Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
File: S2jh-6e0SntmYjayElPX1jYtDYM.mft (raw, json)
Hash identifier: P7S3Cget6OE4SsXLI2vV7jmGz94epiJDUfdiE9JeWXM=
Subject key identifier: 7D:31:C3:42:71:F3:58:AE:3A:30:C2:8E:40:3C:5A:17:9B:04:B5:65
Authority key identifier: 4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
Certificate issuer: /CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Certificate serial: 01A0D53935E2D3D267AE9A8C294D6D9E807A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
Manifest number: 07B3
Signing time: Thu 24 Sep 2026 21:01:31 +0000
Manifest this update: Thu 24 Sep 2026 21:01:31 +0000
Manifest next update: Fri 25 Sep 2026 21:01:31 +0000
Files and hashes: 1: NuG7e-eaeYmgEKzW-gA4hm0E3yg.roa (hash: jBGdM1PIKUvp7PqxpDnR+tYU0/z5UBNUNem3R8n/8fI=)
2: S2jh-6e0SntmYjayElPX1jYtDYM.crl (hash: qXHXBczqlPbXXj+OVkjJ5wDXJCbRUczVdLqMItDUha0=)
3: cYnE7FavrDSt3SrEYya63HS7_dI.roa (hash: KGEvNenXcCeg3TCO3nqemstjyExiwPsWFQTV1a5VNaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:35:e2:d3:d2:67:ae:9a:8c:29:4d:6d:9e:80:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Validity
Not Before: Sep 24 21:01:31 2026 GMT
Not After : Sep 25 21:01:31 2026 GMT
Subject: CN=7d31c34271f358ae3a30c28e403c5a179b04b565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d1:4d:77:38:5f:47:ea:87:b9:51:08:2e:de:
8f:0b:0c:e9:94:8b:e7:9a:88:d7:b8:61:51:81:37:
ef:2e:63:5e:7a:b1:b7:14:c8:39:b2:51:17:3c:28:
14:00:f3:72:de:fa:ad:d0:36:de:ab:e2:5c:2b:1e:
de:1c:12:c7:f1:ca:4a:86:14:dd:bd:5f:3f:f1:13:
04:54:cf:a8:19:54:ec:78:67:2a:9a:ea:fa:43:d5:
7c:89:6a:e1:d8:b9:c7:21:4b:65:28:e5:72:4b:e4:
85:7e:51:bc:33:63:1c:e1:3a:57:a6:95:36:4b:25:
06:12:39:96:64:ef:72:db:89:da:83:cd:f3:98:36:
62:ac:d6:87:5a:db:4b:30:03:d3:de:da:fa:0b:be:
ac:0e:3c:82:32:be:33:d1:39:bf:d5:13:6e:02:b1:
c5:42:ff:25:72:1f:a6:80:f4:13:c6:5f:0e:33:11:
af:05:a6:dc:61:b5:a2:14:51:b3:b2:da:da:1c:bc:
06:bb:e5:d8:1a:da:ff:d3:76:64:cf:58:3b:11:10:
3f:1c:73:3f:2a:b2:4d:5c:65:fb:e3:65:ab:5b:5c:
b8:22:c6:8c:ff:42:0e:82:d7:bd:95:ee:c7:30:c5:
7f:0b:2c:5e:4e:94:b0:57:86:8a:d5:38:ba:4e:a9:
40:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:31:C3:42:71:F3:58:AE:3A:30:C2:8E:40:3C:5A:17:9B:04:B5:65
X509v3 Authority Key Identifier:
keyid:4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6b:00:f2:34:f3:24:d6:d2:9e:47:6e:e6:f5:a9:9d:89:ec:
31:86:24:04:98:c6:f2:b1:95:66:b4:c8:91:0c:cc:21:50:a6:
a2:ec:71:fa:30:f6:0f:51:63:0a:9a:72:bf:c3:1c:e8:25:fe:
6b:1a:cb:54:21:d7:ae:8c:9c:29:99:56:dd:b1:31:c6:fe:09:
7a:d9:17:0f:59:bd:da:39:9c:08:8a:aa:28:48:a7:5f:14:f9:
e4:52:39:92:bb:17:82:41:2f:28:fd:b8:62:a4:da:d9:33:88:
05:3f:23:f6:ea:91:a1:23:19:84:3a:99:a2:dd:75:18:08:ef:
25:19:a1:a6:e7:1f:62:b0:04:11:e1:1d:a1:e2:a7:1c:26:0c:
72:9f:61:52:69:cb:5d:36:78:1f:1c:85:12:e3:fd:06:bd:05:
3d:7d:5b:49:46:69:22:42:39:ed:dd:61:e4:9b:9a:83:29:ca:
b1:0f:e5:d6:87:99:77:ff:b4:68:54:04:57:b4:d8:f0:e1:bd:
e5:e5:82:7b:98:2b:63:08:09:4b:77:d5:17:0e:a1:49:1d:47:
11:f4:23:c8:68:df:72:3a:03:3f:6a:f1:1f:2d:8c:60:91:e0:
d4:8a:27:c9:82:11:47:4d:5e:2b:bc:77:df:4a:b7:1c:69:c7:
0b:8f:07:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:30:38 2026 by rpki-client