Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
File: TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json)
Hash identifier: aKfFup5gnEMsWEOQb662LeyP1iZnWCGhrrkcvyAUjeg=
Subject key identifier: 55:30:05:83:2F:FF:90:01:FD:A8:D1:DD:09:54:D3:55:11:0F:77:4A
Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Certificate serial: 019F8BA133F0B397FEC315DAC99B01D86BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
Manifest number: 0C40
Signing time: Wed 22 Jul 2026 21:00:25 +0000
Manifest this update: Wed 22 Jul 2026 21:00:25 +0000
Manifest next update: Thu 23 Jul 2026 21:00:25 +0000
Files and hashes: 1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: TyA1teGprI0iQ0zeJs79kKuVsV734WPn2rMggz+jbJo=)
2: hQjM_kfrNcmziZNp3dS3dVTcWQg.roa (hash: 7Img7nOCsZGXCyMuGVQnUnTQzFC5NzgthKFgO50X3go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:a1:33:f0:b3:97:fe:c3:15:da:c9:9b:01:d8:6b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Validity
Not Before: Jul 22 21:00:25 2026 GMT
Not After : Jul 23 21:00:25 2026 GMT
Subject: CN=553005832fff9001fda8d1dd0954d355110f774a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:38:0e:86:ea:65:d8:84:b8:0c:48:2b:1d:cd:
15:44:66:6a:fa:cd:51:80:f4:3e:c0:08:5d:b6:ad:
57:60:48:5f:2d:67:d8:ec:27:a3:0d:8e:82:cc:2d:
84:ca:bd:09:ea:61:59:7b:0d:35:a6:22:79:62:21:
1a:48:e2:25:a8:04:57:27:9d:12:18:9d:bc:e0:e4:
12:37:c4:62:8f:a3:d3:03:b3:b0:d2:a3:24:89:f4:
22:ae:37:50:45:78:b5:35:f3:5c:f1:21:b3:39:e1:
48:77:1d:82:ff:43:aa:a6:7e:6c:a4:0d:fa:62:3e:
d7:8c:91:c8:85:8a:30:f7:77:de:f3:4c:f1:fa:c3:
aa:83:9a:87:46:d9:fc:46:ec:84:19:17:b1:d9:06:
8e:d9:96:a6:41:ef:5e:86:5e:71:24:c6:70:77:86:
b7:de:84:c8:6c:33:57:18:cb:31:cb:78:16:24:5d:
dd:25:2b:4b:04:fa:42:3c:ba:7f:c4:ce:2c:de:27:
f2:b6:8b:6c:a5:db:74:20:5a:7d:81:4d:1b:7c:0c:
84:6c:fc:63:77:1e:a6:c8:0b:9a:12:a2:f1:c9:d9:
01:5f:c6:89:b7:fa:bb:ef:bc:2e:d0:41:33:9a:e7:
85:3f:a7:03:c4:d2:df:15:9b:74:d7:79:1b:d7:b2:
5c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:30:05:83:2F:FF:90:01:FD:A8:D1:DD:09:54:D3:55:11:0F:77:4A
X509v3 Authority Key Identifier:
keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d7:3b:01:30:8a:d1:f9:36:02:6d:e1:69:fe:d4:bc:c9:ea:
45:50:eb:c0:dd:1f:59:42:9b:c6:b4:81:69:3c:20:54:dd:88:
95:30:49:38:cd:6b:44:0e:d6:1b:39:0c:58:fe:1b:6c:9c:ad:
