Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
File: nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json)
Hash identifier: 359LTjjmQOyLowVjt27fNC7Zrt+QfhVEFMwPUt7pkpY=
Subject key identifier: ED:EF:3D:8B:70:84:B3:3A:50:85:1D:B0:46:08:5C:30:A5:37:77:19
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial: 019D9B880D6991845F7E9044E5FF1880B3CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 13:01:17 +0000
Manifest this update: Fri 17 Apr 2026 13:01:17 +0000
Manifest next update: Sat 18 Apr 2026 13:01:17 +0000
Files and hashes: 1: 9mAFKAFsUumaxtmwKspIguWpn-U.roa (hash: nsAVacl7HwId/rvDGUKYBOPV9fj57SBoEJyC2HRo14U=)
2: BxdvpbQ1TKYOcJrk4RGzX3RxD8c.roa (hash: sKqXvC0ALWhzVadZLxtC2ynHl4YiU5G3hQTuNpmHk34=)
3: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: TwDGAGZ+EZW8H/xc9RmxK1SbM52Ff/dD0n6qw0edLuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:88:0d:69:91:84:5f:7e:90:44:e5:ff:18:80:b3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Validity
Not Before: Apr 17 13:01:17 2026 GMT
Not After : Apr 18 13:01:17 2026 GMT
Subject: CN=edef3d8b7084b33a50851db046085c30a5377719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cc:13:6d:5f:14:20:d0:ab:29:69:38:52:4e:
af:5d:05:20:f4:42:6c:0c:7a:49:c5:69:fc:fd:ab:
be:0b:9f:cc:be:32:9c:6a:9f:c0:ce:5f:9d:9f:82:
1a:84:31:fd:85:b6:10:a8:9b:70:01:a9:11:c3:10:
6e:b4:0a:cd:83:ed:ea:93:e6:c0:22:75:83:21:67:
2c:a8:62:ba:28:11:5b:a9:a4:b0:74:25:9c:da:ff:
a0:eb:84:28:39:7d:a2:c7:66:b5:7d:55:a4:5c:93:
d2:a9:81:bd:68:c5:1f:34:b5:8b:1a:1e:3c:be:a9:
7e:0e:52:79:72:ac:44:03:d6:fd:9a:81:c1:70:0e:
5c:a5:7c:32:97:b9:5e:c2:ba:e1:da:15:5b:38:bb:
c2:95:4b:1d:4f:70:37:61:3e:ed:0d:d3:ea:42:98:
a9:e1:93:d1:27:3a:ce:e0:da:db:21:0c:0c:09:1c:
72:92:2f:93:f8:ea:26:2c:a9:21:ad:42:d6:54:5e:
6f:9f:64:bd:4f:42:f8:04:ef:6b:80:73:46:b2:a3:
27:ef:79:99:a1:8f:77:2a:1d:fd:58:90:b0:2f:a1:
4c:71:4f:f3:6c:76:c4:d2:a0:0e:3b:b4:cc:d8:03:
68:d5:93:58:86:d2:d7:f7:e3:5e:cf:b9:34:c0:bc:
54:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:EF:3D:8B:70:84:B3:3A:50:85:1D:B0:46:08:5C:30:A5:37:77:19
X509v3 Authority Key Identifier:
keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:16:f8:f9:f5:58:bd:c3:2f:90:31:9c:5e:92:4f:f2:e5:55:
cb:36:00:44:fe:da:1b:a4:46:1a:c8:72:81:9d:7e:77:af:a3:
e5:a9:78:81:1f:30:24:21:39:39:3a:4e:4e:f7:96:2a:49:87:
1a:19:87:23:95:7c:f3:35:47:69:ad:8e:9e:ae:d1:68:9c:17:
e4:f4:af:52:a1:90:9f:54:96:ac:ab:b2:8e:9e:e3:db:5b:d2:
74:51:5f:c3:7e:c4:9d:fd:5e:b3:57:d3:d4:99:e9:b5:fe:8f:
bf:96:ad:68:98:f7:36:97:34:33:b7:db:ca:10:d7:5a:e4:d0:
b2:5e:0e:ea:8d:a8:a4:36:2f:0f:cd:ab:aa:05:c8:29:59:44:
49:74:db:11:3f:67:e7:42:1d:5d:e2:1c:73:0f:e7:1a:fb:85:
91:70:1c:43:22:18:44:90:c5:95:0b:8e:55:ff:4a:8f:1e:35:
66:20:0f:a2:86:78:c6:17:ed:f3:e2:d0:f4:1f:46:5f:50:e9:
21:2d:e7:c3:e4:63:5d:50:dc:03:bc:51:03:1b:3c:b7:18:e5:
ab:0b:1e:d4:08:67:c7:bb:3d:01:b4:c7:30:c7:83:4f:2f:ac:
e5:1d:5d:5f:22:a7:d4:9e:93:1c:c0:d5:df:04:7a:96:ea:68:
ee:07:70:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:22:11 2026 by rpki-client