Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
File: S2jh-6e0SntmYjayElPX1jYtDYM.mft (raw, json)
Hash identifier: B3ZXILHLmSfGEmZ+mG3A2Q9w5RUUKaxj5X+tXOrTwfQ=
Subject key identifier: 12:E4:59:C6:7B:D3:4F:5C:43:02:9E:8C:A7:4E:96:76:C4:21:A6:E6
Authority key identifier: 4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
Certificate issuer: /CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Certificate serial: 01A08BD6066D70119F175F57191FC79A4165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
Manifest number: 078D
Signing time: Thu 10 Sep 2026 15:00:54 +0000
Manifest this update: Thu 10 Sep 2026 15:00:54 +0000
Manifest next update: Fri 11 Sep 2026 15:00:54 +0000
Files and hashes: 1: NuG7e-eaeYmgEKzW-gA4hm0E3yg.roa (hash: jBGdM1PIKUvp7PqxpDnR+tYU0/z5UBNUNem3R8n/8fI=)
2: S2jh-6e0SntmYjayElPX1jYtDYM.crl (hash: mj3NIsp9SDwCs0DKz01N8FZlDw2T1YC+ivBGbxm+hws=)
3: cYnE7FavrDSt3SrEYya63HS7_dI.roa (hash: KGEvNenXcCeg3TCO3nqemstjyExiwPsWFQTV1a5VNaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:06:6d:70:11:9f:17:5f:57:19:1f:c7:9a:41:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Validity
Not Before: Sep 10 15:00:54 2026 GMT
Not After : Sep 11 15:00:54 2026 GMT
Subject: CN=12e459c67bd34f5c43029e8ca74e9676c421a6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:6d:fd:3d:61:43:3b:dd:be:28:53:89:a7:
53:97:14:a9:ae:55:40:a4:a0:7d:81:df:4e:8f:b8:
f6:b3:e3:8f:e1:a9:04:0d:75:22:57:5d:49:f6:5b:
03:37:ba:71:bf:78:47:dc:b9:bb:33:5a:3b:22:16:
fa:52:31:57:e9:ca:3f:cc:69:cf:17:d5:d3:31:66:
74:ed:17:57:bc:e5:43:e8:a9:a1:1e:da:49:66:b7:
13:e6:ad:75:2b:74:c4:25:59:46:ec:ed:85:c4:b4:
6d:39:47:ad:3e:ca:a5:f0:f9:3b:2d:69:52:4a:ba:
98:72:fb:e9:bf:6e:8d:71:36:36:e5:d9:9c:0a:16:
56:95:86:72:9c:fa:bd:6d:87:c2:0a:28:95:d3:4b:
b5:e6:2a:8f:f1:50:76:d5:05:0a:fc:bf:8a:74:af:
cc:cb:13:eb:81:40:91:af:9f:f4:61:18:ed:0f:13:
0f:6b:d5:67:ae:93:a0:5e:92:07:11:15:b6:65:1b:
1d:70:a4:fa:60:45:5f:a4:a0:3f:a9:b3:5e:6c:74:
e8:8b:62:bf:13:64:8c:41:8a:bc:2e:c3:73:06:e0:
a9:21:0f:98:e1:6e:0f:a3:1a:8f:77:4b:d5:ce:3d:
20:37:ee:19:81:9b:de:da:8b:9a:67:e4:05:38:87:
05:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E4:59:C6:7B:D3:4F:5C:43:02:9E:8C:A7:4E:96:76:C4:21:A6:E6
X509v3 Authority Key Identifier:
keyid:4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:cd:3b:a6:80:10:72:c9:3c:06:fb:ff:a8:6a:e7:bb:9b:77:
f3:71:3f:39:3c:8b:10:8a:98:15:57:12:82:53:52:0a:32:ff:
4e:96:e0:b2:1c:77:c3:77:1d:9c:aa:4c:04:19:e0:c6:f8:ac:
c2:b2:40:f3:17:60:2d:6b:a8:1a:f8:07:66:67:b8:90:ad:ea:
00:9a:2d:d2:dc:69:20:34:e2:58:6b:16:e7:7f:e0:e2:76:41:
59:7b:73:f3:dd:7d:f7:bd:1a:35:27:5b:5d:56:64:7f:b4:8e:
ec:63:26:25:a4:91:eb:3d:da:c7:28:a0:bf:76:a2:5c:32:5f:
43:fa:a8:51:a7:90:9d:8f:29:44:77:77:85:91:1c:be:83:82:
fa:50:d2:79:00:44:c8:19:bd:5a:1d:d7:13:03:ea:d4:de:37:
54:e4:fe:0f:93:c6:e7:3e:e9:30:55:d6:a3:f6:60:d3:72:e5:
5f:2d:1a:f8:b7:e7:95:3d:05:1b:29:2b:89:be:2f:a5:e9:5c:
5b:75:48:52:80:f7:eb:26:7b:5c:13:f8:9a:b6:1d:dc:85:4a:
31:d2:e7:8c:b5:29:3d:8f:f4:e3:ed:3b:0f:ba:37:1e:c6:0d:
bd:b8:b0:b8:e2:1f:2b:ef:22:10:3f:4d:d5:a2:f9:7c:d3:dd:
7b:1f:b9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:08:10 2026 by rpki-client