Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
File: nyasnus6LPovbKP0E--5zf_pck4.mft (raw, json)
Hash identifier: RI9HnGTaPg0hmpXPxd+tZ2Gjv2n2/Jggtj0y5yI3TkU=
Subject key identifier: D5:C4:13:D0:88:A1:CE:B3:D4:F0:98:38:0E:74:3A:2C:0E:24:5D:73
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 019D2A04DA8DD3D81210E36C62948F09FA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
Manifest number: 189D
Signing time: Thu 26 Mar 2026 12:00:54 +0000
Manifest this update: Thu 26 Mar 2026 12:00:54 +0000
Manifest next update: Fri 27 Mar 2026 12:00:54 +0000
Files and hashes: 1: IckkCSlpD90r3v7s4yAs8JcMlrc.roa (hash: VMwqztpny28xBlD0i826FGCt4rfbxOi3vTre6sh06bY=)
2: nyasnus6LPovbKP0E--5zf_pck4.crl (hash: wU3CSOxxG5yhlWS1xQL/NPhPzKjm9xfOpDBp4lJh6W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:da:8d:d3:d8:12:10:e3:6c:62:94:8f:09:fa:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: Mar 26 12:00:54 2026 GMT
Not After : Mar 27 12:00:54 2026 GMT
Subject: CN=d5c413d088a1ceb3d4f098380e743a2c0e245d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:3b:9d:9f:8a:bc:95:c4:a9:24:fc:be:44:
9a:74:0a:37:78:8c:ea:bb:08:0e:95:1f:64:cd:48:
f3:d7:94:92:11:06:04:aa:3b:e4:0b:dd:f9:63:1d:
ae:11:62:4b:96:aa:b8:ce:00:e4:0e:00:ee:d7:2a:
5f:9d:1f:98:4e:51:ee:93:e0:92:55:40:f1:46:0e:
2b:9a:40:87:c8:e3:7a:9c:8d:6e:d4:9b:5c:e2:b9:
bf:08:4e:db:83:db:00:78:b2:3f:fb:4d:b9:32:d6:
1a:c9:45:6a:03:24:76:4d:11:3a:e5:31:bd:a2:65:
d9:5b:29:a9:67:ec:e9:c0:c4:c2:e0:9c:ba:c6:48:
36:ac:d1:fd:cb:4e:14:66:68:72:ec:9b:2c:f3:4d:
07:34:e4:9b:d7:df:f2:33:c3:4b:95:b9:3d:b4:af:
60:9f:0b:53:e7:9a:61:1e:c7:f4:fe:37:05:91:72:
19:e5:f5:74:1b:99:ad:73:ae:5b:e8:51:e7:c5:1b:
65:67:e7:80:2a:2c:80:f6:bf:40:65:6b:a0:53:38:
2c:03:c6:bc:88:36:f6:06:b0:68:a5:2b:f8:52:d0:
e0:9c:61:2f:a8:e5:bd:0f:cd:90:fd:09:2e:c2:8e:
a9:ba:b5:47:ff:83:a8:e9:3e:20:f8:85:02:13:5b:
36:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C4:13:D0:88:A1:CE:B3:D4:F0:98:38:0E:74:3A:2C:0E:24:5D:73
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f5:cc:6d:ce:fa:58:02:89:b6:8e:88:aa:2e:6f:2c:2a:c2:
3f:f6:5a:4b:85:c6:3b:ca:63:d1:1c:db:c5:fc:58:ab:06:cf:
09:67:11:ef:3e:d2:76:5b:30:4a:cc:cc:af:97:dc:51:26:1d:
a6:ac:d6:51:4b:1b:ec:43:41:9d:94:2b:70:b2:a3:3d:3a:49:
93:8c:b6:5e:20:69:dd:ec:91:32:15:7c:61:68:33:f4:c4:f2:
2e:bd:21:60:a1:52:f3:1f:51:07:c8:b0:61:8c:87:62:8c:45:
1b:11:34:25:b2:7e:6c:26:e7:b6:49:fb:2d:be:b0:be:5c:49:
67:0d:5f:26:10:8b:c3:5b:c3:c7:04:73:2d:de:da:b2:e2:e7:
d4:a4:7e:a0:f8:bf:e6:3a:d9:d4:69:25:76:76:09:bd:fc:a0:
f9:73:39:f6:19:8d:8d:5f:11:e0:68:51:85:1d:d1:57:7f:69:
e7:2a:e7:f0:50:44:75:e0:8c:47:b5:e6:13:fc:20:9e:df:92:
33:10:2a:6d:5e:47:6a:f7:e3:62:9e:d9:c8:e5:97:87:9e:e0:
c7:4c:04:5a:6b:63:67:c5:93:22:a9:74:04:8c:e5:40:87:e4:
c4:6a:27:0e:81:2a:dc:5b:6a:0e:e6:23:3d:b6:94:bd:c3:0b:
d6:72:fb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:17 2026 by rpki-client