Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
File: JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft (raw, json)
Hash identifier: YSZpbHcr2BwaYsKy1Wfbj3336DpS/EnivAzxNJce8SA=
Subject key identifier: 3B:DB:99:37:E6:B0:A2:E2:C7:ED:CA:C6:9C:0F:06:A1:6B:C9:5D:5F
Authority key identifier: 24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
Certificate issuer: /CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Certificate serial: 019D3A1C97BE6527FA53199BAB2CDD90321E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 15:00:45 +0000
Manifest this update: Sun 29 Mar 2026 15:00:45 +0000
Manifest next update: Mon 30 Mar 2026 15:00:45 +0000
Files and hashes: 1: IgEQEQxKF4JA_Yvwjt39ZRq-8to.roa (hash: w7LlxRV0iiav+R1gAPk1T8fKDTaiJNPPpktAM0ZCdmY=)
2: JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl (hash: NcPRJ6UDIQd6Mkik4j4qBiV+Pkv5GlujeKyDnaTnXIU=)
3: VpdxolhjeAAWOSWgaqR-V3JQwwo.roa (hash: Ruq0CFducLP8nqCWrlVaWaavOiOwsIA0PJ/oDQESMw8=)
4: gQf5G9Hw0jqLTco8BzanoYJkr0s.roa (hash: PQEokUiOnX9Qj/TyQO7GSAnGjYkROWa561oyoy92YWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:97:be:65:27:fa:53:19:9b:ab:2c:dd:90:32:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Validity
Not Before: Mar 29 15:00:45 2026 GMT
Not After : Mar 30 15:00:45 2026 GMT
Subject: CN=3bdb9937e6b0a2e2c7edcac69c0f06a16bc95d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6d:0a:7c:de:b0:69:92:74:da:46:e9:42:69:
83:08:77:36:6b:54:96:49:29:63:8c:d5:8d:7c:33:
38:f4:a9:34:30:f9:b5:80:ee:e7:00:dd:ac:d7:c3:
da:cc:d5:18:70:36:6c:b5:6f:01:36:b8:45:dc:c1:
b1:a1:db:46:c7:01:1e:cf:e5:9d:99:9a:53:b9:ed:
26:56:03:07:57:d7:e3:0d:e1:94:ff:10:40:40:60:
6a:61:b6:6a:8c:b4:a7:83:b3:83:ee:aa:82:4e:37:
05:ba:5b:53:1e:7e:d6:fa:96:6f:b6:65:e3:7e:71:
ce:53:f4:11:8f:25:6f:37:40:64:24:70:63:59:02:
81:8d:9f:e6:a4:82:33:af:fe:46:20:e2:bf:d8:a6:
29:45:ed:57:3f:8b:ca:ed:fe:3c:23:58:cd:f9:66:
9e:14:81:99:aa:38:1e:aa:d6:bb:a4:c9:04:ce:cb:
17:45:a5:71:a4:9d:58:1d:74:b9:27:d2:34:cd:9f:
27:43:83:94:f1:5d:2e:af:58:ca:a8:9a:a1:28:4c:
aa:b3:56:12:a0:14:ac:56:6e:d2:9a:ca:d5:8b:c4:
de:30:32:e3:18:8c:64:10:89:16:f1:e6:01:f2:a8:
7b:4f:b7:6c:7a:16:fd:7d:6f:f1:2c:3e:10:17:04:
8a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DB:99:37:E6:B0:A2:E2:C7:ED:CA:C6:9C:0F:06:A1:6B:C9:5D:5F
X509v3 Authority Key Identifier:
keyid:24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e2:24:29:45:7e:2c:45:cc:52:66:09:57:db:f9:38:79:ec:
c6:3a:5f:3f:1c:5f:54:97:e9:32:79:ee:fe:22:65:55:5c:42:
a5:3d:4f:01:c1:c0:ce:18:08:44:37:2b:e5:4d:cd:de:93:1b:
dd:0b:86:b0:ba:c2:53:73:4b:84:fb:1f:82:f0:f4:25:d6:8d:
94:9c:4c:f8:01:67:bf:33:ea:57:d7:ea:95:42:d1:a6:90:18:
19:f4:77:eb:90:5a:89:05:c7:bb:47:10:82:10:4c:01:10:47:
36:ee:52:16:b1:d6:76:b0:c3:48:fc:55:f1:f0:31:22:eb:c1:
ab:ba:5d:8f:7e:ae:4d:38:42:39:89:23:a3:0f:4f:8e:23:b0:
bf:ea:cb:33:0c:1d:fd:2f:01:3a:3f:27:c4:a2:c1:59:b4:78:
ec:10:6a:6d:98:0f:37:18:2a:cc:7d:52:52:1d:c5:65:8f:15:
4e:04:05:c2:1c:77:af:a9:37:b0:7d:2e:ea:09:fe:31:68:05:
7b:11:17:55:60:28:ea:5b:63:94:b7:b3:91:62:75:c5:7b:97:
1d:fa:ff:17:b2:61:17:1d:3f:66:c4:fa:17:22:87:62:5e:e4:
a9:d8:b6:54:95:12:28:59:a2:13:54:69:49:cf:86:5a:15:68:
01:55:a4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:43 2026 by rpki-client