Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
File: nyasnus6LPovbKP0E--5zf_pck4.mft (raw, json)
Hash identifier: SNCkNcnkhp7iiGN5wiq5ZLJM4wanCxdSVKVxkZdfCxg=
Subject key identifier: 4C:6B:84:94:10:67:D8:9E:6D:8E:1E:CB:56:B4:DB:0D:9A:5D:A4:A9
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 019CADFEA9DAB5AFD37E4C527A7DD98591B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
Manifest number: 185C
Signing time: Mon 02 Mar 2026 10:01:13 +0000
Manifest this update: Mon 02 Mar 2026 10:01:13 +0000
Manifest next update: Tue 03 Mar 2026 10:01:13 +0000
Files and hashes: 1: UZP3Gc1tEArZEO1jpWrsmOTGGCA.roa (hash: t5wFQXCnNtRMJj9vlZU4BrlPsrIPbpyPer98pMTdsxM=)
2: nyasnus6LPovbKP0E--5zf_pck4.crl (hash: ISWQ8Jrt0v+wntwLEM4eebwr68gcYGcyroBpHOISDKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:a9:da:b5:af:d3:7e:4c:52:7a:7d:d9:85:91:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: Mar 2 10:01:13 2026 GMT
Not After : Mar 3 10:01:13 2026 GMT
Subject: CN=4c6b84941067d89e6d8e1ecb56b4db0d9a5da4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3b:0e:0a:0c:28:38:70:6e:3c:53:cd:23:f2:
01:77:a8:6c:2f:c9:a7:df:ee:31:54:d6:d6:4f:7d:
59:58:7b:a1:a8:bc:7b:48:22:3d:80:51:a7:8c:9b:
83:b2:79:c1:6d:24:b6:4b:11:6b:2e:31:1a:a1:84:
a6:bc:78:f9:c2:73:35:5b:98:bc:62:b3:70:e4:91:
66:f5:0d:9e:52:2e:03:06:90:67:1f:cf:8e:2b:c5:
5c:9c:ca:3b:12:42:91:57:1f:79:ce:94:db:fc:35:
05:c0:e4:f2:3f:ca:83:5b:0b:38:7b:4e:b5:53:5a:
2e:1b:83:5f:3d:38:97:7d:91:15:d7:de:64:57:49:
63:b6:a5:98:a0:39:90:b7:62:c3:f0:8f:ba:ac:4a:
9c:7b:22:ea:f8:8a:49:75:cb:38:60:0a:18:50:78:
57:4c:e7:d7:73:e8:3e:79:58:94:bf:c6:9b:a4:06:
0c:22:31:f5:1c:a2:45:f8:ff:f4:dc:f8:f7:7f:8b:
87:db:15:6e:31:57:de:b1:9a:ca:08:ff:97:22:20:
e2:cc:d9:c1:ef:61:48:ff:6b:88:fc:1e:5a:2a:73:
fd:70:1c:cd:55:3f:cb:a6:20:83:51:6f:43:d7:da:
0f:f0:5e:76:c9:7f:f0:99:bc:e6:3b:e9:49:b1:5d:
e6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6B:84:94:10:67:D8:9E:6D:8E:1E:CB:56:B4:DB:0D:9A:5D:A4:A9
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3b:04:ce:17:a4:7c:ae:b6:6b:14:54:54:aa:5e:03:da:6c:
29:11:ec:cc:21:28:9d:72:9f:41:f2:d8:d0:5f:07:d3:c8:5b:
83:01:d9:2a:2b:25:64:cb:12:16:28:13:7d:80:3e:14:ed:c7:
d4:57:b9:d6:70:41:84:e1:3b:af:a2:5f:a0:05:1c:d0:84:6a:
d2:14:03:de:75:62:dd:a4:f2:59:d0:f8:f6:4f:e5:1c:a6:10:
c3:5d:30:98:99:23:ff:c4:b2:8a:52:76:cd:4f:e8:e1:af:de:
44:1a:32:1a:24:40:b4:4c:f0:fe:56:b4:52:db:f0:a5:dd:2f:
ca:28:40:69:74:25:ec:0a:2b:a5:93:f3:f8:ae:ca:15:f9:63:
b6:36:8d:77:2c:d5:dd:ed:8f:89:ab:70:9c:ae:fe:39:64:95:
ff:b5:ed:b2:66:9a:a3:c0:38:3d:0c:61:85:d1:38:97:e2:8d:
7b:c0:3b:aa:73:b8:60:36:34:c4:e4:1b:86:2f:9f:bc:7a:46:
df:6f:3e:dc:66:1a:11:6f:5b:e8:fb:22:d2:02:8a:11:c4:75:
da:9a:01:e1:af:fa:0e:83:2a:ae:6a:71:ad:b4:4a:f3:12:97:
5d:85:17:d2:09:2f:17:f7:77:ae:b6:fc:6d:c6:6c:4e:15:c1:
19:38:7e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:21:16 2026 by rpki-client