:9d:b9:7b:42:6b:84:c1:f0:97:45:
e9:b4:a8:90:91:65:6b:e7:61:4d:fb:9e:ef:43:f2:
93:5e:1f:e9:90:8c:14:97:5f:16:bb:c2:65:69:ea:
32:35:e7:18:38:7a:4f:19:29:bb:14:62:cb:15:d4:
64:b5:eb:75:49:ef:9f:9f:d7:2f:a1:e7:05:9f:b0:
70:86:7e:c0:fb:92:11:ec:f7:c0:23:38:1c:33:2a:
f6:a4:41:f3:ff:8a:fa:8a:72:51:59:f1:44:69:c0:
8d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CD:BF:BC:4F:9E:81:AC:98:BC:48:4D:D1:2E:81:D7:71:3A:92:CE
X509v3 Authority Key Identifier:
keyid:25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ff:b7:bb:62:5a:4f:5e:36:73:76:3f:dd:ab:f7:da:3e:0d:
6c:9d:df:e3:a5:4f:0c:5e:4b:16:cb:50:28:a6:3c:80:f7:31:
c1:e1:fc:4b:0e:6b:63:2a:31:20:a2:47:13:89:02:c6:9d:18:
6f:a8:f7:70:71:b6:db:58:f6:21:2b:2d:58:0e:32:20:b7:21:
c7:28:1c:1a:9c:50:5a:d2:99:68:00:7d:e6:4b:83:21:a1:ba:
c3:0d:d1:a7:82:d4:1f:f1:e8:45:61:e2:99:ff:ac:d4:db:b8:
43:88:82:cd:d0:10:47:98:5c:33:3f:00:4f:bd:f1:3a:83:a6:
50:78:6e:78:a7:6d:bf:6c:06:25:38:5b:8e:bd:64:fb:5f:09:
df:95:a0:43:d1:f2:dc:61:6f:08:54:1b:41:ce:ad:ed:07:48:
4d:dd:a3:e0:d5:a2:67:2f:83:3e:e5:b3:1f:92:03:89:37:e0:
22:8a:b2:5c:84:a3:54:94:86:12:67:c2:c9:4b:22:08:3e:0d:
91:33:f9:bd:9d:5a:a2:8b:ee:f2:ef:40:6e:1f:dd:a4:a9:ec:
8c:72:b8:0b:1d:4a:7c:65:a1:da:3c:a0:c2:a6:fd:0c:fd:f4:
bf:d8:4e:fd:e2:83:2b:71:9e:17:9e:3e:d6:32:37:5f:d7:85:
6e:05:e4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:19 2026 by rpki-client