Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
File: jhpIch_0OxgFfvQXSp05apgcZpM.mft (raw, json)
Hash identifier: 6phspyBX9d0vnnLmlmMeynYM+1kBMOOrlbywPB914p4=
Subject key identifier: 5F:2B:A3:9C:28:4C:C3:9C:E5:2D:48:8A:C4:D9:58:8D:A6:AB:A9:25
Authority key identifier: 8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
Certificate issuer: /CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Certificate serial: 019D9B19B97A52674435765F7ED6C2D44F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
Manifest number: 1182
Signing time: Fri 17 Apr 2026 11:00:47 +0000
Manifest this update: Fri 17 Apr 2026 11:00:47 +0000
Manifest next update: Sat 18 Apr 2026 11:00:47 +0000
Files and hashes: 1: CmJCWvc-L5n6ETqB_Y9EebfTgVc.roa (hash: o2Udx+b7zpQWtPDTqUJxGNdjl7Wv2+AvE2gIsIBVVkU=)
2: jhpIch_0OxgFfvQXSp05apgcZpM.crl (hash: Ee1WkEcx6+rtUBEmGdiYsZdmKJjyqcX+d5Bpz/CwprI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:b9:7a:52:67:44:35:76:5f:7e:d6:c2:d4:4f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Validity
Not Before: Apr 17 11:00:47 2026 GMT
Not After : Apr 18 11:00:47 2026 GMT
Subject: CN=5f2ba39c284cc39ce52d488ac4d9588da6aba925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:39:69:e4:53:74:8c:6d:03:03:ee:d9:5d:3a:
c6:ce:29:9a:34:9e:69:cb:aa:41:7b:ea:54:24:ef:
54:e5:b6:c3:46:2e:66:6b:b3:43:39:0b:c1:1e:d5:
62:fd:6f:b4:d8:e5:06:5b:1d:80:02:ec:d4:b0:82:
d3:ed:90:73:ca:b8:0c:51:c1:f1:5b:07:d9:db:e4:
c6:72:a2:aa:7f:1b:23:51:a2:c1:b9:52:ea:11:75:
9d:85:26:83:a7:8d:7c:c5:69:a4:42:6c:5e:9c:c8:
bf:9a:0c:8f:7c:78:db:e1:a5:59:95:52:94:de:02:
48:79:d3:83:db:f8:77:bf:09:7d:d8:fc:8a:a7:5c:
6a:49:ff:bd:74:c4:66:59:4e:9e:88:98:b9:0f:27:
50:b1:51:59:77:ae:c7:d6:00:92:31:11:0c:61:95:
83:d6:33:e3:ae:9a:89:8b:10:d4:82:ee:72:8c:9a:
75:d9:d2:71:c8:eb:95:16:02:b8:68:3e:db:35:2a:
81:b5:f1:9b:83:1c:06:62:a5:f2:3f:fb:64:07:9a:
27:1b:77:09:43:55:1f:43:91:80:11:f7:58:b0:cd:
5a:ec:35:b0:b6:89:cb:2d:45:37:d8:25:12:a5:27:
58:ca:58:ff:2b:4f:22:51:82:df:09:88:6d:fd:d0:
70:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2B:A3:9C:28:4C:C3:9C:E5:2D:48:8A:C4:D9:58:8D:A6:AB:A9:25
X509v3 Authority Key Identifier:
keyid:8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d7:aa:d3:ee:5a:94:ef:72:3f:fe:01:0d:7d:1e:cc:98:22:
f3:5d:db:2f:96:0e:93:39:44:c8:84:0a:31:0e:a0:74:5a:2f:
00:e8:e3:cc:18:88:1c:e2:8b:64:4d:f1:ee:22:b9:e7:96:e3:
e1:b0:64:1f:b4:e2:cc:d0:9b:22:71:f0:ec:d3:4c:a4:7d:82:
a6:a2:fa:6d:57:47:e8:75:78:dc:05:70:d4:b0:5c:e5:e1:af:
60:97:ab:3a:89:a8:66:bc:83:10:fa:2d:4d:56:b5:a3:b7:b9:
88:b3:c8:f2:dd:19:44:a4:44:40:b4:63:1a:4d:a9:f2:10:b2:
bd:80:04:01:01:dd:6e:a3:c0:3e:34:56:61:ac:11:37:f8:2a:
56:0f:14:b3:5b:14:64:d4:46:02:1e:ce:f2:14:d3:d8:94:e4:
51:80:ef:48:ee:cf:20:26:8c:44:a3:04:c4:14:fd:cb:8b:cd:
2b:29:21:d0:aa:3d:14:cf:1f:15:db:6d:7c:a4:94:95:be:2e:
ea:ed:e0:df:fd:4e:f8:c1:25:d6:63:ad:34:c2:fb:36:89:a8:
91:50:2a:a7:82:12:fd:31:cc:a2:b5:dd:39:2d:17:2a:d4:68:
7a:8d:c2:8e:7a:33:e1:34:80:ff:34:22:9d:45:6d:29:50:a2:
06:3e:5d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:16:10 2026 by rpki-client