Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
File: Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft (raw, json)
Hash identifier: ImVOaF0CzZkP6KtzPX2nYlTO79FRzGSHCeTUS+IhjVk=
Subject key identifier: FB:76:FF:07:A0:F4:63:18:96:19:D4:68:39:04:57:63:2F:97:1B:E5
Authority key identifier: 4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23
Certificate issuer: /CN=4eec68f7514db22173650088294b0143b377fc23
Certificate serial: 019D2772483DDE4AC1BA3BA522D629C74200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
Manifest number: 0909
Signing time: Thu 26 Mar 2026 00:01:34 +0000
Manifest this update: Thu 26 Mar 2026 00:01:34 +0000
Manifest next update: Fri 27 Mar 2026 00:01:34 +0000
Files and hashes: 1: 6vtHBriDas5-v-LxtPfKhRyXjCw.roa (hash: Sn7hvr2tQ9u8DT+gf3ngvnqmbxpFZXaj4xMVzMp3uHs=)
2: Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl (hash: DyNuGzWxQonegu4zduDYXVsNun880jC24+gZ7cK6D2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:48:3d:de:4a:c1:ba:3b:a5:22:d6:29:c7:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eec68f7514db22173650088294b0143b377fc23
Validity
Not Before: Mar 26 00:01:34 2026 GMT
Not After : Mar 27 00:01:34 2026 GMT
Subject: CN=fb76ff07a0f463189619d468390457632f971be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:96:15:95:be:e4:d9:1f:ab:f3:60:59:83:71:
6d:f2:05:ee:29:92:16:54:e5:98:e9:57:2c:23:94:
bd:d6:83:c6:f8:df:0e:6c:3a:2b:d5:c0:de:4f:44:
b4:3c:38:fe:43:e8:98:b9:8b:94:84:aa:8f:12:fa:
8b:ca:61:68:cc:aa:97:80:0a:bf:95:06:f7:ed:72:
e2:b9:c1:8c:d8:e5:1d:94:00:da:c6:30:5b:e2:e4:
1f:31:81:91:a0:aa:f7:56:9d:c5:04:ab:15:2d:33:
72:8a:69:ec:80:6d:ad:5b:2a:7a:0d:3c:56:07:f1:
dc:ca:b8:5b:ad:ec:38:91:3d:2d:02:bd:72:61:54:
64:79:c5:5c:f0:91:8c:db:ef:7c:44:a2:bd:90:7e:
9f:09:c4:8d:9e:37:af:98:b8:9d:d3:34:24:d8:1c:
49:dd:1c:02:4f:bf:36:e7:70:4b:11:18:6d:a1:04:
ab:73:56:e5:df:26:9a:ff:22:5c:a0:58:27:c8:a2:
c3:36:3d:23:9d:d8:0e:16:e4:9f:8c:1e:25:7c:ec:
47:58:eb:49:b1:36:59:db:8d:17:a1:f9:13:df:be:
5f:a9:55:6e:1d:eb:5d:74:c2:f9:53:f3:87:14:56:
d8:45:01:dc:78:2c:3f:90:07:63:40:b0:c4:78:9c:
37:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:76:FF:07:A0:F4:63:18:96:19:D4:68:39:04:57:63:2F:97:1B:E5
X509v3 Authority Key Identifier:
keyid:4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:21:ec:fd:dd:f2:38:29:73:48:7a:da:03:5e:c6:26:a6:47:
0e:98:7a:4e:62:a1:08:76:7f:5b:2f:dc:96:3c:b3:7a:72:8e:
