Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
File: nyasnus6LPovbKP0E--5zf_pck4.mft (raw, json)
Hash identifier: Pti1MHRLL4zcPncVfxzaByQB5AVvM38zsa9OzJRNsC4=
Subject key identifier: DD:D2:80:5D:19:49:CF:93:AA:53:89:C7:3C:FF:35:B0:2E:C8:86:B3
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 01A06DCBCBDC3CE598A5671872F3C9FD0284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
Manifest number: 1A4F
Signing time: Fri 04 Sep 2026 19:01:07 +0000
Manifest this update: Fri 04 Sep 2026 19:01:07 +0000
Manifest next update: Sat 05 Sep 2026 19:01:07 +0000
Files and hashes: 1: JDo3Dh0tpt2WY936ANlUtYGWoM0.roa (hash: WvNxcMUuMNQVZtG0J9Fei7h17wqCMKoS9L4tiVuv4NU=)
2: j_QCSh7ZF3PrwHAJ9e8hUlOg6lI.roa (hash: pmebqOompZdeawcmXruuUY8oJRLj4i7j3MeIvnSwW8o=)
3: nyasnus6LPovbKP0E--5zf_pck4.crl (hash: 3fgQVEGH0gU/pYdM5HwcYuaFvO7svXGzMlyuo+j3Kgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:cb:cb:dc:3c:e5:98:a5:67:18:72:f3:c9:fd:02:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: Sep 4 19:01:07 2026 GMT
Not After : Sep 5 19:01:07 2026 GMT
Subject: CN=ddd2805d1949cf93aa5389c73cff35b02ec886b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f5:f7:a4:b0:a5:8e:d3:cc:84:9c:34:34:60:
b7:a2:60:9f:bb:51:04:a3:7b:78:cb:20:e7:58:77:
06:43:7c:c9:75:d4:f0:7b:99:4b:37:80:07:b8:23:
6d:c5:5a:23:ef:a0:9b:1d:7c:bf:c4:0d:84:31:35:
55:b8:34:47:40:dc:6b:24:e7:96:04:07:61:f9:26:
1d:3a:12:85:bd:b1:28:cc:91:d7:67:44:fc:f3:b4:
0e:42:73:65:ef:3f:f7:73:ca:10:f8:09:da:d0:d0:
86:be:e7:82:e0:b2:95:8d:6a:8a:21:5c:74:6c:18:
c7:41:a0:f6:01:26:61:cf:ee:fb:0b:e7:ca:d5:ff:
ed:a3:3b:1d:d1:16:61:e4:0d:2f:96:3b:fd:61:c2:
da:dd:b2:77:2d:15:8b:d5:02:83:79:1e:e6:5a:0d:
9f:a7:fc:df:77:a2:9b:d5:1b:8d:42:b9:ff:cd:bf:
4c:6b:e1:21:2d:91:f5:63:82:8b:30:84:28:ec:71:
7c:88:c6:72:31:65:bf:b1:74:64:03:26:23:32:3b:
54:12:97:00:b8:1f:6a:df:a9:2d:58:af:56:ad:02:
4e:73:87:58:41:07:3a:7a:69:4f:05:5b:5a:af:f0:
cd:93:13:47:72:22:ed:a4:13:a1:b0:79:7d:87:0e:
38:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D2:80:5D:19:49:CF:93:AA:53:89:C7:3C:FF:35:B0:2E:C8:86:B3
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f4:82:3a:65:14:be:4e:c9:6e:e5:a4:55:91:c5:22:80:3f:
eb:db:1d:79:1e:f4:c5:07:df:9e:88:f6:cc:d3:31:58:df:97:
e9:e0:6b:7e:85:0f:2c:4f:04:aa:a1:3c:cf:4f:41:c8:71:d7:
a2:e4:6d:b2:b7:9c:a3:0f:21:c0:43:26:a7:8c:97:0a:32:fa:
9c:ca:68:28:1c:2a:f4:81:a3:36:4c:41:1f:28:ad:34:75:28:
80:59:88:76:cc:c8:64:a2:a3:d4:53:f3:e6:cf:4e:99:03:25:
6f:f3:45:a6:af:01:f6:5d:0f:b6:fa:bd:cf:d5:41:bd:62:f2:
3e:f6:11:d9:f1:08:a9:f2:bd:84:34:31:c0:5d:13:68:2f:72:
84:c6:8f:f4:fd:05:b0:7f:0d:7d:8b:47:96:f3:20:22:71:87:
a3:88:6b:69:d4:d1:d2:23:10:b4:3d:62:46:01:94:29:9b:72:
a3:f8:c1:01:06:72:27:c2:12:06:11:57:2f:7f:3d:39:24:d0:
6b:d7:5c:f3:39:39:2d:8a:55:61:f9:9c:36:3b:49:61:1b:3d:
43:07:32:5a:bb:5a:d7:33:bb:6d:06:24:44:fb:85:d1:61:22:
3c:4c:2e:72:d4:9e:00:0e:d2:60:d8:df:d5:e2:0b:c8:1e:41:
89:6f:6b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:21:53 2026 by rpki-client