Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
File: 0RE68_NruSoPL72v47Zx9rn876g.mft (raw, json)
Hash identifier: YyaMBlYItYGOT/Ngx8Gwg3o6nQu22eYUbu67MHSfwmU=
Subject key identifier: 9D:75:95:FE:77:60:05:FE:6C:82:E4:79:37:6B:14:36:8C:A2:48:05
Authority key identifier: D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
Certificate issuer: /CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Certificate serial: 019D2961A6BB58442314404A06AE2D6B448F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
Manifest number: 08D8
Signing time: Thu 26 Mar 2026 09:02:38 +0000
Manifest this update: Thu 26 Mar 2026 09:02:38 +0000
Manifest next update: Fri 27 Mar 2026 09:02:38 +0000
Files and hashes: 1: 0RE68_NruSoPL72v47Zx9rn876g.crl (hash: hRZEIqPnpi4mK561LKahll8m8OE/SWpLeWOyD9wp3N4=)
2: BvyJ9VlIpALPuyQE8sebxED-YP4.roa (hash: 5Go0Jt+Ko1P3sZc36GUqZasMZpi+yqnYoeBDKhqHQ94=)
3: Ca0R-mhrFY6HFoHS1b5WT3pwjYg.roa (hash: o7q7JRHvs80nHIVjNQ3bsCLMG4wGtstYaFpsR/bUbvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:a6:bb:58:44:23:14:40:4a:06:ae:2d:6b:44:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Validity
Not Before: Mar 26 09:02:38 2026 GMT
Not After : Mar 27 09:02:38 2026 GMT
Subject: CN=9d7595fe776005fe6c82e479376b14368ca24805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:44:b2:c5:17:7e:81:d5:8d:39:81:79:56:e8:
88:ed:c5:b2:f4:fc:78:2a:8c:8b:c5:a8:02:72:a3:
cf:95:3e:53:9d:6b:2a:05:85:40:03:f2:40:c5:84:
f5:9e:ab:78:b4:1c:d7:dd:ca:d5:8f:84:af:54:58:
6c:aa:0a:8f:d5:1e:25:f6:5f:c8:db:aa:56:43:80:
0a:2d:60:b7:01:1a:5c:9a:0c:b7:1c:ad:98:9d:98:
b7:d8:0e:b4:b7:a7:b4:3a:fc:b1:63:24:44:9c:57:
c1:67:f1:c3:03:bc:83:50:ba:cf:75:37:73:81:9d:
8f:7c:19:8d:31:31:fd:b4:45:38:d0:e0:16:03:54:
ed:7a:39:6d:8f:da:1f:a8:af:5b:09:93:3c:b6:d7:
1f:58:8a:6a:04:8e:b6:75:e9:05:d3:df:9f:28:18:
c0:25:44:86:0e:73:a0:c9:78:db:ba:0c:db:8d:82:
e5:64:83:43:49:25:ed:15:94:00:09:b3:45:45:93:
5e:28:8b:a3:48:96:ab:fe:b4:e6:c6:b6:ca:2e:24:
b4:c5:a8:7e:98:f3:24:9e:6f:66:74:de:8b:dd:01:
64:d3:52:93:5e:10:57:de:09:51:76:af:77:1d:55:
01:ca:ef:ee:a0:60:41:f2:65:aa:75:a3:d8:e6:a3:
3b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:75:95:FE:77:60:05:FE:6C:82:E4:79:37:6B:14:36:8C:A2:48:05
X509v3 Authority Key Identifier:
keyid:D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3e:f7:14:58:a6:d0:ef:f9:e9:bf:0c:32:5c:67:ae:b0:fa:
93:ab:e4:91:1f:b6:46:40:af:ec:20:4d:b4:82:6c:c1:7d:bb:
a8:6d:c2:af:cf:91:88:5f:dd:15:28:d8:c5:91:15:39:61:0e:
c0:97:54:1e:a4:87:d4:14:49:a7:85:1f:c4:01:89:f7:32:87:
e9:ad:c7:9a:09:41:08:c1:c2:bf:ae:c4:36:46:f7:c1:82:fa:
80:9d:f1:5a:28:6e:14:0e:db:a4:d8:76:e5:c5:c9:12:6e:19:
fd:c9:87:a1:8f:72:2c:79:49:b1:c4:90:9c:95:e0:d7:55:7b:
a8:1e:ff:c4:5a:69:c1:df:a3:56:ce:bd:83:a1:4f:28:cc:98:
d8:4a:f8:e0:26:94:03:4f:d5:b5:5e:1c:3f:7a:b7:66:ce:8d:
66:b6:42:96:f5:fc:e3:a4:82:63:27:73:fc:f3:55:9a:3f:05:
bf:ff:93:dd:28:96:23:0c:3f:bb:59:f8:76:31:e0:a2:03:e3:
7f:7e:fe:ac:f0:87:fc:cf:ec:ae:df:04:90:ee:93:39:a9:a1:
4b:19:99:ac:5b:90:e5:3a:9d:3b:9e:da:e9:e7:de:93:e6:fd:
ec:68:74:55:5d:2b:b6:8c:87:61:00:87:d7:ab:ec:fb:dd:fd:
d9:f3:f0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:47 2026 by rpki-client