Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
File: nyasnus6LPovbKP0E--5zf_pck4.mft (raw, json)
Hash identifier: QzFR2plvTWYtldlLCDg88F3y+TlHv/lj+Ctgin9eU7s=
Subject key identifier: 3B:CE:D7:12:C2:A3:1D:9D:92:44:ED:A8:8D:C8:99:1E:95:2A:FF:4D
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 01A0D614D73E586ADE85BF079E1064ACC49D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
Manifest number: 1A85
Signing time: Fri 25 Sep 2026 01:01:25 +0000
Manifest this update: Fri 25 Sep 2026 01:01:25 +0000
Manifest next update: Sat 26 Sep 2026 01:01:25 +0000
Files and hashes: 1: JDo3Dh0tpt2WY936ANlUtYGWoM0.roa (hash: WvNxcMUuMNQVZtG0J9Fei7h17wqCMKoS9L4tiVuv4NU=)
2: j_QCSh7ZF3PrwHAJ9e8hUlOg6lI.roa (hash: pmebqOompZdeawcmXruuUY8oJRLj4i7j3MeIvnSwW8o=)
3: nyasnus6LPovbKP0E--5zf_pck4.crl (hash: Gt4DumBfPKtjb7tH1l4LCwZS64f9gVx2N59o3tuvSy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:14:d7:3e:58:6a:de:85:bf:07:9e:10:64:ac:c4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: Sep 25 01:01:25 2026 GMT
Not After : Sep 26 01:01:25 2026 GMT
Subject: CN=3bced712c2a31d9d9244eda88dc8991e952aff4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5f:60:20:9f:f1:a1:3e:b4:63:75:a4:3c:2c:
17:c3:b9:83:88:32:5f:c9:82:99:03:93:26:ee:59:
94:79:9d:ca:c8:9e:60:84:37:e5:93:97:de:e5:40:
b6:bb:93:3d:1e:bc:c9:0d:a9:ea:2b:09:23:a9:27:
27:24:e3:eb:02:5e:77:b8:3f:a7:b9:96:6b:a1:7d:
ea:f1:97:dd:26:62:ac:67:8c:48:e0:ed:a2:c6:a1:
f2:cd:cb:27:d8:fb:f1:cc:69:0b:38:92:91:68:02:
00:c5:14:fc:1b:e4:36:a2:d3:ea:a0:bf:91:82:2f:
b5:06:3d:5f:9e:59:0a:af:0d:ef:b6:c9:af:9e:85:
4d:ff:e2:46:40:ab:e8:f3:fa:3b:a3:dc:24:65:4d:
39:49:ba:a5:40:7e:64:6a:33:9f:05:90:13:ae:85:
c7:37:7e:5b:14:49:74:31:e3:03:6f:a7:50:59:69:
cc:14:d2:24:d0:e6:c4:7e:ed:8d:5d:e4:96:d3:2a:
58:ea:b6:c6:d5:f3:c5:38:26:17:f5:45:ec:94:47:
69:48:32:85:d3:ab:65:2e:33:38:ea:92:1c:a8:05:
98:dc:5d:f1:49:7b:cf:9b:f0:8f:23:b2:ee:14:08:
0b:03:a2:69:c1:7f:32:7f:6d:f0:91:fb:9b:94:ed:
9d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CE:D7:12:C2:A3:1D:9D:92:44:ED:A8:8D:C8:99:1E:95:2A:FF:4D
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7e:97:55:d3:45:ba:43:19:d6:02:46:02:61:4a:e0:f9:86:
6d:e5:29:4d:71:c3:33:46:41:df:3d:68:7f:9a:36:df:7e:d0:
40:44:72:b4:49:69:4a:40:13:4a:80:49:1e:26:b3:e2:99:58:
29:ee:81:a7:56:82:39:91:0f:91:9c:fa:b0:0d:fe:ad:16:45:
8c:fc:ca:5d:f4:08:59:85:67:ac:0d:e5:2f:b7:47:67:d0:fd:
02:bb:ce:af:46:75:09:1b:4a:74:2e:3e:96:d0:bc:c3:5c:98:
99:70:af:4d:64:0d:c0:3f:37:75:ce:95:aa:2b:cf:11:10:e6:
98:1e:6d:b5:45:f6:81:a7:0d:2d:cc:eb:9e:5b:e9:02:e7:15:
04:65:f3:fa:a3:36:cc:77:23:6f:ce:56:00:35:80:62:de:ab:
8f:55:f5:4c:e0:0f:2c:a5:dc:57:b2:05:c8:08:fc:e9:20:cc:
b6:79:7d:ea:fa:cb:e1:1a:c2:9e:15:52:53:fc:fc:d2:8c:a9:
e2:63:a0:71:cf:23:ca:5c:40:6f:e3:aa:fa:ed:b6:5b:63:e8:
55:62:6c:3f:bf:22:34:b8:36:db:f6:a1:e6:d7:17:2f:15:44:
1f:e2:3d:33:16:1a:eb:0a:f5:7a:e4:6f:94:5d:86:78:c9:cb:
ad:35:00:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:41:23 2026 by rpki-client