$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft File: JFXX_uSkmeyvEdLT2o44neMjQS8.mft (raw, json) Hash identifier: 6ZY3NI2mkJN9ME/MiZRkTXwFgWDQRfBqcdNel3N5Bn0= Subject key identifier: 91:97:C1:A1:6B:CD:43:FB:3B:87:D5:97:BB:0C:DB:AB:83:5E:AA:3E Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 019DCF755A4BD6265A82B5DA0BCD1DD688A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft Manifest number: 161B Signing time: Mon 27 Apr 2026 15:01:07 +0000 Manifest this update: Mon 27 Apr 2026 15:01:07 +0000 Manifest next update: Tue 28 Apr 2026 15:01:07 +0000 Files and hashes: 1: CkpruVXBRC35FNzBxsHtHzElTcQ.roa (hash: M8G0Fw/AyLb57D4pQj+p7wHrZ6ZAg2uq5cvqL/37hsU=) 2: DASfpt6NusBMafxKXMbsXkknaLs.roa (hash: 7Q1f4G/K2mV4OPswZej+EeWKFQMe4TLAgeu5GM1kraI=) 3: ESMuZH3p8eZcfxjSdFlU49_G9BY.roa (hash: eU/RIl1p7nycsadiq5D1MCtC0gJOFnvD+JDmCJY+OA8=) 4: H4PmoPs09fxsoMyeNbvcLTDl7tg.roa (hash: g6se6YwWnPf1EHgnkVuLefIVI+viGWgQPBM+Zec15uI=) 5: JFXX_uSkmeyvEdLT2o44neMjQS8.crl (hash: KP1+zsAcrJg+Zq72PIEBaoCRvfozdPOdK/EftmiuwgY=) 6: VHgUN5juRzMz3CUHZPoEHnzr2z0.roa (hash: VXSqzrkX+ABn4jZnd4wHdBjnPgDeVeSEP9mmDyjcGMQ=) 7: WuM6D54bD9ZW12al4cadO05OlhA.roa (hash: KSoGE/L4hSg6At0Y5RkAFE3o/b5P/zSmERN2VFp1fMQ=) 8: Y-rwo6ja1_SXsDsjjZenySjEjo8.roa (hash: ZsKC9kHfKh+n+8/Xir5wlK+HjS6IcJLLArYCrxMRmAk=) 9: fRUNIQ1_jYWQdZrSZ4luryAQJDQ.roa (hash: ty6oOnSu+ZODj+9+2x+cpkE7v0JL9rnydZY11LzAwgQ=) 10: jTbrb1TbwgaHuVljIE6syUVcGbE.roa (hash: 1xz+1g5hD0xQyll98W3vSqycYShnYZQgn+0XxOIFh6g=) 11: lNSsiMsgFC3PSDwg_wipOCI36Sc.roa (hash: T+M2rwciKN++pJU4zsuNLc+4agGsiYLXoX3H/Bds62g=) 12: nMpaMbGEzj2Jpg2_GxE2xYc0pUI.roa (hash: Fv1RC7bFvxKYKp89cN52GIHsD0MHml/fLyyWKSWO5/k=) 13: rjPbS80wLPhwF4ETCKbrHWAdxvw.roa (hash: 0e9ndNtpFQMzhAU9T854jFmEVmFNvWMXh2KdMpHi8jk=) 14: sIpLAsGB9mg0zFG4d5238KgCd4k.roa (hash: eXcSiBlROOdcbS6oOwKQciaqtXn9irVYQuDWrvrFA6s=) 15: shMgILdrcRQ_LG-B1Njv0tFtwKY.roa (hash: VrnYEoqsCXqMeGOK7nN9tJcwMBHTSx98wiR1emp3pqQ=) 16: spxPuR8xyj72SKO00nWmxiu9tv8.roa (hash: j68QBUE3gzuvtf320646B+hARt3MiGgu/5WZ8oVBSpA=) 17: ufjaDLPum5mRkBKXDuMb146baHg.roa (hash: oNF4RqIC9pQOPmU+xyL4C1SBlQau5hDsBq8wufytphI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cf:75:5a:4b:d6:26:5a:82:b5:da:0b:cd:1d:d6:88:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: Apr 27 15:01:07 2026 GMT Not After : Apr 28 15:01:07 2026 GMT Subject: CN=9197c1a16bcd43fb3b87d597bb0cdbab835eaa3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:97:21:c6:a7:93:97:58:33:03:64:5b:7e:a7: fc:b3:db:06:84:d5:73:c5:e8:61:26:89:07:67:a4: b0:91:20:a3:d2:46:1e:01:90:a5:44:72:f2:0f:2d: 58:d9:26:6d:d0:69:59:d9:af:86:dc:48:43:5a:a9: 0d:71:4a:7f:fb:1c:1a:bf:b6:85:b9:9c:fd:4b:f3: c9:d6:dd:1e:a0:27:de:95:a8:61:a8:2c:e9:58:83: