Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
File: JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft (raw, json)
Hash identifier: U9Z04WatJs4iAsJzv7+saCUjgsmvB8fKcdMfHmWBd5w=
Subject key identifier: E3:8B:21:72:98:B6:2E:B2:64:CB:AC:CD:B0:D3:DD:36:3B:D8:D5:CA
Authority key identifier: 24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
Certificate issuer: /CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Certificate serial: 019F37F270B5650741DDE358BE651F7F0E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
Manifest number: 1998
Signing time: Mon 06 Jul 2026 15:01:03 +0000
Manifest this update: Mon 06 Jul 2026 15:01:03 +0000
Manifest next update: Tue 07 Jul 2026 15:01:03 +0000
Files and hashes: 1: IgEQEQxKF4JA_Yvwjt39ZRq-8to.roa (hash: w7LlxRV0iiav+R1gAPk1T8fKDTaiJNPPpktAM0ZCdmY=)
2: JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl (hash: gA/Bje5eS3viwMxuBMMdIJcPmxCJWrwZB+T1JGk7uSQ=)
3: VpdxolhjeAAWOSWgaqR-V3JQwwo.roa (hash: Ruq0CFducLP8nqCWrlVaWaavOiOwsIA0PJ/oDQESMw8=)
4: gQf5G9Hw0jqLTco8BzanoYJkr0s.roa (hash: PQEokUiOnX9Qj/TyQO7GSAnGjYkROWa561oyoy92YWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:f2:70:b5:65:07:41:dd:e3:58:be:65:1f:7f:0e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Validity
Not Before: Jul 6 15:01:03 2026 GMT
Not After : Jul 7 15:01:03 2026 GMT
Subject: CN=e38b217298b62eb264cbaccdb0d3dd363bd8d5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:27:3e:4b:ff:4e:f0:7b:4f:0c:5e:5f:81:b9:
d8:02:74:ee:44:23:a7:a8:e1:22:da:65:ff:48:59:
40:bb:6c:74:ab:56:38:f3:98:fb:b0:67:08:4a:73:
ce:6d:e4:fb:14:55:82:69:28:00:a3:3f:ba:8b:d9:
18:76:46:9f:fc:fe:90:2c:71:ed:89:d7:83:ec:d8:
76:07:c5:c4:17:e3:bd:9f:5d:39:b7:18:d4:60:e1:
fa:51:8b:cd:e9:28:2b:d0:51:a7:f1:cd:d6:84:d8:
0c:2c:d0:da:69:db:dc:9c:b6:af:a6:39:4a:e0:1e:
0a:a9:ce:3b:b3:09:bf:1e:08:f0:62:09:90:7f:14:
75:22:0f:07:ed:03:5a:ce:c0:ea:56:0e:e9:41:d2:
6c:bc:f9:ba:fa:13:13:be:8b:4b:d4:25:b3:b7:8e:
df:1d:51:cc:9c:b8:b1:fa:5a:65:94:d5:78:f3:53:
43:ea:93:a6:3c:a0:d6:2e:12:a8:db:d8:83:be:38:
24:82:d0:7e:6b:3b:99:86:3d:10:b9:9f:fd:7c:1d:
7f:6c:08:cd:31:ec:6e:1e:09:28:81:ab:4c:b8:b8:
a5:51:59:c9:45:90:c7:d9:b5:7b:b4:cb:be:18:47:
3e:2f:69:ad:bf:4c:59:53:57:2b:9a:1a:2f:39:75:
59:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8B:21:72:98:B6:2E:B2:64:CB:AC:CD:B0:D3:DD:36:3B:D8:D5:CA
X509v3 Authority Key Identifier:
keyid:24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4d:8b:10:5b:47:1c:f7:b2:95:34:1d:7b:a9:23:11:f7:d6:
cf:0b:11:51:da:32:fe:3d:85:eb:cc:3f:21:e1:ac:29:df:0b:
1e:cf:11:f8:d5:9c:d6:7e:b3:b4:ce:c3:c3:8d:2a:47:ce:3a:
23:49:45:e5:1d:46:de:47:21:e5:12:9b:32:d7:c7:e6:68:32:
dc:5c:ad:8c:91:db:c6:38:21:66:a4:5a:25:21:d9:be:4b:56:
f6:c3:ee:b1:23:ed:81:c0:6b:82:a0:79:3d:eb:02:d4:b7:33:
34:f8:f8:ff:60:fb:10:20:88:e6:25:6e:db:63:35:9c:35:b6:
a3:50:85:b8:38:36:b4:a1:c4:be:a7:db:34:e8:25:1a:4d:6b:
1a:ee:3c:2f:18:72:4a:d4:09:ae:2f:4d:ba:6d:74:e4:ac:5f:
83:5a:0b:fb:c4:cc:d7:7c:70:9f:22:29:11:0d:be:33:22:3d:
d8:a3:08:7a:07:3b:23:7d:c9:f7:39:ac:72:4d:b1:4a:cd:f5:
0a:ad:d1:a2:39:a6:69:34:54:73:87:db:00:18:16:f4:47:8f:
d6:e8:87:bb:f6:43:ef:a0:66:86:cb:f1:67:af:a7:7d:3f:35:
40:38:3a:ef:a7:0c:49:65:56:66:72:85:f0:5d:e4:97:66:ed:
a4:71:a0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:29:13 2026 by rpki-client