Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
File: S2jh-6e0SntmYjayElPX1jYtDYM.mft (raw, json)
Hash identifier: nuSI5r1PAfB4pwh32z47zMund5FvnFJDEZgXonic1+M=
Subject key identifier: A2:7F:D7:03:BA:2D:2E:8B:EF:78:44:21:96:FE:17:86:E6:E5:18:A2
Authority key identifier: 4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
Certificate issuer: /CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Certificate serial: 01A17D3C71C23F3A7BD4658CF195732F27D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
Manifest number: 080A
Signing time: Tue 27 Oct 2026 12:01:15 +0000
Manifest this update: Tue 27 Oct 2026 12:01:15 +0000
Manifest next update: Wed 28 Oct 2026 12:01:15 +0000
Files and hashes: 1: NuG7e-eaeYmgEKzW-gA4hm0E3yg.roa (hash: jBGdM1PIKUvp7PqxpDnR+tYU0/z5UBNUNem3R8n/8fI=)
2: S2jh-6e0SntmYjayElPX1jYtDYM.crl (hash: ewByUa5kzAq3wLBep5lZqUw6RLFuqMH99d4MndBjp+Y=)
3: cYnE7FavrDSt3SrEYya63HS7_dI.roa (hash: KGEvNenXcCeg3TCO3nqemstjyExiwPsWFQTV1a5VNaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:71:c2:3f:3a:7b:d4:65:8c:f1:95:73:2f:27:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Validity
Not Before: Oct 27 12:01:15 2026 GMT
Not After : Oct 28 12:01:15 2026 GMT
Subject: CN=a27fd703ba2d2e8bef78442196fe1786e6e518a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:a9:13:92:8e:08:d7:32:ca:55:bc:ba:3b:54:
8b:a9:c9:0a:b6:34:7e:1b:21:c8:19:fa:81:b2:89:
69:04:a2:7a:56:06:0b:fa:fd:08:c4:ae:27:90:56:
5c:39:8e:c1:be:90:70:5c:82:ee:5b:12:42:60:20:
4d:d8:ae:98:f8:4c:c9:00:63:6e:3a:f7:cf:34:12:
7d:59:6a:cd:5c:3f:4e:f4:e8:3b:6c:30:f5:59:52:
60:ec:40:1b:4f:78:ff:42:b3:88:8f:bb:89:4f:5b:
d4:e7:88:53:37:0d:31:ec:b1:be:0e:89:c5:24:25:
2f:ce:ca:74:25:4a:6d:9f:ea:b3:bc:dc:79:d8:8d:
69:f0:65:39:68:dd:21:ea:b0:39:d6:fe:13:9b:6e:
7a:c9:eb:8e:46:17:27:26:d7:8f:fb:fe:95:27:f4:
d6:a3:f6:f1:9b:62:8d:8b:83:ec:3c:4b:f3:61:d2:
90:70:f3:58:bf:e8:2b:bc:b2:56:55:ac:2f:7c:52:
61:3f:27:36:8c:62:99:c2:a6:10:e2:1f:7b:b2:36:
fa:1b:07:05:23:a0:d1:82:66:2e:52:b1:f7:78:d1:
86:c3:4f:90:53:a9:29:49:91:70:9d:c0:89:76:33:
c3:a3:e5:23:2e:b9:a9:20:43:07:47:ef:24:d4:54:
1e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7F:D7:03:BA:2D:2E:8B:EF:78:44:21:96:FE:17:86:E6:E5:18:A2
X509v3 Authority Key Identifier:
keyid:4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d1:8b:16:0c:d6:fe:fe:f7:6f:b5:ce:82:39:05:ac:07:7f:
90:a4:c9:a2:51:57:6e:f2:32:50:27:6b:d3:34:f8:08:1e:49:
be:c6:aa:4b:0b:0f:be:5c:07:d6:33:2b:7f:4d:85:7a:1c:a9:
32:87:5e:37:3e:c6:c1:6b:4d:cd:dc:20:bb:58:e6:a1:4f:f9:
56:19:f5:34:9b:ea:ce:41:dd:f6:09:e5:70:c0:3f:c1:99:41:
a7:9a:0f:5c:be:a9:09:0c:ff:4d:92:de:eb:f9:c7:39:5b:bb:
bd:1e:71:e9:25:95:34:d5:69:1e:32:af:3d:37:5a:30:26:44:
35:0d:8b:e8:0c:7d:58:c4:46:3a:95:a0:fc:31:fd:7c:e4:f9:
82:8c:9e:3d:f3:cf:83:9e:4a:a2:c7:96:22:14:e9:7b:cc:9e:
58:da:d9:69:c7:b0:32:61:3f:7c:b5:77:fb:f6:d5:11:b4:8d:
a5:7f:e3:81:8a:97:c8:32:b7:fa:90:01:54:79:f8:54:9e:96:
de:f0:24:5c:a5:5f:b9:37:ca:0e:ff:5b:6b:34:b8:51:56:2b:
f0:49:41:0c:5b:3f:a3:11:b4:f3:16:ce:df:58:23:5f:30:24:
4f:66:f7:7a:00:bd:af:35:b8:b1:1c:f4:0b:11:6a:8f:78:59:
b1:44:a4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:52:05 2026 by rpki-client