Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
File: jhpIch_0OxgFfvQXSp05apgcZpM.mft (raw, json)
Hash identifier: 2mK6pwxqJFvi8aQqRgUD+Vvl5IM/Ei8iXtNmYEX0afc=
Subject key identifier: 6C:F9:1B:65:B4:36:79:52:36:D2:9F:18:67:89:02:0F:DC:58:C9:4B
Authority key identifier: 8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
Certificate issuer: /CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Certificate serial: 019CABA1FC56BE001299DA5C262B737C33F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
Manifest number: 1106
Signing time: Sun 01 Mar 2026 23:00:45 +0000
Manifest this update: Sun 01 Mar 2026 23:00:45 +0000
Manifest next update: Mon 02 Mar 2026 23:00:45 +0000
Files and hashes: 1: CmJCWvc-L5n6ETqB_Y9EebfTgVc.roa (hash: o2Udx+b7zpQWtPDTqUJxGNdjl7Wv2+AvE2gIsIBVVkU=)
2: jhpIch_0OxgFfvQXSp05apgcZpM.crl (hash: FW8kmjIGhkFDL26nXIDWFuUK47Zgst3p1BvoWBsr9JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:fc:56:be:00:12:99:da:5c:26:2b:73:7c:33:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Validity
Not Before: Mar 1 23:00:45 2026 GMT
Not After : Mar 2 23:00:45 2026 GMT
Subject: CN=6cf91b65b436795236d29f186789020fdc58c94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:7f:a0:14:3d:96:35:fa:7f:13:a1:76:37:
4b:59:a9:d5:05:e8:b2:37:6d:1c:57:f2:a9:20:c5:
64:fa:4c:74:d1:58:a6:c0:76:1a:78:a8:77:b4:34:
fe:55:6e:e0:bb:7d:b9:67:25:3d:9f:12:e1:8e:f4:
96:8c:a9:c6:27:76:e4:6d:87:39:17:6a:57:b4:2d:
ae:de:c1:bf:2e:4d:3f:70:81:92:7b:aa:01:c2:f4:
85:c2:1d:3e:20:e5:cb:89:66:2e:3d:42:c0:90:1d:
20:25:4b:60:83:a7:66:9b:50:56:42:5d:6c:f6:a2:
03:7e:e8:83:5e:8f:64:5b:7d:3a:98:52:95:04:c4:
ff:37:4d:2e:21:64:c9:7b:58:2d:8f:ad:00:75:ab:
10:99:8e:25:f9:75:b9:06:1f:ba:1b:27:98:0d:70:
21:b4:44:c3:73:47:17:d1:0a:c1:73:fb:64:02:fb:
89:c3:aa:2d:c6:d9:ae:52:7b:42:8b:83:45:32:30:
d7:a6:09:64:2d:1f:65:bb:6a:43:80:5d:c2:0e:ac:
bb:80:34:b8:1b:3a:8b:3b:f4:cd:ce:d9:42:1e:ec:
2d:4f:07:54:f8:d6:f7:ad:e8:3a:a0:df:6e:3c:92:
d1:29:9e:6d:08:8b:01:e2:3e:3f:ce:97:7f:73:c8:
b9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F9:1B:65:B4:36:79:52:36:D2:9F:18:67:89:02:0F:DC:58:C9:4B
X509v3 Authority Key Identifier:
keyid:8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f2:cb:fc:9d:0d:b0:b8:e0:d9:f9:e7:f7:2a:de:ae:18:ec:
d6:02:63:e4:46:31:d0:6a:e2:18:41:eb:44:c1:a6:5b:c2:65:
22:25:ce:1c:53:97:98:ef:e1:73:02:b5:65:5b:e4:8a:fa:89:
e7:98:ac:fc:d7:85:ce:56:0e:93:e1:e7:6b:ac:af:47:42:c7:
b0:ec:cd:e3:c2:b8:3f:5e:bc:80:97:f4:14:f0:b0:9e:d8:0e:
8e:29:83:be:ed:c0:82:d0:59:cd:8a:90:8a:c5:51:7a:ac:64:
e7:3b:66:e1:26:cd:e1:d2:d1:32:5b:1f:ea:49:07:47:93:f2:
99:d2:dd:fb:73:c2:cf:54:92:d7:dd:38:05:cb:4a:90:cb:39:
f9:77:20:a3:5a:de:b1:c2:bc:31:f2:b1:1e:54:6e:e4:88:c7:
9d:9a:53:c9:d3:a5:0a:67:9c:0b:34:01:9a:9a:3f:ec:33:12:
d0:66:ef:65:ee:6e:a0:cf:f3:85:df:aa:bf:6d:bf:c8:11:26:
47:66:76:f3:56:6e:26:83:41:f6:55:21:d3:c0:2c:6b:23:13:
36:87:bb:53:59:fa:d0:80:bb:c8:b5:26:c8:fc:a7:fc:f2:40:
c9:f7:84:f5:f9:57:31:45:31:bd:d5:1c:60:ac:40:25:a3:a5:
0c:10:54:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrofxWvgASmdpcJitzfDPzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWE0ODcyMWZmNDNiMTgwNTdlZjQxNzRhOWQzOTZhOTgx
YzY2OTMwHhcNMjYwMzAxMjMwMDQ1WhcNMjYwMzAyMjMwMDQ1WjAzMTEwLwYDVQQD
Eyg2Y2Y5MWI2NWI0MzY3OTUyMzZkMjlmMTg2Nzg5MDIwZmRjNThjOTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0J/oBQ9ljX6fxOhdjdLWanVBeiy
N20cV/KpIMVk+kx00VimwHYaeKh3tDT+VW7gu325ZyU9nxLhjvSWjKnGJ3bkbYc5
F2pXtC2u3sG/Lk0/cIGSe6oBwvSFwh0+IOXLiWYuPULAkB0gJUtgg6dmm1BWQl1s
9qIDfuiDXo9kW306mFKVBMT/N00uIWTJe1gtj60AdasQmY4l+XW5Bh+6GyeYDXAh
tETDc0cX0QrBc/tkAvuJw6otxtmuUntCi4NFMjDXpglkLR9lu2pDgF3CDqy7gDS4
GzqLO/TNztlCHuwtTwdU+Nb3reg6oN9uPJLRKZ5tCIsB4j4/zpd/c8i5gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGz5G2W0NnlSNtKfGGeJAg/cWMlLMB8GA1UdIwQY
MBaAFI4aSHIf9DsYBX70F0qdOWqYHGaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMt
Y2U0ZTMxY2UxNTE4LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMtY2U0ZTMxY2UxNTE4
LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPLL/J0N
sLjg2fnn9yrerhjs1gJj5EYx0GriGEHrRMGmW8JlIiXOHFOXmO/hcwK1ZVvkivqJ
55is/NeFzlYOk+Hna6yvR0LHsOzN48K4P168gJf0FPCwntgOjimDvu3AgtBZzYqQ
isVReqxk5ztm4SbN4dLRMlsf6kkHR5PymdLd+3PCz1SS1904BctKkMs5+Xcgo1re
scK8MfKxHlRu5IjHnZpTydOlCmecCzQBmpo/7DMS0GbvZe5uoM/zhd+qv22/yBEm
R2Z281ZuJoNB9lUh08AsayMTNoe7U1n60IC7yLUmyPyn/PJAyfeE9flXMUUxvdUc
YKxAJaOlDBBUdw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:01:21 2026 by rpki-client