Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
File: S2jh-6e0SntmYjayElPX1jYtDYM.mft (raw, json)
Hash identifier: oDSQW9DeE9Aiw0hpZtWRvrrEz2A+HntQTyxIH+r9Zb0=
Subject key identifier: 9A:84:05:25:5D:6C:50:D0:BA:6D:98:5D:38:C7:F8:DB:0C:4A:A8:FF
Authority key identifier: 4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
Certificate issuer: /CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Certificate serial: 019FABD11017C8E796A4FBBD9AF94C759FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
Manifest number: 0719
Signing time: Wed 29 Jul 2026 03:00:32 +0000
Manifest this update: Wed 29 Jul 2026 03:00:32 +0000
Manifest next update: Thu 30 Jul 2026 03:00:32 +0000
Files and hashes: 1: NuG7e-eaeYmgEKzW-gA4hm0E3yg.roa (hash: jBGdM1PIKUvp7PqxpDnR+tYU0/z5UBNUNem3R8n/8fI=)
2: S2jh-6e0SntmYjayElPX1jYtDYM.crl (hash: QYG6H73AX8McvXhclKUCSVuoabjlO6u1/fk7HX+XYu0=)
3: cYnE7FavrDSt3SrEYya63HS7_dI.roa (hash: KGEvNenXcCeg3TCO3nqemstjyExiwPsWFQTV1a5VNaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:10:17:c8:e7:96:a4:fb:bd:9a:f9:4c:75:9f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Validity
Not Before: Jul 29 03:00:32 2026 GMT
Not After : Jul 30 03:00:32 2026 GMT
Subject: CN=9a8405255d6c50d0ba6d985d38c7f8db0c4aa8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:99:ae:0b:c6:b4:ae:ac:70:7f:62:55:5a:1e:
89:c7:2f:45:83:9d:47:1e:75:75:36:03:42:8b:9e:
7a:bf:4b:78:00:28:89:9c:be:1f:91:9f:9d:95:83:
1b:09:30:45:77:f9:76:fa:4f:ab:3c:51:c8:e2:c5:
26:ff:fc:de:43:02:ab:8f:88:7a:41:2a:9e:3d:8d:
58:d0:95:7c:33:ea:60:5e:9e:3d:c6:fc:79:79:04:
ba:09:f5:d7:f5:58:40:a6:d1:94:12:d3:57:8a:4d:
7f:2a:ae:8f:49:28:05:31:e4:8b:a0:4a:2e:e2:ed:
9a:c1:5f:a6:f9:58:f2:a5:a4:41:8d:e9:ef:4d:ec:
ec:c3:62:e0:80:da:a2:de:20:49:05:69:ce:7b:fb:
a9:31:01:17:4e:14:66:7d:5f:81:3d:e0:31:26:db:
2c:bf:d9:21:91:00:d7:77:2f:41:e6:6a:e8:eb:9d:
15:a6:43:97:8d:4a:5b:bc:92:73:ba:0b:25:c8:74:
f8:6f:de:90:d6:d2:36:e9:1b:2f:d6:35:e9:db:dc:
cc:94:ca:32:a3:50:b5:49:31:cc:49:76:67:d6:6e:
94:7a:95:97:90:f7:73:c2:a7:9e:2e:82:fc:70:46:
5d:ca:b3:eb:bd:74:34:b9:f8:fd:8a:4a:16:a7:c1:
9a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:84:05:25:5D:6C:50:D0:BA:6D:98:5D:38:C7:F8:DB:0C:4A:A8:FF
X509v3 Authority Key Identifier:
keyid:4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2e:15:5c:0b:92:03:8c:e7:c2:de:28:76:b3:6f:a6:3a:b7:
4b:95:2c:37:79:bf:6a:0f:ba:26:ed:e8:22:9a:2c:d5:3f:22:
d0:b6:22:ad:70:d6:00:b5:f1:3f:4e:8e:d7:d7:55:02:db:ef:
75:19:1d:71:d3:1c:50:dd:f2:8e:fc:14:26:77:b3:07:09:8d:
09:92:1c:2f:67:cb:6e:f9:d9:28:6a:26:cb:32:63:08:12:b4:
73:9b:e5:28:31:a4:cc:10:f6:02:4a:f0:00:31:d4:40:e6:b4:
c8:b7:06:42:9c:db:2f:5e:37:97:93:7d:d3:eb:39:da:38:85:
03:09:26:6d:68:18:d2:f7:60:d7:69:fb:dc:06:78:e6:20:90:
c4:6c:00:aa:d4:9a:86:68:e6:05:1e:65:d7:85:96:ec:d6:7d:
18:44:35:ad:f6:51:23:e7:57:6c:b0:22:5d:8c:42:12:86:b1:
87:c7:5c:a6:d7:96:34:45:f5:fd:80:0b:07:39:2e:06:4a:6c:
a4:d5:2e:76:9e:3d:e5:e8:8e:11:01:e0:03:f0:ec:f6:e7:25:
5e:72:7e:67:52:30:ad:41:40:32:21:45:3f:ea:f1:18:05:fe:
11:c3:3d:38:95:54:1e:a7:6b:ca:29:04:07:15:2b:47:29:08:
53:e7:f1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:27:17 2026 by rpki-client