Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
File: S2jh-6e0SntmYjayElPX1jYtDYM.mft (raw, json)
Hash identifier: gwDxH1SeGX/I8pv4z9l0okSOk9a6OVmg67A1sUoRM7o=
Subject key identifier: 22:7A:18:F1:B5:67:C2:D2:D4:35:50:F9:E3:99:5C:04:25:28:F9:8D
Authority key identifier: 4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
Certificate issuer: /CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Certificate serial: 01A0EA77098A428099835D43DFE7087540F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
Manifest number: 07BE
Signing time: Tue 29 Sep 2026 00:01:04 +0000
Manifest this update: Tue 29 Sep 2026 00:01:04 +0000
Manifest next update: Wed 30 Sep 2026 00:01:04 +0000
Files and hashes: 1: NuG7e-eaeYmgEKzW-gA4hm0E3yg.roa (hash: jBGdM1PIKUvp7PqxpDnR+tYU0/z5UBNUNem3R8n/8fI=)
2: S2jh-6e0SntmYjayElPX1jYtDYM.crl (hash: vasNHsFrW5TFY4fQYxIr7D31gNPpwCK20ev1vpxi8ik=)
3: cYnE7FavrDSt3SrEYya63HS7_dI.roa (hash: KGEvNenXcCeg3TCO3nqemstjyExiwPsWFQTV1a5VNaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:77:09:8a:42:80:99:83:5d:43:df:e7:08:75:40:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Validity
Not Before: Sep 29 00:01:04 2026 GMT
Not After : Sep 30 00:01:04 2026 GMT
Subject: CN=227a18f1b567c2d2d43550f9e3995c042528f98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4e:4c:80:9b:cf:13:08:c7:a6:36:9d:47:08:
64:7d:25:6a:49:aa:c7:1a:d0:c2:c4:02:12:a1:52:
d0:3d:f4:4e:fd:20:f7:35:df:9d:f2:d3:d0:82:52:
1e:db:8e:31:a8:8e:d7:0a:12:74:96:27:d3:07:a8:
cb:5c:a8:19:8e:97:f3:b5:af:c7:14:64:03:55:52:
e8:27:08:e2:59:b3:d6:fd:6e:69:63:46:de:db:a4:
63:07:88:f0:66:6b:4b:f1:6f:1e:45:77:ab:c5:28:
7a:dc:ed:01:aa:1b:5c:e3:5c:b5:96:9e:7e:6e:42:
10:5e:ce:72:46:8f:fe:65:ad:9f:46:b1:a1:63:e4:
d2:83:21:4f:b3:10:97:00:9f:eb:42:03:08:27:8a:
ae:31:31:e5:de:41:94:f5:06:1e:5e:60:9d:b9:28:
7f:c4:fd:f8:9b:8c:e0:55:fd:4e:de:66:20:67:7f:
65:df:fe:79:c5:06:59:8e:73:bf:d8:4e:2f:2f:e7:
1b:16:8c:3e:e4:a9:64:d1:5c:11:c8:97:0a:5d:d1:
ad:b1:cf:7d:0f:b0:94:c5:98:ff:86:88:cf:25:45:
56:4e:ab:68:db:0d:3c:12:e7:33:60:5f:dc:6e:a5:
a2:f4:c3:d6:4b:6f:e8:ac:d6:9c:d2:1e:fc:59:22:
2e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7A:18:F1:B5:67:C2:D2:D4:35:50:F9:E3:99:5C:04:25:28:F9:8D
X509v3 Authority Key Identifier:
keyid:4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:22:19:19:2a:5a:d9:2b:27:f0:60:f4:a4:8e:c8:4b:42:dc:
30:de:20:3e:da:62:ff:16:a0:1e:54:9c:fe:e0:a2:a8:8a:81:
8a:d8:b9:95:76:fb:ed:fc:89:36:40:da:b1:41:3a:6c:e2:3d:
f3:25:05:d0:e7:f2:5d:ee:69:fb:88:90:b5:f1:b3:d9:95:52:
0f:6a:e0:b5:b0:56:10:41:18:02:b6:2f:73:74:06:f3:c0:c2:
ae:cf:f8:56:c4:11:03:20:0f:2e:54:c0:28:2a:55:7a:de:cd:
c9:89:a8:0f:ea:a4:7b:4f:21:82:4e:2c:3b:be:7f:84:6f:8e:
54:20:07:e5:c9:5b:47:67:da:62:17:2f:a2:40:52:34:e7:55:
e4:fe:b7:1c:4b:77:ff:bf:dd:49:da:6b:16:4a:10:01:07:d8:
5a:7c:ff:df:a4:ed:f8:5a:17:c8:1b:b2:df:82:b7:c1:dd:ce:
63:5b:ef:53:fa:01:d3:97:ae:10:79:29:5f:f2:90:15:21:b9:
c2:d6:b9:d0:68:91:12:58:74:7a:95:e8:d4:64:4b:ed:ef:08:
80:9e:8e:23:91:4f:1e:9c:db:35:9c:18:4d:b5:13:3d:ce:f4:
bf:c2:e7:50:42:0d:11:ac:ad:82:ec:31:54:35:30:83:2c:7d:
92:bd:28:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:29:30 2026 by rpki-client