Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
File: 0RE68_NruSoPL72v47Zx9rn876g.mft (raw, json)
Hash identifier: m4ufa7prGjCjYVp7xa+RMuGFefEgFXayy+5Wgyaf10s=
Subject key identifier: 9A:F0:C3:BD:19:91:83:48:A6:EC:10:12:23:AA:DD:AE:46:BD:03:88
Authority key identifier: D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
Certificate issuer: /CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Certificate serial: 01A0CE233F6CBAF30900336C9251FC88EA43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
Manifest number: 0ABB
Signing time: Wed 23 Sep 2026 12:00:11 +0000
Manifest this update: Wed 23 Sep 2026 12:00:11 +0000
Manifest next update: Thu 24 Sep 2026 12:00:11 +0000
Files and hashes: 1: 0RE68_NruSoPL72v47Zx9rn876g.crl (hash: Mzt0RJZf5zSV4Hw1LZ59UxxYBAKbr0jV6AWnUkcqkow=)
2: BvyJ9VlIpALPuyQE8sebxED-YP4.roa (hash: 5Go0Jt+Ko1P3sZc36GUqZasMZpi+yqnYoeBDKhqHQ94=)
3: Ca0R-mhrFY6HFoHS1b5WT3pwjYg.roa (hash: o7q7JRHvs80nHIVjNQ3bsCLMG4wGtstYaFpsR/bUbvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:3f:6c:ba:f3:09:00:33:6c:92:51:fc:88:ea:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Validity
Not Before: Sep 23 12:00:11 2026 GMT
Not After : Sep 24 12:00:11 2026 GMT
Subject: CN=9af0c3bd19918348a6ec101223aaddae46bd0388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:88:56:2a:34:b3:b7:6c:07:7b:0a:c9:80:4d:
f3:2e:7c:7f:2d:14:df:5a:76:f1:2f:fa:33:7e:c2:
3d:80:5e:58:cd:3f:25:ad:e9:b5:c8:4b:23:07:66:
40:9e:0b:b7:18:44:d6:7a:04:36:34:92:ca:8e:da:
a7:42:bf:2c:e8:87:32:62:82:05:0a:2f:14:3f:2c:
d9:9e:50:aa:82:bf:0a:3b:ce:c7:e1:00:36:43:31:
ef:c1:63:2d:42:50:97:f6:59:8e:3f:3a:96:a3:8d:
ac:0f:ab:5b:d4:f5:53:0a:a6:b5:3d:a2:5c:15:8b:
1f:10:22:fa:91:32:71:97:82:5c:e0:09:dc:37:0e:
ab:ec:72:00:d0:9c:e3:21:66:98:4e:a2:9d:52:a9:
9c:af:eb:a5:68:c0:d8:b7:8d:8e:a8:9f:e5:a9:38:
9b:2b:c4:39:2e:4d:a6:90:56:fc:f4:b9:a2:12:f1:
19:08:52:57:c4:0c:9e:62:62:86:ae:2f:1f:0f:ee:
94:fe:3f:c3:c5:84:1d:61:be:d7:11:80:5d:70:87:
75:69:4b:75:11:9a:78:de:be:e9:05:c1:75:b1:7d:
cb:e8:f4:b9:7e:36:6c:d5:dd:c8:61:3b:86:a4:fb:
f5:b0:82:0d:20:f1:8e:d7:9b:a0:07:07:71:d0:cb:
a2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F0:C3:BD:19:91:83:48:A6:EC:10:12:23:AA:DD:AE:46:BD:03:88
X509v3 Authority Key Identifier:
keyid:D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:32:4d:2f:df:fd:f3:a0:f2:72:30:92:5a:45:6a:19:c2:2e:
25:3c:12:bc:2b:7c:d5:50:a1:b8:ff:98:4d:1f:1f:68:1f:d5:
04:b7:04:5e:b9:25:c2:0c:de:48:4b:70:f7:5b:8b:c3:5e:d5:
67:75:2b:2e:5c:5e:1a:78:7d:98:9c:88:00:c9:aa:cc:a3:69:
a4:78:08:4b:48:4a:9e:e6:c7:8b:4b:21:d4:ef:ac:09:67:8e:
09:15:93:01:06:d2:b8:33:c8:e4:9f:12:b8:49:af:be:46:b8:
d0:72:04:c4:9d:fe:ed:f5:c6:ff:0d:16:49:51:64:46:62:c9:
4e:94:32:26:90:ea:6f:d4:67:e7:eb:94:47:cc:7f:c0:69:fb:
ed:0d:37:e9:b5:a9:78:96:ad:b1:66:92:0d:32:ce:06:86:cf:
d1:f0:4f:b3:3f:13:14:ec:e4:5d:1a:99:3e:f8:cd:fa:b5:41:
b1:10:62:a6:07:f0:d7:8e:8c:30:2b:f5:dc:f7:df:cc:47:0a:
51:fa:ec:53:ec:34:35:ed:a2:50:5f:ad:d8:cf:1b:ff:51:69:
76:49:65:fe:3c:6b:a2:c4:9b:e6:c0:6d:06:4b:e5:f9:86:ac:
9e:68:f5:e3:01:3d:3a:4d:dc:ec:d0:4f:ff:af:8b:c7:b7:1a:
94:92:e6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:29:43 2026 by rpki-client