Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
File: Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft (raw, json)
Hash identifier: 320txDx54CFZOICQAvaXJrkDEGtrOStTAtyJcsPigRk=
Subject key identifier: E6:9D:53:E2:A1:6A:52:F3:C1:C4:6B:E4:4B:6B:B4:94:52:F8:0A:56
Authority key identifier: 4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23
Certificate issuer: /CN=4eec68f7514db22173650088294b0143b377fc23
Certificate serial: 019D38D299F558E8A668740D313E7B8964B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
Manifest number: 0912
Signing time: Sun 29 Mar 2026 09:00:19 +0000
Manifest this update: Sun 29 Mar 2026 09:00:19 +0000
Manifest next update: Mon 30 Mar 2026 09:00:19 +0000
Files and hashes: 1: 6vtHBriDas5-v-LxtPfKhRyXjCw.roa (hash: Sn7hvr2tQ9u8DT+gf3ngvnqmbxpFZXaj4xMVzMp3uHs=)
2: Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl (hash: fNbvERkmqRFU0/HuSr71BcxMoCJr1CelV0B3MA5upXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:99:f5:58:e8:a6:68:74:0d:31:3e:7b:89:64:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eec68f7514db22173650088294b0143b377fc23
Validity
Not Before: Mar 29 09:00:19 2026 GMT
Not After : Mar 30 09:00:19 2026 GMT
Subject: CN=e69d53e2a16a52f3c1c46be44b6bb49452f80a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:18:7a:5c:30:5c:85:88:f8:8a:59:f1:ee:3a:
93:12:a9:9b:ce:f4:d1:79:4b:46:3a:7f:d2:9e:d6:
12:4b:4a:44:08:f2:3b:c3:a6:a4:5a:db:b6:0e:da:
c3:4a:b7:96:15:3f:ce:2e:0a:f0:19:da:b3:c8:e5:
bd:49:05:61:1c:cf:2c:54:ef:a0:ea:26:13:92:57:
75:8b:c4:5a:9f:2c:e7:14:08:98:7f:4a:45:b5:fb:
18:14:6a:02:f2:52:31:7a:7a:5e:35:4e:89:d5:73:
42:78:7e:b0:3f:35:be:88:9f:c5:60:d9:86:23:b0:
84:6a:43:7a:78:b2:b7:1b:c6:10:55:37:06:e9:d3:
44:43:91:74:25:16:e0:a4:56:95:c6:32:8a:df:59:
cc:dd:cf:78:cc:b5:d0:a7:3f:70:9b:8d:e5:49:6b:
52:3d:c3:02:9e:3c:8d:46:11:0c:49:dc:70:c0:28:
86:2f:0a:ab:27:cb:f6:9e:5d:2f:2c:17:fd:6d:83:
5d:9c:89:1b:4d:be:cb:ea:53:d7:f7:cf:74:0b:a0:
e9:5f:62:f5:bc:e7:53:c5:93:22:2c:1f:e7:3a:9c:
bb:97:67:0b:08:eb:32:2a:54:58:ea:82:a6:f4:41:
2b:46:d7:65:46:23:29:ec:86:4c:2c:66:23:4d:e7:
3b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9D:53:E2:A1:6A:52:F3:C1:C4:6B:E4:4B:6B:B4:94:52:F8:0A:56
X509v3 Authority Key Identifier:
keyid:4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:66:8e:79:32:61:03:57:5a:aa:c4:bd:a9:bb:33:a9:71:e1:
59:cf:a4:a2:ef:1c:f3:e1:58:ef:be:b4:34:32:a1:44:2c:bb:
5a:ff:ee:e4:05:73:df:8b:8c:79:29:2c:81:7b:bc:7e:20:c9:
ae:60:27:03:33:6f:82:43:10:d6:49:25:14:c5:87:9f:db:8d:
51:b6:05:8e:ec:c3:22:4a:5c:48:25:0c:43:cc:3a:c9:3b:51:
13:93:f0:7f:2c:84:62:fb:d2:11:8c:8e:de:3f:2d:4b:a6:c1:
c8:03:c7:88:9d:3e:ab:47:a5:90:de:bd:9a:a1:e4:ba:f6:73:
86:e3:53:53:68:74:b1:c2:f0:84:a7:d3:9f:ac:56:2a:46:48:
5d:b8:ce:6b:7c:e2:ea:5b:44:95:11:8a:b3:19:96:02:04:76:
d6:e5:5b:1b:ac:b3:67:91:58:fd:19:a1:91:c7:34:4a:60:bf:
c0:a5:25:c3:6b:f2:a6:5d:32:26:19:ff:4f:79:5b:90:f4:bd:
f9:3d:28:08:c1:be:1c:c8:a0:21:85:b9:29:1a:14:08:8f:da:
3f:f4:26:1e:9d:a5:9f:62:1b:c5:42:80:77:d1:db:72:da:99:
c6:18:2c:81:26:4e:58:46:e6:95:6c:49:86:55:20:a6:b6:ac:
a3:40:d0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:35 2026 by rpki-client