Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
File: JRXoeSpCT_cswXkpeOLNTNvtpNA.mft (raw, json)
Hash identifier: dSDh0m5Jb6JgE3TLb1RXxJXrlrFZRFvYOLFmos5AxNg=
Subject key identifier: 4F:CE:C8:07:76:FC:A5:8F:70:A6:C4:AA:09:B3:70:07:1B:E9:F3:B0
Authority key identifier: 25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
Certificate issuer: /CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Certificate serial: 019F93C8D90F1062E1815C9DEE3E84EECBE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
Manifest number: 086F
Signing time: Fri 24 Jul 2026 11:00:41 +0000
Manifest this update: Fri 24 Jul 2026 11:00:41 +0000
Manifest next update: Sat 25 Jul 2026 11:00:41 +0000
Files and hashes: 1: 0dTl6UGk0kVr0p7yhdhl2mMbMHQ.roa (hash: UNu75LsKIseFbQAMf40egmXKjAANp+52TwIOp5EMRiw=)
2: JRXoeSpCT_cswXkpeOLNTNvtpNA.crl (hash: mFVwTzpBfVL8ClLNifH7aR/Fbb37hvPxd/LCpXj21pU=)
3: v7HxL3ym-JSGYnJ5OLK_LWKEkwk.roa (hash: btWBp9iO8STmT4P+DcwKknpMMsc20/dgw5WRtt6GDJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:d9:0f:10:62:e1:81:5c:9d:ee:3e:84:ee:cb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Validity
Not Before: Jul 24 11:00:41 2026 GMT
Not After : Jul 25 11:00:41 2026 GMT
Subject: CN=4fcec80776fca58f70a6c4aa09b370071be9f3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:98:3f:25:39:ce:3d:8e:02:44:15:88:c4:
8c:d3:5a:9b:58:78:5b:64:49:d4:94:67:c4:9a:fa:
36:63:6c:f0:fd:77:37:e4:44:9b:ee:a2:1e:01:e9:
18:f4:18:80:ec:29:44:af:23:80:72:ca:16:e4:b6:
4b:c3:68:66:49:8c:21:2e:1a:44:d4:e8:54:44:62:
48:16:8d:b0:99:f1:b9:4f:b4:82:79:42:03:bf:0b:
ed:a0:4b:cb:ad:c4:2d:dd:a4:e2:bc:df:61:ad:8e:
e5:08:55:20:bb:c6:27:ec:ee:4c:75:9f:1a:6c:9d:
1f:24:17:90:4e:75:9a:5e:ad:f9:6a:c5:98:a5:00:
97:52:f9:39:71:e1:34:fe:c1:25:18:63:df:70:bc:
b2:dc:52:f2:b3:25:48:e9:26:9f:9b:23:77:7d:73:
2f:c3:06:2a:b5:ad:ed:28:90:27:10:77:ca:3d:55:
5d:72:97:ef:1c:33:51:3e:84:c4:88:e3:df:c0:52:
bb:11:34:59:46:6d:56:a8:21:58:a6:32:7d:97:bb:
55:9a:75:34:a7:50:10:9e:34:76:7d:f4:29:22:c9:
0f:4e:2c:d9:4d:b0:1e:a0:40:e3:d5:49:5c:31:75:
c3:e1:77:1f:d3:7b:95:b0:57:8c:6a:02:8c:ab:b3:
21:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CE:C8:07:76:FC:A5:8F:70:A6:C4:AA:09:B3:70:07:1B:E9:F3:B0
X509v3 Authority Key Identifier:
keyid:25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:67:db:e1:bf:bd:ac:60:74:63:bc:2e:3d:d6:2a:28:44:96:
