Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
File: JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft (raw, json)
Hash identifier: g25j60MwaAflb7cZZiBiynY3mvaUYesJF1nQ42uhtCw=
Subject key identifier: 70:17:D1:0A:7B:03:E9:15:64:6B:C1:23:A7:49:DE:D2:87:7E:DC:8B
Authority key identifier: 24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
Certificate issuer: /CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Certificate serial: 019DA453ED2F337D52A5DCE485EC86DC403B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 06:00:56 +0000
Manifest this update: Sun 19 Apr 2026 06:00:56 +0000
Manifest next update: Mon 20 Apr 2026 06:00:56 +0000
Files and hashes: 1: IgEQEQxKF4JA_Yvwjt39ZRq-8to.roa (hash: w7LlxRV0iiav+R1gAPk1T8fKDTaiJNPPpktAM0ZCdmY=)
2: JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl (hash: MQ2bPjs20ubLiWsKcG4zIEVWG4ur2t/fTEHN5zy+50A=)
3: VpdxolhjeAAWOSWgaqR-V3JQwwo.roa (hash: Ruq0CFducLP8nqCWrlVaWaavOiOwsIA0PJ/oDQESMw8=)
4: gQf5G9Hw0jqLTco8BzanoYJkr0s.roa (hash: PQEokUiOnX9Qj/TyQO7GSAnGjYkROWa561oyoy92YWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:ed:2f:33:7d:52:a5:dc:e4:85:ec:86:dc:40:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Validity
Not Before: Apr 19 06:00:56 2026 GMT
Not After : Apr 20 06:00:56 2026 GMT
Subject: CN=7017d10a7b03e915646bc123a749ded2877edc8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:d5:e5:42:55:89:0f:64:02:b3:bc:0e:73:
93:b5:76:1f:39:39:f9:7b:c6:3f:3e:a4:25:fe:51:
0a:5d:e3:e6:95:a2:7b:ba:03:e2:b5:19:6c:41:ef:
92:b5:9e:81:55:54:7a:f6:bf:06:87:ab:72:65:ee:
d1:f8:f3:f6:ce:36:5f:50:f6:40:22:94:6a:c9:6c:
2e:12:0c:97:24:08:83:10:a3:bc:c1:e9:0d:34:2f:
71:b4:21:b1:eb:02:dc:ac:a4:df:09:70:c2:a6:41:
44:e4:a0:86:ba:37:42:02:00:69:a8:9f:80:ed:d6:
be:9e:36:15:89:8b:67:37:db:5d:0b:a9:2d:93:b3:
86:64:de:ea:d7:13:55:90:e6:e7:0b:3f:e1:cf:5a:
d2:30:f5:93:07:3a:3d:17:27:2f:9f:c4:8f:06:6b:
78:6c:54:02:5d:e9:2a:a6:62:cf:2f:2e:82:f6:38:
7a:f7:26:52:68:84:df:6a:6f:2b:d2:cb:00:c8:1e:
96:d1:3f:6e:41:4d:48:8e:9f:c4:ea:18:56:3f:bd:
f5:31:34:92:8a:f8:cc:4b:0c:2d:b8:6f:84:d1:37:
fc:0a:6b:ad:03:e3:6e:dd:41:ed:18:00:8e:81:4d:
d1:12:a2:e8:30:da:76:a4:ec:55:f1:c2:95:b6:d1:
19:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:17:D1:0A:7B:03:E9:15:64:6B:C1:23:A7:49:DE:D2:87:7E:DC:8B
X509v3 Authority Key Identifier:
keyid:24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f6:61:30:9f:4a:d1:9f:76:3f:a9:8f:87:ea:83:18:ad:04:
