Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
File: 0RE68_NruSoPL72v47Zx9rn876g.mft (raw, json)
Hash identifier: eTn/bt2hUe5IIYj/inUWmTZMqYmo+lUJl96/IvgKtuQ=
Subject key identifier: B5:FC:52:FC:07:35:AC:CF:62:AE:B9:74:F3:4D:A5:99:26:08:99:05
Authority key identifier: D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
Certificate issuer: /CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Certificate serial: 019F17C2DDC3C1F75B226DBFC759AC67AFE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
Manifest number: 09D8
Signing time: Tue 30 Jun 2026 09:01:14 +0000
Manifest this update: Tue 30 Jun 2026 09:01:14 +0000
Manifest next update: Wed 01 Jul 2026 09:01:14 +0000
Files and hashes: 1: 0RE68_NruSoPL72v47Zx9rn876g.crl (hash: AC2F8DX+aEKvmNDcU7Y5hXaDCorYkEGOMlEW8onnBqg=)
2: BvyJ9VlIpALPuyQE8sebxED-YP4.roa (hash: 5Go0Jt+Ko1P3sZc36GUqZasMZpi+yqnYoeBDKhqHQ94=)
3: Ca0R-mhrFY6HFoHS1b5WT3pwjYg.roa (hash: o7q7JRHvs80nHIVjNQ3bsCLMG4wGtstYaFpsR/bUbvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:dd:c3:c1:f7:5b:22:6d:bf:c7:59:ac:67:af:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Validity
Not Before: Jun 30 09:01:14 2026 GMT
Not After : Jul 1 09:01:14 2026 GMT
Subject: CN=b5fc52fc0735accf62aeb974f34da59926089905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5a:1b:34:7d:7e:f6:77:93:1d:0b:c7:5d:10:
a4:eb:2b:ce:cb:5c:b6:42:7d:e9:61:6b:e7:38:bb:
de:3d:34:cf:9b:72:80:f9:10:37:a9:8a:e5:47:b3:
a8:f8:8e:8f:ad:2c:a0:be:c4:30:98:ec:ad:fc:dd:
98:8b:76:40:11:53:1f:c6:eb:2a:f4:99:af:47:bb:
c9:f8:a9:f1:94:14:52:df:29:92:55:6f:2f:df:7d:
85:f6:92:25:41:15:01:a9:12:09:1f:ab:44:aa:cd:
91:47:13:96:fe:50:90:a8:50:38:14:ba:bd:75:15:
46:10:62:37:4a:a2:04:ed:eb:9b:17:ab:20:92:6c:
03:69:18:02:56:b3:32:b7:f7:24:fa:a1:2b:e5:76:
e8:60:7b:d8:f6:d7:d5:ed:82:35:f0:ae:5b:9d:67:
30:71:2f:76:ce:ff:01:df:f8:52:0b:3d:a8:7a:02:
6a:59:6b:a7:09:d9:b8:f9:4b:05:26:a4:22:32:24:
ce:2a:42:7e:46:80:8d:7b:fc:8f:78:eb:30:1f:2e:
2f:de:2f:85:46:e3:57:6d:49:58:ca:74:fb:f8:cc:
99:65:9e:a0:11:46:b8:9a:a5:f8:64:6d:40:19:3b:
61:0b:a5:1b:89:70:61:21:f1:42:13:c9:ba:81:3e:
bb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FC:52:FC:07:35:AC:CF:62:AE:B9:74:F3:4D:A5:99:26:08:99:05
X509v3 Authority Key Identifier:
keyid:D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:61:ce:e0:b3:e3:df:0e:59:2b:7e:3d:c3:38:96:5d:0e:dd:
81:3c:92:56:f1:66:02:ec:39:76:bb:9b:16:58:e7:27:cb:5a:
06:b5:12:8a:55:08:95:45:73:c0:23:85:63:a4:91:d2:5b:0f:
15:29:ff:57:4f:e2:c5:6e:8d:05:a7:a0:b3:9f:f4:a7:0c:24:
bb:f8:a9:78:84:a7:95:44:89:17:fc:fb:16:eb:21:cf:ba:0e:
7b:f7:de:72:99:78:ce:c3:b2:a4:ee:db:fb:e0:cf:66:a1:6f:
e9:4d:04:49:d4:b5:8f:ca:3c:3d:e9:31:fb:d8:ab:cb:b0:db:
4b:f7:fb:fd:bd:67:b5:c2:a2:a9:02:a1:e9:f3:3c:75:1b:4d:
87:ff:89:82:78:1c:7f:bf:e1:01:96:d6:43:94:af:ab:d9:7c:
cb:65:9a:0f:f1:36:6c:19:1c:d8:64:11:5c:33:ad:83:4c:dc:
11:26:e8:19:7b:ea:4a:eb:a3:21:86:f9:91:82:42:a3:2d:dc:
1b:7c:a5:15:66:91:fb:14:02:f9:5c:0c:c7:29:7f:75:ac:51:
48:8f:f1:51:3a:f6:75:f8:3c:bf:a1:b6:23:fc:2b:3e:d7:96:
e8:44:27:6e:7b:79:7a:f4:1e:95:1f:2a:c5:0c:55:ef:9d:36:
6e:2f:52:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:11:50 2026 by rpki-client