51:9b:67:d5:b1:be:17:7f:fc:18:68:2e:3e:61:80:58:bf:4a:
97:de:cb:83:33:4b:6f:d3:ad:2e:8c:e5:c9:98:f0:97:8a:54:
4b:a4:2f:3e:a6:83:c3:35:6f:78:c3:cd:af:34:be:6a:87:54:
a2:68:24:ab:68:3b:5f:4b:13:4f:8e:f8:d1:e9:d3:3f:af:fc:
2c:f1:19:d3:80:33:29:2d:6a:1a:e2:3a:a5:f7:da:cf:e6:ef:
4d:01:04:62:35:41:12:5e:61:44:c8:f0:be:40:a2:dd:95:5a:
f3:82:71:93:01:57:3e:b7:0b:1b:0d:1f:90:a9:c1:52:18:81:
51:f0:82:1f:67:47:d6:c6:a4:de:6a:50:3a:3f:e6:0b:37:82:
6d:e3:2d:5d:39:6b:02:b4:52:97:66:98:71:64:ac:67:62:bf:
55:67:47:98:be:8b:f7:0f:86:db:26:ca:0a:67:e3:53:64:98:
da:85:22:f4:a2:5c:81:fe:23:8f:4e:61:94:5c:c3:d2:81:ab:
88:2c:13:78:07:d9:04:41:23:ca:68:35:13:9b:68:60:f2:7e:
7b:44:92:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nckg93krBujulItYpx0IAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZWM2OGY3NTE0ZGIyMjE3MzY1MDA4ODI5NGIwMTQzYjM3
N2ZjMjMwHhcNMjYwMzI2MDAwMTM0WhcNMjYwMzI3MDAwMTM0WjAzMTEwLwYDVQQD
EyhmYjc2ZmYwN2EwZjQ2MzE4OTYxOWQ0NjgzOTA0NTc2MzJmOTcxYmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJYVlb7k2R+r82BZg3Ft8gXuKZIW
VOWY6VcsI5S91oPG+N8ObDor1cDeT0S0PDj+Q+iYuYuUhKqPEvqLymFozKqXgAq/
lQb37XLiucGM2OUdlADaxjBb4uQfMYGRoKr3Vp3FBKsVLTNyimnsgG2tWyp6DTxW
B/Hcyrhbrew4kT0tAr1yYVRkecVc8JGM2+98RKK9kH6fCcSNnjevmLid0zQk2BxJ
3RwCT78253BLERhtoQSrc1bl3yaa/yJcoFgnyKLDNj0jndgOFuSfjB4lfOxHWOtJ
sTZZ240XofkT375fqVVuHetddML5U/OHFFbYRQHceCw/kAdjQLDEeJw3DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPt2/weg9GMYlhnUaDkEV2MvlxvlMB8GA1UdIwQY
MBaAFE7saPdRTbIhc2UAiClLAUOzd/wjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHV4bzkxRk5zaUZ6WlFDSUtVc0JRN04zX0NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81MzIwNjUtNjE1MS00Y2UwLWFjNmIt
NWQzNGM4NTc1YmVhLzEvVHV4bzkxRk5zaUZ6WlFDSUtVc0JRN04zX0NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi81MzIwNjUtNjE1MS00Y2UwLWFjNmItNWQzNGM4NTc1YmVh
LzEvVHV4bzkxRk5zaUZ6WlFDSUtVc0JRN04zX0NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSHs/d3y
OClzSHraA17GJqZHDph6TmKhCHZ/Wy/cljyzenKOUZtn1bG+F3/8GGguPmGAWL9K
l97LgzNLb9OtLozlyZjwl4pUS6QvPqaDwzVveMPNrzS+aodUomgkq2g7X0sTT474
0enTP6/8LPEZ04AzKS1qGuI6pffaz+bvTQEEYjVBEl5hRMjwvkCi3ZVa84JxkwFX
PrcLGw0fkKnBUhiBUfCCH2dH1sak3mpQOj/mCzeCbeMtXTlrArRSl2aYcWSsZ2K/
VWdHmL6L9w+G2ybKCmfjU2SY2oUi9KJcgf4jj05hlFzD0oGriCwTeAfZBEEjymg1
E5toYPJ+e0SSCg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:27 2026 by rpki-client