Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
File: nS2GwCi_w46HVFXPgmiaNiZTAsI.mft (raw, json)
Hash identifier: WKsk3Gkv7mnC9eFRWlgoLeXoNniV132CYkEL2h0Bcmg=
Subject key identifier: B0:83:20:73:02:18:5E:28:C6:ED:E0:30:33:F4:D3:B6:1C:A2:A5:FB
Authority key identifier: 9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2
Certificate issuer: /CN=9d2d86c028bfc38e875455cf82689a36265302c2
Certificate serial: 019D27DFEF92EDE606B94270068A7677924F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:01:20 +0000
Manifest this update: Thu 26 Mar 2026 02:01:20 +0000
Manifest next update: Fri 27 Mar 2026 02:01:20 +0000
Files and hashes: 1: Y4yIp4TOXR8P9we0PVCp5mPF1Wg.roa (hash: OC/VjislJpL/akKc6zsS3UsisTDD8FgDqZwMfSBlbaM=)
2: nS2GwCi_w46HVFXPgmiaNiZTAsI.crl (hash: Z+rovXdcL0POugnMxW/in4J7v3dMLPHPEptPAKT30yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ef:92:ed:e6:06:b9:42:70:06:8a:76:77:92:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2d86c028bfc38e875455cf82689a36265302c2
Validity
Not Before: Mar 26 02:01:20 2026 GMT
Not After : Mar 27 02:01:20 2026 GMT
Subject: CN=b083207302185e28c6ede03033f4d3b61ca2a5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:1f:03:08:e2:06:27:29:cd:8a:2b:04:aa:ad:
76:25:97:5b:ca:c6:03:4b:58:0d:22:81:6b:aa:df:
97:ee:71:6d:ce:54:31:87:05:52:1b:7f:a4:74:8f:
c5:f9:80:31:9e:38:a8:ab:90:ef:ff:6f:b7:6a:90:
26:08:bb:e8:bc:d9:28:93:11:f4:30:ef:2e:67:82:
f1:42:d3:35:34:31:8e:87:9a:cf:f0:ab:0d:e6:73:
a3:9a:94:ad:91:d3:3a:48:84:b9:c2:4b:fa:2d:9f:
e4:17:87:e8:95:73:e0:98:e2:fe:a2:7c:72:d9:7a:
e0:ea:30:04:dd:63:50:c2:ec:16:c2:8a:3b:25:8f:
0c:6c:d9:13:94:d3:9e:64:99:09:bb:1b:09:c8:47:
eb:01:c4:da:e4:cd:5b:23:b2:5d:dc:3d:ca:75:17:
be:57:4f:b5:b9:0f:ac:4c:d7:35:45:4f:47:3f:a2:
ab:71:db:63:d7:1f:b6:6f:e0:60:4d:a9:bc:7d:5a:
42:b5:bb:f0:9b:e3:50:f2:82:d8:08:96:fb:b6:b6:
35:7c:77:b3:fe:25:75:ac:06:b0:e8:1f:2b:0a:2e:
b7:ce:97:e1:8a:64:98:1a:01:5b:c4:31:a6:eb:77:
7b:0b:bb:4f:0a:b2:1f:eb:33:9d:64:b5:fc:0e:d1:
f2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:83:20:73:02:18:5E:28:C6:ED:E0:30:33:F4:D3:B6:1C:A2:A5:FB
X509v3 Authority Key Identifier:
keyid:9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ab:32:c7:c5:54:14:b1:d7:90:3b:e4:58:76:59:83:61:33:
8c:eb:d0:21:82:6e:57:9b:5c:54:f3:ae:ce:12:d0:6f:35:a5:
