Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
File: S2jh-6e0SntmYjayElPX1jYtDYM.mft (raw, json)
Hash identifier: oWNnuHoLLwkpagpefBiSUL7Vuo2jyp8SIm0h76Hec40=
Subject key identifier: 2F:2D:8E:99:09:D8:41:0F:42:A9:8F:62:43:C4:2A:28:82:AD:E7:4D
Authority key identifier: 4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
Certificate issuer: /CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Certificate serial: 019EB87CC0C60E575285B9232639022092A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
Manifest number: 069B
Signing time: Thu 11 Jun 2026 21:00:44 +0000
Manifest this update: Thu 11 Jun 2026 21:00:44 +0000
Manifest next update: Fri 12 Jun 2026 21:00:44 +0000
Files and hashes: 1: NuG7e-eaeYmgEKzW-gA4hm0E3yg.roa (hash: jBGdM1PIKUvp7PqxpDnR+tYU0/z5UBNUNem3R8n/8fI=)
2: S2jh-6e0SntmYjayElPX1jYtDYM.crl (hash: Y1PhYByO5sCMyVSyXjNqtsNR4SYPQXBeGaiU8Hzz30U=)
3: cYnE7FavrDSt3SrEYya63HS7_dI.roa (hash: KGEvNenXcCeg3TCO3nqemstjyExiwPsWFQTV1a5VNaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:c0:c6:0e:57:52:85:b9:23:26:39:02:20:92:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Validity
Not Before: Jun 11 21:00:44 2026 GMT
Not After : Jun 12 21:00:44 2026 GMT
Subject: CN=2f2d8e9909d8410f42a98f6243c42a2882ade74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:62:6d:ab:e7:78:d2:82:ac:6b:c8:84:e0:da:
73:b5:27:d4:59:c1:63:ae:3f:4a:4d:7b:83:30:3c:
63:82:90:65:ea:63:c7:30:a3:2b:fe:0e:87:45:6b:
93:2e:a6:c4:97:2b:00:ca:f5:ef:2e:f8:e0:2f:ef:
c1:c6:13:00:72:69:19:2a:49:f2:bc:e6:37:63:f8:
e9:a6:65:7c:d2:2b:c9:3f:08:82:b5:f0:97:2b:e9:
cf:60:05:3a:de:37:fc:2a:0d:c4:d0:51:2e:e1:a2:
4f:54:52:52:77:09:03:da:b4:60:2c:db:8e:33:99:
08:10:dc:59:f5:18:c4:c3:64:ca:5d:12:00:c7:59:
bb:6c:5b:43:0b:1f:23:39:a2:b9:d2:86:45:6f:2f:
38:e5:00:93:3a:dc:2b:08:d9:9e:9d:8e:93:71:6e:
52:f6:82:21:31:94:b9:bf:5a:98:c5:62:e6:41:fe:
ea:30:5c:34:9c:9e:0d:68:0c:da:80:13:a5:ac:74:
fb:7a:4d:07:b2:27:87:16:8e:bf:fb:5f:d3:bc:c5:
87:4c:d5:d9:74:4c:5d:56:8d:d5:10:22:2e:61:f4:
4c:e8:26:30:67:9c:fe:72:e4:c8:ab:96:10:23:00:
fa:01:78:db:b7:3a:0f:be:fd:2d:a2:aa:7f:e6:a1:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2D:8E:99:09:D8:41:0F:42:A9:8F:62:43:C4:2A:28:82:AD:E7:4D
X509v3 Authority Key Identifier:
keyid:4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:df:ce:05:e0:bc:97:89:7d:69:e6:8e:4c:46:b6:5b:48:09:
