Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
File: jhpIch_0OxgFfvQXSp05apgcZpM.mft (raw, json)
Hash identifier: 8ymG7A8yori9xHNLPb6pc8bBukKWRhobDw8Ohp2EaAY=
Subject key identifier: 67:27:32:B1:58:F9:C9:5A:07:C7:F0:CE:E5:50:AA:8B:5D:38:C7:9C
Authority key identifier: 8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
Certificate issuer: /CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Certificate serial: 019DD12C83C91133F92D0DDCFAA2CB060D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
Manifest number: 119E
Signing time: Mon 27 Apr 2026 23:00:48 +0000
Manifest this update: Mon 27 Apr 2026 23:00:48 +0000
Manifest next update: Tue 28 Apr 2026 23:00:48 +0000
Files and hashes: 1: CmJCWvc-L5n6ETqB_Y9EebfTgVc.roa (hash: o2Udx+b7zpQWtPDTqUJxGNdjl7Wv2+AvE2gIsIBVVkU=)
2: jhpIch_0OxgFfvQXSp05apgcZpM.crl (hash: omyM+I/oPwZ7w0FrKnKCkg782Q4lX476/0EsIrtjdZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:2c:83:c9:11:33:f9:2d:0d:dc:fa:a2:cb:06:0d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Validity
Not Before: Apr 27 23:00:48 2026 GMT
Not After : Apr 28 23:00:48 2026 GMT
Subject: CN=672732b158f9c95a07c7f0cee550aa8b5d38c79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:96:62:64:bd:07:be:b0:ec:a1:ac:72:9d:5a:
81:96:d2:6f:07:a3:7a:23:44:d7:bd:b9:06:7a:d2:
27:b0:3f:77:43:57:eb:a8:5a:3f:66:39:81:e5:99:
3a:8e:2b:db:8a:6d:d0:2d:06:f6:7b:9f:74:31:59:
67:7a:49:54:c9:fa:f4:a9:c8:d8:b6:62:54:fd:8b:
e7:e2:ab:51:d4:d6:87:3c:71:90:8b:0c:fc:a9:0c:
8a:30:fb:63:97:cb:d4:1a:f7:dc:94:6d:a7:a9:bb:
f8:76:1f:7b:8f:ae:6b:e3:ca:54:50:e8:ef:15:ad:
51:b8:6a:ba:7b:f7:63:dd:e8:69:8c:3e:da:bf:5a:
27:98:7e:7b:fb:d9:05:09:80:d3:f6:47:37:ef:14:
80:b3:c3:11:8e:61:94:66:4b:3e:49:ea:9d:35:90:
c6:09:cd:53:28:2c:81:37:6b:bc:00:b5:85:fc:ba:
41:d7:30:af:65:88:33:ec:50:e5:99:28:31:ca:68:
55:49:e6:04:41:ef:0a:17:6b:f1:22:f9:fa:6c:73:
37:90:8e:85:92:9f:f5:89:94:4b:27:a1:ee:f7:c7:
ea:01:af:73:b7:da:74:a1:2d:b0:1f:3d:cf:5b:ea:
36:92:e2:2b:72:7f:3d:0a:f3:c4:3c:4c:a0:2d:fa:
5c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:27:32:B1:58:F9:C9:5A:07:C7:F0:CE:E5:50:AA:8B:5D:38:C7:9C
X509v3 Authority Key Identifier:
keyid:8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:da:c8:67:2e:18:d4:44:87:11:54:e2:d2:24:f2:27:e9:0e:
e5:94:a4:d7:0a:f8:0c:f5:1c:30:a4:71:4f:da:ac:04:42:e3:
ee:66:90:19:9a:43:8e:50:18:57:b2:8a:6a:76:af:70:64:ca:
07:7b:57:56:f6:e2:30:7f:2e:88:39:7f:77:d5:73:a2:ed:87:
ac:da:e8:3d:b0:26:e6:47:31:ca:66:be:71:a3:e1:d6:48:3e:
53:61:28:d3:c9:cb:9f:23:3a:29:e9:98:9a:8e:7d:4b:2b:28:
b4:71:59:94:93:c7:73:00:de:e2:0b:ec:89:22:e6:5c:96:f0:
d9:23:da:e8:bc:b9:0a:60:65:b3:93:11:b3:6b:cb:d6:74:e3:
d1:da:5f:d1:a9:c2:c1:90:7e:83:5c:70:f9:04:ad:4d:8e:bf:
7d:f7:54:09:5c:4f:59:30:1b:16:4a:a8:cd:41:64:6b:b0:35:
48:a4:47:4a:2b:85:81:18:3d:98:08:7d:54:c1:12:31:6b:ba:
b0:11:d9:99:8b:94:53:64:b7:67:c6:bf:3c:4d:97:88:02:43:
f4:7e:63:3c:de:0e:cc:f8:34:a7:e0:2f:0e:75:d1:b8:ae:10:
90:0f:7a:48:85:af:16:fb:45:7a:0e:fa:39:b0:49:b2:39:40:
0d:fa:90:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 08:20:52 2026 by rpki-client