Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
File: 0RE68_NruSoPL72v47Zx9rn876g.mft (raw, json)
Hash identifier: lmf/vFu+TSToxV3ge/S3Y9HUVu57RZ4nlGRm2eaEZ0o=
Subject key identifier: 17:E7:D9:5E:A3:39:DB:16:1E:4E:42:99:D3:B2:95:B6:9E:35:08:17
Authority key identifier: D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
Certificate issuer: /CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Certificate serial: 019FA89976571EF903BC3BFB67EBD0137F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
Manifest number: 0A23
Signing time: Tue 28 Jul 2026 12:00:57 +0000
Manifest this update: Tue 28 Jul 2026 12:00:57 +0000
Manifest next update: Wed 29 Jul 2026 12:00:57 +0000
Files and hashes: 1: 0RE68_NruSoPL72v47Zx9rn876g.crl (hash: D1CwMNlkX1X+kPwxOjYyzsNWXKPbRVqxeWR3PB+zDLQ=)
2: BvyJ9VlIpALPuyQE8sebxED-YP4.roa (hash: 5Go0Jt+Ko1P3sZc36GUqZasMZpi+yqnYoeBDKhqHQ94=)
3: Ca0R-mhrFY6HFoHS1b5WT3pwjYg.roa (hash: o7q7JRHvs80nHIVjNQ3bsCLMG4wGtstYaFpsR/bUbvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:76:57:1e:f9:03:bc:3b:fb:67:eb:d0:13:7f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Validity
Not Before: Jul 28 12:00:57 2026 GMT
Not After : Jul 29 12:00:57 2026 GMT
Subject: CN=17e7d95ea339db161e4e4299d3b295b69e350817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:94:33:5e:0c:24:0d:eb:2a:4c:3d:95:be:
7a:e4:c2:02:20:17:b0:23:d8:b8:1d:07:bf:f1:a7:
51:1e:13:b7:9e:c0:ab:04:c3:6d:f7:2d:fb:1f:7d:
c8:9c:02:19:26:ad:a3:3f:93:05:10:44:c3:d2:03:
5c:26:2f:8e:e6:3c:a9:73:f6:f4:28:60:b5:0e:d4:
71:12:30:fa:b2:9e:a6:cc:86:53:56:f7:37:33:2f:
dc:60:4d:55:51:25:ee:2d:35:40:bb:64:7c:d4:73:
76:14:2d:02:81:1e:5e:f1:ba:0c:23:06:f8:d2:6f:
8c:fb:64:ae:b3:d0:d0:be:0d:11:f8:8b:88:f8:00:
47:65:04:0e:08:4b:3d:f1:7f:2b:1d:b1:fd:a8:b4:
a8:21:f3:02:8d:c9:2b:49:e8:55:3e:dc:d5:13:d5:
e8:f1:86:af:9c:46:ac:d1:32:22:52:5c:c7:b4:fd:
27:b3:d3:93:98:71:1d:2c:38:a4:32:46:63:cf:0a:
bb:3f:ce:fe:a5:86:0f:a7:4f:3b:9a:fa:a1:c1:84:
af:51:e5:f0:60:7b:10:c3:ff:ee:3e:e6:ad:77:4c:
57:91:59:eb:39:fa:99:a0:9e:78:15:3b:fc:6f:1f:
bc:7b:d8:76:9d:12:c6:d8:90:d9:ca:5e:f9:6e:ee:
d7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E7:D9:5E:A3:39:DB:16:1E:4E:42:99:D3:B2:95:B6:9E:35:08:17
X509v3 Authority Key Identifier:
keyid:D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b4:66:22:78:d9:73:03:14:08:00:63:5a:4d:ea:97:69:d0:
00:ca:bb:3d:fc:69:81:db:d7:06:bd:85:34:02:f5:07:e9:3d:
60:07:7f:7f:48:49:52:f4:c3:47:ef:ca:98:f6:c0:27:f2:aa:
5a:83:8a:47:3c:a8:f1:9a:83:49:6c:a9:74:8f:01:47:c0:0e:
8d:b6:14:8d:d2:56:e1:9a:1e:f9:ff:c1:62:8c:d2:59:93:bc:
d8:83:88:e4:b4:21:e9:3a:bd:c3:99:3e:8b:6b:ea:bf:87:1d:
29:f6:2f:25:00:10:c2:bc:ac:61:b7:18:eb:16:2d:89:69:5a:
4c:d8:a0:6b:bc:f1:3f:fa:c2:37:84:79:dc:56:43:39:03:e1:
96:62:25:85:eb:e5:eb:65:0c:b2:6a:e4:14:2b:e7:26:c2:8b:
01:37:80:7c:fd:e7:0b:ec:6f:e3:21:dd:96:b5:2e:f3:ea:27:
66:c8:3a:32:46:c1:7c:23:f8:4e:6d:17:5d:e6:92:93:74:cb:
60:3b:6d:cf:81:00:bd:ac:4f:b8:46:0d:aa:44:ac:6d:1c:a5:
59:08:16:2c:89:1f:fb:9d:ea:d0:2b:45:da:5b:22:04:af:47:
7f:9d:42:3c:92:65:72:93:0b:69:f9:bf:70:f5:0b:dd:d6:80:
20:50:58:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:04:36 2026 by rpki-client