df:dc:5d:33:fe:04:84:31:0e:eb:86:67:f6:ca:7f:ab:68:49:
5f:0f:09:e1:03:a5:ae:36:79:13:b7:1f:83:47:0e:ba:6e:54:
1f:c5:ab:ee:a1:f8:b0:b7:80:73:f2:01:78:9c:74:43:c4:a8:
fb:8d:86:f7:d8:a3:23:db:bf:b0:88:d1:db:42:a0:65:67:db:
7d:47:46:44:a4:db:ca:39:be:5a:34:8c:28:ff:08:0b:10:6d:
32:59:3c:bd:a1:fb:bb:11:bd:cc:6b:5e:85:d9:66:ce:b0:51:
07:8a:b2:9e:65:16:56:e0:06:2d:3e:a2:a4:e4:6a:48:09:39:
d8:da:98:bd:c0:f2:1b:37:66:8d:4a:7c:02:eb:91:69:55:7d:
a4:4d:ab:a1:7d:95:06:a6:11:cd:12:8e:d3:e0:dd:22:25:20:
a4:4a:47:3c:fe:84:b6:0d:cb:35:60:37:12:16:c9:ab:ef:20:
67:fc:57:03:c5:28:b5:e1:b3:49:72:01:e1:ac:52:89:6a:49:
5c:b4:b7:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+LoTPws5f+wxXayZsB2Gu2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkOTE5NzZhYjA2YmZmYWYzZTI4Zjg0Mjg2ZGIzZWUyMDNl
MDdkNWUwHhcNMjYwNzIyMjEwMDI1WhcNMjYwNzIzMjEwMDI1WjAzMTEwLwYDVQQD
Eyg1NTMwMDU4MzJmZmY5MDAxZmRhOGQxZGQwOTU0ZDM1NTExMGY3NzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TgOhupl2IS4DEgrHc0VRGZq+s1R
gPQ+wAhdtq1XYEhfLWfY7CejDY6CzC2Eyr0J6mFZew01piJ5YiEaSOIlqARXJ50S
GJ284OQSN8Rij6PTA7Ow0qMkifQirjdQRXi1NfNc8SGzOeFIdx2C/0Oqpn5spA36
Yj7XjJHIhYow93fe80zx+sOqg5qHRtn8RuyEGRex2QaO2ZamQe9ehl5xJMZwd4a3
3oTIbDNXGMsxy3gWJF3dJStLBPpCPLp/xM4s3ifytotspdt0IFp9gU0bfAyEbPxj
dx6myAuaEqLxydkBX8aJt/q777wu0EEzmueFP6cDxNLfFZt013kb17JcoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUwBYMv/5AB/ajR3QlU01URD3dKMB8GA1UdIwQY
MBaAFE2Rl2qwa/+vPij4QobbPuID4H1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFpHWGFyQnJfNjgtS1BoQ2h0cy00Z1BnZlY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi82ZDdjOWYtM2MwZC00ZjhkLTk4YTAt
NDg2YzA2ZWRlZmVhLzEvVFpHWGFyQnJfNjgtS1BoQ2h0cy00Z1BnZlY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi82ZDdjOWYtM2MwZC00ZjhkLTk4YTAtNDg2YzA2ZWRlZmVh
LzEvVFpHWGFyQnJfNjgtS1BoQ2h0cy00Z1BnZlY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdc7ATCK
0fk2Am3haf7UvMnqRVDrwN0fWUKbxrSBaTwgVN2IlTBJOM1rRA7WGzkMWP4bbJyt
39xdM/4EhDEO64Zn9sp/q2hJXw8J4QOlrjZ5E7cfg0cOum5UH8Wr7qH4sLeAc/IB
eJx0Q8So+42G99ijI9u/sIjR20KgZWfbfUdGRKTbyjm+WjSMKP8ICxBtMlk8vaH7
uxG9zGtehdlmzrBRB4qynmUWVuAGLT6ipORqSAk52NqYvcDyGzdmjUp8AuuRaVV9
pE2roX2VBqYRzRKO0+DdIiUgpEpHPP6Etg3LNWA3EhbJq+8gZ/xXA8UoteGzSXIB
4axSiWpJXLS3Fg==
-----END CERTIFICATE-----
Generated at Wed Jul 22 23:04:01 2026 by rpki-client