Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
File: nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json)
Hash identifier: adj3ruNxA3DvI6lYiXibIF1UzpSyE0qI/S0DL2V7Shk=
Subject key identifier: 54:56:43:E9:07:35:D3:56:11:51:FC:0A:2B:4D:1A:EF:83:08:A9:B5
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial: 019EB76A0ACF38EE71AA68213A14D628EE1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
Manifest number: 1957
Signing time: Thu 11 Jun 2026 16:00:40 +0000
Manifest this update: Thu 11 Jun 2026 16:00:40 +0000
Manifest next update: Fri 12 Jun 2026 16:00:40 +0000
Files and hashes: 1: 9mAFKAFsUumaxtmwKspIguWpn-U.roa (hash: nsAVacl7HwId/rvDGUKYBOPV9fj57SBoEJyC2HRo14U=)
2: BxdvpbQ1TKYOcJrk4RGzX3RxD8c.roa (hash: sKqXvC0ALWhzVadZLxtC2ynHl4YiU5G3hQTuNpmHk34=)
3: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: x+J68m5GIabJu0LGXYDoP9Oj2QijTkmchQtwQ3kmaKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:0a:cf:38:ee:71:aa:68:21:3a:14:d6:28:ee:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Validity
Not Before: Jun 11 16:00:40 2026 GMT
Not After : Jun 12 16:00:40 2026 GMT
Subject: CN=545643e90735d3561151fc0a2b4d1aef8308a9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:60:ae:b5:46:cb:dc:3e:41:5e:03:bb:06:00:
ab:a7:b2:e0:57:01:02:81:29:3f:d4:c3:3d:7b:38:
70:ee:54:95:da:f7:a3:e3:f1:6a:47:1e:22:01:43:
63:1c:14:42:ef:96:a2:dc:9e:7b:1a:16:d8:c3:42:
70:a0:81:41:b2:f6:79:d5:02:6a:7c:16:c6:81:99:
5d:bc:40:53:dd:32:dd:1b:e5:03:3f:bc:4d:40:ab:
35:ab:ef:bf:e6:ae:aa:b3:b8:a4:3d:b0:4e:0e:57:
ba:21:ec:dc:56:70:cc:9b:4f:54:61:5e:57:ab:c2:
14:94:f0:fa:44:e3:87:04:27:ac:c0:2f:3e:c1:de:
05:ce:41:be:e4:49:3b:63:20:c5:8a:8f:99:27:b0:
f6:4a:56:54:e1:1d:69:59:7a:3d:1d:d4:cf:14:61:
6e:94:28:39:04:0d:3a:d9:c1:19:24:d4:ae:09:86:
d6:ef:96:f1:2f:af:46:1c:50:28:7c:f6:8a:b7:91:
74:7c:04:3d:df:8e:fd:7a:d2:2b:72:ff:f0:fb:2f:
eb:0a:ab:ae:bf:4e:87:1d:b3:e7:b2:23:8d:c2:a1:
89:09:1a:02:9f:8d:ab:f6:69:6b:92:cc:22:80:8a:
4d:b2:ea:11:67:a2:3f:81:90:24:25:e4:be:e8:df:
c2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:56:43:E9:07:35:D3:56:11:51:FC:0A:2B:4D:1A:EF:83:08:A9:B5
X509v3 Authority Key Identifier:
keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:22:94:92:43:47:1d:49:33:d7:32:9e:08:58:a2:ad:73:53:
88:f7:e4:f3:71:60:26:ee:77:2c:f0:16:83:75:60:08:d7:77:
b6:d0:03:c6:09:05:4b:dc:db:a2:af:0c:9b:82:b2:fe:c9:5b:
92:7b:4c:12:dc:82:0b:70:58:a0:69:45:cb:04:4c:72:fd:69:
29:20:23:31:63:7a:a9:ec:df:4b:ad:5b:b0:58:49:f0:63:36:
ce:2e:74:be:f3:c6:e5:77:7c:e7:29:da:6d:9e:d4:51:ee:89:
8f:3f:b3:89:d1:08:a1:5c:22:1d:13:61:66:6c:99:43:66:95:
68:80:5d:da:ba:70:2c:7a:8a:d7:86:8a:97:50:90:a8:b7:a1:
15:cf:31:d3:0e:7c:fd:01:36:9e:56:ff:1b:36:a2:37:f8:14:
3e:bf:16:54:9f:f1:7f:ac:bb:60:c4:66:0f:dc:7c:e8:9e:75:
a0:48:5c:af:90:d4:25:e4:5c:ba:4b:bd:ba:89:e9:05:40:1a:
41:88:91:fc:3b:ef:03:30:60:9a:7e:6e:e3:0a:c7:08:3a:54:
e7:2c:18:8b:b4:28:22:2c:52:0e:b9:a2:17:67:54:94:56:f5:
31:db:d8:b9:c6:2a:7e:62:c2:00:ed:64:00:84:e4:98:d1:2c:
8c:f5:d0:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63agrPOO5xqmghOhTWKO4aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYmNiZmViOGZhODk3Mzc0NzE4YTkxMDJhNGE3MDY3MWUy
YWFiZjkwHhcNMjYwNjExMTYwMDQwWhcNMjYwNjEyMTYwMDQwWjAzMTEwLwYDVQQD
Eyg1NDU2NDNlOTA3MzVkMzU2MTE1MWZjMGEyYjRkMWFlZjgzMDhhOWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WCutUbL3D5BXgO7BgCrp7LgVwEC
gSk/1MM9ezhw7lSV2vej4/FqRx4iAUNjHBRC75ai3J57GhbYw0JwoIFBsvZ51QJq
fBbGgZldvEBT3TLdG+UDP7xNQKs1q++/5q6qs7ikPbBODle6IezcVnDMm09UYV5X
q8IUlPD6ROOHBCeswC8+wd4FzkG+5Ek7YyDFio+ZJ7D2SlZU4R1pWXo9HdTPFGFu
lCg5BA062cEZJNSuCYbW75bxL69GHFAofPaKt5F0fAQ93479etIrcv/w+y/rCquu
v06HHbPnsiONwqGJCRoCn42r9mlrkswigIpNsuoRZ6I/gZAkJeS+6N/C0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRWQ+kHNdNWEVH8CitNGu+DCKm1MB8GA1UdIwQY
MBaAFJ68v+uPqJc3RxipECpKcGceKqv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xMzhjZTMtZjM4Zi00M2U5LThkYzkt
OWNkMGNhZTA2MjkyLzEvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xMzhjZTMtZjM4Zi00M2U5LThkYzktOWNkMGNhZTA2Mjky
LzEvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKyKUkkNH
HUkz1zKeCFiirXNTiPfk83FgJu53LPAWg3VgCNd3ttADxgkFS9zboq8Mm4Ky/slb
kntMEtyCC3BYoGlFywRMcv1pKSAjMWN6qezfS61bsFhJ8GM2zi50vvPG5Xd85yna
bZ7UUe6Jjz+zidEIoVwiHRNhZmyZQ2aVaIBd2rpwLHqK14aKl1CQqLehFc8x0w58
/QE2nlb/GzaiN/gUPr8WVJ/xf6y7YMRmD9x86J51oEhcr5DUJeRcuku9uonpBUAa
QYiR/DvvAzBgmn5u4wrHCDpU5ywYi7QoIixSDrmiF2dUlFb1MdvYucYqfmLCAO1k
AITkmNEsjPXQqg==
-----END CERTIFICATE-----
Generated at Thu Jun 11 17:54:16 2026 by rpki-client