
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
File: 0RE68_NruSoPL72v47Zx9rn876g.mft (raw, json)
Hash identifier: iiW84AtFWDcZ/q8jeQiYEXalEb0I/z/Gksf3hdJbEcE=
Subject key identifier: FB:0B:76:95:5E:09:5F:C0:BD:61:45:F1:EA:1C:22:A0:D9:F2:7F:BB
Authority key identifier: D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
Certificate issuer: /CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Certificate serial: 01A1DE7044116E9E7CEA82007BBA5F4AF98F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
Manifest number: 0B48
Signing time: Sun 15 Nov 2026 09:01:01 +0000
Manifest this update: Sun 15 Nov 2026 09:01:01 +0000
Manifest next update: Mon 16 Nov 2026 09:01:01 +0000
Files and hashes: 1: 0RE68_NruSoPL72v47Zx9rn876g.crl (hash: bDs3lzj8pArqwSdWjywgnaUk8Aa1ivn4V8CoBRVnyyc=)
2: BvyJ9VlIpALPuyQE8sebxED-YP4.roa (hash: 5Go0Jt+Ko1P3sZc36GUqZasMZpi+yqnYoeBDKhqHQ94=)
3: Ca0R-mhrFY6HFoHS1b5WT3pwjYg.roa (hash: o7q7JRHvs80nHIVjNQ3bsCLMG4wGtstYaFpsR/bUbvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:44:11:6e:9e:7c:ea:82:00:7b:ba:5f:4a:f9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Validity
Not Before: Nov 15 09:01:01 2026 GMT
Not After : Nov 16 09:01:01 2026 GMT
Subject: CN=fb0b76955e095fc0bd6145f1ea1c22a0d9f27fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:51:6c:98:73:f1:8d:b9:5e:bf:fe:8b:7e:a1:
23:c1:d6:c2:55:c7:06:c3:db:33:b3:57:03:d1:09:
fb:0a:1a:0a:61:5d:ac:82:c7:2a:e5:13:b8:f6:7d:
14:08:b6:c5:2a:24:33:2e:42:05:0e:51:6a:f0:bb:
df:62:e9:6d:8a:f1:4c:88:15:2b:6e:88:dc:a6:c7:
77:99:9a:52:79:d2:38:97:74:5c:4a:e9:c0:3d:08:
c4:6a:eb:c0:2f:77:f8:c0:c6:cb:fa:76:20:77:8e:
10:00:29:ed:df:43:57:bd:d9:6a:63:d8:f6:ca:e3:
17:3b:c0:b5:da:81:bb:d3:81:64:07:98:3e:98:d2:
27:f3:82:65:9b:0d:85:bc:b5:58:5f:bc:ac:f5:e4:
77:b6:c3:fb:e5:71:e8:33:fb:e0:61:84:e6:7f:8a:
5f:bc:04:81:21:58:62:81:f4:35:80:69:b3:1e:2a:
0d:42:16:1a:cc:b1:64:5a:ad:02:78:e5:50:98:f2:
f3:09:75:5b:c3:26:f8:f6:41:34:33:8f:e9:fd:7d:
a6:ce:28:7d:59:0b:04:e7:27:6c:41:36:8e:6c:c8:
bd:85:8e:ea:a7:35:85:57:9e:e8:92:2c:29:a1:97:
32:a2:c3:6d:1e:a0:17:e0:c0:b6:af:b6:c2:9e:7e:
e2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0B:76:95:5E:09:5F:C0:BD:61:45:F1:EA:1C:22:A0:D9:F2:7F:BB
X509v3 Authority Key Identifier:
keyid:D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e0:d7:8b:27:00:45:6e:bc:1c:08:b5:4c:8b:6d:cd:73:57:
4e:97:ca:38:d3:51:a4:5f:02:5a:6a:95:61:5a:f6:bc:de:da:
93:c5:aa:bc:dd:6a:46:da:c8:06:b5:f3:c9:c4:ac:36:9b:97:
c6:67:29:1f:1d:5d:c2:84:1f:98:87:d4:ff:e9:2c:58:16:d8:
2a:ad:b8:2b:de:9a:8f:a8:36:05:36:62:cb:74:5f:5e:3c:5b:
db:46:43:b1:76:95:f0:7e:bb:df:df:f3:e1:85:99:ee:19:a9:
ba:c7:98:a4:5e:b4:f4:da:f5:5d:7c:c7:4c:d5:c2:49:84:81:
36:65:3e:9b:db:f4:c7:24:a3:f2:33:51:48:ac:a4:8b:5d:8d:
60:c1:27:41:7c:4d:bc:f5:40:9b:9c:e9:9c:94:d7:d2:78:b6:
8e:c6:f7:c9:57:7f:16:3c:88:da:cf:d5:a3:68:71:77:cb:3e:
97:44:1f:33:d9:93:73:7f:0f:00:03:b4:0d:75:67:84:70:a5:
78:41:1c:26:0b:08:55:6e:6c:15:e1:97:03:a5:f1:87:98:6f:
c6:03:cb:76:a0:62:9b:5b:2a:08:c7:49:bc:f6:bf:e5:9f:6d:
c7:a3:a6:73:68:3d:7d:e8:f8:a2:c2:65:06:d4:be:e9:09:38:
f3:d6:7a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:34:51 2026 by rpki-client