
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
File: Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft (raw, json)
Hash identifier: oPeIoJolKt+yPrDhwG5oWv21+4tbr/HWW4Xb+28USFo=
Subject key identifier: C3:DC:F9:64:D1:D8:AD:42:AD:5F:EA:70:2E:42:BB:A9:0C:6D:D1:A4
Authority key identifier: 4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23
Certificate issuer: /CN=4eec68f7514db22173650088294b0143b377fc23
Certificate serial: 019FAC75B511CAF4EF45681FFBD83DB63742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
Manifest number: 0A57
Signing time: Wed 29 Jul 2026 06:00:22 +0000
Manifest this update: Wed 29 Jul 2026 06:00:22 +0000
Manifest next update: Thu 30 Jul 2026 06:00:22 +0000
Files and hashes: 1: 6vtHBriDas5-v-LxtPfKhRyXjCw.roa (hash: Sn7hvr2tQ9u8DT+gf3ngvnqmbxpFZXaj4xMVzMp3uHs=)
2: Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl (hash: 3uXRU03IdCw7Lt/y34IVOUNGZ+74AP+QwHh5Og0gI/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:b5:11:ca:f4:ef:45:68:1f:fb:d8:3d:b6:37:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eec68f7514db22173650088294b0143b377fc23
Validity
Not Before: Jul 29 06:00:22 2026 GMT
Not After : Jul 30 06:00:22 2026 GMT
Subject: CN=c3dcf964d1d8ad42ad5fea702e42bba90c6dd1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:96:88:c0:e5:be:b1:ac:47:05:60:31:c6:32:
69:1f:f2:3a:9f:09:f1:64:58:57:0d:91:7f:bc:a9:
b2:e3:3a:ef:88:99:56:52:98:5a:93:a8:c4:20:33:
ef:ec:f4:1a:55:3e:bc:f8:52:d9:67:d9:c0:d7:65:
3a:ff:32:32:ce:b0:a2:2e:67:07:7a:92:0b:d0:51:
ab:51:aa:9a:8f:4c:a8:ad:af:20:33:2c:34:5e:81:
34:36:ce:6b:a7:d6:97:03:1a:61:a1:58:ef:76:80:
ca:75:91:63:af:86:4c:43:4a:0b:76:ba:1b:f6:8f:
5b:80:57:13:06:90:f2:f6:86:e3:43:84:cd:e2:1c:
0b:89:2d:da:65:d3:44:9f:bf:7c:2a:59:89:89:f9:
a2:a9:a5:9c:c8:29:10:14:cc:87:6c:c3:21:99:a4:
32:df:ea:91:fe:10:a7:c0:c7:a8:22:39:76:22:ed:
c2:5d:da:a1:f4:10:27:2a:08:bd:96:78:39:ad:f3:
70:47:70:f8:2f:ca:73:f6:15:46:3e:18:70:fd:61:
9c:39:cb:ba:d6:c2:c2:43:f6:03:67:cf:18:c0:19:
d3:cd:b9:f1:d6:85:bd:9e:0f:3b:cd:92:de:4c:4d:
b1:6e:58:48:94:5d:f1:30:b8:76:f9:74:9f:dc:67:
e8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DC:F9:64:D1:D8:AD:42:AD:5F:EA:70:2E:42:BB:A9:0C:6D:D1:A4
X509v3 Authority Key Identifier:
keyid:4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:49:74:91:13:7e:ab:d8:bf:12:f8:09:43:75:4c:78:2b:e5:
54:55:d5:81:6f:90:c3:b3:20:00:1f:fb:2a:79:2b:6c:67:20:
cb:cd:a4:88:1a:e3:75:93:46:6e:7a:34:a4:73:d1:7e:99:8f:
0f:3c:69:59:25:bc:75:12:f4:e7:a7:20:04:4e:9e:bd:10:da:
f4:e6:a8:b9:21:db:49:f3:36:97:98:cc:0e:bc:5e:d9:f5:37:
30:0a:f4:00:d1:ef:96:11:e7:dd:93:83:14:da:d9:31:90:41:
8d:9b:dd:c2:f3:17:3c:88:bb:db:b6:42:0b:8b:2f:24:b1:5b:
48:63:7e:92:ef:57:9d:b2:3a:7b:55:5d:96:a7:e8:8a:7d:07:
ee:8f:5a:ab:61:cf:67:01:c4:2a:96:9d:d7:f6:1e:96:14:fd:
c9:ba:ef:c1:71:76:61:69:8c:4e:54:87:ee:e1:b3:56:9c:bd:
57:58:24:e7:ab:89:53:26:36:5c:0b:65:4a:02:a4:e6:43:44:
f4:f1:eb:9d:4a:78:fc:e6:92:68:a1:56:56:97:fd:5e:fa:d2:
17:18:92:ae:11:8f:b1:40:6c:a0:a0:c8:b0:7d:a7:55:9d:69:
9f:df:31:ee:7f:1d:56:f3:bd:03:82:02:43:8f:ba:6f:ca:9c:
f7:b4:2e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:26:42 2026 by rpki-client