Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
File: TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json)
Hash identifier: pfJI/pC9uU9RLPPMcS8pb5Y9Ey/5ANtpChmnfq7hbeA=
Subject key identifier: 17:F0:21:F7:A5:66:82:9C:6B:5E:5D:74:F3:A8:BB:72:A7:A6:F8:B3
Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Certificate serial: 01A1705D70739B08E95A045C8B4C2A8C1951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
Manifest number: 0D3B
Signing time: Sun 25 Oct 2026 00:02:14 +0000
Manifest this update: Sun 25 Oct 2026 00:02:14 +0000
Manifest next update: Mon 26 Oct 2026 00:02:14 +0000
Files and hashes: 1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: sGbwtSTKZPolINuqPmkIsTOS3DNwb/I3/uWVJLdoz5Q=)
2: hQjM_kfrNcmziZNp3dS3dVTcWQg.roa (hash: 7Img7nOCsZGXCyMuGVQnUnTQzFC5NzgthKFgO50X3go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:5d:70:73:9b:08:e9:5a:04:5c:8b:4c:2a:8c:19:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Validity
Not Before: Oct 25 00:02:14 2026 GMT
Not After : Oct 26 00:02:14 2026 GMT
Subject: CN=17f021f7a566829c6b5e5d74f3a8bb72a7a6f8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c0:9e:4a:8f:9e:56:f0:04:39:d5:a1:90:45:
4b:9c:9a:38:e0:b7:de:0e:de:82:4b:f2:69:0b:93:
b6:cd:77:ae:d9:a4:f8:6f:97:51:34:a5:75:ce:8e:
70:a4:b0:c0:ec:4b:b6:54:62:20:08:9a:2c:70:ba:
61:29:06:07:6a:24:ff:11:ba:11:81:a1:03:76:25:
ca:70:e7:12:ac:36:86:80:8c:95:e9:bc:fb:8b:b5:
ca:56:e3:dd:a3:7e:6e:36:b3:35:7a:f8:30:27:c9:
1c:8d:9b:55:e0:2d:73:a3:56:41:54:53:00:0d:76:
05:af:42:df:5d:f7:38:9b:3d:b3:dc:dd:44:19:14:
29:fe:92:5a:78:a4:9e:e3:8d:26:03:bf:eb:5a:a1:
e4:2e:34:b4:94:8e:49:12:f9:b2:26:45:88:8b:f2:
dc:25:fa:a5:a6:b0:4c:86:10:ef:eb:39:66:b9:36:
b7:51:3b:8c:3b:d7:ed:95:28:19:4f:bf:85:3c:7e:
26:4f:20:df:f3:0f:20:e6:33:a8:69:88:70:48:51:
6d:67:2d:db:e1:70:7c:8a:54:e9:dd:77:dc:6d:83:
e6:69:1f:5d:ae:27:9e:31:29:91:e1:cb:57:06:f8:
df:a2:14:ed:4d:b2:6c:2b:ca:69:cd:1f:ae:b8:82:
d4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F0:21:F7:A5:66:82:9C:6B:5E:5D:74:F3:A8:BB:72:A7:A6:F8:B3
X509v3 Authority Key Identifier:
keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:86:2c:5e:5f:3b:a2:fd:4b:19:94:3d:ea:f9:ed:bd:e8:dc:
15:e1:d3:c1:74:6d:e8:d9:ad:aa:b8:12:c8:76:11:94:c5:94:
ec:a4:73:6b:86:0a:f2:61:5b:04:b3:b5:32:0b:54:5b:61:60:
19:88:8d:68:30:c3:b1:a7:d7:07:73:53:86:e0:39:7f:a6:b6:
fc:d4:3d:c8:85:01:c8:f6:f7:31:b7:80:82:cc:d2:a1:40:63:
4c:49:28:65:55:b7:2b:1c:eb:37:68:2a:80:09:68:6a:ff:9e:
d0:9b:57:94:5e:7c:1d:92:fc:9f:c6:d6:c4:05:25:53:3b:d4:
af:02:37:c8:da:16:61:56:38:22:7c:29:27:c7:1a:3b:eb:7e:
15:fb:f9:18:94:8a:c4:15:d0:6d:d9:7f:76:1f:a9:c8:bb:9c:
37:49:49:32:91:be:8f:da:62:94:98:50:4b:8d:1c:a0:f7:0c:
28:22:5f:2d:1e:d3:64:48:dd:46:3c:1c:48:44:89:a1:80:65:
aa:8d:d5:09:57:c0:df:0b:1e:9a:95:df:d7:4c:4e:c2:2f:0c:
21:84:87:a6:da:2f:66:03:ad:84:1e:6b:bf:e6:bc:87:32:2b:
ce:19:dc:19:56:da:f8:d2:ef:45:ff:30:bc:f5:bf:2b:67:7a:
c9:84:5a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:06:09 2026 by rpki-client