8e:63:e2:54:f3:31:b9:96:60:f0:d8:98:01:3a:10:40:fa:f5:
0a:5f:8f:ef:91:0c:e4:6a:c2:c1:f8:59:9f:39:32:41:cf:28:
af:69:45:80:fb:34:60:7c:49:67:f7:df:f6:c9:63:e6:24:14:
dd:4c:6d:64:20:d4:c1:de:fe:ee:04:24:d3:dc:de:d9:85:7e:
81:60:42:6c:76:eb:9e:a6:a7:da:50:24:fb:58:ad:43:de:ce:
7f:54:67:00:3e:1b:46:8a:a5:24:0e:9a:dd:2b:65:c0:fe:e8:
28:c7:d4:8e:e7:1b:98:e1:86:65:0d:d0:50:2b:d2:07:b3:96:
d2:0d:bb:f9:df:c9:e4:74:69:d5:22:a2:dd:e4:05:65:a2:9e:
a0:b0:e6:30:8c:b1:57:fc:c6:6b:72:dd:2c:a8:19:b0:76:20:
26:72:79:b0:9a:d2:a5:33:b7:4e:95:f0:47:04:fc:d6:01:99:
e7:22:a3:6c:e0:d5:a7:2d:44:64:0a:f9:bf:ab:93:9e:17:c5:
9d:7c:35:93:70:cf:58:c6:ab:35:38:b8:f0:9a:93:9b:7f:0d:
91:e4:38:3e:46:96:ba:77:0d:f3:34:0b:7c:8e:62:6d:94:5a:
53:44:8c:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyNkPEGLhgVyd7j6E7svgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MTVlODc5MmE0MjRmZjcyY2MxNzkyOTc4ZTJjZDRjZGJl
ZGE0ZDAwHhcNMjYwNzI0MTEwMDQxWhcNMjYwNzI1MTEwMDQxWjAzMTEwLwYDVQQD
Eyg0ZmNlYzgwNzc2ZmNhNThmNzBhNmM0YWEwOWIzNzAwNzFiZTlmM2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd2YPyU5zj2OAkQViMSM01qbWHhb
ZEnUlGfEmvo2Y2zw/Xc35ESb7qIeAekY9BiA7ClEryOAcsoW5LZLw2hmSYwhLhpE
1OhURGJIFo2wmfG5T7SCeUIDvwvtoEvLrcQt3aTivN9hrY7lCFUgu8Yn7O5MdZ8a
bJ0fJBeQTnWaXq35asWYpQCXUvk5ceE0/sElGGPfcLyy3FLysyVI6SafmyN3fXMv
wwYqta3tKJAnEHfKPVVdcpfvHDNRPoTEiOPfwFK7ETRZRm1WqCFYpjJ9l7tVmnU0
p1AQnjR2ffQpIskPTizZTbAeoEDj1UlcMXXD4Xcf03uVsFeMagKMq7Mh7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/OyAd2/KWPcKbEqgmzcAcb6fOwMB8GA1UdIwQY
MBaAFCUV6HkqQk/3LMF5KXjizUzb7aTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlJYb2VTcENUX2Nzd1hrcGVPTE5UTnZ0cE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8zZDBmNDAtYTdkZC00Njg5LWJjMzIt
OWVlZDlkNzVjMGQxLzEvSlJYb2VTcENUX2Nzd1hrcGVPTE5UTnZ0cE5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8zZDBmNDAtYTdkZC00Njg5LWJjMzItOWVlZDlkNzVjMGQx
LzEvSlJYb2VTcENUX2Nzd1hrcGVPTE5UTnZ0cE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2fb4b+9
rGB0Y7wuPdYqKESWjmPiVPMxuZZg8NiYAToQQPr1Cl+P75EM5GrCwfhZnzkyQc8o
r2lFgPs0YHxJZ/ff9slj5iQU3UxtZCDUwd7+7gQk09ze2YV+gWBCbHbrnqan2lAk
+1itQ97Of1RnAD4bRoqlJA6a3StlwP7oKMfUjucbmOGGZQ3QUCvSB7OW0g27+d/J
5HRp1SKi3eQFZaKeoLDmMIyxV/zGa3LdLKgZsHYgJnJ5sJrSpTO3TpXwRwT81gGZ
5yKjbODVpy1EZAr5v6uTnhfFnXw1k3DPWMarNTi48JqTm38NkeQ4PkaWuncN8zQL
fI5ibZRaU0SM7Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:29 2026 by rpki-client