Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
File: nyasnus6LPovbKP0E--5zf_pck4.mft (raw, json)
Hash identifier: db6gimZb75117otdTutHaV/5Xhnlj63FDaEuC0+/qNY=
Subject key identifier: 25:5C:E8:65:16:1E:44:D6:EB:4C:E5:50:AC:D5:BB:DA:5B:43:85:EF
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 019D378925371D9D41C7865280D6503618C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
Manifest number: 18A4
Signing time: Sun 29 Mar 2026 03:00:27 +0000
Manifest this update: Sun 29 Mar 2026 03:00:27 +0000
Manifest next update: Mon 30 Mar 2026 03:00:27 +0000
Files and hashes: 1: IckkCSlpD90r3v7s4yAs8JcMlrc.roa (hash: VMwqztpny28xBlD0i826FGCt4rfbxOi3vTre6sh06bY=)
2: nyasnus6LPovbKP0E--5zf_pck4.crl (hash: awtx3vuCM8ddCjgLqGRJsiSxiYCHVIRBuKDOGpVPknQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:25:37:1d:9d:41:c7:86:52:80:d6:50:36:18:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: Mar 29 03:00:27 2026 GMT
Not After : Mar 30 03:00:27 2026 GMT
Subject: CN=255ce865161e44d6eb4ce550acd5bbda5b4385ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:13:d3:4c:10:18:c0:d5:8f:1c:d6:59:c6:26:
9f:17:c5:11:88:ab:0b:2d:81:0e:d6:1c:6f:df:01:
f0:de:0e:fe:72:7d:f2:ed:9f:f9:cc:8c:4c:1c:c1:
db:2f:6d:0d:cb:63:8c:b8:75:d3:ed:04:08:36:8d:
cf:17:be:2e:4f:9e:2a:06:09:35:b9:ad:40:56:06:
83:be:a9:58:f0:99:d1:0f:b0:8c:46:4b:a2:e3:96:
88:59:92:9d:6d:2c:55:a7:73:72:cc:e9:af:c4:81:
75:20:96:2f:f4:e4:f3:b6:30:41:1f:ca:6d:3d:cd:
16:4a:a6:66:de:1f:de:94:43:7c:aa:b6:e8:33:6c:
62:b7:94:39:8a:f3:5e:9c:13:4f:b9:ff:a3:09:57:
85:e6:e4:af:69:ab:3a:f9:79:48:71:19:07:95:30:
04:64:b1:bd:90:83:b1:e0:8c:de:02:ef:18:b0:df:
05:98:93:9b:02:1b:17:1e:3f:e4:4a:5c:87:6d:ee:
8d:f7:3a:1c:4a:c5:a0:6d:8e:c9:7d:05:45:3a:65:
e2:30:e3:2d:cb:0a:60:47:04:c9:cb:b9:cb:c7:17:
74:53:34:29:06:1d:26:43:fd:51:10:d5:c8:78:4b:
e8:42:7f:07:50:0c:c8:53:38:e0:5c:65:bf:81:86:
f7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5C:E8:65:16:1E:44:D6:EB:4C:E5:50:AC:D5:BB:DA:5B:43:85:EF
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e0:08:9e:6b:56:04:91:50:69:d5:87:e7:95:d3:82:d9:97:
e0:4c:be:d8:ec:21:bd:c6:2c:aa:35:3a:fc:35:0c:5b:94:13:
6c:36:84:8a:c9:e5:b4:ad:b2:ec:89:14:3c:45:68:7a:d4:30:
be:8c:f3:42:32:39:b0:a8:e8:56:6d:90:c8:62:b2:da:1c:fe:
2f:c2:09:71:cb:0f:8a:c7:52:32:51:9d:08:8b:c4:18:50:17:
32:f1:29:e1:12:d5:86:77:97:3a:36:83:15:9f:e1:1e:99:48:
a9:eb:cb:a4:9f:e8:4b:5b:b2:4b:64:4a:da:ba:ab:ad:2d:18:
d1:16:cb:3d:87:f8:d9:b6:fc:55:85:fa:58:67:2c:86:ed:49:
84:12:e0:20:ce:4d:8b:4b:a4:88:49:be:c9:bd:33:69:31:28:
d5:21:1b:3d:a6:fa:d2:0a:24:f3:09:c8:da:0c:94:8f:69:b6:
1d:a0:b0:61:59:2b:19:97:82:82:23:c5:24:8c:62:52:4b:cf:
7c:76:22:f3:e4:6e:27:9f:66:4c:bf:c0:2d:73:2d:89:63:1a:
69:0f:4f:9b:61:ac:9e:61:29:8f:ed:fe:48:e5:d3:1d:a6:1e:
38:fc:40:4b:bc:43:60:e3:bb:cd:92:2e:2a:22:38:86:5c:d9:
89:bd:74:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:13 2026 by rpki-client