Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
File: nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json)
Hash identifier: 295Or+Pb46qqgqqNBXfJIW3h2RFXrEcz461UlS71inc=
Subject key identifier: 18:95:9F:16:1F:8A:0E:C9:5F:EB:73:67:30:72:63:F3:76:9F:9C:36
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial: 019D25BAC535538E9111EFB4922D18FDC379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 16:01:30 +0000
Manifest this update: Wed 25 Mar 2026 16:01:30 +0000
Manifest next update: Thu 26 Mar 2026 16:01:30 +0000
Files and hashes: 1: 9mAFKAFsUumaxtmwKspIguWpn-U.roa (hash: nsAVacl7HwId/rvDGUKYBOPV9fj57SBoEJyC2HRo14U=)
2: BxdvpbQ1TKYOcJrk4RGzX3RxD8c.roa (hash: sKqXvC0ALWhzVadZLxtC2ynHl4YiU5G3hQTuNpmHk34=)
3: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: ZEdwX4RRaHwNCB62ZP5MoOvASR9vX92FaYP+iQUyvus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:c5:35:53:8e:91:11:ef:b4:92:2d:18:fd:c3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Validity
Not Before: Mar 25 16:01:30 2026 GMT
Not After : Mar 26 16:01:30 2026 GMT
Subject: CN=18959f161f8a0ec95feb7367307263f3769f9c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:14:7e:e2:3c:a9:59:f6:80:85:47:f8:08:3b:
5e:e8:a6:98:b0:44:e1:eb:85:97:91:b9:24:5e:2f:
8a:9b:22:5e:16:be:93:40:01:37:e9:c8:2b:f5:bc:
4f:e5:fc:37:ac:d8:9c:dd:d9:28:b6:50:22:45:c1:
ee:8f:42:84:71:33:f0:09:52:74:41:95:a2:ac:e5:
ce:31:13:40:18:cb:9b:44:ac:a7:f4:22:b4:f4:8a:
c8:7b:e4:d0:ec:5b:92:ea:1d:c3:5f:9d:b4:df:33:
92:5e:82:7a:b8:e0:0b:4d:49:b3:cd:e3:92:17:92:
d6:f6:f9:b4:d6:f0:16:b1:f5:38:12:8d:e3:c7:33:
2a:6f:8e:b0:db:fb:e4:b0:20:a6:64:11:e2:4b:a5:
aa:8c:cd:31:8f:4d:42:80:83:7d:c0:99:d0:40:21:
34:2c:b7:1d:08:bd:ea:24:a7:5d:20:bf:41:33:a2:
24:74:1e:88:1d:e6:c8:2e:92:5f:2c:3d:8d:f0:a3:
dd:04:c2:ce:d0:5f:dd:90:62:b1:c4:21:42:f4:a5:
83:26:4b:87:a2:17:54:42:ce:34:19:74:ec:10:0e:
e5:9f:e6:4b:b1:e5:c7:35:c4:30:62:63:fe:21:8d:
4f:4c:17:0b:9c:93:46:79:c9:21:32:c1:f0:1a:01:
9f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:95:9F:16:1F:8A:0E:C9:5F:EB:73:67:30:72:63:F3:76:9F:9C:36
X509v3 Authority Key Identifier:
keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:3e:57:a9:a0:5b:67:88:6e:04:72:95:de:1a:86:ec:15:fb:
26:ec:ad:88:ba:03:3b:59:1c:35:65:a2:a5:7f:5b:af:6f:c7:
6b:3a:79:34:bf:1d:be:ec:77:d4:a3:ba:fe:9d:ec:45:a4:74:
2c:49:49:dd:4e:cf:e5:ae:f9:5b:c2:f6:44:df:1b:81:17:32:
30:5d:4a:d4:70:d4:06:5d:83:66:db:c8:22:e3:01:33:20:87:
63:70:da:b8:c4:f6:6d:76:b4:6d:97:75:5c:d2:06:14:d1:96:
4f:fb:b0:0f:f6:7a:53:bd:a5:8d:22:71:21:c4:8c:93:43:03:
15:2f:27:26:30:b7:f2:e8:2f:ba:ee:96:92:dd:32:e7:8e:2e:
e3:1c:fa:46:06:94:b2:7b:93:33:be:00:1f:3e:a4:07:4b:17:
91:88:2d:2c:55:1c:4e:0f:a6:53:2e:27:c2:db:c5:87:df:f7:
0c:b8:26:70:b9:c9:75:e9:b5:a5:c2:80:4b:ee:40:d2:3a:92:
48:00:44:44:8d:43:6b:22:97:97:9f:f7:8f:43:a7:c0:e8:40:
47:2b:ed:0a:43:48:17:55:f6:d8:00:f5:55:7c:2d:d6:36:0e:
a7:01:ce:88:da:4f:b7:d0:92:4d:d1:1f:e2:63:44:9a:b4:5c:
42:05:fd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:23 2026 by rpki-client