Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
File: S2jh-6e0SntmYjayElPX1jYtDYM.mft (raw, json)
Hash identifier: zQvVI6SsYU/caeEjy20ju1/gn1Ws4lBtCX9JpM/80HE=
Subject key identifier: D6:98:14:DC:97:95:C9:69:B9:9F:D3:6B:D0:A7:E9:7B:67:1A:1F:05
Authority key identifier: 4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
Certificate issuer: /CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Certificate serial: 019D26CD2C1DA680E9A5E0DBA8C82DD748AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
Manifest number: 05CB
Signing time: Wed 25 Mar 2026 21:01:13 +0000
Manifest this update: Wed 25 Mar 2026 21:01:13 +0000
Manifest next update: Thu 26 Mar 2026 21:01:13 +0000
Files and hashes: 1: NuG7e-eaeYmgEKzW-gA4hm0E3yg.roa (hash: jBGdM1PIKUvp7PqxpDnR+tYU0/z5UBNUNem3R8n/8fI=)
2: S2jh-6e0SntmYjayElPX1jYtDYM.crl (hash: zZSMBe90NTIzjakI8ocVWhqqhj9H0XwS9fSTSCY8fNs=)
3: cYnE7FavrDSt3SrEYya63HS7_dI.roa (hash: KGEvNenXcCeg3TCO3nqemstjyExiwPsWFQTV1a5VNaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:2c:1d:a6:80:e9:a5:e0:db:a8:c8:2d:d7:48:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Validity
Not Before: Mar 25 21:01:13 2026 GMT
Not After : Mar 26 21:01:13 2026 GMT
Subject: CN=d69814dc9795c969b99fd36bd0a7e97b671a1f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bf:40:ab:c3:07:18:a3:b2:55:87:42:0d:34:
b6:58:b0:0e:a1:75:84:9a:00:eb:82:ef:a4:d7:56:
50:5e:6b:52:81:6a:db:37:80:af:54:40:54:29:27:
a7:cc:3f:17:7e:52:2c:ef:c1:f1:78:f0:2e:08:99:
e7:00:bb:eb:b7:d4:cc:7d:9f:1f:20:9a:86:00:2a:
2e:0c:95:58:2f:d3:0a:35:93:b5:e2:58:b7:87:6f:
2e:c3:b5:69:fa:fa:74:75:de:b4:77:8e:09:94:16:
56:c7:e2:2a:e0:09:9b:03:ef:43:08:2f:a1:e4:96:
ad:35:b9:6e:ab:08:45:40:8d:4e:8a:bf:0f:f9:cb:
28:51:a1:6f:b5:ac:36:23:76:19:33:61:30:48:5e:
75:8d:b3:39:ec:37:7d:aa:67:c7:94:56:17:6e:e8:
f6:a7:16:5b:04:20:99:0e:04:65:5f:b1:4c:62:46:
80:e9:b0:21:e7:8c:0f:aa:1e:0f:c3:bb:bc:19:9e:
42:ff:a4:38:e2:2d:47:02:0d:6e:37:26:72:cc:86:
b2:98:2f:9a:1d:1a:4f:0f:a7:eb:29:68:3b:05:0d:
7a:32:cd:62:d7:ac:7f:12:46:bc:33:a5:6e:5b:63:
bb:05:06:70:e6:c8:ba:65:9e:fd:8d:3b:87:26:00:
de:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:98:14:DC:97:95:C9:69:B9:9F:D3:6B:D0:A7:E9:7B:67:1A:1F:05
X509v3 Authority Key Identifier:
keyid:4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f2:55:3c:c2:a4:2d:dc:ac:0b:a9:e4:a3:c2:a8:44:f6:00:
2f:54:82:4f:32:25:e5:4e:c0:ce:83:34:6d:a1:8d:f5:09:47:
2f:6a:4a:24:2a:7c:73:a6:b9:88:a9:1b:a4:38:37:19:93:4e:
9b:37:1a:6e:ea:9a:3e:d2:fc:d5:d2:cf:10:96:b5:2d:16:c5:
de:94:5a:01:75:54:51:54:96:18:b6:9a:21:c1:11:71:7d:9c:
a6:ee:02:97:c6:e1:15:80:97:90:2c:18:2a:0f:0f:ba:8c:0a:
e6:a9:11:49:86:69:d8:d7:b2:22:38:09:a3:e3:57:0d:ee:b2:
bf:75:99:b8:a2:d9:f7:be:fa:39:88:d5:cf:e7:f8:bf:09:6a:
ff:18:41:3a:c3:fa:d5:ce:19:4e:b7:fd:ba:e0:3d:5b:ce:cb:
4a:e6:12:35:80:92:9d:14:49:34:39:73:e0:f8:25:00:4b:9e:
80:6a:2f:b3:b2:d4:65:45:21:57:b7:4e:18:8d:ef:9a:57:6b:
26:aa:24:42:2f:32:dd:08:d7:03:8b:b5:22:4a:de:49:3d:7b:
8f:c2:f6:9b:73:38:bd:f9:32:b9:df:30:b5:35:b9:44:c7:b2:
f9:41:8e:0e:b3:b4:1c:10:ba:1c:45:2e:e5:a0:d1:b7:5f:54:
cc:f4:53:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:34:00 2026 by rpki-client