Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
File: S2jh-6e0SntmYjayElPX1jYtDYM.mft (raw, json)
Hash identifier: syI6w6qQeqQUv40+m71TohBdVckx+q0rcYsfdYFlsiA=
Subject key identifier: E7:9D:CA:77:08:B0:57:D2:77:CD:E9:16:F4:7C:15:9C:90:21:9C:F1
Authority key identifier: 4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
Certificate issuer: /CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Certificate serial: 01A08DC4796A6594F67DF5D9AFD106DA14BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
Manifest number: 078E
Signing time: Fri 11 Sep 2026 00:00:58 +0000
Manifest this update: Fri 11 Sep 2026 00:00:58 +0000
Manifest next update: Sat 12 Sep 2026 00:00:58 +0000
Files and hashes: 1: NuG7e-eaeYmgEKzW-gA4hm0E3yg.roa (hash: jBGdM1PIKUvp7PqxpDnR+tYU0/z5UBNUNem3R8n/8fI=)
2: S2jh-6e0SntmYjayElPX1jYtDYM.crl (hash: AviX9+/Kig0hkgnir8ZGDrdc7aqZcy3fA6WLAiF8hlE=)
3: cYnE7FavrDSt3SrEYya63HS7_dI.roa (hash: KGEvNenXcCeg3TCO3nqemstjyExiwPsWFQTV1a5VNaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:c4:79:6a:65:94:f6:7d:f5:d9:af:d1:06:da:14:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Validity
Not Before: Sep 11 00:00:58 2026 GMT
Not After : Sep 12 00:00:58 2026 GMT
Subject: CN=e79dca7708b057d277cde916f47c159c90219cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:53:3b:87:b5:83:b1:8c:8f:be:c3:c2:e2:19:
20:41:a3:d1:d8:08:27:ad:fd:99:3a:c6:27:02:31:
71:00:84:de:25:1a:32:e7:b9:4c:3c:20:3a:c5:33:
3b:57:2d:3a:2f:9f:d4:13:50:88:29:46:c6:5e:bd:
20:5f:37:36:06:83:3f:66:5b:99:92:a2:73:04:a6:
59:0e:1f:b1:3e:59:ec:97:9c:d0:18:75:ba:35:a2:
e1:ae:35:2c:8c:e7:cb:25:14:84:1a:bf:ae:7d:e1:
d1:48:61:b8:08:85:54:0d:05:9f:b5:a9:e4:c3:8b:
94:9e:d3:77:db:a9:4c:ae:fe:ee:c9:38:ec:46:5e:
de:47:d5:2f:c7:aa:ca:3d:ad:97:c5:c3:57:c3:9c:
b7:eb:00:03:7c:a4:be:5c:6b:6e:9f:7b:0d:e3:ce:
27:59:27:c0:13:8d:10:4e:85:65:f6:c4:8a:00:7b:
f0:bf:01:cf:c0:c6:12:b9:ab:e8:06:5f:02:a3:e7:
2a:29:de:b9:57:13:97:9a:b4:5f:a0:d1:a9:2e:b5:
6e:2f:8c:93:fe:cc:e1:a4:38:4f:d8:b8:d0:46:09:
8c:db:7c:e7:77:13:60:95:45:d2:bd:be:52:7c:61:
31:a7:1c:ab:7c:64:da:98:f8:80:c9:12:dc:40:e9:
b6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9D:CA:77:08:B0:57:D2:77:CD:E9:16:F4:7C:15:9C:90:21:9C:F1
X509v3 Authority Key Identifier:
keyid:4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ba:a7:74:a7:f0:c9:2a:d0:40:2b:a2:b5:64:e4:fb:eb:a0:
51:ce:71:88:87:db:b1:e7:3f:6c:bd:03:04:7c:ee:31:41:bb:
1a:ae:be:ad:e6:bb:23:6f:b3:4f:04:66:39:e1:06:56:15:2d:
18:ca:d1:a9:0f:85:7e:ab:66:fa:2b:44:df:37:a1:88:3f:66:
af:05:7f:e7:f7:bc:ee:79:7f:8b:c5:b8:24:d0:7c:0e:1f:5c:
ea:4f:b7:74:71:a9:12:f6:01:ff:3c:c3:c6:f0:85:3a:71:b6:
f9:83:8f:1b:a7:8e:fe:e8:8b:be:d5:69:aa:60:d1:10:44:db:
02:6e:86:b1:0c:a3:5b:ad:33:70:15:0a:df:4d:ed:9f:d3:df:
a3:05:2a:34:e1:fa:cb:de:f2:1d:da:b5:45:e0:92:42:d8:a5:
ef:69:c6:e9:28:ad:ff:b5:91:ad:8f:2e:c0:83:80:2c:5c:a0:
c3:ca:74:ef:64:51:ae:b3:09:a2:77:ae:16:48:11:86:01:81:
2c:5b:09:14:39:79:94:9a:7b:ef:70:6b:bc:d6:b3:e8:03:33:
98:a2:04:f9:f7:3c:a8:b3:0b:62:5d:5b:38:a1:92:eb:e9:b3:
a0:6e:0d:ec:ae:03:47:95:37:4e:c9:b4:7b:cc:ec:07:60:f9:
a5:79:64:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:32:38 2026 by rpki-client