ff:89:23:28:b4:e7:a7:5b:e2:84:f4:3f:a7:f6:da: 3b:19:7b:d3:e2:8b:90:d3:64:db:57:36:bc:1c:45: 70:ff:ae:a4:74:33:83:8c:4e:d5:f0:a4:b8:c4:ba: 8d:07:b9:24:74:ec:90:24:aa:db:f4:82:a6:f4:10: 15:9c:7d:ca:04:ec:44:42:6f:e9:1b:3a:75:b0:d6: c8:21:9d:85:05:61:64:07:e7:56:87:1c:a6:8e:1a: c6:ae:56:bd:1e:f7:1e:d7:90:d0:ae:34:d2:b6:ae: 03:df:7d:8a:0d:07:55:22:b6:dd:a7:5b:03:61:62: 71:e6:ff:b6:b8:5e:31:c2:7b:76:1f:f2:c7:90:ea: 93:34:3f:48:61:21:1b:a0:33:b3:c8:e1:fd:90:9e: fa:b7:1b:2b:d8:4d:69:69:bd:30:97:e4:ed:9d:bb: 4a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:97:C1:A1:6B:CD:43:FB:3B:87:D5:97:BB:0C:DB:AB:83:5E:AA:3E X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:92:e0:e1:23:5e:c1:8a:d7:f5:ae:3a:68:8c:13:f2:ab:53: 30:fc:75:4c:e7:9e:cb:4e:a7:22:d4:eb:10:81:17:f0:fb:52: 3c:2b:c5:78:88:14:09:af:89:55:87:d3:6f:7f:5c:9d:19:7d: da:3a:16:87:03:de:bb:a0:75:9e:5b:de:e2:3c:e7:94:27:c5: 1d:33:f0:f0:71:37:7a:11:7a:94:e6:fd:a9:56:c0:52:27:17: 0f:38:4d:7c:a6:d8:47:49:87:f4:a2:28:4e:44:0a:b1:21:26: 98:31:84:0d:78:b5:39:67:74:89:8f:40:17:06:e4:ee:5e:24: 1c:a4:e5:cc:3a:29:44:b2:67:f2:dc:ce:49:9b:55:c8:80:86: 08:b5:f0:93:4e:42:9f:d0:05:78:3d:e7:a4:fa:9c:60:0d:fe: ef:ac:4d:df:6d:94:3e:2d:1a:6c:8b:0f:82:31:97:7a:5d:60: 28:2c:0e:cb:a2:14:32:a3:7f:ca:ff:8f:fe:a4:c4:37:6b:0f: 5a:7f:8e:e7:58:82:43:2a:48:4f:c0:c8:93:ce:f4:aa:1f:c6: ed:31:28:8a:ed:0d:3d:08:cb:32:cc:20:ef:a0:61:b5:0d:1d: 99:e1:ba:d9:1f:e6:37:21:53:cf:ac:69:3b:36:d4:d3:c9:fa: 97:99:c6:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3PdVpL1iZagrXaC80d1oihMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjYwNDI3MTUwMTA3WhcNMjYwNDI4MTUwMTA3WjAzMTEwLwYDVQQD Eyg5MTk3YzFhMTZiY2Q0M2ZiM2I4N2Q1OTdiYjBjZGJhYjgzNWVhYTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5chxqeTl1gzA2Rbfqf8s9sGhNVz xehhJokHZ6SwkSCj0kYeAZClRHLyDy1Y2SZt0GlZ2a+G3EhDWqkNcUp/+xwav7aF uZz9S/PJ1t0eoCfelahhqCzpWIP/iSMotOenW+KE9D+n9to7GXvT4ouQ02TbVza8 HEVw/66kdDODjE7V8KS4xLqNB7kkdOyQJKrb9IKm9BAVnH3KBOxEQm/pGzp1sNbI IZ2FBWFkB+dWhxymjhrGrla9Hvce15DQrjTStq4D332KDQdVIrbdp1sDYWJx5v+2 uF4xwnt2H/LHkOqTND9IYSEboDOzyOH9kJ76txsr2E1pab0wl+TtnbtKuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGXwaFrzUP7O4fVl7sM26uDXqo+MB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr5Lg4SNe wYrX9a46aIwT8qtTMPx1TOeey06nItTrEIEX8PtSPCvFeIgUCa+JVYfTb39cnRl9 2joWhwPeu6B1nlve4jznlCfFHTPw8HE3ehF6lOb9qVbAUicXDzhNfKbYR0mH9KIo TkQKsSEmmDGEDXi1OWd0iY9AFwbk7l4kHKTlzDopRLJn8tzOSZtVyICGCLXwk05C n9AFeD3npPqcYA3+76xN322UPi0abIsPgjGXel1gKCwOy6IUMqN/yv+P/qTEN2sP Wn+O51iCQypIT8DIk870qh/G7TEoiu0NPQjLMswg76BhtQ0dmeG62R/mNyFTz6xp OzbU08n6l5nGbQ== -----END CERTIFICATE-----Generated at Mon Apr 27 19:48:45 2026 by rpki-client