Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
File: nyasnus6LPovbKP0E--5zf_pck4.mft (raw, json)
Hash identifier: pY/aYU7Xj3z+kd12N3iPRqHGZLjO6UMfQOya8vFqyic=
Subject key identifier: 62:F2:4B:57:7E:34:61:3F:6D:75:A1:1A:A4:F6:2B:AE:F2:22:39:48
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 01A183E33554CE6256087278CB0F2329B0F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
Manifest number: 1ADF
Signing time: Wed 28 Oct 2026 19:01:07 +0000
Manifest this update: Wed 28 Oct 2026 19:01:07 +0000
Manifest next update: Thu 29 Oct 2026 19:01:07 +0000
Files and hashes: 1: JDo3Dh0tpt2WY936ANlUtYGWoM0.roa (hash: WvNxcMUuMNQVZtG0J9Fei7h17wqCMKoS9L4tiVuv4NU=)
2: j_QCSh7ZF3PrwHAJ9e8hUlOg6lI.roa (hash: pmebqOompZdeawcmXruuUY8oJRLj4i7j3MeIvnSwW8o=)
3: nyasnus6LPovbKP0E--5zf_pck4.crl (hash: sSlXGTx7AOe0JXkUfOM7Ez1pNxZmeeiM15K61NJJFO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:e3:35:54:ce:62:56:08:72:78:cb:0f:23:29:b0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: Oct 28 19:01:07 2026 GMT
Not After : Oct 29 19:01:07 2026 GMT
Subject: CN=62f24b577e34613f6d75a11aa4f62baef2223948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a8:a8:88:cb:4b:e2:d4:b1:4d:7a:76:d2:09:
b2:ad:d6:ec:7c:65:a3:06:24:b6:cb:6d:2f:19:e5:
3a:1e:f6:d9:cb:ae:e1:5b:b6:a4:f8:92:5d:39:11:
0a:7d:0c:39:ed:25:69:b0:49:e3:b5:e3:cf:d8:c4:
b7:af:71:3c:e5:6c:55:ee:dc:a5:96:89:a3:28:35:
96:d8:f9:af:ae:bb:cf:ab:c9:32:7b:d5:70:f5:3f:
4b:44:f4:85:fd:49:55:e3:6b:dc:d2:73:f5:95:e5:
56:39:f6:76:e1:6e:0a:73:00:b4:d8:e9:c6:49:12:
67:74:5f:3e:38:b2:4a:13:81:16:cc:a5:61:f7:72:
31:a3:6e:4a:42:7f:62:e4:50:41:f0:17:f8:6c:27:
19:12:fa:e0:6b:58:e3:dc:7e:0b:d2:b3:b0:b6:5d:
f1:64:f1:7b:64:1c:7a:3d:40:d4:7a:50:c9:27:b0:
a3:6f:bc:41:bf:e0:9a:48:67:a9:1b:fe:77:13:5d:
eb:ef:66:fd:3e:e6:6d:a6:29:8d:b0:d7:7d:f5:f2:
70:bc:34:dc:13:eb:94:f7:56:b1:c3:cc:79:04:f3:
7d:63:43:6b:32:90:47:80:21:20:87:34:9a:33:3a:
0d:5f:b9:91:64:5e:e6:0d:ce:b1:98:60:41:15:3a:
e6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F2:4B:57:7E:34:61:3F:6D:75:A1:1A:A4:F6:2B:AE:F2:22:39:48
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9c:1d:8f:e7:35:7f:d6:ad:15:b3:c5:64:e0:ac:60:90:7d:
0e:34:2b:d4:ab:ce:1f:a5:f1:a1:da:15:14:8f:1a:3d:9f:57:
82:76:59:2e:06:b6:e8:52:0f:fe:3a:a1:bb:a9:e7:c6:3c:71:
96:29:11:66:2d:99:3e:8e:95:4a:5b:66:4b:18:ee:3f:ce:4b:
87:5c:53:0b:8d:35:89:d4:76:19:48:f0:e3:21:b7:96:77:92:
ba:01:dc:1e:ff:c0:f5:80:83:10:02:01:cf:7b:cd:61:c2:93:
c8:44:2b:f5:cc:7d:25:f0:12:3b:91:a7:b4:24:bb:6e:1d:11:
22:52:aa:de:9e:fb:51:d4:e6:d8:d1:55:61:a5:73:20:0e:ba:
8a:30:ca:c9:04:a2:d6:d8:a1:22:01:03:2e:76:d7:01:aa:6e:
58:0f:49:1b:43:4a:5d:c5:69:f7:f8:b9:11:a9:5f:c1:7f:9d:
8a:dc:f3:19:3c:09:b9:bd:a0:b1:53:d1:f0:37:19:06:04:15:
1d:6c:ab:1a:54:6a:45:8b:0e:70:74:b7:d6:46:0b:63:ff:34:
4f:ff:53:ed:8e:7b:ef:6c:e3:f3:82:a5:18:7b:18:6e:9d:ec:
fe:21:8c:6c:61:e4:1f:df:12:59:7c:4e:20:50:7b:ca:d1:26:
d7:f1:fe:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGD4zVUzmJWCHJ4yw8jKbD0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMjZhYzllZWIzYTJjZmEyZjZjYTNmNDEzZWZiOWNkZmZl
OTcyNGUwHhcNMjYxMDI4MTkwMTA3WhcNMjYxMDI5MTkwMTA3WjAzMTEwLwYDVQQD
Eyg2MmYyNGI1NzdlMzQ2MTNmNmQ3NWExMWFhNGY2MmJhZWYyMjIzOTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaioiMtL4tSxTXp20gmyrdbsfGWj
BiS2y20vGeU6HvbZy67hW7ak+JJdOREKfQw57SVpsEnjtePP2MS3r3E85WxV7tyl
lomjKDWW2PmvrrvPq8kye9Vw9T9LRPSF/UlV42vc0nP1leVWOfZ24W4KcwC02OnG
SRJndF8+OLJKE4EWzKVh93Ixo25KQn9i5FBB8Bf4bCcZEvrga1jj3H4L0rOwtl3x
ZPF7ZBx6PUDUelDJJ7Cjb7xBv+CaSGepG/53E13r72b9PuZtpimNsNd99fJwvDTc
E+uU91axw8x5BPN9Y0NrMpBHgCEghzSaMzoNX7mRZF7mDc6xmGBBFTrm2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLyS1d+NGE/bXWhGqT2K67yIjlIMB8GA1UdIwQY
MBaAFJ8mrJ7rOiz6L2yj9BPvuc3/6XJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWIt
N2Q0MjY2Y2Y4MjJhLzEvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWItN2Q0MjY2Y2Y4MjJh
LzEvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJwdj+c1
f9atFbPFZOCsYJB9DjQr1KvOH6XxodoVFI8aPZ9XgnZZLga26FIP/jqhu6nnxjxx
likRZi2ZPo6VSltmSxjuP85Lh1xTC401idR2GUjw4yG3lneSugHcHv/A9YCDEAIB
z3vNYcKTyEQr9cx9JfASO5GntCS7bh0RIlKq3p77UdTm2NFVYaVzIA66ijDKyQSi
1tihIgEDLnbXAapuWA9JG0NKXcVp9/i5EalfwX+ditzzGTwJub2gsVPR8DcZBgQV
HWyrGlRqRYsOcHS31kYLY/80T/9T7Y5772zj84KlGHsYbp3s/iGMbGHkH98SWXxO
IFB7ytEm1/H+Ew==
-----END CERTIFICATE-----
Generated at Thu Oct 29 05:49:44 2026 by rpki-client