Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
File: nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json)
Hash identifier: 0eLk23L9VD7fOPoWYyStPM6rUK+S6NFljyjxCuN/wqQ=
Subject key identifier: 46:B7:63:DD:99:BA:88:B2:29:41:22:96:7B:81:86:B8:6C:73:1A:3D
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial: 019CADFE55673EDCE42A53D63E3D94F31140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 10:00:52 +0000
Manifest this update: Mon 02 Mar 2026 10:00:52 +0000
Manifest next update: Tue 03 Mar 2026 10:00:52 +0000
Files and hashes: 1: 9mAFKAFsUumaxtmwKspIguWpn-U.roa (hash: nsAVacl7HwId/rvDGUKYBOPV9fj57SBoEJyC2HRo14U=)
2: BxdvpbQ1TKYOcJrk4RGzX3RxD8c.roa (hash: sKqXvC0ALWhzVadZLxtC2ynHl4YiU5G3hQTuNpmHk34=)
3: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: UdG++8er4EQKmBMfnSLpd1OUTmrYl8v6QBJpC0jSveQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:55:67:3e:dc:e4:2a:53:d6:3e:3d:94:f3:11:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Validity
Not Before: Mar 2 10:00:52 2026 GMT
Not After : Mar 3 10:00:52 2026 GMT
Subject: CN=46b763dd99ba88b2294122967b8186b86c731a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e7:8c:9b:04:f8:84:a6:5c:42:78:71:4e:6f:
ca:23:a6:27:12:85:55:17:51:2d:6a:06:64:51:f6:
bd:32:82:13:b5:9e:3b:fb:0a:0d:7d:4c:45:53:7e:
43:53:b4:91:d9:71:ec:41:48:c5:b3:a9:b9:e4:ff:
0b:ce:d0:5a:d2:bb:c3:09:99:ec:4f:ee:85:ee:94:
f9:5e:f0:13:97:ad:c7:f2:e1:ce:6a:e8:13:93:72:
76:0f:df:7c:79:dd:72:14:bd:6d:ee:07:12:17:ea:
27:12:48:37:12:0b:22:51:68:35:8a:9a:20:d8:95:
3d:d6:4b:f2:32:50:d6:35:0c:4d:2f:8e:d0:84:46:
59:b9:16:e5:70:bb:46:b4:30:7e:2f:a5:57:2e:77:
1b:4b:db:e8:a5:c5:cc:09:90:44:02:9b:07:dc:11:
57:e0:0f:65:af:83:6f:d0:38:44:78:a2:45:f2:69:
10:01:fa:2c:8c:ab:53:cc:c1:3c:12:8d:93:39:48:
9d:f9:8a:e4:99:89:37:9d:ef:8f:ac:77:5b:68:99:
75:d1:89:f2:3b:5d:af:9d:44:38:ba:ca:cf:48:d0:
3e:4e:be:b2:01:12:41:68:a6:95:63:5e:db:84:86:
e6:f2:74:e3:0c:01:e4:89:e5:1d:6f:ad:23:da:c3:
51:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B7:63:DD:99:BA:88:B2:29:41:22:96:7B:81:86:B8:6C:73:1A:3D
X509v3 Authority Key Identifier:
keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:29:b3:4c:82:00:33:65:af:6c:21:b8:ac:24:3a:64:c5:e7:
50:e7:c2:f6:f4:07:87:61:1c:5e:25:75:91:75:36:42:18:fa:
f8:45:ff:34:40:6b:b6:78:95:9e:f8:8b:c3:d4:60:20:1d:03:
7b:1e:aa:0b:20:5c:c1:f2:bb:f1:8a:dd:0a:bb:5f:9f:dd:8e:
ef:dc:b3:7a:f4:7f:fd:6b:87:76:dc:50:8d:85:95:f0:85:65:
0d:49:e8:2e:8f:fe:b4:07:a1:ba:0c:85:f5:6d:2b:92:a6:3b:
f9:8c:7a:88:eb:7c:d3:0d:9d:15:5f:95:9b:e4:ce:83:a1:ae:
14:c5:d6:18:7a:c7:65:16:13:17:81:6c:82:21:12:90:20:ad:
0b:cd:07:96:82:b3:04:6d:54:aa:3a:2d:86:81:5c:7e:fd:1d:
f7:71:58:dd:4f:5f:0f:3f:d4:c5:23:1c:71:f6:4f:59:56:7a:
dd:96:84:27:9c:0f:87:5e:ab:d5:e2:ef:3d:3d:c6:58:61:e9:
24:a8:05:bd:09:6c:f2:92:ba:fa:59:0f:b7:87:2a:2a:17:cb:
e1:c7:24:8b:34:73:d6:38:72:33:ab:dd:cd:46:07:7c:19:cd:
5d:06:6f:22:9e:42:33:c7:b4:00:94:22:31:74:2f:c3:a0:5e:
43:4c:e9:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/lVnPtzkKlPWPj2U8xFAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYmNiZmViOGZhODk3Mzc0NzE4YTkxMDJhNGE3MDY3MWUy
YWFiZjkwHhcNMjYwMzAyMTAwMDUyWhcNMjYwMzAzMTAwMDUyWjAzMTEwLwYDVQQD
Eyg0NmI3NjNkZDk5YmE4OGIyMjk0MTIyOTY3YjgxODZiODZjNzMxYTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OeMmwT4hKZcQnhxTm/KI6YnEoVV
F1EtagZkUfa9MoITtZ47+woNfUxFU35DU7SR2XHsQUjFs6m55P8LztBa0rvDCZns
T+6F7pT5XvATl63H8uHOaugTk3J2D998ed1yFL1t7gcSF+onEkg3EgsiUWg1ipog
2JU91kvyMlDWNQxNL47QhEZZuRblcLtGtDB+L6VXLncbS9vopcXMCZBEApsH3BFX
4A9lr4Nv0DhEeKJF8mkQAfosjKtTzME8Eo2TOUid+YrkmYk3ne+PrHdbaJl10Yny
O12vnUQ4usrPSNA+Tr6yARJBaKaVY17bhIbm8nTjDAHkieUdb60j2sNRoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEa3Y92ZuoiyKUEilnuBhrhscxo9MB8GA1UdIwQY
MBaAFJ68v+uPqJc3RxipECpKcGceKqv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xMzhjZTMtZjM4Zi00M2U5LThkYzkt
OWNkMGNhZTA2MjkyLzEvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xMzhjZTMtZjM4Zi00M2U5LThkYzktOWNkMGNhZTA2Mjky
LzEvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVimzTIIA
M2WvbCG4rCQ6ZMXnUOfC9vQHh2EcXiV1kXU2Qhj6+EX/NEBrtniVnviLw9RgIB0D
ex6qCyBcwfK78YrdCrtfn92O79yzevR//WuHdtxQjYWV8IVlDUnoLo/+tAehugyF
9W0rkqY7+Yx6iOt80w2dFV+Vm+TOg6GuFMXWGHrHZRYTF4FsgiESkCCtC80HloKz
BG1UqjothoFcfv0d93FY3U9fDz/UxSMccfZPWVZ63ZaEJ5wPh16r1eLvPT3GWGHp
JKgFvQls8pK6+lkPt4cqKhfL4cckizRz1jhyM6vdzUYHfBnNXQZvIp5CM8e0AJQi
MXQvw6BeQ0zpDg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:03:02 2026 by rpki-client