Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
File: S2jh-6e0SntmYjayElPX1jYtDYM.mft (raw, json)
Hash identifier: pBxAik1mLHbmFcTMhenIWfDFCR066jZKJh4pjekMhOs=
Subject key identifier: 42:8C:7D:C3:32:C5:34:31:9D:4B:0C:75:40:75:38:69:30:F8:6A:1A
Authority key identifier: 4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
Certificate issuer: /CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Certificate serial: 019D28BBF8A319C950D189ED1AD71D5D4033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
Manifest number: 05CC
Signing time: Thu 26 Mar 2026 06:01:40 +0000
Manifest this update: Thu 26 Mar 2026 06:01:40 +0000
Manifest next update: Fri 27 Mar 2026 06:01:40 +0000
Files and hashes: 1: NuG7e-eaeYmgEKzW-gA4hm0E3yg.roa (hash: jBGdM1PIKUvp7PqxpDnR+tYU0/z5UBNUNem3R8n/8fI=)
2: S2jh-6e0SntmYjayElPX1jYtDYM.crl (hash: +jlIPnuFyK2y1FStNL0vfxLI0eMtxWbVW8uBMMvZTJ8=)
3: cYnE7FavrDSt3SrEYya63HS7_dI.roa (hash: KGEvNenXcCeg3TCO3nqemstjyExiwPsWFQTV1a5VNaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:f8:a3:19:c9:50:d1:89:ed:1a:d7:1d:5d:40:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Validity
Not Before: Mar 26 06:01:40 2026 GMT
Not After : Mar 27 06:01:40 2026 GMT
Subject: CN=428c7dc332c534319d4b0c754075386930f86a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f0:47:66:f0:5b:6f:09:0d:83:d4:53:ab:c4:
ec:5d:0d:4b:5c:e0:51:2e:02:74:d6:b8:cb:3d:f5:
cf:bf:45:2e:00:bd:ef:92:f3:a2:1a:02:6a:38:44:
a6:80:bd:ee:79:8a:a6:d5:79:28:7c:ce:a0:61:74:
06:7c:bf:35:84:19:7d:4e:5c:30:c4:e6:59:13:0c:
a9:fc:f4:12:fb:36:22:7a:3b:50:25:e8:90:b6:f4:
4c:6f:2f:ce:16:1e:ec:2a:e2:85:11:47:94:7c:ae:
eb:03:5e:7d:a0:e7:9e:fb:30:8d:a5:e4:9b:24:ce:
ee:7b:51:53:2f:d9:75:cc:d3:a4:55:d8:0c:42:a1:
a6:8d:10:57:fb:87:7b:20:cb:0b:c6:0c:87:32:08:
8f:d6:e8:48:a6:59:8f:1e:e0:40:1d:eb:62:31:3a:
d6:22:b7:6d:e9:70:86:33:29:93:d0:15:7d:35:e2:
a0:87:a1:7c:fc:b5:00:7d:17:d6:98:42:42:08:19:
ed:21:9d:30:69:15:bc:dc:46:45:7c:aa:c5:e6:e2:
85:8e:5b:83:77:cf:ba:1e:d7:21:06:57:e0:5c:f8:
df:8f:57:c7:61:ef:93:8c:9f:a3:17:13:1b:35:41:
a0:aa:3b:81:4a:24:60:37:36:0a:df:cf:3e:13:88:
b9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8C:7D:C3:32:C5:34:31:9D:4B:0C:75:40:75:38:69:30:F8:6A:1A
X509v3 Authority Key Identifier:
keyid:4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:2d:e5:a9:1e:45:0b:db:fa:d9:78:8a:0b:9a:9a:bd:d2:20:
4e:4c:b7:10:bc:12:c6:bd:a0:71:9e:f2:94:f1:92:0a:40:49:
1a:cf:49:84:4f:57:3d:e7:82:c4:ba:24:e5:7c:40:12:ee:89:
d5:02:8b:89:86:69:0a:5c:0c:e5:61:0c:6c:6a:8c:1e:62:af:
ac:a8:99:ee:be:2f:eb:e1:71:77:82:27:34:6a:cf:a1:56:e3:
53:30:5a:87:4d:04:42:be:5a:de:77:cb:53:0a:b4:20:2f:b0:
39:12:ef:f1:c5:58:14:d0:28:21:28:0e:78:0e:2e:78:c9:cd:
70:be:dc:9d:a2:bd:c8:c7:5e:dc:58:14:4a:64:9e:16:94:69:
5a:8a:54:78:f1:fc:ab:3e:60:00:67:da:fc:0d:13:0b:db:89:
ca:ba:6f:19:ff:4a:4a:04:44:53:72:9b:38:be:98:71:e0:d9:
7e:73:3f:2b:5c:c5:69:dc:d5:e4:f1:21:10:cf:4f:09:78:d5:
ef:87:a1:8d:a1:9f:5e:b7:7f:54:3e:4c:b0:94:87:ee:40:5f:
0d:2b:42:01:79:c8:12:9c:dd:05:52:f8:71:6e:4b:8f:49:2a:
43:0b:b3:20:3a:ed:3a:fa:67:a6:51:e8:e8:4c:4b:05:22:41:
cf:34:e3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:08 2026 by rpki-client