Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
File: TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json)
Hash identifier: fRijxRxWBzhqdu12WkbMEmDz2CyDdPxw5nbY9dbQowY=
Subject key identifier: 97:7C:F2:31:54:5A:59:58:18:C7:CF:B5:C8:5A:C2:45:B1:D8:AE:38
Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Certificate serial: 019D38D3B3CA89C1AA2A00636810B074B05E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
Manifest number: 0B0C
Signing time: Sun 29 Mar 2026 09:01:31 +0000
Manifest this update: Sun 29 Mar 2026 09:01:31 +0000
Manifest next update: Mon 30 Mar 2026 09:01:31 +0000
Files and hashes: 1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: VyNpVma40BAkC1UNe7vbwJTmGJEyFD76UvVoGFcJJ/s=)
2: hQjM_kfrNcmziZNp3dS3dVTcWQg.roa (hash: 7Img7nOCsZGXCyMuGVQnUnTQzFC5NzgthKFgO50X3go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b3:ca:89:c1:aa:2a:00:63:68:10:b0:74:b0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Validity
Not Before: Mar 29 09:01:31 2026 GMT
Not After : Mar 30 09:01:31 2026 GMT
Subject: CN=977cf231545a595818c7cfb5c85ac245b1d8ae38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:1c:e2:ba:e5:f5:c9:e9:34:2b:99:c4:09:
b5:c0:8d:bd:bf:fb:84:e9:9d:73:6c:37:a1:eb:5a:
13:81:4e:75:3b:5c:ce:fd:f5:ec:6e:9b:c0:69:3a:
1d:04:92:f5:8a:40:f3:13:9f:ab:12:b3:8a:95:2e:
fa:40:27:32:b4:cf:74:5d:df:6a:a2:4c:7c:8c:16:
2c:a9:db:ba:2d:82:9a:e5:e1:47:94:6d:54:23:7a:
e7:7b:9d:e7:01:93:49:c8:48:6a:91:d2:7c:84:57:
c0:9a:79:4c:ab:96:d1:f3:b1:eb:b6:46:8d:71:f0:
c2:f4:12:c2:4a:d6:7f:da:bb:a0:22:e3:c9:9b:ca:
7a:b1:fc:39:2c:cb:24:1f:37:49:72:a6:6b:bf:a0:
4e:8f:92:0d:c1:12:3d:83:81:d2:01:1b:eb:eb:d2:
81:dd:6e:41:71:03:8f:4d:9b:5f:56:cb:62:ea:10:
4a:ce:ad:f6:63:26:fc:11:65:b3:cb:b5:30:cc:18:
3d:7d:23:6b:1a:ac:6b:cc:38:bb:2f:fb:ed:39:3e:
ce:e0:1f:8d:75:06:43:4a:a9:3f:bb:b6:91:2b:30:
0d:31:71:cd:f5:b1:7a:0f:e4:c4:21:d8:34:6d:63:
66:51:c1:e9:10:8b:59:34:0a:95:a2:f0:f3:2a:a6:
f4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7C:F2:31:54:5A:59:58:18:C7:CF:B5:C8:5A:C2:45:B1:D8:AE:38
X509v3 Authority Key Identifier:
keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d4:a6:50:12:70:8b:88:21:77:96:5c:e2:1a:78:b1:6b:21:
f4:85:5f:a1:e3:a0:bf:85:14:48:22:bc:ed:35:ea:0f:19:0a:
49:c1:38:39:61:bd:fd:8e:0a:f8:65:6f:a8:f4:3c:14:5f:bc:
72:62:c7:cb:6e:89:5d:d5:62:2a:4c:21:f5:4b:db:c0:c7:2d:
97:f9:68:47:ea:c2:2f:e0:1f:a9:d4:c7:34:31:00:52:fb:f8:
ef:7e:bd:1d:de:9b:ea:04:0d:d3:83:2c:22:bf:f1:74:9d:85:
37:f4:85:e5:57:12:71:b1:3f:80:99:38:26:08:5f:bd:b5:19:
e0:c0:f2:bd:08:85:d9:b1:15:97:63:08:34:b5:4b:e8:4d:82:
c7:c3:d7:98:1d:f2:ad:fd:ae:b8:ca:69:79:b4:14:ae:cf:b5:
09:a6:5e:ef:de:99:1e:eb:f4:1b:be:95:f3:1d:0c:f3:eb:08:
40:f5:f7:c2:8e:01:04:0e:41:e3:16:30:50:46:d6:e0:59:a6:
8f:e4:04:22:e3:94:7c:84:56:2d:94:51:ab:f0:6d:18:2b:57:
a2:da:fa:b4:45:39:e6:10:3b:b4:03:c6:49:c7:75:f4:d3:66:
92:02:39:70:ab:5d:e8:8b:4c:74:5c:f8:f2:42:58:77:94:39:
4a:4f:dc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:46 2026 by rpki-client