$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft File: JFXX_uSkmeyvEdLT2o44neMjQS8.mft (raw, json) Hash identifier: eIgBzc0+4kLOZv6IzbNr0qwBfak0luRNvHY8btQ57bc= Subject key identifier: 11:AF:C3:AB:29:F0:00:9A:6E:A6:DB:BD:8D:AB:8C:70:91:34:E5:9D Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 019D2772B1FC18AA3EAEF958AD979906F8E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft Manifest number: 15C4 Signing time: Thu 26 Mar 2026 00:02:01 +0000 Manifest this update: Thu 26 Mar 2026 00:02:01 +0000 Manifest next update: Fri 27 Mar 2026 00:02:01 +0000 Files and hashes: 1: CkpruVXBRC35FNzBxsHtHzElTcQ.roa (hash: M8G0Fw/AyLb57D4pQj+p7wHrZ6ZAg2uq5cvqL/37hsU=) 2: DASfpt6NusBMafxKXMbsXkknaLs.roa (hash: 7Q1f4G/K2mV4OPswZej+EeWKFQMe4TLAgeu5GM1kraI=) 3: ESMuZH3p8eZcfxjSdFlU49_G9BY.roa (hash: eU/RIl1p7nycsadiq5D1MCtC0gJOFnvD+JDmCJY+OA8=) 4: H4PmoPs09fxsoMyeNbvcLTDl7tg.roa (hash: g6se6YwWnPf1EHgnkVuLefIVI+viGWgQPBM+Zec15uI=) 5: JFXX_uSkmeyvEdLT2o44neMjQS8.crl (hash: JpMDnqsF8Prh/JO/d8BcK40uPIeEJIq+bQFkxbnuOHs=) 6: VHgUN5juRzMz3CUHZPoEHnzr2z0.roa (hash: VXSqzrkX+ABn4jZnd4wHdBjnPgDeVeSEP9mmDyjcGMQ=) 7: WuM6D54bD9ZW12al4cadO05OlhA.roa (hash: KSoGE/L4hSg6At0Y5RkAFE3o/b5P/zSmERN2VFp1fMQ=) 8: Y-rwo6ja1_SXsDsjjZenySjEjo8.roa (hash: ZsKC9kHfKh+n+8/Xir5wlK+HjS6IcJLLArYCrxMRmAk=) 9: fRUNIQ1_jYWQdZrSZ4luryAQJDQ.roa (hash: ty6oOnSu+ZODj+9+2x+cpkE7v0JL9rnydZY11LzAwgQ=) 10: jTbrb1TbwgaHuVljIE6syUVcGbE.roa (hash: 1xz+1g5hD0xQyll98W3vSqycYShnYZQgn+0XxOIFh6g=) 11: lNSsiMsgFC3PSDwg_wipOCI36Sc.roa (hash: T+M2rwciKN++pJU4zsuNLc+4agGsiYLXoX3H/Bds62g=) 12: nMpaMbGEzj2Jpg2_GxE2xYc0pUI.roa (hash: Fv1RC7bFvxKYKp89cN52GIHsD0MHml/fLyyWKSWO5/k=) 13: rjPbS80wLPhwF4ETCKbrHWAdxvw.roa (hash: 0e9ndNtpFQMzhAU9T854jFmEVmFNvWMXh2KdMpHi8jk=) 14: sIpLAsGB9mg0zFG4d5238KgCd4k.roa (hash: eXcSiBlROOdcbS6oOwKQciaqtXn9irVYQuDWrvrFA6s=) 15: shMgILdrcRQ_LG-B1Njv0tFtwKY.roa (hash: VrnYEoqsCXqMeGOK7nN9tJcwMBHTSx98wiR1emp3pqQ=) 16: spxPuR8xyj72SKO00nWmxiu9tv8.roa (hash: j68QBUE3gzuvtf320646B+hARt3MiGgu/5WZ8oVBSpA=) 17: ufjaDLPum5mRkBKXDuMb146baHg.roa (hash: oNF4RqIC9pQOPmU+xyL4C1SBlQau5hDsBq8wufytphI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:72:b1:fc:18:aa:3e:ae:f9:58:ad:97:99:06:f8:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: Mar 26 00:02:01 2026 GMT Not After : Mar 27 00:02:01 2026 GMT Subject: CN=11afc3ab29f0009a6ea6dbbd8dab8c709134e59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7e:22:6b:ed:d1:ad:7c:49:80:88:88:45:42: aa:4f:47:98:09:c0:3f:56:8b:ab:2b:b8:02:43:d7: 56:6b:d4:c8:63:f8:53:50:ea:f4:ce:be:35:58:41: 30:f2:9f:29:9c:13:c3:67:87:d9:31:be:67:f3:07: ec:36:2f:33:86:04:60:61:e4:3f:1a:79:8e:21:42: 78:86:b8:f1:f2:e6:04:72:de:eb:5f:72:a9:1f:0d: