Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
File: nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json)
Hash identifier: vln+Wardkf7Pqu4zWOdwCFghGZARaOuKwI2qlanRkF0=
Subject key identifier: 22:28:4C:1E:33:64:F8:4C:B2:EC:EA:66:05:65:95:DF:BF:09:B9:C5
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial: 019F958027157CC1A4783235738588D76D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 19:00:31 +0000
Manifest this update: Fri 24 Jul 2026 19:00:31 +0000
Manifest next update: Sat 25 Jul 2026 19:00:31 +0000
Files and hashes: 1: 9mAFKAFsUumaxtmwKspIguWpn-U.roa (hash: nsAVacl7HwId/rvDGUKYBOPV9fj57SBoEJyC2HRo14U=)
2: BxdvpbQ1TKYOcJrk4RGzX3RxD8c.roa (hash: sKqXvC0ALWhzVadZLxtC2ynHl4YiU5G3hQTuNpmHk34=)
3: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: pvNIApXlAyATbSoy6/aSSvGg71klX+JNXxsp3Tyq9rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:27:15:7c:c1:a4:78:32:35:73:85:88:d7:6d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Validity
Not Before: Jul 24 19:00:31 2026 GMT
Not After : Jul 25 19:00:31 2026 GMT
Subject: CN=22284c1e3364f84cb2ecea66056595dfbf09b9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e9:c4:56:6f:88:30:0d:8d:de:22:16:e4:b7:
28:72:6b:4f:b7:e0:63:33:ef:30:9a:07:ed:31:24:
9c:ff:98:17:38:6f:f7:62:7d:54:db:e4:dc:07:5c:
46:6e:c8:22:a0:ff:1c:89:c8:f5:00:a2:b4:fb:22:
61:a7:60:1b:82:65:c1:22:a9:7a:b6:7d:06:10:b4:
25:e6:8b:4c:ae:b9:3f:03:2d:a0:3f:db:85:c2:31:
65:ff:73:52:fa:49:b8:70:99:6a:36:f5:4e:56:7b:
88:56:13:ba:28:27:43:d6:e6:3b:77:96:0e:76:9a:
12:b2:1a:0c:d1:fb:64:8b:3d:f2:eb:e8:ae:5e:5d:
25:b2:9c:9e:71:34:f3:bc:f2:48:3e:f1:af:fc:a7:
9b:70:ce:08:c2:8e:86:a4:fe:2a:c1:b8:2c:3e:96:
81:0b:c5:7e:fa:01:f1:59:0d:aa:c3:1c:04:dc:70:
b1:52:c9:e0:0c:8a:6d:25:a3:86:69:18:03:37:1d:
1f:55:0b:99:b5:26:ae:4e:d4:f6:3b:e5:70:28:e2:
40:f1:c8:26:50:e2:db:a0:75:2f:03:a5:bc:0f:f7:
d9:da:82:57:cc:d9:7c:94:b4:b8:e7:dc:95:a5:77:
b1:11:33:77:f1:bd:39:d2:18:fd:28:dc:08:e0:bc:
dc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:28:4C:1E:33:64:F8:4C:B2:EC:EA:66:05:65:95:DF:BF:09:B9:C5
X509v3 Authority Key Identifier:
keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1b:f2:2f:b4:75:f5:95:f0:5b:a3:c8:aa:73:fd:c7:01:6d:
a0:d3:93:b1:2e:85:42:ec:a0:07:15:ea:c7:f3:88:92:1b:74:
fc:4f:6c:56:6c:4d:91:c4:ac:22:5d:a8:42:14:63:ba:93:2f:
ce:71:fd:84:18:ba:97:fa:04:64:87:1f:a3:f5:5d:fc:a8:a3:
22:e4:59:f8:26:cf:94:1c:d8:2d:38:ca:b3:f6:5b:2e:cf:77:
af:49:57:70:2c:f2:ef:c2:a5:41:d0:c8:18:7f:f3:64:fb:dd:
a5:d8:74:e6:5f:e5:a9:57:5c:91:64:d4:6f:6f:78:29:6b:b3:
95:2c:57:06:99:d9:ce:db:fb:eb:01:54:99:4c:ca:84:82:fb:
26:c7:72:df:a2:dc:63:82:4c:9d:1e:90:40:d7:78:c1:9f:a1:
e7:94:7e:25:21:1a:ca:bd:4d:cb:0c:d3:20:5c:c8:5f:fd:c9:
79:62:4e:a2:7b:df:e7:a0:91:a6:d3:61:4c:5c:e7:66:0e:ac:
94:6e:09:58:98:54:d3:85:91:50:41:ab:c4:0d:01:83:0b:62:
9c:c3:34:e8:ea:cd:1f:d4:fd:a3:08:8c:a6:fd:db:98:d3:a2:
fe:35:80:7c:82:1f:31:69:4d:87:3f:49:aa:34:bb:59:cc:61:
cb:ca:aa:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:33:04 2026 by rpki-client