Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
File: TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json)
Hash identifier: Iqey7zwaH7WuT7ZuVUkMh8wIjdbp99QVDeocslV0iiY=
Subject key identifier: F0:9B:54:B5:ED:71:CB:D4:75:5A:D2:7B:FB:5F:5F:E8:8B:9F:EB:31
Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Certificate serial: 019E9A3BD06965E804FCE04A06F21B2CFE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
Manifest number: 0BC3
Signing time: Sat 06 Jun 2026 00:01:11 +0000
Manifest this update: Sat 06 Jun 2026 00:01:11 +0000
Manifest next update: Sun 07 Jun 2026 00:01:11 +0000
Files and hashes: 1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: E4eE9RSAUWIuUrXSu9WlsA+LEFtxP9jRICQ61SaJSPI=)
2: hQjM_kfrNcmziZNp3dS3dVTcWQg.roa (hash: 7Img7nOCsZGXCyMuGVQnUnTQzFC5NzgthKFgO50X3go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 00:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9a:3b:d0:69:65:e8:04:fc:e0:4a:06:f2:1b:2c:fe:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Validity
Not Before: Jun 6 00:01:11 2026 GMT
Not After : Jun 7 00:01:11 2026 GMT
Subject: CN=f09b54b5ed71cbd4755ad27bfb5f5fe88b9feb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:1e:c7:20:3b:6c:cf:32:ad:cd:29:5a:74:
92:c2:e7:ab:1b:b3:ae:e3:da:d7:00:a7:5d:a8:b2:
9d:d3:57:fc:66:4c:d3:26:db:a0:b6:31:10:80:63:
99:7b:eb:81:56:af:94:1b:a3:6d:f8:2e:5d:f0:64:
8d:a8:f1:9f:5a:e3:1f:b9:82:69:85:da:29:02:48:
3e:90:fd:4b:b7:da:92:27:2e:54:a4:5b:3e:56:06:
a5:0f:c4:09:a2:bc:ea:9a:f5:c3:24:cd:40:3e:03:
c3:9d:f2:b9:f8:0b:2c:fc:8c:08:57:94:78:9d:0a:
9b:ec:4d:69:3e:7e:d7:cb:1f:34:96:27:21:b5:5b:
73:81:86:96:a6:31:da:39:53:bc:4c:e3:50:a1:92:
95:4c:bf:10:be:12:d8:76:a9:ad:91:34:d3:c7:57:
67:da:84:36:30:2f:ac:09:46:26:f0:8c:32:be:00:
57:d6:33:29:e7:ef:b0:94:af:ab:5a:89:d3:30:10:
35:c6:be:93:11:ae:53:ae:84:df:8e:72:8f:50:a5:
3b:ab:2f:21:a7:5f:59:bf:b5:a2:f5:5f:5c:91:dc:
f3:94:c5:d6:dd:9e:19:47:2d:ae:cc:98:70:c5:05:
04:a5:8b:98:56:4f:ee:84:00:91:10:b0:55:62:c8:
ec:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9B:54:B5:ED:71:CB:D4:75:5A:D2:7B:FB:5F:5F:E8:8B:9F:EB:31
X509v3 Authority Key Identifier:
keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:18:18:5c:7a:54:4d:ce:e4:74:9f:76:56:be:dd:0b:e7:9d:
32:62:52:14:ba:9d:3c:b2:ec:bd:19:3c:36:26:08:86:cc:10:
c2:22:cd:a8:e7:97:5d:84:85:30:c9:06:e4:46:97:53:67:e6:
38:b3:87:90:44:5a:d6:5e:da:0a:6c:09:40:86:d5:40:16:61:
d5:e4:39:5d:ba:3a:a6:dc:6b:4b:a7:38:37:3f:8c:78:b1:f8:
a2:48:aa:3f:da:54:db:7f:35:bc:67:4a:99:af:a0:47:0a:8c:
e5:7e:2a:40:61:8a:f4:fa:be:0b:74:fb:6f:2d:82:25:cb:58:
7c:40:b4:28:fd:d5:bf:e0:bd:3b:a9:52:f1:11:f0:f1:d5:7b:
6b:5c:43:d2:4a:d2:cd:3b:8f:c3:77:46:58:ce:38:3b:ee:59:
d4:87:93:bc:3a:61:86:7a:cb:bc:f4:8b:67:cc:1e:cd:86:8d:
be:85:9f:06:4c:b0:df:bf:30:d4:91:17:16:a9:0a:a0:9f:ab:
4d:d6:5f:0a:dc:6b:2b:ba:16:7e:b9:c5:03:b5:d7:59:10:06:
51:22:0c:d8:ca:fa:bf:fe:d6:58:ec:aa:f8:03:48:64:cd:d4:
40:85:9c:62:22:31:ed:3d:a9:31:ff:ab:0c:cc:fe:1e:85:d2:
f2:c7:a4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:51:21 2026 by rpki-client