Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
File: jhpIch_0OxgFfvQXSp05apgcZpM.mft (raw, json)
Hash identifier: 3aSrgvx/E2a/iUGdieQTHdCFRZ/6d6mHHKV8+yOYlr0=
Subject key identifier: CF:65:55:68:2E:24:3D:A0:B3:76:DF:47:AA:AC:C4:C3:2C:C4:8C:30
Authority key identifier: 8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
Certificate issuer: /CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Certificate serial: 019F197A4911625272CAD3F4B99DD61065C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
Manifest number: 1248
Signing time: Tue 30 Jun 2026 17:01:12 +0000
Manifest this update: Tue 30 Jun 2026 17:01:12 +0000
Manifest next update: Wed 01 Jul 2026 17:01:12 +0000
Files and hashes: 1: CmJCWvc-L5n6ETqB_Y9EebfTgVc.roa (hash: o2Udx+b7zpQWtPDTqUJxGNdjl7Wv2+AvE2gIsIBVVkU=)
2: jhpIch_0OxgFfvQXSp05apgcZpM.crl (hash: cpJqkJMY1RrTR4kjVSNsZChX6+RdUjdon6eoi53DEjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:49:11:62:52:72:ca:d3:f4:b9:9d:d6:10:65:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Validity
Not Before: Jun 30 17:01:12 2026 GMT
Not After : Jul 1 17:01:12 2026 GMT
Subject: CN=cf6555682e243da0b376df47aaacc4c32cc48c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5b:3d:08:58:04:db:0e:29:85:46:30:a0:d6:
bc:da:60:b6:26:65:82:13:b2:d0:8a:25:ff:8b:fa:
a0:a8:c1:89:3b:85:3c:7a:d9:c1:bc:8b:43:fa:eb:
7e:2e:3d:1b:26:ef:32:b2:9e:6f:c7:a1:17:9a:2f:
1b:52:a3:6f:a5:f4:22:81:42:52:89:dc:22:5b:62:
bd:d4:3b:be:f9:6f:32:7b:97:a3:53:5b:74:15:84:
2e:cf:3f:b9:73:64:fa:ef:11:ad:93:e1:61:cc:62:
76:e1:8b:2c:3a:fe:35:f4:6d:5d:d1:fe:20:51:f9:
95:0f:ab:1f:b7:c0:8e:10:13:d9:27:73:a0:40:08:
ba:2d:79:fd:b3:3a:27:bd:08:e2:b4:20:d0:0b:30:
dd:02:24:31:9f:f3:bb:7b:0c:71:19:54:6a:1b:6f:
8b:78:55:a3:df:c7:7a:19:a4:cf:d7:03:0f:0b:25:
0d:16:a4:ba:e0:67:b3:d2:be:ea:1e:93:a1:e0:83:
6d:77:f9:6b:81:e1:61:da:66:af:2b:60:2b:2f:8c:
4d:44:22:75:f9:8e:91:77:81:ea:30:0e:2e:95:b4:
63:79:70:09:be:4e:31:64:f0:7f:12:7a:19:ba:f7:
40:c1:a6:4e:d7:ef:6a:61:13:93:50:1a:13:23:81:
ba:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:65:55:68:2E:24:3D:A0:B3:76:DF:47:AA:AC:C4:C3:2C:C4:8C:30
X509v3 Authority Key Identifier:
keyid:8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8c:c3:06:6b:0b:84:12:bc:8f:5a:63:e1:da:f6:11:c1:15:
da:6a:fa:b6:2a:d6:7b:10:20:11:1d:a8:eb:42:a2:96:f6:48:
c0:f6:7f:fb:c2:fc:50:eb:9e:96:76:98:6f:59:3f:19:41:94:
39:24:cd:6c:c1:a0:25:79:33:f7:c1:db:d9:d9:97:56:aa:ae:
0c:a8:d5:ea:b9:4b:be:23:3c:13:8c:a6:4d:80:d0:2e:bb:e7:
3d:ce:06:5e:77:da:c6:5a:a0:b3:45:23:64:1a:a3:fd:da:d8:
08:cf:f4:bd:1d:a4:c1:01:37:11:6d:21:ec:76:25:ed:6c:66:
58:d6:7e:09:ce:d1:25:b0:86:43:73:8b:1b:3d:a1:7f:c2:e9:
ed:9b:ff:dc:84:ea:60:db:4b:8b:6e:77:f1:30:19:3f:85:15:
82:86:38:7a:51:43:35:55:93:33:6e:24:d7:64:9b:38:52:85:
1c:da:6b:59:5f:72:79:f8:7c:a5:1b:83:85:74:f5:96:66:09:
7c:b6:fc:45:a7:8d:c0:6d:0f:40:3f:c9:9a:d3:09:53:eb:a9:
e2:bc:39:e4:3a:92:4a:db:0e:28:60:19:d8:e8:a5:6d:85:c7:
3b:07:d3:89:8b:11:91:a0:7a:7c:9d:6a:e0:46:76:6f:0b:41:
72:2e:5d:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZekkRYlJyytP0uZ3WEGXAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWE0ODcyMWZmNDNiMTgwNTdlZjQxNzRhOWQzOTZhOTgx
YzY2OTMwHhcNMjYwNjMwMTcwMTEyWhcNMjYwNzAxMTcwMTEyWjAzMTEwLwYDVQQD
EyhjZjY1NTU2ODJlMjQzZGEwYjM3NmRmNDdhYWFjYzRjMzJjYzQ4YzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01s9CFgE2w4phUYwoNa82mC2JmWC
E7LQiiX/i/qgqMGJO4U8etnBvItD+ut+Lj0bJu8ysp5vx6EXmi8bUqNvpfQigUJS
idwiW2K91Du++W8ye5ejU1t0FYQuzz+5c2T67xGtk+FhzGJ24YssOv419G1d0f4g
UfmVD6sft8COEBPZJ3OgQAi6LXn9szonvQjitCDQCzDdAiQxn/O7ewxxGVRqG2+L
eFWj38d6GaTP1wMPCyUNFqS64Gez0r7qHpOh4INtd/lrgeFh2mavK2ArL4xNRCJ1
+Y6Rd4HqMA4ulbRjeXAJvk4xZPB/EnoZuvdAwaZO1+9qYROTUBoTI4G6GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9lVWguJD2gs3bfR6qsxMMsxIwwMB8GA1UdIwQY
MBaAFI4aSHIf9DsYBX70F0qdOWqYHGaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMt
Y2U0ZTMxY2UxNTE4LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMtY2U0ZTMxY2UxNTE4
LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfozDBmsL
hBK8j1pj4dr2EcEV2mr6tirWexAgER2o60KilvZIwPZ/+8L8UOuelnaYb1k/GUGU
OSTNbMGgJXkz98Hb2dmXVqquDKjV6rlLviM8E4ymTYDQLrvnPc4GXnfaxlqgs0Uj
ZBqj/drYCM/0vR2kwQE3EW0h7HYl7WxmWNZ+Cc7RJbCGQ3OLGz2hf8Lp7Zv/3ITq
YNtLi2538TAZP4UVgoY4elFDNVWTM24k12SbOFKFHNprWV9yefh8pRuDhXT1lmYJ
fLb8RaeNwG0PQD/JmtMJU+up4rw55DqSStsOKGAZ2OilbYXHOwfTiYsRkaB6fJ1q
4EZ2bwtBci5dOg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 22:39:57 2026 by rpki-client