a9:b2:54:c6:66:61:6c:49:4e:25:38:9a:47:ab:1f: b5:e7:c5:ee:2d:63:a4:29:74:ec:d3:86:48:fb:0c: 5b:52:0b:eb:2e:c0:5d:95:4c:a7:20:a3:42:21:7c: 1b:e4:1f:7f:da:70:9b:6d:ca:c9:d9:90:31:a3:c6: 44:e4:fc:6d:3b:06:6a:29:a7:fb:c9:24:62:c8:11: b7:c8:ac:ab:d0:67:95:cb:8a:d6:8e:e1:6f:c9:ce: a0:a9:af:35:cd:a1:47:d5:bf:61:a6:43:74:a7:6a: 24:8c:3a:16:7a:c9:31:26:d8:85:c3:b3:96:29:1f: a9:40:92:d7:d6:14:95:e7:64:3a:d4:d6:65:49:00: e6:3f:e6:86:8b:4a:9f:f0:09:a6:ea:75:49:9a:1b: 42:80:1e:7e:f1:78:b8:3d:9e:eb:f7:00:68:7c:26: 25:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AF:C3:AB:29:F0:00:9A:6E:A6:DB:BD:8D:AB:8C:70:91:34:E5:9D X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:f9:c9:74:b4:51:c7:66:f8:b3:7d:bf:b2:df:6d:5f:3c:5a: fc:99:5a:7e:7c:f7:d5:1b:78:e7:64:e6:5b:19:20:21:88:38: 4d:81:09:6d:97:2f:8c:3f:2b:08:e9:32:1d:52:85:7c:cd:34: 26:fd:71:df:ba:52:55:a9:f8:e8:88:5e:78:f3:b9:0a:6f:24: e5:5c:b8:89:1e:f2:31:32:9a:49:86:0c:f8:dc:13:ec:f7:67: f2:99:e5:00:cb:4f:b3:05:4a:73:27:7b:16:9a:65:43:cc:ea: fc:16:a8:6c:f6:a0:f3:58:d7:af:98:f0:31:4c:7f:20:ed:78: 43:35:1b:be:fb:6c:1b:63:dd:07:93:6a:b9:e6:c1:9d:a1:64: 81:eb:73:b9:11:88:a5:79:20:3a:c2:60:e2:27:60:18:b2:b5: 20:b6:a6:ad:98:32:e2:1e:69:f2:45:23:62:56:0f:6b:e9:f3: d0:e6:21:e5:a6:e2:9b:28:a8:f3:e7:48:d8:dc:ba:d6:ab:4e: e9:01:39:a5:a6:02:f5:b0:d7:f2:23:4f:5e:d2:bc:4d:fb:1e: 59:cd:98:85:4b:28:ab:b5:1d:f1:a5:0e:81:7b:7b:69:79:78: df:c0:ea:05:90:3b:69:e0:db:35:57:7a:ff:ae:db:c0:cc:e2: a3:28:4e:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ncrH8GKo+rvlYrZeZBvjhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjYwMzI2MDAwMjAxWhcNMjYwMzI3MDAwMjAxWjAzMTEwLwYDVQQD EygxMWFmYzNhYjI5ZjAwMDlhNmVhNmRiYmQ4ZGFiOGM3MDkxMzRlNTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp34ia+3RrXxJgIiIRUKqT0eYCcA/ VourK7gCQ9dWa9TIY/hTUOr0zr41WEEw8p8pnBPDZ4fZMb5n8wfsNi8zhgRgYeQ/ GnmOIUJ4hrjx8uYEct7rX3KpHw2pslTGZmFsSU4lOJpHqx+158XuLWOkKXTs04ZI +wxbUgvrLsBdlUynIKNCIXwb5B9/2nCbbcrJ2ZAxo8ZE5PxtOwZqKaf7ySRiyBG3 yKyr0GeVy4rWjuFvyc6gqa81zaFH1b9hpkN0p2okjDoWeskxJtiFw7OWKR+pQJLX 1hSV52Q61NZlSQDmP+aGi0qf8Amm6nVJmhtCgB5+8Xi4PZ7r9wBofCYlLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGvw6sp8ACabqbbvY2rjHCRNOWdMB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvnJdLRR x2b4s32/st9tXzxa/Jlafnz31Rt452TmWxkgIYg4TYEJbZcvjD8rCOkyHVKFfM00 Jv1x37pSVan46IheePO5Cm8k5Vy4iR7yMTKaSYYM+NwT7Pdn8pnlAMtPswVKcyd7 FpplQ8zq/BaobPag81jXr5jwMUx/IO14QzUbvvtsG2PdB5NquebBnaFkgetzuRGI pXkgOsJg4idgGLK1ILamrZgy4h5p8kUjYlYPa+nz0OYh5abimyio8+dI2Ny61qtO 6QE5paYC9bDX8iNPXtK8TfseWc2YhUsoq7Ud8aUOgXt7aXl438DqBZA7aeDbNVd6 /67bwMzioyhOUg== -----END CERTIFICATE-----Generated at Thu Mar 26 12:27:25 2026 by rpki-client