Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
File: nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json)
Hash identifier: DGgMy6o4ilKc2JtbLHU1P34Jx+j1YOul02eU8lSmwuM=
Subject key identifier: 4F:6A:99:3F:41:82:23:33:A1:FA:42:F8:38:9E:EF:70:10:E3:69:98
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial: 01A136A4073EB659BE55B9210B1010E7FCFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
Manifest number: 1AA2
Signing time: Tue 13 Oct 2026 19:01:21 +0000
Manifest this update: Tue 13 Oct 2026 19:01:21 +0000
Manifest next update: Wed 14 Oct 2026 19:01:21 +0000
Files and hashes: 1: 9mAFKAFsUumaxtmwKspIguWpn-U.roa (hash: nsAVacl7HwId/rvDGUKYBOPV9fj57SBoEJyC2HRo14U=)
2: BxdvpbQ1TKYOcJrk4RGzX3RxD8c.roa (hash: sKqXvC0ALWhzVadZLxtC2ynHl4YiU5G3hQTuNpmHk34=)
3: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: 75w6GbvYUuuTm32Q8M2OX9C2rNMMXDgJBss1AmmEL9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:a4:07:3e:b6:59:be:55:b9:21:0b:10:10:e7:fc:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Validity
Not Before: Oct 13 19:01:21 2026 GMT
Not After : Oct 14 19:01:21 2026 GMT
Subject: CN=4f6a993f41822333a1fa42f8389eef7010e36998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:12:33:be:72:27:32:f9:9b:6c:dc:39:9f:91:
18:e5:d4:c3:37:d7:bf:58:19:06:d4:a2:87:1e:6f:
fa:78:4d:71:50:87:cb:52:cf:96:f8:0d:7e:38:87:
29:b4:38:38:e7:07:ca:05:0f:c5:bd:cd:05:f5:49:
54:33:e5:3e:6a:8e:31:81:62:4c:de:db:b1:ea:7f:
64:b5:e3:1e:2c:ef:d5:58:cd:ef:92:34:45:78:fb:
c3:c2:ac:12:d4:ab:88:15:17:5c:d3:cf:3c:03:ee:
ed:3e:17:e5:b3:a7:46:cb:f7:10:90:df:bc:94:75:
6b:3a:40:05:b5:3e:62:56:4f:5d:1f:e4:5d:51:64:
7e:e8:5a:fc:00:a6:df:33:6f:0f:7b:8e:bc:1d:b6:
a4:53:dd:1c:a5:85:05:8d:ad:2e:99:58:0c:0a:f1:
a7:bc:92:c8:cf:4b:6c:fd:ce:97:a1:ae:3c:1f:5d:
5a:c7:c5:14:14:2e:f3:a9:01:93:ee:0b:da:3d:5b:
b6:d9:13:14:79:5d:10:06:ca:2c:9b:62:30:4b:aa:
d2:32:8c:e8:da:28:bb:4d:32:05:32:2b:6f:bd:1c:
3d:ae:2b:ca:44:1d:de:fe:22:f0:83:c2:33:81:92:
fc:f3:81:5a:d0:83:a6:0a:fb:c0:6d:e7:25:ec:c5:
f9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6A:99:3F:41:82:23:33:A1:FA:42:F8:38:9E:EF:70:10:E3:69:98
X509v3 Authority Key Identifier:
keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:42:d5:6d:6d:03:a7:44:91:a6:ea:0b:d2:e1:e6:b8:d1:bf:
e6:d8:be:65:58:4c:f9:fa:a7:d7:c5:27:cc:6d:fc:2b:39:cb:
7c:59:dd:f2:96:e3:c7:3b:09:75:6e:cf:6c:14:b2:81:13:26:
8a:a6:2e:5e:70:11:34:c2:aa:46:51:a1:46:4a:94:9e:98:54:
f5:aa:ee:5c:a2:e0:50:47:63:bc:04:98:7c:da:34:77:36:92:
89:65:69:2e:1f:71:4a:e3:67:44:63:97:cd:eb:ff:fb:a6:76:
9a:be:93:df:f6:4a:aa:20:51:c0:6a:e7:9a:a6:ae:ce:9c:cd:
f6:08:87:50:0b:cc:6d:ed:33:eb:f0:9b:c0:4a:20:dd:23:db:
65:9f:13:7b:5d:79:c7:95:4d:b5:75:6b:74:d3:ca:bb:29:6d:
42:47:bb:6d:d1:56:d8:e6:f0:69:fa:63:f2:12:58:e9:8f:07:
05:ba:80:42:92:e3:81:ff:f0:28:d7:a3:36:1f:b7:4a:95:f2:
9b:ee:1c:30:5b:00:00:a4:d2:3c:05:9e:a9:cf:56:41:be:03:
9c:b7:14:81:0e:56:f3:0d:45:70:f7:29:c9:ef:27:90:b1:2c:
22:46:8b:37:a1:2a:90:4f:23:cd:eb:34:37:4e:d2:af:c8:fe:
2e:75:a5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:33:32 2026 by rpki-client