Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
File: Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft (raw, json)
Hash identifier: D7PMH61ImNJxXRoACaeMtqiryhB/5DL91QsBfWz/X70=
Subject key identifier: DC:34:8C:5D:B7:B6:4B:75:52:C5:32:D0:63:06:1F:D2:CD:1E:B9:5F
Authority key identifier: 4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23
Certificate issuer: /CN=4eec68f7514db22173650088294b0143b377fc23
Certificate serial: 019F85D64A0BA679FD942EE9A38C01B44A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
Manifest number: 0A43
Signing time: Tue 21 Jul 2026 18:00:41 +0000
Manifest this update: Tue 21 Jul 2026 18:00:41 +0000
Manifest next update: Wed 22 Jul 2026 18:00:41 +0000
Files and hashes: 1: 6vtHBriDas5-v-LxtPfKhRyXjCw.roa (hash: Sn7hvr2tQ9u8DT+gf3ngvnqmbxpFZXaj4xMVzMp3uHs=)
2: Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl (hash: QytQA2tW4mTVAPBilgNkRdYQS/opvfj/kJKaHh01fwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:4a:0b:a6:79:fd:94:2e:e9:a3:8c:01:b4:4a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eec68f7514db22173650088294b0143b377fc23
Validity
Not Before: Jul 21 18:00:41 2026 GMT
Not After : Jul 22 18:00:41 2026 GMT
Subject: CN=dc348c5db7b64b7552c532d063061fd2cd1eb95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8d:b8:af:fe:8a:12:33:f2:04:87:c6:28:44:
fa:6c:83:48:07:38:29:5d:20:c6:fc:54:b1:8c:0c:
60:c3:4e:a0:a5:b4:b5:d1:f3:49:3e:ee:2f:6d:d8:
1c:7d:75:79:e9:94:01:11:00:ff:3f:d5:64:e2:16:
8d:7a:d7:8a:dd:96:95:12:df:c0:fc:08:b4:8c:3c:
bf:9d:10:91:99:08:6e:d2:03:e9:50:17:3f:41:d5:
ee:91:3f:42:b3:aa:84:3a:e7:ad:aa:c7:89:b6:06:
37:47:aa:45:60:ed:b6:b2:e6:ec:f3:cf:9d:7e:08:
5b:41:c8:d5:d3:84:8e:99:48:c1:4e:33:8f:27:0b:
c8:82:82:2b:3c:72:df:63:3f:c1:c6:1e:f4:35:05:
1b:9a:1e:49:16:52:fd:14:54:67:c9:27:4d:85:e8:
fd:b4:33:50:09:ee:0f:96:57:59:1f:e0:dd:c1:e3:
29:76:1f:ff:52:7f:61:de:1e:2e:6c:b3:ae:6b:7c:
4c:43:9b:6c:b3:40:d4:d7:d2:82:e0:c5:09:4e:06:
8a:8b:a3:55:54:da:ed:84:64:22:bc:da:c9:e5:72:
88:53:dd:90:49:f9:ff:d3:7c:2f:46:ae:7a:9b:5f:
43:e8:46:a2:de:72:e5:2b:19:38:13:60:6b:19:a0:
98:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:34:8C:5D:B7:B6:4B:75:52:C5:32:D0:63:06:1F:D2:CD:1E:B9:5F
X509v3 Authority Key Identifier:
keyid:4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0e:30:b4:0b:09:83:29:fd:88:65:9a:a7:40:a8:44:85:db:
1b:b7:61:60:1d:e6:a4:f5:7d:88:cd:92:7b:be:6e:c9:ab:e0:
4b:08:7d:8b:03:96:1a:5c:00:86:f2:54:16:0b:b0:cd:ca:72:
c0:3b:72:4c:ed:79:d5:73:cb:9d:3d:62:a9:bc:c8:52:18:a6:
cc:78:44:c8:f2:a4:72:a8:4d:d4:0e:35:2d:13:60:d3:81:f4:
f8:de:7f:16:dd:40:63:66:95:f6:26:bf:1b:39:fc:56:a9:3f:
5e:54:f0:73:37:90:03:c4:14:5b:e9:9a:b2:06:41:20:07:e3:
35:2b:f1:f9:5b:d7:3c:a1:04:d2:9c:17:70:e3:91:37:1d:0c:
1a:9f:a1:fb:48:82:0c:f9:09:0b:36:ae:28:75:81:eb:66:90:
9a:ec:dc:35:93:59:e5:a5:39:6f:6c:15:8b:34:53:32:b6:bf:
a6:50:3e:e7:73:ee:f7:d9:ff:d8:7a:9f:78:87:f1:52:c6:6b:
9b:2e:fa:ec:1f:58:4e:1b:18:29:26:b6:67:9b:cb:1a:d6:28:
2c:2a:43:58:dd:7b:49:a8:db:24:e0:42:98:f8:1d:6e:db:83:
7c:fc:d6:88:9b:68:77:05:e9:2a:aa:ee:47:73:b1:22:99:e5:
9b:8c:8c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:07:24 2026 by rpki-client