Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
File: nyasnus6LPovbKP0E--5zf_pck4.mft (raw, json)
Hash identifier: EXU+Govau2z6AOL6CNOnx4oSb/7oVFX7/B96mQGxXsE=
Subject key identifier: 28:C0:1F:EA:35:7C:9A:7A:2D:43:3A:53:84:EE:62:32:1C:46:F8:E0
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 019D9A072D3BDC91CC2B1D71EE4ED35E408B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
Manifest number: 18D7
Signing time: Fri 17 Apr 2026 06:00:54 +0000
Manifest this update: Fri 17 Apr 2026 06:00:54 +0000
Manifest next update: Sat 18 Apr 2026 06:00:54 +0000
Files and hashes: 1: IckkCSlpD90r3v7s4yAs8JcMlrc.roa (hash: VMwqztpny28xBlD0i826FGCt4rfbxOi3vTre6sh06bY=)
2: nyasnus6LPovbKP0E--5zf_pck4.crl (hash: s0Dr0GnegIhoZGv94bRo1w+jUBD6yl++ftTRgwmt9Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:2d:3b:dc:91:cc:2b:1d:71:ee:4e:d3:5e:40:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: Apr 17 06:00:54 2026 GMT
Not After : Apr 18 06:00:54 2026 GMT
Subject: CN=28c01fea357c9a7a2d433a5384ee62321c46f8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9c:61:9c:89:14:48:df:06:39:d3:26:89:b1:
3f:37:30:76:06:85:d1:39:77:a5:fb:27:10:74:ef:
56:07:64:90:d0:f0:bd:bb:3f:c2:b4:24:ef:89:36:
18:cb:d3:9d:fe:b3:aa:1b:f1:f2:f3:bb:26:7b:d8:
a3:43:6e:5d:ae:f8:04:d6:37:b6:ff:71:02:e9:39:
af:00:26:f6:0a:69:78:d3:3c:19:a7:13:04:be:b5:
94:ed:36:ae:5c:16:fb:05:62:8d:24:f5:2c:39:cc:
51:57:83:33:86:1a:23:fe:6d:d2:1b:c9:40:6b:98:
fe:3f:46:e2:6c:98:e7:6e:60:f0:48:08:a5:35:d9:
b0:64:ac:b9:e8:59:78:a3:50:8d:86:07:57:de:b9:
bc:cb:61:53:50:4a:89:f3:11:ad:be:05:e0:e0:30:
61:90:0e:fb:48:9f:79:5d:54:63:d3:0b:87:b5:52:
d3:bf:5e:79:2a:3e:82:bb:f4:72:d4:db:fa:fe:79:
3f:d7:34:e7:27:12:05:de:32:d3:1a:ea:a7:e1:6a:
78:ae:24:ed:a4:07:ca:b5:bb:c6:f4:b7:7a:56:9f:
e1:15:12:27:ae:f5:bb:fc:c1:6e:b2:3a:bf:58:86:
3b:00:b1:5d:76:e8:9a:c5:aa:05:b2:a9:87:4f:d1:
19:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C0:1F:EA:35:7C:9A:7A:2D:43:3A:53:84:EE:62:32:1C:46:F8:E0
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:55:8b:12:f6:34:9f:4c:ec:3b:41:dd:4a:f3:ca:5c:11:2a:
1a:5a:0f:ae:18:79:7d:c4:0e:8d:39:3e:43:3e:be:1c:45:11:
b9:6c:23:7a:3f:d8:52:59:87:2b:a6:53:19:a5:27:66:2b:47:
fc:f2:f5:1b:a1:e1:60:c8:91:5e:5c:96:34:ba:3a:4e:3c:97:
5f:b9:9e:e5:3f:22:3f:d5:9e:0c:87:d2:c0:8d:10:ff:fa:3e:
38:01:70:9a:7b:b1:de:13:b1:95:61:4f:88:ce:7b:e7:35:eb:
41:a0:7c:4e:9d:0d:27:e9:45:63:28:fb:c2:9a:24:54:f7:37:
87:c2:3b:04:a4:13:43:cb:17:7a:0b:53:4c:d9:91:89:ed:a3:
65:f6:84:06:99:e3:2c:8e:30:7f:ee:ef:d6:eb:8b:83:ce:b0:
0f:d8:3e:71:10:79:67:57:c0:db:c0:ec:f6:af:48:96:5b:0e:
d6:2c:3d:7e:00:f2:c5:e1:c9:1d:8d:03:e2:62:3d:95:fb:02:
9b:c2:9f:0b:00:97:59:df:72:5c:f4:56:fd:57:70:10:c6:50:
eb:4f:dc:06:46:35:48:c9:3a:5a:8e:ae:dd:09:cb:0a:70:d5:
4c:32:4e:1c:54:09:d0:05:1d:34:bd:9e:17:db:a1:d9:d0:34:
6b:af:d5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:15:55 2026 by rpki-client