Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
File: TuFxPha0_Y8zAYh95qERmARJsp4.mft (raw, json)
Hash identifier: L/blRSCn5/dooS1V2FfuWH3HKJrzKpVazS5ckqvtIxU=
Subject key identifier: 12:61:1A:39:66:D1:78:3A:9C:20:89:30:9E:57:2E:E9:42:D2:38:F4
Authority key identifier: 4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E
Certificate issuer: /CN=4ee1713e16b4fd8f3301887de6a111980449b29e
Certificate serial: 019E1FECB76E29E6876F887878EBE2796D93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 06:01:07 +0000
Manifest this update: Wed 13 May 2026 06:01:07 +0000
Manifest next update: Thu 14 May 2026 06:01:07 +0000
Files and hashes: 1: 8-98EtSeBCLzHuY9teqeWzuL_OU.roa (hash: 8fiLqkX0Hfw0qEIsopfMgXlsC7twNkxV8E46FfFtRcU=)
2: TuFxPha0_Y8zAYh95qERmARJsp4.crl (hash: gVrWN+3VuThfe2jPSMVYHZmAaimu16HFDZe4aDgK6U4=)
3: tgE8jzInH6PxL3alL4l8_zSBewY.roa (hash: COcQ1Fg1VxBHECABZQ1rgFDAfEXNKxzy+WFSvFCA68k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:b7:6e:29:e6:87:6f:88:78:78:eb:e2:79:6d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee1713e16b4fd8f3301887de6a111980449b29e
Validity
Not Before: May 13 06:01:07 2026 GMT
Not After : May 14 06:01:07 2026 GMT
Subject: CN=12611a3966d1783a9c2089309e572ee942d238f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:03:4b:06:c1:7d:98:40:0c:b8:a6:0c:2f:f2:
ea:4c:9d:37:3c:6b:db:14:37:6f:4e:df:0a:03:cd:
5b:fb:6f:98:8a:05:9a:a3:5e:37:d2:ae:c1:05:e0:
e6:3e:1f:57:ef:40:cc:86:60:27:a5:7b:70:65:79:
3d:03:60:de:e9:51:7f:5f:37:8e:bd:cf:95:7c:1e:
14:07:65:b7:5a:7a:e5:cb:98:bd:19:bf:46:fd:cb:
19:2b:f7:93:08:4b:29:56:eb:2b:b1:3f:e1:ea:d3:
b8:2f:29:8c:52:4b:58:7c:51:95:79:17:f8:40:4b:
21:02:2a:7c:c4:a8:eb:0c:6a:c2:ea:9d:a3:5a:d1:
3f:94:c2:06:e7:d8:2c:35:08:e6:03:8f:5e:24:4c:
e1:3e:ea:01:f3:61:55:5c:f4:a7:f3:c8:fb:53:5f:
37:f1:47:a3:44:53:20:e7:ff:6e:bb:b7:3a:5f:65:
12:3a:cd:b9:f9:d6:72:21:ee:5c:44:0e:c5:e9:4f:
b5:ef:f2:80:ed:f4:f1:1b:6f:ea:35:f9:c7:77:e0:
dd:e5:3e:da:52:83:59:73:f1:24:bb:20:6d:a6:9c:
0d:55:0d:bf:eb:6d:93:52:c9:56:8a:0c:cf:09:a4:
24:70:02:a5:ce:b8:bb:5f:a6:2f:37:6c:b8:f6:9b:
a9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:61:1A:39:66:D1:78:3A:9C:20:89:30:9E:57:2E:E9:42:D2:38:F4
X509v3 Authority Key Identifier:
keyid:4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:15:68:2c:64:19:ec:06:aa:2f:ee:4e:60:78:0a:ea:ec:2d:
04:6c:f1:20:5c:79:48:eb:6b:9a:d8:e4:69:93:30:6d:b5:96:
b3:cd:cd:51:cc:d5:c4:8b:20:3f:03:c3:07:2b:5c:dd:bf:c0:
6f:11:95:1c:ac:07:2a:c2:d9:16:a9:49:86:83:05:a5:ef:ef:
e7:26:1b:02:30:a2:c1:f8:ad:c6:4d:47:d5:45:18:35:9e:59:
ad:b5:f1:67:81:b6:23:9c:c6:7d:ac:ad:96:21:20:22:2f:22:
16:44:8f:17:d1:05:e2:ee:8b:d1:9c:75:dd:f7:01:3e:54:e5:
16:b7:9c:61:4e:94:76:ae:37:82:be:52:b4:68:9f:8b:3f:85:
7d:6a:ed:ed:ca:3b:c2:8c:31:0b:2d:9b:2c:9c:ea:89:88:d8:
70:38:1b:3b:8a:1c:1b:eb:3d:1a:47:36:1b:78:57:b0:02:73:
9a:c3:3c:56:bb:77:7e:fb:a5:ef:ab:cb:15:31:be:b7:82:d0:
48:da:2b:46:c0:f0:0c:f4:91:2c:c5:db:25:b3:24:89:ad:ea:
61:93:c8:d8:32:8c:85:10:c1:0c:d6:d6:53:c9:16:b4:1a:c4:
86:6b:35:d0:f8:fe:eb:dc:ec:30:a4:f4:32:d9:6b:bb:a6:cc:
8f:21:e0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:00 2026 by rpki-client