Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
File: JRXoeSpCT_cswXkpeOLNTNvtpNA.mft (raw, json)
Hash identifier: bCM6/fXqZo6+fpW4rj4XOMQmCQxRYnBz4XCj0yLIVk0=
Subject key identifier: CE:B0:9D:E4:4C:4C:EF:EB:BA:9C:40:CF:F8:C3:FA:36:20:CB:1F:59
Authority key identifier: 25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
Certificate issuer: /CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Certificate serial: 019EF94B3DD774EEB24685CF869C531C87BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
Manifest number: 081F
Signing time: Wed 24 Jun 2026 11:01:58 +0000
Manifest this update: Wed 24 Jun 2026 11:01:58 +0000
Manifest next update: Thu 25 Jun 2026 11:01:58 +0000
Files and hashes: 1: 0dTl6UGk0kVr0p7yhdhl2mMbMHQ.roa (hash: UNu75LsKIseFbQAMf40egmXKjAANp+52TwIOp5EMRiw=)
2: JRXoeSpCT_cswXkpeOLNTNvtpNA.crl (hash: 0+AwR5bpppQqTMa1prMG6gtBTGskwvr7u0frT4azhPY=)
3: v7HxL3ym-JSGYnJ5OLK_LWKEkwk.roa (hash: btWBp9iO8STmT4P+DcwKknpMMsc20/dgw5WRtt6GDJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 11:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:4b:3d:d7:74:ee:b2:46:85:cf:86:9c:53:1c:87:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Validity
Not Before: Jun 24 11:01:58 2026 GMT
Not After : Jun 25 11:01:58 2026 GMT
Subject: CN=ceb09de44c4cefebba9c40cff8c3fa3620cb1f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:02:e4:11:f2:f6:de:36:e0:22:54:96:8f:
ae:6b:2a:12:2a:09:ba:e2:96:35:f3:7a:c4:0e:50:
76:15:fa:f3:72:65:3b:ef:7e:53:b6:08:a1:f4:1d:
51:e9:96:6b:88:90:c4:ae:fb:2f:78:3e:c9:df:5c:
08:20:6b:4f:ff:4e:9e:ac:28:db:ce:50:77:f2:b9:
0b:07:a5:fe:81:55:7a:fb:2e:4e:38:de:6b:fa:f9:
87:74:31:b6:ba:67:54:a8:f6:fb:12:c6:16:1a:32:
14:3e:dc:26:f1:f9:46:ea:a6:ee:e5:88:87:a9:75:
83:0f:6f:5e:ea:90:7f:82:62:e0:83:3a:ba:10:bb:
9f:48:d7:60:af:80:0a:43:54:7c:83:fa:b3:f2:14:
b1:bb:f7:6c:ab:fa:6b:cb:57:2a:77:95:83:0e:f9:
df:ea:53:a0:4c:f1:0c:0e:69:d7:ef:83:ea:56:21:
f4:fe:3f:50:80:a0:59:38:3c:4c:3b:e6:67:43:f3:
1f:3e:02:9c:46:a4:cc:bc:6a:18:77:42:3a:96:40:
cd:40:0d:7e:33:9a:ba:98:46:83:53:2e:c3:f2:12:
60:4f:ba:1a:77:b1:31:60:67:09:16:05:ea:67:36:
9d:62:88:a0:5d:32:d0:0b:95:29:aa:cb:52:de:95:
12:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B0:9D:E4:4C:4C:EF:EB:BA:9C:40:CF:F8:C3:FA:36:20:CB:1F:59
X509v3 Authority Key Identifier:
keyid:25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:72:d2:b0:84:43:e6:af:b9:9d:c0:3b:a2:2e:6e:90:22:24:
d2:2b:4b:9c:8d:1f:04:94:6f:9c:cb:8c:ce:ca:0c:85:3e:bd:
f5:db:fe:e9:7c:59:31:ed:d7:22:26:e6:34:46:c6:4a:af:d8:
e8:08:68:fa:4a:c0:03:08:57:40:ff:cc:08:71:56:02:4d:a3:
8c:34:dc:64:d5:81:cf:26:27:d4:84:4f:0e:ce:2b:a7:24:70:
51:12:10:d2:ef:0d:74:86:97:55:6b:8c:59:f0:14:db:14:41:
df:72:b2:e9:ad:22:ab:ce:34:6c:1c:2c:79:a1:d3:b2:33:56:
c4:b3:50:d7:f3:84:e1:fb:63:0d:f6:15:c2:d7:23:6a:35:21:
77:83:ed:5d:28:c9:40:75:3e:5c:c0:55:32:fc:3a:1f:6c:e4:
6c:27:28:7e:9a:55:cd:ab:37:c3:ae:66:fd:da:44:14:7b:9d:
6e:d3:35:14:0a:5f:f3:f8:b4:44:06:0c:91:65:d8:5a:71:b1:
15:4f:5c:51:cc:81:23:34:e8:45:7a:5d:85:07:0f:89:d9:3a:
82:d8:7f:be:17:0b:62:f1:c4:90:cc:5c:9d:98:ce:bb:de:a4:
1c:d6:8f:81:bb:0f:75:b0:4a:f8:35:56:45:53:06:af:be:26:
ca:14:d2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:16:55 2026 by rpki-client