Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
File: JRXoeSpCT_cswXkpeOLNTNvtpNA.mft (raw, json)
Hash identifier: cLf6P6HrCeV/0miLFY37632Jw7rybwlcoxiWTAfDL34=
Subject key identifier: 9D:A0:CD:55:29:AD:4D:E6:CC:71:D6:1F:43:87:12:4D:A2:25:1D:4B
Authority key identifier: 25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
Certificate issuer: /CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Certificate serial: 019D9BBF464AE0946AB5957BD0E789A62FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
Manifest number: 076A
Signing time: Fri 17 Apr 2026 14:01:36 +0000
Manifest this update: Fri 17 Apr 2026 14:01:36 +0000
Manifest next update: Sat 18 Apr 2026 14:01:36 +0000
Files and hashes: 1: 0dTl6UGk0kVr0p7yhdhl2mMbMHQ.roa (hash: UNu75LsKIseFbQAMf40egmXKjAANp+52TwIOp5EMRiw=)
2: JRXoeSpCT_cswXkpeOLNTNvtpNA.crl (hash: UtuKVXBffSQu/WP3deOB/yMWNfbT/IQs7/y+D+q1cL4=)
3: v7HxL3ym-JSGYnJ5OLK_LWKEkwk.roa (hash: btWBp9iO8STmT4P+DcwKknpMMsc20/dgw5WRtt6GDJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:46:4a:e0:94:6a:b5:95:7b:d0:e7:89:a6:2f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Validity
Not Before: Apr 17 14:01:36 2026 GMT
Not After : Apr 18 14:01:36 2026 GMT
Subject: CN=9da0cd5529ad4de6cc71d61f4387124da2251d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:21:40:d5:40:4d:6f:a3:8c:25:ea:ad:0f:c6:
92:df:d8:e1:1d:cb:9e:4f:9d:d0:40:37:b2:4a:37:
7d:fc:de:c1:b3:59:8a:37:5b:22:6b:53:0c:ff:4d:
18:da:a3:1f:3a:27:fd:e1:45:09:c8:0f:62:97:a3:
97:be:b4:81:6a:7a:31:22:8d:97:9c:93:f1:22:40:
41:56:2f:ba:8a:86:f8:96:8d:28:58:35:d2:f2:87:
38:29:2f:cd:99:14:c3:e8:37:9b:ce:d8:bb:ef:d7:
6c:54:e1:62:90:ea:94:68:9c:76:67:4b:62:c0:1e:
3c:82:c8:39:84:12:e8:fe:9a:74:18:97:c2:be:d1:
2a:d3:e9:f2:61:37:2f:b4:f5:c1:41:b2:4d:8d:27:
d1:d1:93:93:71:3d:11:d7:03:13:fb:7e:4a:64:8b:
8d:4d:7b:13:19:d5:40:7c:4d:99:d3:2f:18:f8:63:
d8:8b:3d:4d:41:a0:53:b6:12:4e:18:f2:2e:67:9b:
10:53:cb:06:da:65:50:5e:c2:6e:92:37:f1:f5:c5:
58:61:73:da:a8:e7:17:97:3d:36:8d:17:49:6c:26:
7a:7b:66:e0:2f:ab:14:8a:9c:99:92:90:99:2a:7c:
45:2c:24:47:41:47:31:9a:09:a3:b4:d8:41:f0:70:
e5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A0:CD:55:29:AD:4D:E6:CC:71:D6:1F:43:87:12:4D:A2:25:1D:4B
X509v3 Authority Key Identifier:
keyid:25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:6a:e2:fb:c5:5a:4a:d3:c6:8a:e8:c3:0b:5f:4c:46:f9:da:
45:83:32:ff:91:71:6f:72:f1:9f:5c:89:c6:07:71:f0:1c:f7:
94:48:27:64:4e:e1:20:bb:5e:f7:6c:a7:ef:0e:2d:29:f7:25:
43:32:fc:fb:2c:f0:d9:53:3c:03:39:ac:66:c2:06:ff:05:10:
5a:54:bb:5a:12:90:bc:77:d4:59:7b:15:39:81:3c:0c:93:ac:
dc:6b:02:71:be:5d:82:62:f7:1b:0e:11:ef:48:18:46:be:01:
90:04:34:76:b1:93:6a:b6:d1:c1:cb:05:d4:87:0e:36:11:9f:
4d:59:6a:29:b0:0c:d2:47:cc:d8:af:ce:13:57:ef:43:54:97:
3d:9c:e9:1b:a7:b3:09:2d:93:0d:0e:91:c9:6c:e1:d5:26:a4:
34:a8:4f:73:52:b2:d2:40:e4:8b:4c:5e:ce:f7:53:59:cf:c6:
81:7d:fb:45:1d:91:d1:39:76:b5:af:76:2d:6a:3c:b3:d4:70:
71:68:b1:2a:d1:00:4e:97:47:d3:f3:7e:4d:81:22:89:56:88:
76:47:4c:46:f2:b7:8e:d5:e7:59:a4:c2:31:d6:80:9b:2d:35:
80:7d:97:b8:a9:20:de:35:41:6b:07:6d:81:91:86:78:bf:3b:
cf:1d:b3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:55:37 2026 by rpki-client