Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
File: nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json)
Hash identifier: HKl7QUos9svaRpy85n9fq5LelQeJi+WvTx382sIdC4w=
Subject key identifier: 4B:7D:AF:D6:D2:F5:F1:B4:42:61:14:36:A7:78:5D:3C:FA:BF:B0:63
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial: 019EC30054CCC86D0D967F486F22984E936A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 22:00:39 +0000
Manifest this update: Sat 13 Jun 2026 22:00:39 +0000
Manifest next update: Sun 14 Jun 2026 22:00:39 +0000
Files and hashes: 1: 9mAFKAFsUumaxtmwKspIguWpn-U.roa (hash: nsAVacl7HwId/rvDGUKYBOPV9fj57SBoEJyC2HRo14U=)
2: BxdvpbQ1TKYOcJrk4RGzX3RxD8c.roa (hash: sKqXvC0ALWhzVadZLxtC2ynHl4YiU5G3hQTuNpmHk34=)
3: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: GVY7FpgjT79pprBOho1fGQ4w06c9ta9OlCoa7EWaBQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:54:cc:c8:6d:0d:96:7f:48:6f:22:98:4e:93:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Validity
Not Before: Jun 13 22:00:39 2026 GMT
Not After : Jun 14 22:00:39 2026 GMT
Subject: CN=4b7dafd6d2f5f1b442611436a7785d3cfabfb063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:54:26:55:e5:7f:0e:b1:5a:a9:a9:8f:e3:ab:
d6:7c:40:57:a7:15:1e:0b:c4:6a:6a:09:6b:07:ad:
52:1c:80:ca:14:e5:95:96:80:27:6d:14:c1:cf:0f:
86:be:a9:da:fa:b0:e3:0e:e9:5c:5f:a9:73:a3:c4:
f5:af:8a:b4:15:65:94:8a:d1:d7:6b:72:01:e7:70:
56:b5:94:ac:c5:a1:f8:09:46:e2:01:fd:a6:4f:31:
19:1a:81:45:6a:ca:03:10:e0:aa:c1:00:56:02:e6:
c7:a1:5c:11:7e:7d:57:b3:a6:d6:6a:41:5d:43:10:
76:f7:a5:f6:6f:e2:21:e4:4a:cf:f3:ed:ad:17:41:
bc:6d:3a:6b:e7:db:3f:2b:dc:52:f8:92:64:74:90:
d8:a4:ba:5e:35:77:0e:34:9c:77:72:bc:a9:e8:3d:
1e:d2:ce:78:7a:50:ab:f6:b8:d2:c4:f1:d4:df:42:
d8:27:5a:e1:8f:84:33:5f:01:0c:3f:07:14:7a:96:
ff:0c:ca:f3:35:7d:f7:7a:36:d2:6c:92:83:f7:51:
a0:b3:47:2f:47:2f:e0:cc:0f:3a:51:3a:4b:bb:46:
e3:04:51:52:d7:df:f7:c6:ef:ca:32:ab:25:4b:2a:
3f:4a:8b:09:ae:04:69:db:5a:a3:97:e2:df:2a:92:
ed:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7D:AF:D6:D2:F5:F1:B4:42:61:14:36:A7:78:5D:3C:FA:BF:B0:63
X509v3 Authority Key Identifier:
keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:62:25:70:1c:06:c0:54:7b:04:b9:45:40:49:28:87:87:48:
2d:1f:e6:09:e2:fb:0a:c5:58:6b:96:1e:56:36:56:00:15:8f:
20:bc:d8:8e:89:72:d0:cf:cd:06:f2:27:cd:b7:8b:47:a9:07:
1f:b7:01:64:e0:07:2f:10:e7:d3:cd:36:d1:d2:48:34:0d:7c:
09:10:2c:95:63:29:28:c0:5d:9a:33:72:8d:36:43:e7:81:30:
d5:75:e1:84:a2:21:08:94:0c:59:aa:7c:87:a5:ff:9d:ef:e4:
5f:3d:6b:28:1f:29:a7:63:34:32:bd:1f:ae:8a:32:71:e3:18:
fd:71:2c:a3:81:b6:20:39:4f:a7:e6:b1:fa:38:00:b4:e9:47:
09:15:50:e6:87:c3:2c:7f:c5:73:43:81:f8:dd:3a:8d:65:66:
19:94:af:b7:4f:4e:9c:33:69:c8:63:d1:e2:b1:58:0b:d9:bd:
9b:f6:4e:a9:17:ab:17:18:91:8c:8b:48:d7:f0:8d:2f:a0:cd:
e5:6d:cf:da:36:12:0b:f0:cf:9c:b9:f6:95:07:39:d8:b0:47:
5f:20:54:4b:ab:f7:dc:ab:c7:88:ef:22:ae:af:f4:79:30:10:
e4:e3:b5:3d:cb:3a:c8:09:57:76:54:63:0f:d1:4d:81:b0:dd:
52:f7:da:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:37:20 2026 by rpki-client