Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
File: S2jh-6e0SntmYjayElPX1jYtDYM.mft (raw, json)
Hash identifier: HY1VEA5Z+Pj2XVmQs990fpaaM4WCHY7cEQFeMH5o/TM=
Subject key identifier: C6:2C:8D:DE:38:7F:5C:56:BA:BB:3C:C8:D3:19:F5:ED:25:6D:9F:CF
Authority key identifier: 4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
Certificate issuer: /CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Certificate serial: 019E1DFEAB77F228AD8BA3323B29F533ECD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
Manifest number: 064B
Signing time: Tue 12 May 2026 21:01:29 +0000
Manifest this update: Tue 12 May 2026 21:01:29 +0000
Manifest next update: Wed 13 May 2026 21:01:29 +0000
Files and hashes: 1: NuG7e-eaeYmgEKzW-gA4hm0E3yg.roa (hash: jBGdM1PIKUvp7PqxpDnR+tYU0/z5UBNUNem3R8n/8fI=)
2: S2jh-6e0SntmYjayElPX1jYtDYM.crl (hash: K6P1n3/dQoRf5F5n8M7U2lnxTgAlCKZMs0wREV5WFNc=)
3: cYnE7FavrDSt3SrEYya63HS7_dI.roa (hash: KGEvNenXcCeg3TCO3nqemstjyExiwPsWFQTV1a5VNaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:ab:77:f2:28:ad:8b:a3:32:3b:29:f5:33:ec:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Validity
Not Before: May 12 21:01:29 2026 GMT
Not After : May 13 21:01:29 2026 GMT
Subject: CN=c62c8dde387f5c56babb3cc8d319f5ed256d9fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7e:00:b7:b1:2b:03:36:ff:a5:67:45:4e:b7:
70:4b:5a:e3:1d:af:37:e4:cc:e8:d7:44:1c:52:5a:
13:4d:a7:28:00:99:6f:9c:34:fa:e4:5b:1f:09:d4:
50:9f:e4:ed:23:08:02:a2:66:26:fd:77:03:10:98:
41:d6:b8:9f:2b:44:62:c9:12:2b:e1:b1:6d:4a:39:
a6:8d:07:28:37:dd:85:fb:13:e3:42:f7:5c:3f:6b:
0d:f7:e0:6f:6c:d9:80:b5:91:7f:ca:06:93:05:ef:
af:dc:e7:bb:98:87:81:ad:0c:46:e4:1e:65:dc:c9:
79:38:87:27:bb:20:fa:42:1e:0b:0c:60:ae:5a:53:
2a:e1:16:80:de:49:50:2b:01:ba:31:a8:b5:a6:5e:
29:ac:b3:65:32:c1:27:47:3a:24:78:07:6e:c3:29:
14:84:71:48:06:db:b2:84:a8:69:8f:9a:5d:38:f3:
75:3e:5f:0f:1d:e4:a4:19:18:56:cc:d2:c7:9d:37:
7d:42:52:ad:8a:82:1b:93:25:20:bf:f1:9e:6c:9b:
6e:c2:1a:0e:4a:ad:7a:0d:cd:89:19:0d:70:40:c6:
f1:00:7c:07:f5:eb:cc:66:d3:ce:61:10:1c:50:16:
12:1a:61:a5:f5:56:3c:63:b9:ad:21:5d:5f:da:13:
cc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2C:8D:DE:38:7F:5C:56:BA:BB:3C:C8:D3:19:F5:ED:25:6D:9F:CF
X509v3 Authority Key Identifier:
keyid:4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:76:59:4b:c3:6d:3d:7a:3a:4f:c5:f6:4b:61:30:7a:c0:37:
ff:2d:26:cf:42:2a:9c:82:a8:ab:ab:9d:53:9a:16:a4:ee:fd:
0b:84:7d:8c:31:8f:27:31:9a:59:a6:4f:f1:d5:b4:cb:e8:43:
c1:1b:f9:9e:91:b3:a7:1a:77:b9:c4:e4:9f:bb:12:42:cb:af:
5a:49:dd:6a:93:80:20:92:06:98:2e:f7:50:c8:82:f8:38:c0:
17:e0:72:6d:29:9c:07:c4:33:f5:04:8d:0e:8b:3d:ee:85:61:
ec:6b:9b:07:d8:fb:fd:aa:eb:e1:c3:93:b4:95:18:66:cf:1a:
34:96:d7:0a:8d:28:07:96:66:cd:00:25:e7:cb:72:4c:e4:7c:
04:dc:e2:e8:2d:1b:d4:ab:cf:53:1f:c4:3d:c0:88:54:df:0b:
95:e1:f6:51:38:30:17:67:b1:5d:71:a0:a3:f1:73:59:bf:9e:
b5:02:88:2d:28:fb:a7:b6:30:8e:05:7d:a4:ae:03:a7:f7:75:
ed:d3:af:fb:f3:84:e8:fd:51:32:11:07:47:a0:f1:61:25:68:
cf:7e:1d:19:4e:f1:2d:cb:9d:43:19:b2:db:05:18:5d:ee:cd:
d9:01:e9:00:91:01:f6:69:47:aa:aa:3d:43:ef:0a:74:ac:0a:
19:a7:14:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:26:45 2026 by rpki-client