Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
File: nyasnus6LPovbKP0E--5zf_pck4.mft (raw, json)
Hash identifier: v1w/+RvXkpAhnE2McEHTQRFJrWtIJM1ptjHpaMFHgWo=
Subject key identifier: 36:BF:39:48:99:3D:B1:E3:C2:D3:71:0F:19:D8:F5:CB:E1:FF:9B:92
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 01A1084A603680D3E41F56167F7E6C7BC6E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
Manifest number: 1A9F
Signing time: Sun 04 Oct 2026 19:00:53 +0000
Manifest this update: Sun 04 Oct 2026 19:00:53 +0000
Manifest next update: Mon 05 Oct 2026 19:00:53 +0000
Files and hashes: 1: JDo3Dh0tpt2WY936ANlUtYGWoM0.roa (hash: WvNxcMUuMNQVZtG0J9Fei7h17wqCMKoS9L4tiVuv4NU=)
2: j_QCSh7ZF3PrwHAJ9e8hUlOg6lI.roa (hash: pmebqOompZdeawcmXruuUY8oJRLj4i7j3MeIvnSwW8o=)
3: nyasnus6LPovbKP0E--5zf_pck4.crl (hash: 2GiocMZ9UdSkC+eOA9DhsfchG2jf68OVlqXCUqD8PfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:4a:60:36:80:d3:e4:1f:56:16:7f:7e:6c:7b:c6:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: Oct 4 19:00:53 2026 GMT
Not After : Oct 5 19:00:53 2026 GMT
Subject: CN=36bf3948993db1e3c2d3710f19d8f5cbe1ff9b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3b:a3:fe:81:73:96:df:b9:ff:ab:eb:04:2b:
ea:57:3e:2d:04:f3:1d:46:b3:a6:bb:a8:c4:9a:e4:
f6:e5:44:98:a9:15:88:1b:60:04:eb:29:9d:cc:f5:
05:7b:2c:77:bd:08:53:eb:9d:e8:21:d0:25:08:d0:
0a:c0:ba:f6:57:53:40:de:6c:3b:85:fd:a9:92:d6:
69:09:ce:fd:88:1c:bc:c3:6b:f5:a9:70:af:b8:e5:
04:5f:9a:49:92:b6:c5:45:1b:d9:60:e4:83:59:bd:
35:42:be:e8:94:f1:d2:aa:e3:21:f6:32:5e:3f:be:
3d:d4:5f:3e:61:32:62:78:5b:95:d5:5a:a7:33:23:
24:bf:8d:03:76:47:3f:f0:08:49:d9:7a:be:39:8f:
c5:ec:1e:54:95:b2:d4:aa:37:66:fa:40:10:8b:40:
96:5e:48:ac:9b:67:b2:8f:20:69:3f:69:b4:4b:9b:
55:2d:61:61:6f:40:1f:08:70:e1:b0:3f:67:69:53:
0d:6c:28:71:75:04:44:fa:05:d2:1f:db:d5:bc:1d:
c3:5d:a3:e1:08:f7:36:20:d0:74:74:55:6d:79:28:
06:43:4a:a5:75:b3:18:ac:66:b8:d8:8b:45:37:ad:
1d:cb:1a:7f:ea:89:be:41:b9:40:54:98:f2:26:2c:
46:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BF:39:48:99:3D:B1:E3:C2:D3:71:0F:19:D8:F5:CB:E1:FF:9B:92
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d9:95:62:04:c7:9e:36:35:b8:97:81:52:4f:2f:45:c6:87:
62:93:f9:fa:d6:41:d1:a3:16:b4:da:42:14:e0:bb:c0:0a:96:
8f:c2:0a:59:c0:f9:42:84:60:45:6b:c2:fb:9e:f8:ea:55:f3:
a5:89:22:dd:2d:b7:bb:98:b9:0d:81:19:53:67:d7:1d:aa:d3:
00:7d:fa:90:a0:e0:c4:53:32:21:80:0d:93:7e:de:c5:0f:62:
9f:28:c2:fc:29:20:ca:e8:13:1d:26:14:e7:b5:62:0a:0b:1f:
70:af:87:48:ee:57:b4:fd:60:70:85:f8:d4:87:64:f3:95:47:
32:c5:b2:81:26:80:4d:87:f2:4d:f2:9d:4b:6a:62:9f:39:08:
a4:00:41:eb:1e:06:12:3d:d2:56:39:ad:af:9b:8a:49:bd:75:
50:54:f2:3a:e7:be:7c:de:a0:85:85:55:fa:2c:4f:46:7d:4b:
44:58:e3:8e:6c:e7:3b:fe:f1:34:9a:e8:83:df:9c:4f:cb:ae:
3b:63:b2:93:f0:37:b6:c4:07:b1:ed:79:cd:15:c6:f9:d7:2d:
81:5e:f9:32:90:b7:bc:04:90:61:ad:89:40:01:74:34:77:08:
8e:9f:df:72:01:08:4f:2e:3a:10:3a:31:11:e0:3c:40:d4:e6:
c6:c4:bf:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:40:24 2026 by rpki-client