Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
File: nS2GwCi_w46HVFXPgmiaNiZTAsI.mft (raw, json)
Hash identifier: CJmt9vfJ0gMkXtURTQyg/qZommWVD0c+5EmzterSweE=
Subject key identifier: 41:23:44:A2:5D:00:6B:C4:65:AA:68:74:E4:26:83:36:BD:82:03:BD
Authority key identifier: 9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2
Certificate issuer: /CN=9d2d86c028bfc38e875455cf82689a36265302c2
Certificate serial: 019D99D05075971E117FF635B8DA1E9E21C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 05:00:59 +0000
Manifest this update: Fri 17 Apr 2026 05:00:59 +0000
Manifest next update: Sat 18 Apr 2026 05:00:59 +0000
Files and hashes: 1: Y4yIp4TOXR8P9we0PVCp5mPF1Wg.roa (hash: OC/VjislJpL/akKc6zsS3UsisTDD8FgDqZwMfSBlbaM=)
2: nS2GwCi_w46HVFXPgmiaNiZTAsI.crl (hash: cB5TnZL/i2C8Eq1wMXsgM/OB9TNmylQ7dfn/x4TwZ44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:50:75:97:1e:11:7f:f6:35:b8:da:1e:9e:21:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2d86c028bfc38e875455cf82689a36265302c2
Validity
Not Before: Apr 17 05:00:59 2026 GMT
Not After : Apr 18 05:00:59 2026 GMT
Subject: CN=412344a25d006bc465aa6874e4268336bd8203bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:d3:4e:98:ac:3a:14:ce:7c:7c:d2:a4:53:
00:93:48:b6:cc:b5:ec:88:92:cc:eb:e9:dc:a2:85:
be:8e:1a:f0:b5:2a:7c:74:6b:17:d0:51:96:f4:c0:
10:de:33:a2:b3:f8:cf:4d:4f:25:49:3f:60:cf:93:
c0:68:2b:0d:48:1f:27:e9:66:e1:06:5a:d5:8f:78:
d8:3a:b4:74:f3:5e:e7:ae:b5:e2:c0:66:0f:3e:e5:
62:aa:77:4c:e3:8a:93:7d:58:a0:e3:2f:d3:8b:c5:
19:0d:db:71:b0:1a:4e:eb:6c:e8:16:9a:76:3f:7f:
d0:fb:c0:fb:20:ab:e7:a5:cf:c6:7a:19:d4:4d:d4:
00:5b:3f:69:0c:19:2e:70:3c:da:2c:93:e3:f9:34:
98:da:de:bd:dd:f5:9c:ff:6e:4e:34:55:aa:f4:cf:
2f:8b:6e:1c:f3:79:fe:9b:7f:4f:29:5d:2b:61:3d:
67:96:15:d3:d8:77:fa:bf:6d:d4:47:6a:4e:c2:1a:
b7:15:be:9b:4c:35:4b:dc:0a:57:98:06:29:0f:68:
f0:47:f7:c9:39:c4:83:31:23:29:5a:4e:ab:00:21:
fd:20:f4:c6:aa:b7:96:e1:db:56:91:41:4a:a2:dc:
51:e4:30:48:2d:37:a4:de:8d:20:64:fd:c7:9b:61:
12:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:23:44:A2:5D:00:6B:C4:65:AA:68:74:E4:26:83:36:BD:82:03:BD
X509v3 Authority Key Identifier:
keyid:9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:98:b3:1b:7d:36:7a:e8:e8:52:12:37:41:f3:7d:e1:55:c8:
f1:dd:ef:a8:6c:5c:b2:e3:92:eb:df:cc:4d:d1:0a:21:e4:56:
a9:26:97:b2:dc:8e:7e:09:e1:c3:4b:8d:e2:12:09:17:03:7a:
91:48:05:ec:86:b7:48:1e:63:08:83:d0:98:e2:e7:b4:93:41:
fc:a6:a7:3e:54:52:5c:87:d1:ba:31:6d:4e:f5:09:91:a9:9c:
a9:48:0e:d3:5a:fa:89:9c:99:77:1b:98:67:ba:1e:32:51:32:
67:ce:e8:88:6f:13:17:df:15:77:d4:c0:f5:8d:ec:01:cd:b9:
97:22:6b:8d:b4:5d:44:18:39:b0:17:a9:da:a9:f1:e0:61:42:
1c:e0:d1:34:55:34:2a:66:eb:ae:13:74:16:2b:8d:68:59:90:
59:94:a7:31:b1:7f:f6:15:6a:a9:d7:34:0c:c4:43:29:69:fa:
7d:c2:4d:66:42:40:2a:4d:52:1c:83:9e:ee:93:65:25:da:af:
d8:16:56:04:6c:c4:18:ec:d2:5b:c9:b7:d2:18:f1:8c:a5:fd:
13:64:96:fc:43:b9:5a:87:40:41:eb:f5:60:5d:28:d7:1a:80:
e0:58:30:15:af:f6:d0:de:b4:89:40:08:ad:5b:49:7c:26:fc:
2c:1a:08:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:52:59 2026 by rpki-client