Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
File: nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json)
Hash identifier: yWvSEyGMkDCo10OtMDfM/mUJCzirS2a7yY8ONSFj/Wo=
Subject key identifier: 74:42:F2:5B:9F:21:40:D4:2D:4C:30:C7:B7:68:71:B6:10:39:3B:03
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial: 019E20C86E4040AE7202D586912CA92CA364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 10:01:06 +0000
Manifest this update: Wed 13 May 2026 10:01:06 +0000
Manifest next update: Thu 14 May 2026 10:01:06 +0000
Files and hashes: 1: 9mAFKAFsUumaxtmwKspIguWpn-U.roa (hash: nsAVacl7HwId/rvDGUKYBOPV9fj57SBoEJyC2HRo14U=)
2: BxdvpbQ1TKYOcJrk4RGzX3RxD8c.roa (hash: sKqXvC0ALWhzVadZLxtC2ynHl4YiU5G3hQTuNpmHk34=)
3: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: 01sKx3DZB+Gn+fIuMmBL1kpqAuH/SoXJ+6n1a38KU6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:6e:40:40:ae:72:02:d5:86:91:2c:a9:2c:a3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Validity
Not Before: May 13 10:01:06 2026 GMT
Not After : May 14 10:01:06 2026 GMT
Subject: CN=7442f25b9f2140d42d4c30c7b76871b610393b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b8:dd:05:a8:e5:83:b8:08:1a:e3:22:3f:1f:
bc:90:01:39:b2:41:db:99:86:76:96:ab:0f:95:4a:
ad:49:c2:ce:4e:e1:81:4f:6d:11:4b:f7:ec:63:c0:
6e:7d:b2:6a:c9:f4:04:f9:45:6f:f3:be:7d:e1:a3:
16:8a:a3:fc:56:05:51:c5:3a:f8:01:6a:dd:f0:2a:
ae:fb:75:36:c9:fb:aa:94:e5:0c:1a:a1:ac:b5:f2:
b0:64:fa:5c:44:e5:f5:a7:d7:60:31:36:3e:39:ab:
b0:3e:13:bd:c3:3f:01:3e:a2:8f:b5:c9:4b:9c:d3:
f8:05:1a:06:63:cc:fb:b2:48:be:8c:7b:15:8b:3b:
fb:e9:03:89:1b:a0:3a:dc:42:f3:80:ed:6c:f7:62:
81:11:6f:24:74:a5:22:a9:52:54:83:a3:62:60:ae:
ac:01:3d:14:28:8b:f1:3e:c4:3d:6e:80:72:10:aa:
95:ac:f5:de:a2:36:b0:4b:86:40:d4:db:bb:0e:8e:
ee:cf:f4:2c:9c:8e:52:0c:d6:9d:69:d2:b1:5f:56:
43:fa:3f:55:e0:fd:16:56:c5:ed:78:7c:ec:91:96:
34:e9:ca:3c:b8:45:6e:0a:02:30:08:ee:22:1e:bf:
dd:64:17:08:fc:f2:f9:f1:39:6a:06:98:72:64:18:
06:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:42:F2:5B:9F:21:40:D4:2D:4C:30:C7:B7:68:71:B6:10:39:3B:03
X509v3 Authority Key Identifier:
keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:fa:45:61:37:a0:1b:a9:d4:0e:41:86:e9:17:93:46:de:4e:
25:3e:38:d1:56:90:97:d9:a5:b6:37:d0:bd:99:22:dd:d6:59:
1c:9a:7c:c7:4c:bf:43:41:3e:45:27:2d:23:67:9a:2d:8d:4c:
49:db:de:98:15:fb:d9:e5:0d:94:f3:a4:73:5b:bc:b6:8c:9f:
09:e6:4c:74:de:d1:d1:56:ff:0b:43:f9:06:07:be:f4:df:60:
1d:81:8e:3e:5e:48:83:46:44:9a:1c:7f:bd:d2:e9:2b:17:78:
25:95:77:2d:99:24:c9:9d:cf:17:d2:2f:5e:04:0c:22:70:4e:
c1:5a:0e:33:a0:11:0a:0b:a2:eb:1e:e2:cd:d0:54:cd:4b:73:
ad:a3:7f:63:86:54:d4:00:fb:e3:68:e3:55:10:91:0c:3a:d2:
be:34:11:e0:ca:0d:da:cb:3c:cb:98:a0:f3:bf:b9:94:36:59:
1c:2c:1f:74:32:b9:50:81:ce:4c:bc:fe:38:a0:05:b1:c1:1f:
f4:9d:1b:87:8b:35:f5:88:97:e7:d1:2c:dc:1a:da:7b:db:9a:
8b:ed:36:c2:7b:97:0e:3f:0d:3a:94:59:95:62:7f:01:f9:c0:
a0:c6:36:0f:31:38:c2:6b:ff:6d:5c:f5:29:5e:30:9c:89:45:
c3:24:90:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gyG5AQK5yAtWGkSypLKNkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYmNiZmViOGZhODk3Mzc0NzE4YTkxMDJhNGE3MDY3MWUy
YWFiZjkwHhcNMjYwNTEzMTAwMTA2WhcNMjYwNTE0MTAwMTA2WjAzMTEwLwYDVQQD
Eyg3NDQyZjI1YjlmMjE0MGQ0MmQ0YzMwYzdiNzY4NzFiNjEwMzkzYjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27jdBajlg7gIGuMiPx+8kAE5skHb
mYZ2lqsPlUqtScLOTuGBT20RS/fsY8BufbJqyfQE+UVv87594aMWiqP8VgVRxTr4
AWrd8Cqu+3U2yfuqlOUMGqGstfKwZPpcROX1p9dgMTY+OauwPhO9wz8BPqKPtclL
nNP4BRoGY8z7ski+jHsVizv76QOJG6A63ELzgO1s92KBEW8kdKUiqVJUg6NiYK6s
AT0UKIvxPsQ9boByEKqVrPXeojawS4ZA1Nu7Do7uz/QsnI5SDNadadKxX1ZD+j9V
4P0WVsXteHzskZY06co8uEVuCgIwCO4iHr/dZBcI/PL58TlqBphyZBgGTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRC8lufIUDULUwwx7docbYQOTsDMB8GA1UdIwQY
MBaAFJ68v+uPqJc3RxipECpKcGceKqv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xMzhjZTMtZjM4Zi00M2U5LThkYzkt
OWNkMGNhZTA2MjkyLzEvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xMzhjZTMtZjM4Zi00M2U5LThkYzktOWNkMGNhZTA2Mjky
LzEvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApPpFYTeg
G6nUDkGG6ReTRt5OJT440VaQl9mltjfQvZki3dZZHJp8x0y/Q0E+RSctI2eaLY1M
SdvemBX72eUNlPOkc1u8toyfCeZMdN7R0Vb/C0P5Bge+9N9gHYGOPl5Ig0ZEmhx/
vdLpKxd4JZV3LZkkyZ3PF9IvXgQMInBOwVoOM6ARCgui6x7izdBUzUtzraN/Y4ZU
1AD742jjVRCRDDrSvjQR4MoN2ss8y5ig87+5lDZZHCwfdDK5UIHOTLz+OKAFscEf
9J0bh4s19YiX59Es3Brae9uai+02wnuXDj8NOpRZlWJ/AfnAoMY2DzE4wmv/bVz1
KV4wnIlFwySQLA==
-----END CERTIFICATE-----
Generated at Wed May 13 15:48:32 2026 by rpki-client