Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
File: nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json)
Hash identifier: XHn1rjmp0vGjfcMQCu/R7sftzsFYmUo3clouGKUhxlc=
Subject key identifier: FF:3B:69:50:C3:D8:E9:35:03:C8:E5:43:63:E7:73:3F:98:B9:3B:9E
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial: 019FAABE7ED346733FD59093966A513F1A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 22:00:38 +0000
Manifest this update: Tue 28 Jul 2026 22:00:38 +0000
Manifest next update: Wed 29 Jul 2026 22:00:38 +0000
Files and hashes: 1: 9mAFKAFsUumaxtmwKspIguWpn-U.roa (hash: nsAVacl7HwId/rvDGUKYBOPV9fj57SBoEJyC2HRo14U=)
2: BxdvpbQ1TKYOcJrk4RGzX3RxD8c.roa (hash: sKqXvC0ALWhzVadZLxtC2ynHl4YiU5G3hQTuNpmHk34=)
3: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: NLN/luAGTu9LbX/lHh1LPRy5+qt1FmPG3WX9qPja4dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:7e:d3:46:73:3f:d5:90:93:96:6a:51:3f:1a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Validity
Not Before: Jul 28 22:00:38 2026 GMT
Not After : Jul 29 22:00:38 2026 GMT
Subject: CN=ff3b6950c3d8e93503c8e54363e7733f98b93b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:8c:06:2b:91:5b:ef:cc:da:2f:35:0b:02:
17:0c:83:27:4d:5e:82:19:83:de:0a:d9:8f:c6:98:
dc:9a:6a:3a:93:f3:87:8d:41:55:8d:5c:6a:61:12:
4b:51:66:68:06:92:c4:e0:a1:8e:f9:08:1a:b5:4e:
6a:dd:63:e3:42:ae:42:8a:a8:54:64:4b:43:b6:d1:
98:48:d3:01:5c:ae:db:24:7e:01:e6:6f:99:c1:01:
64:c2:3f:a3:63:06:0a:b1:22:a0:32:e5:05:c2:88:
26:6b:5e:a1:a6:26:3e:87:c8:1b:b3:9d:80:ed:88:
9b:25:70:b6:41:01:78:b6:35:2e:b5:f0:fd:8b:33:
5d:84:55:0c:13:84:31:65:34:00:3a:b7:47:eb:e7:
72:9a:71:fe:c9:73:3e:dc:11:09:a9:48:1f:1b:43:
61:fd:f7:fe:4b:0b:58:af:af:d8:ac:ee:91:ec:10:
f0:68:b1:32:c4:a9:1b:56:9e:bd:14:d7:f4:63:71:
a0:ed:d3:93:64:c7:b5:c9:1b:08:a3:14:f0:71:35:
37:41:59:11:17:c7:72:4c:5b:b7:c6:d6:55:5b:1a:
01:f2:cd:d2:f3:9e:c4:99:5b:b1:bb:8b:1a:db:b6:
ab:47:bb:b5:a0:de:69:6c:94:ff:a6:ee:64:03:5d:
11:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3B:69:50:C3:D8:E9:35:03:C8:E5:43:63:E7:73:3F:98:B9:3B:9E
X509v3 Authority Key Identifier:
keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c5:e0:75:f0:df:e4:37:2c:92:e3:8f:c0:7d:e7:6f:e1:b5:
10:07:59:9a:a1:07:e3:4c:ca:74:70:26:8f:b7:6c:fb:3b:8f:
1e:f0:ab:d3:85:d9:4d:5c:9c:55:6a:dc:ae:6d:ae:cd:4d:37:
1a:26:e9:1c:21:54:43:5d:9b:9f:23:89:05:1a:b3:b4:b6:01:
7f:2e:a4:51:d4:52:db:ef:86:bf:8d:be:1a:a2:ba:74:54:84:
67:88:b3:2b:3c:13:d6:78:07:d8:00:06:95:94:9c:9b:5e:94:
96:37:2f:02:d7:50:42:14:06:fd:f1:3a:7b:69:4d:57:6d:1a:
9b:4a:51:5b:aa:ac:44:7c:b5:46:91:2c:14:aa:3d:bb:53:67:
a1:7d:54:4e:83:42:0a:b0:39:b5:7f:c0:48:ef:65:d7:39:14:
bb:f7:0c:98:c7:9f:5f:88:bb:20:7b:3b:f3:01:6b:72:4c:7c:
59:72:ec:9b:2f:e1:6f:5b:20:17:e2:e0:a5:97:64:b1:b0:98:
9a:8c:05:0e:28:ce:cf:0e:f6:0c:04:16:2c:60:86:51:34:d1:
7d:17:53:28:38:23:e5:c7:41:c9:e2:68:a0:bc:f9:5e:f4:66:
d2:e1:54:99:72:04:07:dd:14:fa:c7:f5:56:cb:0b:4d:12:94:
02:8e:43:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:52:21 2026 by rpki-client