f9:22:86:9a:b5:ef:f9:21:65:99:06:b4:93:7b:00:6b:a4:76:
ea:cd:91:bc:02:c6:6f:d1:60:14:2e:ce:5b:52:df:e2:9d:b8:
37:75:be:6d:ec:41:a8:93:f0:9a:07:9c:45:aa:08:1c:c1:c8:
48:2a:63:2f:12:d3:98:af:fb:cc:28:46:a4:22:82:29:35:a0:
ec:57:3b:09:d1:55:14:1c:e4:fc:ec:e0:38:45:e1:1b:78:a6:
bb:5f:ab:54:29:24:03:a3:77:fe:28:58:a4:41:5d:a7:8e:10:
38:18:22:97:cf:68:fc:a8:07:a9:24:8f:29:2e:a3:b4:9f:a3:
bd:8a:7d:f9:2c:39:2d:95:b5:4a:99:79:0b:61:3a:48:28:c0:
b7:0d:d3:41:b4:0a:bb:ea:50:d2:51:a2:2a:11:4e:20:0c:27:
d3:8c:72:a0:ef:b2:19:0f:f2:d5:b8:b9:8e:18:c8:e3:e0:b8:
f7:69:bc:0b:75:18:e0:58:e6:e1:ae:b8:f0:3c:d9:a3:86:c8:
b3:3c:dd:62:56:35:10:f3:c5:38:50:13:48:fd:4c:86:22:56:
f7:58:ea:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n3++S7eYGuUJwBop2d5JPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmQ4NmMwMjhiZmMzOGU4NzU0NTVjZjgyNjg5YTM2MjY1
MzAyYzIwHhcNMjYwMzI2MDIwMTIwWhcNMjYwMzI3MDIwMTIwWjAzMTEwLwYDVQQD
EyhiMDgzMjA3MzAyMTg1ZTI4YzZlZGUwMzAzM2Y0ZDNiNjFjYTJhNWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/B8DCOIGJynNiisEqq12JZdbysYD
S1gNIoFrqt+X7nFtzlQxhwVSG3+kdI/F+YAxnjioq5Dv/2+3apAmCLvovNkokxH0
MO8uZ4LxQtM1NDGOh5rP8KsN5nOjmpStkdM6SIS5wkv6LZ/kF4folXPgmOL+onxy
2Xrg6jAE3WNQwuwWwoo7JY8MbNkTlNOeZJkJuxsJyEfrAcTa5M1bI7Jd3D3KdRe+
V0+1uQ+sTNc1RU9HP6Krcdtj1x+2b+BgTam8fVpCtbvwm+NQ8oLYCJb7trY1fHez
/iV1rAaw6B8rCi63zpfhimSYGgFbxDGm63d7C7tPCrIf6zOdZLX8DtHy3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCDIHMCGF4oxu3gMDP007YcoqX7MB8GA1UdIwQY
MBaAFJ0thsAov8OOh1RVz4JomjYmUwLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblMyR3dDaV93NDZIVkZYUGdtaWFOaVpUQXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9jMDc4ZmQtZDJiNi00NmJhLWE2YmEt
NDRjM2I3NWQzZjMzLzEvblMyR3dDaV93NDZIVkZYUGdtaWFOaVpUQXNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9jMDc4ZmQtZDJiNi00NmJhLWE2YmEtNDRjM2I3NWQzZjMz
LzEvblMyR3dDaV93NDZIVkZYUGdtaWFOaVpUQXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkasyx8VU
FLHXkDvkWHZZg2EzjOvQIYJuV5tcVPOuzhLQbzWl+SKGmrXv+SFlmQa0k3sAa6R2
6s2RvALGb9FgFC7OW1Lf4p24N3W+bexBqJPwmgecRaoIHMHISCpjLxLTmK/7zChG
pCKCKTWg7Fc7CdFVFBzk/OzgOEXhG3imu1+rVCkkA6N3/ihYpEFdp44QOBgil89o
/KgHqSSPKS6jtJ+jvYp9+Sw5LZW1Spl5C2E6SCjAtw3TQbQKu+pQ0lGiKhFOIAwn
04xyoO+yGQ/y1bi5jhjI4+C492m8C3UY4Fjm4a648DzZo4bIszzdYlY1EPPFOFAT
SP1MhiJW91jq+A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:28 2026 by rpki-client