Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
File: nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json)
Hash identifier: VbjbQySemSN8aiRBRX6OYv0WfiSyQ/0jPzbEbGTGk/w=
Subject key identifier: F7:FA:36:FE:E7:D1:FA:79:6C:05:48:CF:35:36:E1:D3:DB:CD:D2:7F
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial: 01A17E1853AE3D5C06908436C1789D3B2F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 16:01:25 +0000
Manifest this update: Tue 27 Oct 2026 16:01:25 +0000
Manifest next update: Wed 28 Oct 2026 16:01:25 +0000
Files and hashes: 1: 9mAFKAFsUumaxtmwKspIguWpn-U.roa (hash: nsAVacl7HwId/rvDGUKYBOPV9fj57SBoEJyC2HRo14U=)
2: BxdvpbQ1TKYOcJrk4RGzX3RxD8c.roa (hash: sKqXvC0ALWhzVadZLxtC2ynHl4YiU5G3hQTuNpmHk34=)
3: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: aIP4dM9lXrmNKwVWrkgDUv+nNTNcYan8mXUgb7Lmwgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:18:53:ae:3d:5c:06:90:84:36:c1:78:9d:3b:2f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Validity
Not Before: Oct 27 16:01:25 2026 GMT
Not After : Oct 28 16:01:25 2026 GMT
Subject: CN=f7fa36fee7d1fa796c0548cf3536e1d3dbcdd27f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4e:b7:be:30:cf:f0:9d:60:7b:c7:ea:68:68:
31:29:43:91:22:c6:85:20:44:8b:ee:65:bf:fb:25:
14:96:d0:1c:fd:bb:b7:80:b9:1f:ab:4e:85:14:a1:
55:ad:65:e4:5d:3d:81:9b:41:88:33:9c:34:93:0e:
f5:d4:86:19:3a:b7:f0:36:83:c9:01:8b:80:9b:2f:
77:fd:a3:21:ce:89:c1:61:2a:ce:e7:6f:b9:99:d5:
28:cc:92:36:45:21:bd:fd:79:18:8d:ca:3d:c9:b5:
d0:6b:9a:60:91:8c:ea:4a:64:c9:0b:60:6d:cc:0b:
19:ea:50:5c:19:f6:bf:34:5f:57:c5:00:8d:94:c2:
65:aa:f0:2d:b5:15:72:cf:85:e2:1e:34:44:0c:7e:
c3:a9:a0:d0:10:33:b8:2f:81:23:f9:40:fc:8e:90:
60:f3:e5:b2:23:a7:35:f0:89:92:47:de:eb:45:3e:
17:29:83:32:6c:df:ef:14:6e:03:f5:76:dd:e4:f4:
bb:96:3b:d2:05:22:8c:ce:aa:6d:f0:6b:c9:11:36:
cb:b8:53:20:f1:d8:16:bb:d7:1e:d3:a2:6e:f2:4c:
cb:e3:18:23:1a:c5:32:db:fd:9d:83:b9:f2:ec:07:
8b:0c:fe:b5:bc:90:bc:f8:48:85:64:42:64:a4:89:
e0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FA:36:FE:E7:D1:FA:79:6C:05:48:CF:35:36:E1:D3:DB:CD:D2:7F
X509v3 Authority Key Identifier:
keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:0c:d7:31:ef:8c:bf:a0:c5:a5:dd:35:7f:22:76:a5:58:80:
b0:07:8d:59:d9:5f:b0:32:bc:4a:43:e5:b5:c8:1d:52:be:c0:
8c:55:3a:00:1b:64:03:59:2b:4b:9a:87:fe:28:a0:ea:3a:b4:
a7:2a:1a:f6:e2:b1:4d:dd:66:16:2a:69:00:0b:0e:69:b6:b6:
73:92:13:2c:94:c0:c1:01:bb:af:90:cd:9a:23:06:f7:74:b8:
4e:e0:9e:ba:56:db:90:f9:da:7e:f5:50:a2:81:7c:84:4a:cd:
29:ec:31:1d:57:b7:97:29:78:14:1f:24:7c:95:2e:c7:1c:9c:
25:c2:0f:8f:a4:ec:b0:3a:ef:db:ff:ae:b8:b5:27:93:e4:cf:
4d:1e:1b:b7:19:53:2a:cd:72:bf:e1:57:a1:8f:de:2a:b4:a1:
e4:37:b2:37:3c:f2:54:4e:2d:57:46:e0:a3:66:72:30:f0:15:
16:65:8d:2e:29:4d:0f:94:18:a8:ff:51:49:a4:89:bc:59:0b:
10:19:7b:f2:df:c2:41:ae:fa:23:1f:65:19:3c:86:fe:80:e3:
08:22:c3:8d:5b:e2:2f:38:70:75:b9:74:6a:c0:cf:af:cb:1c:
38:81:69:2f:64:dd:1b:89:be:ee:65:d4:b7:cc:f1:48:b0:46:
5b:cb:cc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:45:16 2026 by rpki-client