Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
File: nyasnus6LPovbKP0E--5zf_pck4.mft (raw, json)
Hash identifier: mzv7rP6GNMCvC40XyYD/ZMof6v5mD5JLl1n4rYIScNw=
Subject key identifier: 30:02:70:A3:43:A0:9F:D9:F0:AC:BE:F0:D7:24:77:FE:95:D0:28:B6
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 01A18B9BE5F4DE4348CA0EDEDBDFE5EE1F4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
Manifest number: 1AE3
Signing time: Fri 30 Oct 2026 07:00:11 +0000
Manifest this update: Fri 30 Oct 2026 07:00:11 +0000
Manifest next update: Sat 31 Oct 2026 07:00:11 +0000
Files and hashes: 1: JDo3Dh0tpt2WY936ANlUtYGWoM0.roa (hash: WvNxcMUuMNQVZtG0J9Fei7h17wqCMKoS9L4tiVuv4NU=)
2: j_QCSh7ZF3PrwHAJ9e8hUlOg6lI.roa (hash: pmebqOompZdeawcmXruuUY8oJRLj4i7j3MeIvnSwW8o=)
3: nyasnus6LPovbKP0E--5zf_pck4.crl (hash: O2P1IfqhVIZ2Zu/iZDPh8SgJQx6nj/GJpkfsdi6oLJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:9b:e5:f4:de:43:48:ca:0e:de:db:df:e5:ee:1f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: Oct 30 07:00:11 2026 GMT
Not After : Oct 31 07:00:11 2026 GMT
Subject: CN=300270a343a09fd9f0acbef0d72477fe95d028b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:58:ac:c3:d4:8f:76:84:a6:eb:84:87:6f:
8b:88:78:d3:f8:c4:eb:da:51:2c:96:ee:c3:02:1e:
63:19:3a:90:b4:96:ec:d0:f4:1f:c9:36:65:ab:4f:
90:ad:51:ea:15:5d:b6:f3:dc:9b:b9:a9:2a:30:99:
95:4c:f2:dd:8a:ce:9e:ec:f3:2b:5a:c7:e2:82:29:
aa:c9:be:2c:71:1d:fe:b7:a1:a0:88:55:c2:d3:b0:
ae:e4:01:c6:94:8f:07:0e:6e:ab:3d:56:fb:00:29:
8c:76:88:16:46:c3:6d:8d:4f:53:6f:ea:76:9b:ad:
40:3b:69:ed:55:e6:15:d0:84:53:c3:71:38:43:0d:
0b:95:b4:7a:98:f8:7d:0f:e1:67:c0:11:c6:d5:75:
cb:04:92:da:79:e2:f6:0b:25:0b:72:23:67:ef:ae:
fd:db:10:dd:22:ec:4b:15:93:85:f2:50:d1:97:72:
be:0c:89:9d:df:c4:85:35:c8:b7:46:79:db:0c:05:
3b:16:a5:3b:ee:eb:11:f1:26:d8:2f:a2:7b:07:17:
46:f6:cf:6f:76:0f:66:cb:9b:42:64:5b:81:7f:23:
f2:32:31:b5:95:15:ec:6b:85:25:62:1d:f9:5d:9f:
60:b0:08:64:71:65:00:f5:aa:b7:66:e8:f1:42:9c:
69:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:02:70:A3:43:A0:9F:D9:F0:AC:BE:F0:D7:24:77:FE:95:D0:28:B6
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f5:86:28:4a:43:c4:c7:8e:19:f2:3f:a2:b8:9f:4d:ba:ac:
b5:96:66:70:48:d2:73:88:1f:2d:a5:f7:08:ed:69:0d:ab:71:
3e:c4:13:46:dd:70:9a:4e:14:03:6b:69:9d:95:b2:be:28:78:
92:39:83:c9:07:f5:02:ad:e5:dd:cf:3d:55:40:fc:b2:9b:cd:
09:ca:77:e4:89:c2:8b:1e:de:72:86:54:a5:c4:18:42:80:db:
d2:02:f2:44:81:78:b0:ab:dd:66:fd:85:fa:b7:c1:ae:0d:5e:
be:70:4a:a2:6a:f0:ac:da:53:74:c7:22:2b:38:5d:9c:5e:84:
60:21:1a:06:97:95:9b:f0:1b:58:78:da:31:f0:f3:07:2c:fc:
25:81:a5:98:11:67:1b:b5:10:e5:18:14:f8:ed:14:44:45:15:
65:b6:33:b9:29:89:15:03:f3:d6:b1:68:5c:ee:21:d7:85:23:
79:ea:cb:df:51:fb:76:f8:04:22:aa:9c:b2:b4:be:cb:db:dd:
48:92:79:77:1d:11:35:4c:27:63:29:62:1b:a7:7a:12:0c:1e:
b8:3a:8f:24:0f:1f:84:bb:fa:74:9d:2c:7a:3f:01:3b:52:17:
2d:b7:85:3d:b5:16:a2:7a:b2:71:88:72:a0:66:57:e9:10:e4:
f6:58:da:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGLm+X03kNIyg7e29/l7h9OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMjZhYzllZWIzYTJjZmEyZjZjYTNmNDEzZWZiOWNkZmZl
OTcyNGUwHhcNMjYxMDMwMDcwMDExWhcNMjYxMDMxMDcwMDExWjAzMTEwLwYDVQQD
EygzMDAyNzBhMzQzYTA5ZmQ5ZjBhY2JlZjBkNzI0NzdmZTk1ZDAyOGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEtYrMPUj3aEpuuEh2+LiHjT+MTr
2lEslu7DAh5jGTqQtJbs0PQfyTZlq0+QrVHqFV2289ybuakqMJmVTPLdis6e7PMr
Wsfigimqyb4scR3+t6GgiFXC07Cu5AHGlI8HDm6rPVb7ACmMdogWRsNtjU9Tb+p2
m61AO2ntVeYV0IRTw3E4Qw0LlbR6mPh9D+FnwBHG1XXLBJLaeeL2CyULciNn7679
2xDdIuxLFZOF8lDRl3K+DImd38SFNci3RnnbDAU7FqU77usR8SbYL6J7BxdG9s9v
dg9my5tCZFuBfyPyMjG1lRXsa4UlYh35XZ9gsAhkcWUA9aq3ZujxQpxpkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDACcKNDoJ/Z8Ky+8Nckd/6V0Ci2MB8GA1UdIwQY
MBaAFJ8mrJ7rOiz6L2yj9BPvuc3/6XJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWIt
N2Q0MjY2Y2Y4MjJhLzEvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWItN2Q0MjY2Y2Y4MjJh
LzEvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/WGKEpD
xMeOGfI/orifTbqstZZmcEjSc4gfLaX3CO1pDatxPsQTRt1wmk4UA2tpnZWyvih4
kjmDyQf1Aq3l3c89VUD8spvNCcp35InCix7ecoZUpcQYQoDb0gLyRIF4sKvdZv2F
+rfBrg1evnBKomrwrNpTdMciKzhdnF6EYCEaBpeVm/AbWHjaMfDzByz8JYGlmBFn
G7UQ5RgU+O0UREUVZbYzuSmJFQPz1rFoXO4h14UjeerL31H7dvgEIqqcsrS+y9vd
SJJ5dx0RNUwnYyliG6d6EgweuDqPJA8fhLv6dJ0sej8BO1IXLbeFPbUWonqycYhy
oGZX6RDk9ljarQ==
-----END CERTIFICATE-----
Generated at Fri Oct 30 16:26:13 2026 by rpki-client