Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
File: nyasnus6LPovbKP0E--5zf_pck4.mft (raw, json)
Hash identifier: M1HiJxe6CKlAy5FYsJboY02RJ0srUGwKkmZ6xGGiBWU=
Subject key identifier: C4:3D:96:3E:E2:2D:15:0F:B9:D0:A1:DA:29:9C:7B:DF:40:C6:53:43
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 019F946DFB667EF9A53FBEC707771734DDB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
Manifest number: 19DE
Signing time: Fri 24 Jul 2026 14:01:03 +0000
Manifest this update: Fri 24 Jul 2026 14:01:03 +0000
Manifest next update: Sat 25 Jul 2026 14:01:03 +0000
Files and hashes: 1: JDo3Dh0tpt2WY936ANlUtYGWoM0.roa (hash: WvNxcMUuMNQVZtG0J9Fei7h17wqCMKoS9L4tiVuv4NU=)
2: nyasnus6LPovbKP0E--5zf_pck4.crl (hash: z7LN90IeEhB5acLPz0TZ9NNooZoqDaXIfgO0VWYb5Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:fb:66:7e:f9:a5:3f:be:c7:07:77:17:34:dd:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: Jul 24 14:01:03 2026 GMT
Not After : Jul 25 14:01:03 2026 GMT
Subject: CN=c43d963ee22d150fb9d0a1da299c7bdf40c65343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ad:04:33:ed:f2:cd:8b:17:25:41:15:3d:1c:
ef:e3:63:de:f5:4e:e6:03:e4:8c:e8:bb:f0:07:b7:
3a:82:51:b8:cc:b8:58:22:e4:79:a5:0e:42:ad:80:
d4:50:45:39:50:18:99:da:7a:54:f5:43:dd:d4:78:
cc:84:4f:e8:10:77:91:bb:5e:0f:be:1c:61:18:ed:
a9:7a:24:5b:18:38:b2:72:d2:26:54:db:9d:8f:69:
88:42:0e:d9:5a:44:27:8e:0c:6b:ab:58:10:23:fc:
47:4a:c0:79:18:1b:e1:35:26:f6:ce:42:8e:02:4a:
22:e2:8e:9c:ff:14:0d:fc:1a:af:70:33:ca:27:6e:
94:8b:a7:e3:09:13:ee:04:b7:47:6a:de:67:6e:f7:
1d:98:b2:b5:4c:72:24:c3:13:2f:7d:14:9c:dc:a3:
1e:9e:c8:0b:48:63:87:6a:a8:d6:b3:9b:dc:fd:98:
72:43:37:d5:55:4b:e5:0b:ff:b6:b9:4c:2b:9d:2c:
72:02:61:c5:94:94:62:92:79:4d:e8:1b:c7:5c:34:
53:74:5c:cd:62:b8:b7:c2:e9:51:ff:40:a6:93:4f:
a7:55:03:2c:dd:ac:bb:ae:11:2e:c0:26:b9:8f:9d:
56:d3:15:10:16:e7:e6:ef:71:7e:83:10:38:13:93:
ac:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3D:96:3E:E2:2D:15:0F:B9:D0:A1:DA:29:9C:7B:DF:40:C6:53:43
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0a:db:6f:55:4b:73:d6:8c:54:00:48:d8:49:31:b8:96:eb:
b1:1f:d1:2e:24:03:76:c8:f3:78:1c:85:a2:8a:a0:40:2a:2a:
e8:26:fb:7b:2d:fa:91:3d:a5:31:79:08:15:5d:b9:ae:9d:c9:
fc:ba:5a:20:cb:ac:5f:b9:77:6b:3f:b7:c6:71:06:e0:00:ef:
3d:5e:43:0d:b9:f8:d8:f6:64:be:4e:4e:0f:35:58:2c:77:4b:
05:3c:27:22:df:d6:3a:1a:70:51:00:01:7d:6f:9e:cf:d0:4b:
37:24:9b:7d:40:b2:00:47:4b:1b:62:81:01:39:65:13:6f:b5:
73:ba:aa:bf:a1:8f:ab:28:c1:bc:f1:31:b2:13:d2:1b:f3:1c:
92:ae:fd:ea:63:4e:1f:28:21:b4:fa:f2:c2:42:7c:09:5d:72:
87:a4:f8:c7:49:e8:72:8b:97:d5:4c:9d:a1:56:2e:88:cd:62:
cd:49:60:bd:f2:2b:a1:77:5e:c7:fa:ed:b6:9a:4a:58:e2:62:
c1:5b:b5:19:b0:b1:59:ad:13:c5:bd:50:de:2a:80:0e:8c:06:
1a:e6:69:64:e8:f3:63:ff:33:98:71:c2:8e:8e:ea:ac:a3:08:
36:d4:8e:c9:bc:64:6d:9f:8e:f4:eb:db:82:e7:b6:f5:04:a1:
c2:5b:75:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UbftmfvmlP77HB3cXNN25MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMjZhYzllZWIzYTJjZmEyZjZjYTNmNDEzZWZiOWNkZmZl
OTcyNGUwHhcNMjYwNzI0MTQwMTAzWhcNMjYwNzI1MTQwMTAzWjAzMTEwLwYDVQQD
EyhjNDNkOTYzZWUyMmQxNTBmYjlkMGExZGEyOTljN2JkZjQwYzY1MzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp60EM+3yzYsXJUEVPRzv42Pe9U7m
A+SM6LvwB7c6glG4zLhYIuR5pQ5CrYDUUEU5UBiZ2npU9UPd1HjMhE/oEHeRu14P
vhxhGO2peiRbGDiyctImVNudj2mIQg7ZWkQnjgxrq1gQI/xHSsB5GBvhNSb2zkKO
Akoi4o6c/xQN/BqvcDPKJ26Ui6fjCRPuBLdHat5nbvcdmLK1THIkwxMvfRSc3KMe
nsgLSGOHaqjWs5vc/ZhyQzfVVUvlC/+2uUwrnSxyAmHFlJRiknlN6BvHXDRTdFzN
Yri3wulR/0Cmk0+nVQMs3ay7rhEuwCa5j51W0xUQFufm73F+gxA4E5OsDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQ9lj7iLRUPudCh2imce99AxlNDMB8GA1UdIwQY
MBaAFJ8mrJ7rOiz6L2yj9BPvuc3/6XJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWIt
N2Q0MjY2Y2Y4MjJhLzEvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWItN2Q0MjY2Y2Y4MjJh
LzEvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwrbb1VL
c9aMVABI2EkxuJbrsR/RLiQDdsjzeByFooqgQCoq6Cb7ey36kT2lMXkIFV25rp3J
/LpaIMusX7l3az+3xnEG4ADvPV5DDbn42PZkvk5ODzVYLHdLBTwnIt/WOhpwUQAB
fW+ez9BLNySbfUCyAEdLG2KBATllE2+1c7qqv6GPqyjBvPExshPSG/Mckq796mNO
HyghtPrywkJ8CV1yh6T4x0nocouX1UydoVYuiM1izUlgvfIroXdex/rttppKWOJi
wVu1GbCxWa0Txb1Q3iqADowGGuZpZOjzY/8zmHHCjo7qrKMINtSOybxkbZ+O9Ovb
gue29QShwlt1+A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:56:55 2026 by rpki-client