Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
File: nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json)
Hash identifier: 5nJb2O6gejUpoP7i3tDePTohm1TidiYCtzY8dYF8UKQ=
Subject key identifier: 9A:28:4A:29:73:04:B8:B8:B9:C9:D3:A6:F3:37:DF:83:3D:27:11:67
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial: 019F9F283864F6DB438BA9635DD15AED94D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
Manifest number: 19CF
Signing time: Sun 26 Jul 2026 16:00:40 +0000
Manifest this update: Sun 26 Jul 2026 16:00:40 +0000
Manifest next update: Mon 27 Jul 2026 16:00:40 +0000
Files and hashes: 1: 9mAFKAFsUumaxtmwKspIguWpn-U.roa (hash: nsAVacl7HwId/rvDGUKYBOPV9fj57SBoEJyC2HRo14U=)
2: BxdvpbQ1TKYOcJrk4RGzX3RxD8c.roa (hash: sKqXvC0ALWhzVadZLxtC2ynHl4YiU5G3hQTuNpmHk34=)
3: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: PjDrTQmcOZdUwDNxi4emg4ewZOuud1K6RXZ6AYu5lR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:28:38:64:f6:db:43:8b:a9:63:5d:d1:5a:ed:94:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Validity
Not Before: Jul 26 16:00:40 2026 GMT
Not After : Jul 27 16:00:40 2026 GMT
Subject: CN=9a284a297304b8b8b9c9d3a6f337df833d271167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:4b:e3:99:88:8a:fa:de:ee:f9:72:5d:d3:
21:f8:87:03:e3:e0:20:fc:1c:18:97:f4:f7:0a:40:
1a:36:67:ee:55:bd:c5:fd:62:de:9e:cb:2c:9e:47:
bd:24:05:30:68:4e:6f:6d:32:5b:c6:fd:47:ca:e9:
ac:a1:a3:e3:6b:50:58:ca:3c:a1:29:9b:98:b7:67:
00:9a:31:08:aa:da:51:f5:b3:ce:4f:73:b5:0b:6c:
c0:b4:7f:08:54:5d:1b:ef:ae:86:58:36:89:7c:a3:
b6:41:5b:8a:2a:a0:96:cc:81:d5:9c:eb:ad:f6:38:
e2:cd:7b:38:9f:c0:37:4b:77:20:d9:f5:9a:5e:f3:
5e:69:3e:b1:0d:80:20:6a:92:17:e5:66:ab:f1:32:
fb:ae:08:a8:5a:82:80:0b:16:3d:0f:02:95:52:6e:
9a:f9:d9:20:d2:60:fa:54:84:0c:74:76:e0:ed:e4:
a2:c8:bf:f8:99:df:e8:84:ed:de:75:be:39:35:34:
49:2a:3d:ce:12:46:85:a0:a7:83:65:f1:2a:c6:4d:
17:9f:08:92:e1:4c:af:eb:5f:71:4a:8f:89:a0:c2:
94:ef:c4:92:3e:7c:50:c7:63:54:44:3d:1d:7a:98:
73:8e:2f:18:4f:20:77:07:00:c0:83:11:f9:ae:d7:
40:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:28:4A:29:73:04:B8:B8:B9:C9:D3:A6:F3:37:DF:83:3D:27:11:67
X509v3 Authority Key Identifier:
keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:92:0d:5f:6c:1a:79:c7:7c:18:0a:b1:72:41:aa:28:a8:98:
c2:b6:38:90:b1:36:24:d8:e9:8c:89:96:83:04:9e:e4:b0:4e:
6c:d9:e7:69:6d:3c:e7:65:75:73:e4:07:23:1e:5c:5f:81:85:
b7:02:33:b8:5d:48:f0:8c:28:63:9b:1d:10:cb:19:89:01:d4:
d0:35:9a:aa:40:cc:94:54:d5:4c:58:44:a2:61:3d:87:cd:0d:
7c:7e:36:b8:cd:bb:0b:ff:16:06:97:b8:c7:e1:d1:90:4b:43:
31:ae:21:f4:39:f0:92:3e:a1:aa:e0:a0:4c:22:5d:f2:ed:b5:
11:60:b8:21:e0:f5:0f:67:43:66:95:0b:42:57:c7:a2:6a:da:
2c:4e:f7:1b:4e:e0:06:46:85:3e:44:1e:6a:73:b6:d7:43:b4:
1b:16:b0:64:23:13:02:b1:11:90:f4:94:c2:06:17:d1:57:1a:
1a:42:c1:8f:8a:18:75:71:65:ef:07:64:d9:90:cf:c4:5d:a8:
a5:d7:14:1f:81:ae:6b:40:85:07:40:23:8e:f7:d4:85:30:ad:
bc:df:16:6f:c7:61:09:64:2d:84:c6:23:b4:49:e8:54:c2:4b:
2a:cd:94:dd:72:2c:e7:23:ad:20:13:51:9a:a2:ac:e9:94:fb:
9d:bf:a1:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+fKDhk9ttDi6ljXdFa7ZTWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYmNiZmViOGZhODk3Mzc0NzE4YTkxMDJhNGE3MDY3MWUy
YWFiZjkwHhcNMjYwNzI2MTYwMDQwWhcNMjYwNzI3MTYwMDQwWjAzMTEwLwYDVQQD
Eyg5YTI4NGEyOTczMDRiOGI4YjljOWQzYTZmMzM3ZGY4MzNkMjcxMTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwehL45mIivre7vlyXdMh+IcD4+Ag
/BwYl/T3CkAaNmfuVb3F/WLensssnke9JAUwaE5vbTJbxv1HyumsoaPja1BYyjyh
KZuYt2cAmjEIqtpR9bPOT3O1C2zAtH8IVF0b766GWDaJfKO2QVuKKqCWzIHVnOut
9jjizXs4n8A3S3cg2fWaXvNeaT6xDYAgapIX5War8TL7rgioWoKACxY9DwKVUm6a
+dkg0mD6VIQMdHbg7eSiyL/4md/ohO3edb45NTRJKj3OEkaFoKeDZfEqxk0XnwiS
4Uyv619xSo+JoMKU78SSPnxQx2NURD0dephzji8YTyB3BwDAgxH5rtdAtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJooSilzBLi4ucnTpvM334M9JxFnMB8GA1UdIwQY
MBaAFJ68v+uPqJc3RxipECpKcGceKqv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xMzhjZTMtZjM4Zi00M2U5LThkYzkt
OWNkMGNhZTA2MjkyLzEvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xMzhjZTMtZjM4Zi00M2U5LThkYzktOWNkMGNhZTA2Mjky
LzEvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvZINX2wa
ecd8GAqxckGqKKiYwrY4kLE2JNjpjImWgwSe5LBObNnnaW0852V1c+QHIx5cX4GF
twIzuF1I8IwoY5sdEMsZiQHU0DWaqkDMlFTVTFhEomE9h80NfH42uM27C/8WBpe4
x+HRkEtDMa4h9Dnwkj6hquCgTCJd8u21EWC4IeD1D2dDZpULQlfHomraLE73G07g
BkaFPkQeanO210O0GxawZCMTArERkPSUwgYX0VcaGkLBj4oYdXFl7wdk2ZDPxF2o
pdcUH4Gua0CFB0AjjvfUhTCtvN8Wb8dhCWQthMYjtEnoVMJLKs2U3XIs5yOtIBNR
mqKs6ZT7nb+hqw==
-----END CERTIFICATE-----
Generated at Sun Jul 26 20:32:51 2026 by rpki-client