Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
File: JRXoeSpCT_cswXkpeOLNTNvtpNA.mft (raw, json)
Hash identifier: q13rSyZoHLk+XoR7xpFvc85IHxyoy/NvUxF7vFlng6I=
Subject key identifier: C7:1E:29:47:2A:E2:C7:AC:3E:31:55:A8:E1:C2:61:86:1F:87:4F:CB
Authority key identifier: 25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
Certificate issuer: /CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Certificate serial: 019D051D6E55C8AAEACE668B54943D0202F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
Manifest number: 071C
Signing time: Thu 19 Mar 2026 08:01:47 +0000
Manifest this update: Thu 19 Mar 2026 08:01:47 +0000
Manifest next update: Fri 20 Mar 2026 08:01:47 +0000
Files and hashes: 1: 0dTl6UGk0kVr0p7yhdhl2mMbMHQ.roa (hash: UNu75LsKIseFbQAMf40egmXKjAANp+52TwIOp5EMRiw=)
2: JRXoeSpCT_cswXkpeOLNTNvtpNA.crl (hash: inmJEsYUfBrpZWhlIVVqUChrplHmymG2svZqihyyySQ=)
3: v7HxL3ym-JSGYnJ5OLK_LWKEkwk.roa (hash: btWBp9iO8STmT4P+DcwKknpMMsc20/dgw5WRtt6GDJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:1d:6e:55:c8:aa:ea:ce:66:8b:54:94:3d:02:02:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Validity
Not Before: Mar 19 08:01:47 2026 GMT
Not After : Mar 20 08:01:47 2026 GMT
Subject: CN=c71e29472ae2c7ac3e3155a8e1c261861f874fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4c:d9:bf:4d:31:17:4f:fd:ee:43:1f:97:76:
00:35:20:1f:fa:fd:27:df:42:a5:92:f6:85:24:cc:
c1:f6:d8:f7:76:75:60:e0:d8:a8:89:86:a0:09:01:
43:6c:b1:cd:65:3e:ef:2a:16:8b:27:a7:b6:5a:fd:
83:05:f4:5e:f0:6d:a3:0c:28:1f:d3:fd:9a:99:00:
50:88:a2:bc:b8:71:e8:e7:65:b4:0a:54:42:01:75:
76:26:e6:cc:f8:9e:5b:a6:69:52:df:3c:eb:f8:db:
a0:f9:f2:f4:84:c4:cf:b1:58:e2:a6:29:79:8e:55:
36:c4:e8:a9:00:40:04:d7:b5:fc:1b:66:da:3a:e4:
d5:fd:5e:4f:87:70:2c:97:08:1f:17:aa:dd:0c:f2:
44:07:ea:04:91:0b:d5:05:43:5a:52:c9:81:d6:a1:
50:72:aa:54:e6:39:ce:5e:91:67:17:d8:79:cb:a0:
c3:4f:4d:35:5d:09:68:d7:50:b9:76:7c:8b:94:66:
96:59:e2:16:ea:c6:b4:b6:dd:c2:44:d1:c3:d8:ac:
7f:23:99:94:79:0f:2e:6f:e7:79:9c:4d:fd:12:99:
27:b9:fc:9f:c2:5d:17:3b:19:fe:cf:9b:52:ac:1b:
e0:39:88:a5:de:94:a0:1d:07:3e:6a:f2:ac:c8:99:
2b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1E:29:47:2A:E2:C7:AC:3E:31:55:A8:E1:C2:61:86:1F:87:4F:CB
X509v3 Authority Key Identifier:
keyid:25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a3:40:cb:7b:fc:e4:c4:2d:49:9b:75:96:4e:e3:01:79:2e:
