Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
File: JRXoeSpCT_cswXkpeOLNTNvtpNA.mft (raw, json)
Hash identifier: 3TGSSlmM7s5qJbMSd7lMSIttOgqBdpLQS+/3pE61dZo=
Subject key identifier: 5E:93:3A:55:5C:4F:D4:DE:FD:58:F2:8E:6B:A3:9C:FD:00:69:D1:53
Authority key identifier: 25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
Certificate issuer: /CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Certificate serial: 019FAAF54354AC0740A5196F4EEE1F7A3CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
Manifest number: 087B
Signing time: Tue 28 Jul 2026 23:00:28 +0000
Manifest this update: Tue 28 Jul 2026 23:00:28 +0000
Manifest next update: Wed 29 Jul 2026 23:00:28 +0000
Files and hashes: 1: 0dTl6UGk0kVr0p7yhdhl2mMbMHQ.roa (hash: UNu75LsKIseFbQAMf40egmXKjAANp+52TwIOp5EMRiw=)
2: JRXoeSpCT_cswXkpeOLNTNvtpNA.crl (hash: sDlE0ymC23P/f1qO6c3cDEEAfQzZXHrmpuc3H3Lo94M=)
3: v7HxL3ym-JSGYnJ5OLK_LWKEkwk.roa (hash: btWBp9iO8STmT4P+DcwKknpMMsc20/dgw5WRtt6GDJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:43:54:ac:07:40:a5:19:6f:4e:ee:1f:7a:3c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Validity
Not Before: Jul 28 23:00:28 2026 GMT
Not After : Jul 29 23:00:28 2026 GMT
Subject: CN=5e933a555c4fd4defd58f28e6ba39cfd0069d153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:f1:84:d5:ac:1b:f8:ea:13:13:d3:2b:dd:
a6:46:55:87:4f:9e:f2:5e:78:87:49:ac:79:6e:2c:
2e:16:79:60:4f:8d:44:ee:5b:20:78:a0:10:c6:9c:
61:55:a6:e3:4b:3b:2d:6c:78:bf:75:35:eb:f5:f5:
df:85:0a:e4:40:28:43:95:dc:4b:e1:4e:b8:d3:9f:
34:19:08:10:e1:34:0e:dd:30:87:01:cb:72:5a:58:
be:9a:b0:a7:ff:3a:80:a3:68:44:4f:44:58:d5:bd:
de:77:37:63:0a:e7:87:b3:20:d2:dc:be:db:c9:b9:
9f:e2:5a:fe:ef:0c:b0:0f:47:cf:58:f2:bf:5e:83:
66:a8:b6:75:82:69:45:af:40:6c:78:eb:ec:7b:95:
47:4e:0e:74:f7:1f:76:43:ba:ec:c4:54:57:c0:68:
18:1d:ee:81:a2:e1:44:be:88:5b:f7:ca:e4:bb:47:
ee:cb:c2:f5:ce:2d:5b:14:28:b1:5d:fb:a3:b5:a7:
57:2f:50:55:bb:36:f9:f0:d3:c9:8f:24:10:29:44:
6c:74:49:60:88:63:e1:16:58:1e:20:01:d6:9d:d0:
92:4a:0d:3d:49:c4:6d:e1:f4:36:84:e5:f2:85:d7:
fa:37:07:90:a3:1f:f7:48:fb:8c:cc:19:e0:ee:85:
bf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:93:3A:55:5C:4F:D4:DE:FD:58:F2:8E:6B:A3:9C:FD:00:69:D1:53
X509v3 Authority Key Identifier:
keyid:25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:00:97:1d:a8:27:fd:63:6b:bc:f9:46:94:35:89:7d:85:ff:
12:a2:c0:e8:26:9d:26:ab:17:e9:56:ab:8d:8c:9e:fc:8e:43:
35:4a:1f:23:0b:d9:4c:bf:cb:c6:52:87:bd:47:b6:fe:ab:61:
06:6f:29:80:dc:89:0c:20:18:a4:b3:65:02:34:36:e3:4c:2b:
68:48:af:d7:79:a2:c4:e7:7a:43:9b:a2:1a:99:9c:32:8e:bd:
40:69:12:f9:c2:dd:21:b4:bd:b6:ea:ec:49:0e:5c:88:2d:93:
57:50:7f:75:76:7e:b1:08:0d:63:ab:65:04:95:f7:32:3c:34:
65:e7:84:27:7a:3b:04:e0:0c:4b:82:9c:9c:9f:0f:a7:ec:ff:
7e:b3:8f:37:f0:3e:cd:71:c6:7c:64:53:ad:15:0f:3b:22:bc:
4a:99:59:07:d4:71:fa:1c:c4:09:b7:37:66:e3:3b:9d:00:ab:
7f:72:f9:b5:36:71:67:a4:6f:fd:15:4c:72:35:37:f3:21:dd:
16:44:84:47:1c:7d:11:f2:63:b0:3e:c2:1f:6c:41:f1:2a:3c:
fc:13:fd:c0:5a:dc:c8:05:84:fa:72:14:9d:f2:a7:22:15:f0:
9e:94:88:1e:3b:ca:44:2c:9c:10:f7:04:a8:2b:f8:48:16:68:
3b:b1:4b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:26:28 2026 by rpki-client