Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
File: JRXoeSpCT_cswXkpeOLNTNvtpNA.mft (raw, json)
Hash identifier: 7SVrenkEAN+1uWnHUcHQ+d4uabGse53HnIXhLlxntsc=
Subject key identifier: EF:1B:DC:F5:79:71:04:1E:1E:76:78:88:F4:1E:EA:FA:F5:5C:35:0E
Authority key identifier: 25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
Certificate issuer: /CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Certificate serial: 019E1F113581D3FC7727C55D6D158294D591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
Manifest number: 07AE
Signing time: Wed 13 May 2026 02:01:21 +0000
Manifest this update: Wed 13 May 2026 02:01:21 +0000
Manifest next update: Thu 14 May 2026 02:01:21 +0000
Files and hashes: 1: 0dTl6UGk0kVr0p7yhdhl2mMbMHQ.roa (hash: UNu75LsKIseFbQAMf40egmXKjAANp+52TwIOp5EMRiw=)
2: JRXoeSpCT_cswXkpeOLNTNvtpNA.crl (hash: YzMPr5kK3x0xEW7xkT/EYRGrE5xMN4YyFkvIjpbq2sw=)
3: v7HxL3ym-JSGYnJ5OLK_LWKEkwk.roa (hash: btWBp9iO8STmT4P+DcwKknpMMsc20/dgw5WRtt6GDJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:35:81:d3:fc:77:27:c5:5d:6d:15:82:94:d5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Validity
Not Before: May 13 02:01:21 2026 GMT
Not After : May 14 02:01:21 2026 GMT
Subject: CN=ef1bdcf57971041e1e767888f41eeafaf55c350e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7a:54:ab:7e:3b:3e:0a:0e:26:47:ff:1c:fe:
89:93:05:2f:c7:36:29:88:e2:ea:e1:c4:ab:b3:98:
5b:84:04:f6:78:27:6f:3c:78:40:02:e1:c7:cc:09:
64:02:c3:a3:a6:70:72:49:f3:d5:e3:19:a9:ee:c8:
1e:59:9f:10:5d:0a:69:78:5f:c9:46:09:d3:ab:b8:
76:17:a6:b0:b5:ec:6b:4b:d3:b7:52:f5:c7:6b:3e:
02:03:62:71:28:11:88:ea:8f:cc:79:2e:68:ec:02:
7b:8a:bd:5a:f0:37:65:8f:6d:c8:31:9c:6d:1a:09:
be:3e:0f:25:2a:f4:41:ea:db:68:5f:53:8b:b7:52:
fe:e3:56:07:3b:60:b2:58:80:94:56:21:2e:5b:7e:
35:a6:ad:81:04:8d:b1:63:9e:24:90:96:7d:bf:c5:
12:64:01:1d:b9:9d:45:8e:a3:94:25:cb:bb:d2:71:
ff:ba:bf:ea:f3:d3:36:4a:22:f1:e3:9b:cb:f7:64:
a8:fd:6b:1f:76:a6:50:9a:11:88:3e:91:f8:a4:c8:
22:b5:e8:89:bf:c8:5e:c5:a6:b4:bd:56:a5:ea:ad:
d8:53:8c:e4:23:24:9c:85:c1:a6:3a:26:2d:27:45:
71:ad:a7:c7:2b:ed:2d:83:96:ac:56:76:76:63:0f:
c1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1B:DC:F5:79:71:04:1E:1E:76:78:88:F4:1E:EA:FA:F5:5C:35:0E
X509v3 Authority Key Identifier:
keyid:25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:13:3f:09:51:93:1b:86:29:ce:4c:fe:6d:9a:3b:20:cf:53:
5f:39:4a:61:0f:98:3b:e7:8d:74:f8:55:af:20:6a:e3:56:7a:
b2:f9:24:2b:0f:b3:4c:b7:68:dd:39:2d:20:51:3d:6f:e1:bd:
98:0a:1f:da:d4:7f:20:39:c1:12:52:fa:9a:11:aa:8c:c4:27:
10:7a:88:51:a8:52:c1:00:92:c4:00:8c:18:d6:8e:a7:dd:38:
79:ea:07:ed:2c:49:d4:b1:a1:96:d0:09:f0:67:33:51:89:4f:
94:57:37:1d:90:e2:d0:88:5e:ec:57:43:5b:98:52:53:1e:e7:
5c:b5:05:6c:70:26:73:63:b7:ff:b6:6c:fc:54:ee:02:3b:13:
a2:a6:cd:98:f1:b8:f3:f0:44:31:d0:70:0d:22:4a:da:1c:15:
f8:55:b2:3d:22:62:e8:a0:f0:64:b8:d8:b1:74:9e:a6:df:5b:
b8:f2:5b:39:54:1f:35:c4:38:1a:eb:03:6f:e1:14:6b:45:d8:
92:27:30:a6:25:e3:dd:a3:fa:fd:78:6e:05:9f:d8:d0:fa:34:
80:1e:5a:7e:97:30:d1:c1:b1:92:33:0f:8f:9b:28:0b:e8:3a:
f5:36:76:2b:25:dd:e0:de:5a:4c:fa:ac:78:4a:18:f8:5d:7c:
6d:c4:97:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:38 2026 by rpki-client