Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
File: S2jh-6e0SntmYjayElPX1jYtDYM.mft (raw, json)
Hash identifier: 6OJ/MPk945ucS5oRgOlAPTLhv7lJI0uvaWZkfCRfkTg=
Subject key identifier: C9:7B:26:A5:08:58:9B:E3:5F:8E:12:2E:A2:02:80:F6:BF:7B:1B:9C
Authority key identifier: 4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
Certificate issuer: /CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Certificate serial: 019D382E874EB94F22F952C5825677574A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
Manifest number: 05D4
Signing time: Sun 29 Mar 2026 06:01:06 +0000
Manifest this update: Sun 29 Mar 2026 06:01:06 +0000
Manifest next update: Mon 30 Mar 2026 06:01:06 +0000
Files and hashes: 1: NuG7e-eaeYmgEKzW-gA4hm0E3yg.roa (hash: jBGdM1PIKUvp7PqxpDnR+tYU0/z5UBNUNem3R8n/8fI=)
2: S2jh-6e0SntmYjayElPX1jYtDYM.crl (hash: fVeC9XgbkUo2PgSfzvrPiWpHRrKDG1HQhrEpzQHGCmU=)
3: cYnE7FavrDSt3SrEYya63HS7_dI.roa (hash: KGEvNenXcCeg3TCO3nqemstjyExiwPsWFQTV1a5VNaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:87:4e:b9:4f:22:f9:52:c5:82:56:77:57:4a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Validity
Not Before: Mar 29 06:01:06 2026 GMT
Not After : Mar 30 06:01:06 2026 GMT
Subject: CN=c97b26a508589be35f8e122ea20280f6bf7b1b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:a3:97:e5:8c:84:52:a4:f2:86:bf:8a:51:
0e:f4:9e:f2:69:13:14:81:b0:22:b5:52:45:c2:98:
f2:f3:9c:5b:5b:1f:00:bd:6d:ef:d8:1b:3f:99:7c:
e8:de:85:2b:cc:c3:dc:84:a7:59:05:f0:1d:54:87:
d7:38:c6:46:b7:6a:b2:a4:53:3e:6d:1a:4f:b9:3b:
df:2d:1e:12:5c:d0:cc:ed:36:ac:af:d2:55:50:79:
08:0e:0b:b8:15:5d:14:83:a3:5c:55:f5:34:99:f1:
e4:e6:df:d1:eb:22:1d:8f:52:08:4d:25:98:a2:d1:
48:b4:b6:e5:84:46:95:97:bb:c7:ae:c2:61:ef:f4:
64:18:a4:b6:bf:de:e4:47:68:3b:b3:c7:d3:89:56:
87:39:cd:c2:bf:a8:81:bb:e0:ef:e0:63:7b:f3:d3:
0b:33:3f:0e:3c:d2:14:d6:4f:49:d3:d7:2c:a0:ff:
8a:8b:7a:89:f0:19:03:4b:22:97:67:46:56:26:1f:
45:68:1b:00:1b:f3:ba:91:d2:c7:64:9c:03:b3:39:
07:e5:27:e4:37:46:ab:c6:04:d6:86:3d:9e:86:e3:
06:26:ae:d7:91:99:77:c7:1c:75:b4:e3:79:16:af:
8f:d8:2d:2b:db:83:9f:b1:2c:ca:67:a4:b5:7a:c4:
36:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7B:26:A5:08:58:9B:E3:5F:8E:12:2E:A2:02:80:F6:BF:7B:1B:9C
X509v3 Authority Key Identifier:
keyid:4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:24:94:d1:1a:cf:cb:7a:81:73:70:e7:c4:fd:a8:24:68:e7:
13:73:d6:d7:e4:36:f9:49:48:f3:bf:75:68:47:29:02:83:ca:
eb:8e:02:95:31:fa:6a:78:10:12:9e:80:ab:66:11:1b:bc:56:
43:4b:ab:21:64:d6:b1:ce:b2:0e:df:52:36:f0:eb:4f:7b:6a:
93:af:99:33:57:b2:30:fd:99:83:f6:5b:e4:2f:94:44:31:11:
43:fe:ea:81:d9:b0:97:6d:16:4e:40:57:7a:d6:89:7f:2b:8f:
b8:9c:88:f3:b5:9e:7d:e6:9a:ec:38:94:ff:b3:4d:3e:6a:e6:
c1:75:89:c8:68:a2:d6:56:ae:b9:89:78:e1:57:09:52:a3:fa:
8f:77:5d:e3:c1:fc:5f:7d:92:92:b5:08:f1:35:56:09:41:c6:
78:62:28:5e:09:5a:58:13:0d:22:2c:87:68:51:8d:0d:a0:71:
a1:6a:ca:40:ae:7a:96:0c:02:0d:a9:c2:10:94:d1:06:05:22:
74:23:f6:21:87:6e:2a:79:6f:a3:ff:18:48:df:f2:08:cf:ad:
97:f3:33:87:ab:52:2e:6a:78:b5:b2:81:e4:48:91:92:1d:ea:
59:4b:27:a6:5e:c6:cc:7f:14:10:df:67:03:01:6e:00:95:4d:
90:d4:24:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:39 2026 by rpki-client