Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
File: jhpIch_0OxgFfvQXSp05apgcZpM.mft (raw, json)
Hash identifier: L2vJ9stm3bBK+b/7FiCU9c+ngA1XZEHaxSUR/MIt8Sc=
Subject key identifier: ED:9C:B2:07:D7:3F:48:9F:CC:75:8D:48:66:3F:C1:3B:0A:E5:20:06
Authority key identifier: 8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
Certificate issuer: /CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Certificate serial: 019D273ABB099578A12377DEFFE636CE45FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
Manifest number: 1146
Signing time: Wed 25 Mar 2026 23:00:53 +0000
Manifest this update: Wed 25 Mar 2026 23:00:53 +0000
Manifest next update: Thu 26 Mar 2026 23:00:53 +0000
Files and hashes: 1: CmJCWvc-L5n6ETqB_Y9EebfTgVc.roa (hash: o2Udx+b7zpQWtPDTqUJxGNdjl7Wv2+AvE2gIsIBVVkU=)
2: jhpIch_0OxgFfvQXSp05apgcZpM.crl (hash: QC4Hd+0iXSLLUdFL/ZNYbbuHVTbpyFNsAHxUAlPLraw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:bb:09:95:78:a1:23:77:de:ff:e6:36:ce:45:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Validity
Not Before: Mar 25 23:00:53 2026 GMT
Not After : Mar 26 23:00:53 2026 GMT
Subject: CN=ed9cb207d73f489fcc758d48663fc13b0ae52006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:bf:48:2d:e0:8b:0a:91:98:c7:ba:7d:48:
64:6a:28:01:a7:11:6d:17:7e:28:d9:0a:2d:53:5e:
a3:41:72:f4:cd:9c:59:59:1b:91:cb:7e:42:ed:23:
0e:f0:a3:68:f9:ab:e9:2c:05:cc:60:36:05:66:71:
1a:38:52:54:a0:05:27:b6:ff:5c:d4:0c:83:5c:ab:
7f:d9:05:c0:15:45:5e:40:4b:7e:5d:9f:0a:d8:f7:
c8:e3:a1:6f:a7:28:f1:a4:10:77:f4:1b:46:81:ec:
a6:e2:0f:6f:c9:d0:69:0c:b1:6d:ae:b9:f3:61:33:
55:fa:13:1b:af:9f:7b:9a:83:5f:93:00:dc:78:4b:
c9:0b:c2:0e:35:7b:ec:a6:95:13:7f:a8:72:65:f1:
f4:d2:77:a3:54:f1:a3:5e:19:78:89:f1:68:70:99:
79:49:e8:9a:ba:df:bd:36:88:80:f0:7b:a0:bc:29:
db:d4:a7:6e:09:51:9d:e2:60:30:54:6d:65:c1:9e:
eb:9c:49:cc:a9:24:30:51:11:6a:bf:a2:28:45:ec:
e9:79:76:9e:54:f5:c2:e7:d7:48:0c:6c:88:b0:da:
6e:34:de:a7:c5:95:3e:a5:94:a4:e2:76:40:92:44:
0b:cf:af:27:e2:1b:fd:70:f9:51:5f:36:7a:7d:0a:
3e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9C:B2:07:D7:3F:48:9F:CC:75:8D:48:66:3F:C1:3B:0A:E5:20:06
X509v3 Authority Key Identifier:
keyid:8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:87:b0:b2:8d:87:3a:02:09:a7:86:6d:3f:af:92:6e:69:ed:
e7:cd:bf:d0:5e:59:43:97:3c:34:63:fb:02:74:88:af:3b:82:
c7:26:6d:3b:36:25:23:67:71:b4:92:71:58:4f:29:77:94:2c:
00:1d:cd:e0:6a:b4:63:89:ee:c6:2a:9d:1f:66:9c:e3:e1:98:
1c:06:e7:83:35:69:8b:4d:a1:0c:6f:04:38:5a:a5:c3:f0:60:
fc:a8:6d:03:43:1f:27:65:43:8b:dc:59:c6:6f:82:32:c2:c2:
09:aa:1a:7d:79:64:91:e5:94:38:78:9b:8a:1d:2a:bc:c2:af:
65:5e:78:f7:e1:4c:d7:37:32:1a:bb:5c:ac:ff:2c:c4:82:1d:
41:14:d1:a6:36:c3:60:30:88:80:18:33:c8:04:92:94:8a:ae:
42:47:44:88:86:ce:d9:cd:40:79:86:c3:4a:46:ab:51:5c:16:
ce:29:24:34:9d:d0:58:02:40:b4:19:43:7d:61:8a:b6:0b:7a:
53:0e:f0:21:b2:a2:63:30:d1:bd:74:a0:e1:bc:50:37:b3:68:
e8:ee:51:e0:e5:f1:24:17:f5:26:13:97:7b:f8:60:29:57:58:
90:29:4c:26:06:9e:db:80:1b:54:95:d3:81:b0:00:06:09:d8:
bb:4e:e4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:48 2026 by rpki-client