Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
File: JRXoeSpCT_cswXkpeOLNTNvtpNA.mft (raw, json)
Hash identifier: uLKtJpQ43LcZ+hqSy96xbYmy5pRqMkcYGB2nfc7QTfo=
Subject key identifier: FC:0B:E0:41:F8:D4:C8:A7:D3:C4:FA:10:95:2F:8D:BD:67:74:A3:35
Authority key identifier: 25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
Certificate issuer: /CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Certificate serial: 019DECDBB84A7D9806D903BEEC6A0C9F92F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
Manifest number: 0794
Signing time: Sun 03 May 2026 08:01:55 +0000
Manifest this update: Sun 03 May 2026 08:01:55 +0000
Manifest next update: Mon 04 May 2026 08:01:55 +0000
Files and hashes: 1: 0dTl6UGk0kVr0p7yhdhl2mMbMHQ.roa (hash: UNu75LsKIseFbQAMf40egmXKjAANp+52TwIOp5EMRiw=)
2: JRXoeSpCT_cswXkpeOLNTNvtpNA.crl (hash: +Vp4a/zYCIGIo0c5CG1yQXV6RR8LP2jSxy+Jxf0ESAI=)
3: v7HxL3ym-JSGYnJ5OLK_LWKEkwk.roa (hash: btWBp9iO8STmT4P+DcwKknpMMsc20/dgw5WRtt6GDJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 08:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:db:b8:4a:7d:98:06:d9:03:be:ec:6a:0c:9f:92:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Validity
Not Before: May 3 08:01:55 2026 GMT
Not After : May 4 08:01:55 2026 GMT
Subject: CN=fc0be041f8d4c8a7d3c4fa10952f8dbd6774a335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:0f:ef:a1:73:1a:88:51:c7:f3:09:eb:0a:
01:6e:8a:46:23:4c:60:3d:4b:d3:7f:e9:4d:90:4e:
85:4a:9c:64:a0:92:11:42:10:d0:a6:f0:05:ce:d6:
b4:55:af:a8:7a:c6:5d:39:9f:38:b1:b9:7b:63:7a:
c4:14:f6:b4:bc:05:3a:47:9e:9d:b7:1b:7f:e9:87:
20:a0:f9:f9:ab:e1:88:9c:9f:73:ec:ad:b7:9b:5d:
e9:77:cb:84:9b:f1:b5:1b:ff:fd:9f:5f:48:67:ef:
57:ee:19:a6:e6:96:36:31:ec:c7:67:75:20:4f:cc:
98:fd:d9:6e:e6:e4:ef:ac:38:63:14:0a:58:7f:01:
88:ed:6a:3a:c2:5c:3a:60:4b:45:38:13:c4:5c:1c:
19:35:b3:82:74:f1:28:15:61:19:95:cf:dd:46:fe:
a5:7b:19:e2:0c:13:f0:c9:6d:f7:db:95:21:54:3e:
3c:78:4b:37:d2:0d:ed:74:77:2f:6c:03:44:c2:c5:
fc:6c:b9:9b:a4:bf:8d:15:c2:19:93:bc:31:4c:a6:
66:9c:5d:6f:d4:39:77:5f:cb:cf:f4:c8:5d:fd:c7:
f7:ff:47:ee:00:69:66:34:a7:91:77:a0:05:35:41:
84:1d:cb:0e:87:46:7e:ee:71:86:98:ac:83:f2:6a:
91:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0B:E0:41:F8:D4:C8:A7:D3:C4:FA:10:95:2F:8D:BD:67:74:A3:35
X509v3 Authority Key Identifier:
keyid:25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f9:ad:73:21:64:1d:08:76:bf:2a:e3:8b:0b:a9:ee:6b:07:
fb:71:b8:a7:b1:07:cd:7c:c2:40:63:ac:29:5d:7e:97:78:a6:
53:49:e9:fa:16:0f:d6:b2:a2:11:a5:77:9f:dc:37:3c:63:94:
9c:f1:ce:ac:bf:b0:4e:63:81:bf:ee:82:61:f1:76:7f:02:9b:
ca:34:b3:2f:48:fd:39:65:03:ec:f0:cb:d9:15:b3:e9:2f:8e:
75:ea:2d:11:b6:ca:80:67:92:19:d8:e5:c4:f3:72:eb:9c:46:
46:50:67:bc:da:01:33:d4:3b:07:4a:59:0a:bf:ad:fa:a3:66:
16:28:34:91:95:c5:42:3d:c5:22:86:26:3e:28:fb:8e:0f:e4:
04:6b:65:e5:37:25:be:92:33:e9:f4:8a:32:7c:03:db:b1:de:
1d:10:0e:86:62:cf:94:32:aa:79:aa:fb:5a:f6:51:f0:07:e1:
f1:6e:7e:d0:ac:64:51:08:32:56:42:9d:5e:39:5b:2a:47:27:
54:71:9c:c3:c1:4e:ab:1b:7b:2e:ca:db:76:99:73:40:a6:a8:
c3:ba:a2:b4:d1:57:e2:05:1f:ef:50:6a:53:eb:bd:7b:dc:4f:
03:09:ba:08:2f:95:61:07:63:bc:6d:f3:9f:d1:d2:3c:81:b8:
63:cd:79:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:06:55 2026 by rpki-client