Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
File: jhpIch_0OxgFfvQXSp05apgcZpM.mft (raw, json)
Hash identifier: K8G2kS4cbBRXKOK8gOveObbBONF5DFIUctNHU89URNU=
Subject key identifier: F2:9A:07:C4:CB:9E:7B:AC:C9:52:74:E7:79:C1:66:6C:93:38:83:A9
Authority key identifier: 8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
Certificate issuer: /CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Certificate serial: 01A1551C7BF7369F60A2E88B411D6EA45D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
Manifest number: 1370
Signing time: Mon 19 Oct 2026 17:01:32 +0000
Manifest this update: Mon 19 Oct 2026 17:01:32 +0000
Manifest next update: Tue 20 Oct 2026 17:01:32 +0000
Files and hashes: 1: CmJCWvc-L5n6ETqB_Y9EebfTgVc.roa (hash: o2Udx+b7zpQWtPDTqUJxGNdjl7Wv2+AvE2gIsIBVVkU=)
2: jhpIch_0OxgFfvQXSp05apgcZpM.crl (hash: wMVV0MNeaWaXk+QdI2hCjQamgXdQeFyyyvM0niBcww0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:1c:7b:f7:36:9f:60:a2:e8:8b:41:1d:6e:a4:5d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Validity
Not Before: Oct 19 17:01:32 2026 GMT
Not After : Oct 20 17:01:32 2026 GMT
Subject: CN=f29a07c4cb9e7bacc95274e779c1666c933883a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c0:fb:e8:40:e1:9e:7e:ce:93:77:06:50:a4:
56:eb:89:66:72:5b:59:d7:10:05:15:02:3e:aa:b8:
49:af:7d:ce:b9:d4:f0:36:a8:eb:51:ba:c8:ea:73:
a3:f9:14:12:6c:76:c0:05:77:26:88:74:bc:14:a3:
49:63:56:cf:02:53:b8:25:68:e2:ef:e1:c7:f1:f9:
1c:63:6e:58:c2:5c:a5:fb:5a:96:74:c4:41:e8:b5:
38:e5:43:dd:87:05:d3:55:13:57:0f:3b:15:54:d7:
cf:06:77:e7:6e:50:c4:af:b4:61:f3:b8:48:10:30:
37:b2:3f:0d:20:e7:3a:d8:af:ba:4a:f4:3f:0b:3e:
6b:32:eb:77:0f:c6:7b:b4:db:7f:4d:51:84:79:22:
0e:c2:07:8d:5a:d1:e2:d3:f2:b0:af:19:48:56:14:
c8:de:9d:2a:00:ed:b9:84:ae:7b:23:2b:29:1a:b6:
e9:93:7a:42:1f:4b:6f:9e:a9:d7:3e:6d:04:1b:35:
6d:3c:11:22:04:c3:45:5d:b3:85:bd:55:78:24:3f:
6b:fb:e4:f4:7f:45:42:f3:99:8c:e2:96:20:98:fa:
41:4a:1e:11:26:27:56:ee:e1:2f:d0:f6:74:8a:a8:
d5:16:ec:2d:63:e1:0f:94:de:93:88:86:52:6e:2c:
96:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9A:07:C4:CB:9E:7B:AC:C9:52:74:E7:79:C1:66:6C:93:38:83:A9
X509v3 Authority Key Identifier:
keyid:8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:19:55:69:05:ed:3b:22:0b:d2:e6:d0:67:00:18:30:a8:95:
89:18:16:30:96:18:b9:c5:bd:4c:d9:86:36:74:49:39:ee:81:
9c:f6:89:cb:c5:3f:dc:e2:e7:5b:bd:a8:a5:08:cd:dc:72:1f:
49:77:ec:e4:f0:47:17:07:43:9d:63:77:3a:f9:cc:52:af:0d:
8c:66:59:8e:e2:c1:bb:0b:38:af:31:a9:b1:20:13:2f:d4:e0:
7f:77:d7:4c:48:68:56:c9:5d:dc:04:3b:96:50:81:04:47:39:
f7:d8:15:1d:36:a0:39:e9:8e:1a:cf:ac:29:1c:bf:bd:ac:e5:
81:80:8b:81:71:0c:28:3a:54:4a:88:87:fe:be:5a:4f:ef:fb:
26:2a:ac:9f:9e:ec:9b:59:1a:ae:7c:51:6f:a7:ba:c9:f5:80:
ac:1f:89:92:1e:21:43:91:1d:5e:c4:91:1f:b9:d1:66:f6:99:
7b:b9:87:66:31:ea:69:ed:1a:d9:b3:9f:3a:64:67:5c:d0:36:
17:05:16:44:1b:74:21:35:93:ee:22:27:e2:4f:00:c1:4f:16:
0e:03:a6:05:40:4e:a5:44:98:b4:91:b5:0f:21:ef:21:98:84:
fe:52:81:cc:05:1c:0c:c2:3d:ac:e2:9f:b8:a9:0d:9b:ca:58:
10:75:e2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:26:30 2026 by rpki-client