Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
File: S2jh-6e0SntmYjayElPX1jYtDYM.mft (raw, json)
Hash identifier: wQ5/iiinL9C/Kz92niKQHQePKaE7MptiMos7G8iGNo0=
Subject key identifier: 67:E5:D8:EC:E1:90:4C:64:70:63:9C:4E:B1:13:38:53:91:1C:BF:33
Authority key identifier: 4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
Certificate issuer: /CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Certificate serial: 019FA03ABA6C2A4B6175B9EDFF1E86F26D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
Manifest number: 0713
Signing time: Sun 26 Jul 2026 21:00:31 +0000
Manifest this update: Sun 26 Jul 2026 21:00:31 +0000
Manifest next update: Mon 27 Jul 2026 21:00:31 +0000
Files and hashes: 1: NuG7e-eaeYmgEKzW-gA4hm0E3yg.roa (hash: jBGdM1PIKUvp7PqxpDnR+tYU0/z5UBNUNem3R8n/8fI=)
2: S2jh-6e0SntmYjayElPX1jYtDYM.crl (hash: Pq90BelF/LV4jrGA5FQzkXzVHAzjBZwSKT0tGL1cJ8Y=)
3: cYnE7FavrDSt3SrEYya63HS7_dI.roa (hash: KGEvNenXcCeg3TCO3nqemstjyExiwPsWFQTV1a5VNaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3a:ba:6c:2a:4b:61:75:b9:ed:ff:1e:86:f2:6d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Validity
Not Before: Jul 26 21:00:31 2026 GMT
Not After : Jul 27 21:00:31 2026 GMT
Subject: CN=67e5d8ece1904c6470639c4eb1133853911cbf33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b6:03:fc:cc:0e:ad:14:ec:0a:97:8d:4a:d2:
b7:79:33:11:6d:19:e2:05:1c:2a:66:66:7c:a8:b2:
87:32:ac:db:96:b7:09:7d:8a:7f:05:f0:d7:ec:4f:
1f:6b:b3:d3:46:7e:1c:1c:e5:0f:9b:ca:bf:69:01:
6f:b2:ae:fb:f0:ce:49:20:a9:7c:90:8c:ad:a9:e6:
30:0d:92:b3:1a:20:56:ce:ad:76:9a:c6:db:5b:db:
28:73:7e:3d:70:c2:a6:4d:12:ee:45:c0:28:0d:3c:
69:87:2d:0a:c7:db:a1:ef:e4:fb:77:72:70:98:1b:
68:e8:1c:b7:e8:25:d9:67:fd:67:35:e8:b4:79:c1:
3e:c3:f9:a5:67:24:42:69:da:3c:3a:cc:27:ce:8f:
c4:a7:94:f2:3d:d7:7c:64:ca:62:fe:a7:f5:0c:6a:
e1:da:d0:a1:d8:2c:52:fe:9e:e6:61:9a:9a:95:cc:
80:13:cf:0b:9a:dc:7e:a0:d7:c0:93:68:a8:6f:2d:
c3:be:6c:11:6a:d0:9c:14:38:1d:04:5f:1a:15:07:
eb:0b:c3:7f:66:16:1d:37:60:01:9d:f2:73:3c:27:
ce:6f:c9:bc:a7:b6:7b:40:42:f3:8e:e2:ff:37:16:
c6:ec:78:b6:08:e6:b3:b2:53:9e:5f:58:24:0d:e8:
a6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E5:D8:EC:E1:90:4C:64:70:63:9C:4E:B1:13:38:53:91:1C:BF:33
X509v3 Authority Key Identifier:
keyid:4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e1:c5:af:94:a5:1f:be:4c:92:0b:8a:ac:f6:8b:22:28:40:
f0:b3:d2:5e:bb:76:0f:f6:00:44:34:0e:a6:33:6b:d4:ea:2e:
ec:d7:aa:0f:25:cf:c3:53:ce:f0:f7:0f:76:98:17:e1:af:c1:
cc:4f:db:18:0c:59:d2:36:bd:54:f4:a1:92:dd:e4:7f:0d:b0:
db:7b:6c:16:07:90:b1:f9:c3:e0:58:df:a6:14:c3:db:25:52:
fe:9a:14:16:48:df:b6:8d:f4:8a:14:97:3c:62:d7:d7:97:34:
82:46:d2:95:d6:d7:f7:f0:39:2b:1a:2e:80:cf:01:c1:5d:1c:
88:97:e8:4d:8e:0d:69:ca:9f:10:8b:b5:77:af:78:b0:ec:89:
70:38:30:d9:06:d8:96:8a:70:87:47:f8:bd:54:30:42:5e:ae:
bb:82:e5:46:58:4a:b6:fd:cb:7e:ae:6a:b1:4e:72:51:4f:83:
d5:d0:b4:23:91:ef:df:dc:70:e8:e0:81:8d:0a:3e:a6:f8:7d:
fc:47:29:70:d8:ef:3a:cc:ab:c8:03:cd:1d:b8:7e:c3:2f:b4:
e9:e9:13:f3:69:f5:11:4a:7b:3e:7f:6c:08:4c:fd:d9:42:da:
94:d3:a0:5a:30:0d:fe:04:14:c6:ce:9a:36:3c:8e:02:f3:ab:
36:9d:2e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:58:06 2026 by rpki-client