ee:13:4b:00:55:bc:ab:e2:40:53:c7:27:48:03:eb:ca:79:04:
f2:8b:01:ba:38:8b:bd:c9:ec:db:50:65:af:e6:67:4d:09:23:
76:d0:d3:56:f8:de:7e:96:b5:50:7c:73:9a:5c:de:16:15:dd:
aa:54:8c:c6:8d:f7:c9:0f:bc:f2:be:df:42:ee:1c:e4:c5:39:
2a:a8:05:12:fc:e8:f0:b6:91:92:84:a9:8e:49:03:12:9e:00:
98:ab:ad:5b:3a:72:b5:fb:ac:fb:9e:d6:dc:67:51:f7:b7:e6:
6b:79:b0:e9:1b:ee:4e:a7:36:9a:5f:48:2f:32:60:0e:70:33:
67:94:3f:0f:f5:79:78:09:3a:25:31:3f:24:d8:bd:f3:3a:d7:
24:1b:46:81:aa:25:ef:80:fa:d2:c6:fc:44:8a:ed:3b:08:a8:
e6:92:14:6b:16:fb:7a:36:50:c3:67:d4:13:40:98:92:96:9d:
21:3d:a2:28:e3:58:cd:07:ad:fb:b8:c0:00:9d:6e:ae:5c:8f:
87:49:cc:9f:8b:ea:e7:3b:e2:2b:6d:90:ca:bc:75:a6:7a:ad:
d0:58:e6:a9:8d:f2:b5:e3:55:4d:a5:31:0b:9a:8f:ea:40:07:
2c:f4:8c:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kU+0vM31SpdzkheyG3EA7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTBiZmJmNzk4ZmFlYWE3ZDZhMzYwNThkMDEzZTI0ZDRi
YjFkOWQwHhcNMjYwNDE5MDYwMDU2WhcNMjYwNDIwMDYwMDU2WjAzMTEwLwYDVQQD
Eyg3MDE3ZDEwYTdiMDNlOTE1NjQ2YmMxMjNhNzQ5ZGVkMjg3N2VkYzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgvV5UJViQ9kArO8DnOTtXYfOTn5
e8Y/PqQl/lEKXePmlaJ7ugPitRlsQe+StZ6BVVR69r8Gh6tyZe7R+PP2zjZfUPZA
IpRqyWwuEgyXJAiDEKO8wekNNC9xtCGx6wLcrKTfCXDCpkFE5KCGujdCAgBpqJ+A
7da+njYViYtnN9tdC6ktk7OGZN7q1xNVkObnCz/hz1rSMPWTBzo9Fycvn8SPBmt4
bFQCXekqpmLPLy6C9jh69yZSaITfam8r0ssAyB6W0T9uQU1Ijp/E6hhWP731MTSS
ivjMSwwtuG+E0Tf8CmutA+Nu3UHtGACOgU3REqLoMNp2pOxV8cKVttEZ6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAX0Qp7A+kVZGvBI6dJ3tKHftyLMB8GA1UdIwQY
MBaAFCRQv795j66qfWo2BY0BPiTUux2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZDX3YzbVBycXA5YWpZRmpRRS1KTlM3SFowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xOWM3NmYtMmY2Ny00MjFjLTg0YWUt
ZGQ1NDlmM2I4M2JmLzEvSkZDX3YzbVBycXA5YWpZRmpRRS1KTlM3SFowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8xOWM3NmYtMmY2Ny00MjFjLTg0YWUtZGQ1NDlmM2I4M2Jm
LzEvSkZDX3YzbVBycXA5YWpZRmpRRS1KTlM3SFowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfZhMJ9K
0Z92P6mPh+qDGK0E7hNLAFW8q+JAU8cnSAPrynkE8osBujiLvcns21Blr+ZnTQkj
dtDTVvjefpa1UHxzmlzeFhXdqlSMxo33yQ+88r7fQu4c5MU5KqgFEvzo8LaRkoSp
jkkDEp4AmKutWzpytfus+57W3GdR97fma3mw6RvuTqc2ml9ILzJgDnAzZ5Q/D/V5
eAk6JTE/JNi98zrXJBtGgaol74D60sb8RIrtOwio5pIUaxb7ejZQw2fUE0CYkpad
IT2iKONYzQet+7jAAJ1urlyPh0nMn4vq5zviK22Qyrx1pnqt0FjmqY3yteNVTaUx
C5qP6kAHLPSMaw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:18:49 2026 by rpki-client