Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
File: nS2GwCi_w46HVFXPgmiaNiZTAsI.mft (raw, json)
Hash identifier: 6eW79pEZTbeOdJVetzq7fMldQd6KzgVGNY47G7d4WyU=
Subject key identifier: 95:D0:FA:5B:85:2B:5F:90:8A:B6:D6:F5:1F:99:EE:5D:3C:80:0B:AB
Authority key identifier: 9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2
Certificate issuer: /CN=9d2d86c028bfc38e875455cf82689a36265302c2
Certificate serial: 019D3752AFF90554C7A6975785D431B60470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 02:00:59 +0000
Manifest this update: Sun 29 Mar 2026 02:00:59 +0000
Manifest next update: Mon 30 Mar 2026 02:00:59 +0000
Files and hashes: 1: Y4yIp4TOXR8P9we0PVCp5mPF1Wg.roa (hash: OC/VjislJpL/akKc6zsS3UsisTDD8FgDqZwMfSBlbaM=)
2: nS2GwCi_w46HVFXPgmiaNiZTAsI.crl (hash: 0rrzRDM+sVxgBKdP9st1UQE+HV7tnCkmSnOoVAtux5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:af:f9:05:54:c7:a6:97:57:85:d4:31:b6:04:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2d86c028bfc38e875455cf82689a36265302c2
Validity
Not Before: Mar 29 02:00:59 2026 GMT
Not After : Mar 30 02:00:59 2026 GMT
Subject: CN=95d0fa5b852b5f908ab6d6f51f99ee5d3c800bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a4:44:5d:3d:b0:39:d6:dd:46:e6:6a:7e:b4:
8d:ac:9d:35:9b:f2:bd:23:42:72:e4:ea:ac:0e:d1:
32:db:e7:82:88:03:37:40:11:07:39:8b:48:5d:e9:
a0:07:82:03:d6:d0:4c:41:e8:13:55:20:39:e5:15:
e9:09:fc:3f:40:d6:39:57:f6:d8:0c:20:e3:7f:50:
de:d1:3b:7a:10:fd:3f:de:90:a1:e9:f2:bd:6d:d7:
0a:ae:02:db:47:0d:f9:e5:98:4f:03:7b:1b:29:9c:
dd:fe:52:d7:74:b4:1f:d1:d1:4e:4b:fb:4b:d3:66:
7e:8e:cf:f3:e2:b8:2a:8e:5b:4c:42:10:4b:37:33:
58:91:1d:7d:ce:02:92:31:6c:9f:fd:86:50:8c:c9:
00:f4:88:f0:83:52:34:a4:45:e5:49:99:a4:04:60:
bf:b3:13:a8:66:d6:2d:3f:59:f4:1a:36:35:77:8e:
da:9b:83:1c:44:1a:2b:71:d4:88:27:07:da:8a:c0:
db:9a:99:af:e4:f7:59:1c:85:c7:85:75:54:ce:c0:
8f:b5:48:4f:0b:27:24:c3:25:0c:b3:6a:16:d4:fd:
1c:c0:b5:87:5a:b9:d0:af:89:5d:fc:dd:3b:67:dc:
25:44:07:85:08:05:cd:85:fb:ba:31:0e:c9:57:1c:
e3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D0:FA:5B:85:2B:5F:90:8A:B6:D6:F5:1F:99:EE:5D:3C:80:0B:AB
X509v3 Authority Key Identifier:
keyid:9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:48:67:6e:f1:a6:3f:b0:53:f3:be:68:37:c0:89:ff:87:60:
4f:b4:26:b0:34:d9:36:c2:db:e2:9a:29:a0:7c:d4:49:2d:b2:
8f:80:2b:2d:60:e3:3a:5b:74:94:af:5a:c0:fc:75:3e:e2:c5:
31:e3:01:76:13:ba:68:5f:36:10:68:1b:87:20:80:68:5e:ca:
65:ae:2a:62:ba:9e:cf:a7:5e:f0:3f:41:5e:bb:ce:49:49:91:
28:27:20:b1:14:76:10:00:c9:c9:58:0d:a6:24:22:fe:94:94:
70:11:59:33:9b:82:26:34:f4:e4:88:f1:7d:87:48:c1:08:06:
47:65:f2:72:7a:5f:1e:05:e4:44:1a:05:08:38:06:e9:77:34:
18:c5:e6:30:ca:44:e5:2f:5e:83:0d:b0:09:e7:b6:ec:41:e8:
90:92:21:08:ff:34:34:60:e8:50:55:29:53:89:14:53:23:44:
1f:c8:6b:82:ac:f5:47:55:17:30:e0:97:11:d9:f5:95:ba:87:
34:2b:dd:e7:67:c9:6d:97:8f:eb:66:02:26:ca:b5:96:c5:9f:
0c:db:12:56:91:eb:c8:eb:7b:ad:ec:90:ff:bf:ce:76:0f:1c:
74:31:37:b3:ce:bc:fb:81:10:15:d2:84:63:2b:c2:9b:08:1d:
c5:4c:e6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:48 2026 by rpki-client