b0:20:8f:d7:ac:06:4b:dc:ff:c4:e0:62:b6:ee:6d:8f:1a:9a:
1b:5e:95:b9:a1:54:b8:74:83:aa:7b:89:87:12:97:e2:c6:77:
94:ef:29:98:63:36:b1:9f:1d:74:44:2c:7d:fa:46:51:4f:a8:
6e:33:f7:57:20:e0:10:e3:d0:cd:0b:bf:f8:20:0d:c6:88:5a:
b9:cf:a0:fe:1e:74:6e:30:26:8a:a1:99:4c:01:95:e8:74:60:
63:a6:02:20:97:3d:33:7a:71:b0:a1:8b:45:0d:1e:2e:6a:59:
bf:65:af:d9:f0:6b:75:48:43:a7:91:ca:a3:82:63:44:4f:b0:
4f:50:d6:46:fe:26:7c:c2:d6:e1:1e:c3:cf:7b:d9:ae:4f:1c:
20:d8:a5:22:79:8a:ec:3a:c7:97:1b:2b:c9:7d:1f:41:ab:42:
b4:72:ac:b3:dc:db:60:b6:a3:36:92:a5:e8:33:28:3c:0d:8e:
03:6f:b4:90:13:36:a9:01:04:1a:28:96:97:dc:d7:b7:c5:54:
97:ca:4c:67:89:17:21:bc:55:42:a7:a5:f9:e1:08:e4:80:78:
ac:9b:7a:7d:d0:ee:e2:a2:3b:21:c2:65:09:27:8a:a0:8d:87:
6d:08:17:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64fMDGDldShbkjJjkCIJKnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNjhlMWZiYTdiNDRhN2I2NjYyMzZiMjEyNTNkN2Q2MzYy
ZDBkODMwHhcNMjYwNjExMjEwMDQ0WhcNMjYwNjEyMjEwMDQ0WjAzMTEwLwYDVQQD
EygyZjJkOGU5OTA5ZDg0MTBmNDJhOThmNjI0M2M0MmEyODgyYWRlNzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2Jtq+d40oKsa8iE4NpztSfUWcFj
rj9KTXuDMDxjgpBl6mPHMKMr/g6HRWuTLqbElysAyvXvLvjgL+/BxhMAcmkZKkny
vOY3Y/jppmV80ivJPwiCtfCXK+nPYAU63jf8Kg3E0FEu4aJPVFJSdwkD2rRgLNuO
M5kIENxZ9RjEw2TKXRIAx1m7bFtDCx8jOaK50oZFby845QCTOtwrCNmenY6TcW5S
9oIhMZS5v1qYxWLmQf7qMFw0nJ4NaAzagBOlrHT7ek0HsieHFo6/+1/TvMWHTNXZ
dExdVo3VECIuYfRM6CYwZ5z+cuTIq5YQIwD6AXjbtzoPvv0toqp/5qE2kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8tjpkJ2EEPQqmPYkPEKiiCredNMB8GA1UdIwQY
MBaAFEto4funtEp7ZmI2shJT19Y2LQ2DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzJqaC02ZTBTbnRtWWpheUVsUFgxall0RFlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mMTQwNzktNDExNC00YmVjLTg3OWMt
OGIwNmVjNTY0YTFiLzEvUzJqaC02ZTBTbnRtWWpheUVsUFgxall0RFlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9mMTQwNzktNDExNC00YmVjLTg3OWMtOGIwNmVjNTY0YTFi
LzEvUzJqaC02ZTBTbnRtWWpheUVsUFgxall0RFlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9/OBeC8
l4l9aeaOTEa2W0gJsCCP16wGS9z/xOBitu5tjxqaG16VuaFUuHSDqnuJhxKX4sZ3
lO8pmGM2sZ8ddEQsffpGUU+objP3VyDgEOPQzQu/+CANxohauc+g/h50bjAmiqGZ
TAGV6HRgY6YCIJc9M3pxsKGLRQ0eLmpZv2Wv2fBrdUhDp5HKo4JjRE+wT1DWRv4m
fMLW4R7Dz3vZrk8cINilInmK7DrHlxsryX0fQatCtHKss9zbYLajNpKl6DMoPA2O
A2+0kBM2qQEEGiiWl9zXt8VUl8pMZ4kXIbxVQqel+eEI5IB4rJt6fdDu4qI7IcJl
CSeKoI2HbQgXzg==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:56:03 2026 by rpki-client