Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
File: jh_rawRLv2ERd1vKA41l5tIjDxQ.mft (raw, json)
Hash identifier: sKy3Hjaq5Oh4QuHSuro0+TRo3n4tc1JV761m6eeXt2c=
Subject key identifier: 03:21:EF:40:A4:6B:09:B7:19:55:47:A3:CC:58:A4:F8:17:CE:42:19
Authority key identifier: 8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
Certificate issuer: /CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Certificate serial: 019D382E72B99B5C5F0969DDBFA939117E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
Manifest number: 0F9F
Signing time: Sun 29 Mar 2026 06:01:01 +0000
Manifest this update: Sun 29 Mar 2026 06:01:01 +0000
Manifest next update: Mon 30 Mar 2026 06:01:01 +0000
Files and hashes: 1: I9uIHyNAZuZvz077ylfXzs2a2u4.roa (hash: HTHulKVM9Nf7ivuW33GQbC8YIjVpn1m5bDuyHdQbDxM=)
2: bAcGH9H1K73FpXSxpyLe2c0iBX8.roa (hash: TpsGeeQA3yklbylho+JTjROwnPYe5ku9NUEkM8M/pMk=)
3: jh_rawRLv2ERd1vKA41l5tIjDxQ.crl (hash: W7boOqO/dAPT9AHUFwS0YyAQzc09divSjmT/0HSZ4D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:72:b9:9b:5c:5f:09:69:dd:bf:a9:39:11:7e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Validity
Not Before: Mar 29 06:01:01 2026 GMT
Not After : Mar 30 06:01:01 2026 GMT
Subject: CN=0321ef40a46b09b7195547a3cc58a4f817ce4219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6b:f4:69:8a:18:48:64:2e:3a:59:66:9c:1e:
b1:f3:94:b2:47:26:05:40:ac:7f:90:d7:95:1e:25:
09:35:cb:16:22:d7:80:69:9c:71:da:3b:85:69:5e:
13:f4:03:c6:8d:17:4d:db:44:21:51:da:a8:c8:f8:
54:43:ec:35:1a:c8:51:77:e0:38:96:35:45:72:72:
3b:b0:fc:2d:5a:dc:c7:36:dd:c8:3d:a8:d1:ee:c8:
0d:88:3f:89:b3:6e:b4:d9:2e:da:c4:77:ea:45:dc:
98:70:28:d1:69:35:16:e0:92:52:dd:70:1d:10:4c:
a6:07:a1:25:19:84:49:e7:f6:6d:43:68:01:a1:1f:
5e:06:e3:88:d5:17:78:db:49:22:ec:b3:32:ee:75:
39:32:75:63:4d:23:51:a2:55:96:8b:4d:78:48:fa:
0a:95:75:bd:b7:4c:69:42:1e:17:b9:e6:84:c5:b0:
1d:9e:6e:4d:e9:40:cc:03:12:7a:fe:fb:df:99:e1:
a4:3d:63:be:76:2a:26:27:fb:75:69:68:50:f8:8c:
3e:7d:06:cc:99:61:8f:ba:01:51:d5:7f:80:19:c9:
16:e7:62:8d:a7:96:6e:31:49:0e:ed:1f:1a:cc:ce:
59:aa:d8:97:52:1c:6f:3c:44:ce:92:43:69:cd:12:
53:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:21:EF:40:A4:6B:09:B7:19:55:47:A3:CC:58:A4:F8:17:CE:42:19
X509v3 Authority Key Identifier:
keyid:8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:22:3a:06:fb:74:f7:88:89:7b:87:b8:59:35:75:14:9c:a5:
81:b4:46:56:10:f7:24:69:6e:65:ab:05:d3:31:7d:a9:a1:64:
2d:d3:ba:41:99:50:48:55:e0:ff:b2:92:b2:cc:bc:48:64:c3:
a9:09:cc:4e:8c:97:96:49:4f:e4:80:7a:c8:a2:16:b2:14:75:
d8:b3:77:0c:3b:14:73:24:d8:02:5f:de:6f:06:91:3f:a6:73:
b3:3d:9f:4a:86:6d:b4:e3:98:ef:c0:2e:41:33:00:ec:2c:85:
c4:c6:a0:49:93:66:2f:eb:a8:72:63:86:51:3b:7c:1c:b7:d2:
1c:f2:ea:42:86:61:ef:4f:aa:66:ed:d6:80:be:29:ab:14:5c:
74:6f:d8:6d:6b:00:f8:cd:36:5d:24:3e:ca:e8:4f:91:2e:f7:
29:7e:55:62:38:f8:e0:6f:c7:99:e7:85:30:21:09:c0:8e:e0:
e2:d0:54:45:c6:8e:e7:7f:a0:ca:b8:18:51:19:ae:a9:8d:72:
56:a1:cc:6e:6d:40:53:0f:48:3d:3e:6d:17:bf:fa:b1:7a:60:
9d:31:03:a1:60:60:b0:dd:30:4f:3a:ee:65:81:af:6b:53:10:
e6:d5:81:45:18:8c:69:c2:21:f3:20:fb:63:17:1a:3e:2f:c7:
b1:3c:66:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:43 2026 by rpki-client