08:ff:fe:f9:94:1f:d8:6e:72:50:51:3f:eb:ee:c9:e7:4a:53:
36:75:41:e7:36:01:11:38:13:4e:47:bd:13:7b:f7:92:68:f8:
5f:84:88:54:9a:40:be:55:b6:c8:57:d6:4a:b0:7a:90:21:dc:
d6:ba:86:02:f5:47:09:b9:6f:5e:8c:5a:6c:cb:c2:b3:70:51:
0a:6c:b9:dd:38:ef:b8:2e:cf:15:cc:9e:5d:d5:75:b1:c8:95:
18:4c:0f:d0:23:80:7c:22:cc:be:db:c3:52:f6:9b:57:fe:2f:
60:50:29:24:13:5a:f6:1f:c7:ae:9d:4e:25:a0:67:ac:22:60:
a5:f0:8b:3f:43:e4:66:88:fb:e7:01:35:d0:2f:07:4f:05:2b:
27:0b:e8:46:f9:0f:e1:60:1a:5f:4e:7c:d1:f2:c9:5b:32:bf:
76:38:c5:ab:81:f9:5a:d9:e9:d9:e6:4f:29:6a:46:4f:a2:98:
3f:5f:94:78:83:cd:dc:4f:f0:c9:39:48:9b:b5:80:ea:ae:47:
1c:f5:2a:6a:95:65:a1:08:c0:65:ab:d2:86:b1:52:67:32:c2:
71:1b:f2:7b:4f:50:eb:08:e9:b1:3f:92:04:90:08:fb:dc:e5:
4a:e2:e5:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0FHW5VyKrqzmaLVJQ9AgL1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MTVlODc5MmE0MjRmZjcyY2MxNzkyOTc4ZTJjZDRjZGJl
ZGE0ZDAwHhcNMjYwMzE5MDgwMTQ3WhcNMjYwMzIwMDgwMTQ3WjAzMTEwLwYDVQQD
EyhjNzFlMjk0NzJhZTJjN2FjM2UzMTU1YThlMWMyNjE4NjFmODc0ZmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkzZv00xF0/97kMfl3YANSAf+v0n
30KlkvaFJMzB9tj3dnVg4NioiYagCQFDbLHNZT7vKhaLJ6e2Wv2DBfRe8G2jDCgf
0/2amQBQiKK8uHHo52W0ClRCAXV2JubM+J5bpmlS3zzr+Nug+fL0hMTPsVjipil5
jlU2xOipAEAE17X8G2baOuTV/V5Ph3AslwgfF6rdDPJEB+oEkQvVBUNaUsmB1qFQ
cqpU5jnOXpFnF9h5y6DDT001XQlo11C5dnyLlGaWWeIW6sa0tt3CRNHD2Kx/I5mU
eQ8ub+d5nE39Epknufyfwl0XOxn+z5tSrBvgOYil3pSgHQc+avKsyJkrbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMceKUcq4sesPjFVqOHCYYYfh0/LMB8GA1UdIwQY
MBaAFCUV6HkqQk/3LMF5KXjizUzb7aTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlJYb2VTcENUX2Nzd1hrcGVPTE5UTnZ0cE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8zZDBmNDAtYTdkZC00Njg5LWJjMzIt
OWVlZDlkNzVjMGQxLzEvSlJYb2VTcENUX2Nzd1hrcGVPTE5UTnZ0cE5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8zZDBmNDAtYTdkZC00Njg5LWJjMzItOWVlZDlkNzVjMGQx
LzEvSlJYb2VTcENUX2Nzd1hrcGVPTE5UTnZ0cE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6NAy3v8
5MQtSZt1lk7jAXkuCP/++ZQf2G5yUFE/6+7J50pTNnVB5zYBETgTTke9E3v3kmj4
X4SIVJpAvlW2yFfWSrB6kCHc1rqGAvVHCblvXoxabMvCs3BRCmy53TjvuC7PFcye
XdV1sciVGEwP0COAfCLMvtvDUvabV/4vYFApJBNa9h/Hrp1OJaBnrCJgpfCLP0Pk
Zoj75wE10C8HTwUrJwvoRvkP4WAaX0580fLJWzK/djjFq4H5Wtnp2eZPKWpGT6KY
P1+UeIPN3E/wyTlIm7WA6q5HHPUqapVloQjAZavShrFSZzLCcRvye09Q6wjpsT+S
BJAI+9zlSuLlKg==
-----END CERTIFICATE-----
Generated at Thu Mar 19 14:08:15 2026 by rpki-client