Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
File: 0RE68_NruSoPL72v47Zx9rn876g.mft (raw, json)
Hash identifier: MMri321s3+3hiFjfHFUMaUpI99vm72T7yvYpyG/rLME=
Subject key identifier: 91:59:27:BC:12:75:1A:D9:F0:EA:A3:E2:17:67:3B:94:E2:12:16:89
Authority key identifier: D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
Certificate issuer: /CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Certificate serial: 019D38D38D4B3EC5FDE1BC2F23808F747744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
Manifest number: 08E0
Signing time: Sun 29 Mar 2026 09:01:21 +0000
Manifest this update: Sun 29 Mar 2026 09:01:21 +0000
Manifest next update: Mon 30 Mar 2026 09:01:21 +0000
Files and hashes: 1: 0RE68_NruSoPL72v47Zx9rn876g.crl (hash: yHSZlMOVb5sQTIfU+MQewI4CZXjwTBGr0ZTCC+Vs5Mk=)
2: BvyJ9VlIpALPuyQE8sebxED-YP4.roa (hash: 5Go0Jt+Ko1P3sZc36GUqZasMZpi+yqnYoeBDKhqHQ94=)
3: Ca0R-mhrFY6HFoHS1b5WT3pwjYg.roa (hash: o7q7JRHvs80nHIVjNQ3bsCLMG4wGtstYaFpsR/bUbvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:8d:4b:3e:c5:fd:e1:bc:2f:23:80:8f:74:77:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Validity
Not Before: Mar 29 09:01:21 2026 GMT
Not After : Mar 30 09:01:21 2026 GMT
Subject: CN=915927bc12751ad9f0eaa3e217673b94e2121689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8e:81:0b:29:c8:38:ed:b7:cc:f6:84:30:6e:
12:2d:5a:26:c4:93:e7:6b:d3:35:55:f2:49:e3:d9:
46:fb:4b:54:60:d0:fe:06:36:a4:bf:d8:22:b4:9d:
96:d6:23:28:8d:80:02:cb:a3:16:dc:a7:77:36:9f:
42:12:f9:df:36:fc:ce:c9:76:f9:3c:40:4a:74:2a:
44:3b:12:2f:77:a3:ea:cf:bf:b9:12:bb:aa:d9:cd:
87:09:e6:3e:57:1d:d5:93:80:a0:ca:32:b2:f9:9e:
5c:40:b7:ab:e6:76:8d:e2:93:6e:e1:7b:54:a4:ba:
7c:64:c0:c1:17:79:1a:be:46:8a:2c:26:16:4a:33:
9d:92:c7:55:55:16:93:1d:23:fa:42:70:d7:bf:8c:
b5:5f:35:97:49:3b:78:1c:f2:87:fe:a3:44:b0:98:
16:0f:3f:34:0a:87:33:40:22:52:53:8b:48:7a:9d:
cf:5a:37:18:3e:af:99:a3:8f:24:6e:b3:52:94:fe:
28:a6:18:45:28:bd:fe:dd:2d:d3:74:b8:76:14:f3:
78:16:ee:c6:ea:fa:87:47:ae:3e:49:25:06:e9:76:
13:09:a8:4c:8f:81:3a:1e:e0:0c:04:6d:0a:cd:5b:
79:4e:b1:13:fa:15:8a:7c:3b:e7:8c:42:ab:05:fc:
bd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:59:27:BC:12:75:1A:D9:F0:EA:A3:E2:17:67:3B:94:E2:12:16:89
X509v3 Authority Key Identifier:
keyid:D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:73:b8:aa:98:d2:9b:28:6b:fe:32:c4:24:19:b4:0a:47:5e:
fa:6e:2d:5d:38:c0:db:8b:2d:d8:f5:a4:38:d2:70:1d:f7:02:
a2:f0:b6:75:4e:30:9c:eb:b2:d8:57:d8:3d:4b:38:75:7e:13:
70:ec:77:b1:e9:9f:08:66:4a:b2:2a:7e:3f:49:6a:af:70:0b:
ab:97:67:79:f3:06:c9:72:a1:7a:9c:c8:f0:c1:77:3e:73:52:
de:fa:6e:51:d6:68:38:cf:d2:f9:29:d9:30:0d:6c:39:bb:ea:
c7:52:2b:4d:f2:e3:12:80:91:ab:af:7d:13:b2:63:2c:21:47:
03:17:bf:80:38:20:d4:02:75:d6:18:50:3d:5a:9b:1b:e4:2d:
f6:fb:3f:85:c4:76:53:36:1f:89:ad:3a:f6:e3:d8:dc:7b:58:
db:d2:87:8b:26:39:e2:99:32:a8:8d:e3:db:f6:a0:b9:72:e4:
fd:d6:76:84:fc:f9:91:08:64:c1:2b:54:9b:00:e8:c5:52:13:
4a:2c:65:ad:ce:70:21:4b:95:1f:90:e3:b4:97:24:9b:c0:e1:
ac:38:0f:37:f6:c2:86:21:e3:9b:ce:ba:7d:4b:74:2a:3f:e0:
91:ba:a4:e5:1f:ed:c3:a2:3e:37:1e:16:1c:0f:86:b6:9b:b1:
0b:51:b3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:30 2026 by rpki-client