Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
File: TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft (raw, json)
Hash identifier: g1mVnZyzEY1GJIFZvHRrCSVn1cxBYbyhlF6PkB71foI=
Subject key identifier: 00:14:AE:E2:A4:3C:BC:20:12:25:30:97:C5:43:BA:36:8E:E9:0F:3D
Authority key identifier: 4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
Certificate issuer: /CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Certificate serial: 019D389BF540A014624A4062D9023D153859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
Manifest number: 05CE
Signing time: Sun 29 Mar 2026 08:00:38 +0000
Manifest this update: Sun 29 Mar 2026 08:00:38 +0000
Manifest next update: Mon 30 Mar 2026 08:00:38 +0000
Files and hashes: 1: TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl (hash: ADmWgTz29XbkICadYde0N5Pwu2UNzHy0eWKjsf1A17Y=)
2: wkoUWQPmVypi2JIAAAcr8R61JzQ.roa (hash: NnrdTpNh2cKf1Rwj81mGLy32o/V9MF6hm/qy5VXigm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:f5:40:a0:14:62:4a:40:62:d9:02:3d:15:38:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Validity
Not Before: Mar 29 08:00:38 2026 GMT
Not After : Mar 30 08:00:38 2026 GMT
Subject: CN=0014aee2a43cbc2012253097c543ba368ee90f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6a:80:00:56:c2:54:c1:54:a3:fa:26:3d:74:
ac:0a:d9:0d:0f:0d:c6:7a:a5:48:b8:e7:00:c7:6b:
f7:0a:3d:da:19:5c:a4:60:5b:77:ad:bc:1c:31:25:
e8:98:d3:c4:42:25:0c:ae:12:f0:6a:78:aa:d8:11:
b3:69:2c:c4:23:79:55:6f:64:e2:7d:bc:26:bc:ac:
75:25:bb:9d:97:62:df:97:56:76:1c:4f:21:27:51:
b6:fc:f6:ff:1a:69:11:bc:81:20:62:7f:ff:7f:4f:
06:b6:70:30:e1:5c:1e:07:c6:8b:0c:45:19:5c:80:
5e:7a:80:9a:78:e4:ac:d1:95:a6:90:f4:e0:21:39:
90:74:05:7f:c8:75:c9:42:2a:46:26:68:8f:50:93:
51:32:57:0d:c8:77:ea:5e:81:60:8f:e8:e3:c5:13:
5c:c7:03:f4:15:80:c8:e9:b0:57:f6:9e:6d:b3:85:
e6:af:26:19:61:f5:b7:2d:25:a4:69:bc:10:e7:d5:
33:9c:06:2f:14:a2:22:14:99:73:82:5e:88:0c:cc:
ac:00:61:38:c5:15:fd:b6:85:a6:75:e3:74:3e:d9:
77:cb:f1:da:82:06:05:89:c4:91:01:5d:7c:6d:0e:
e0:8e:aa:8c:ac:28:37:bc:71:59:48:56:54:5f:71:
3d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:14:AE:E2:A4:3C:BC:20:12:25:30:97:C5:43:BA:36:8E:E9:0F:3D
X509v3 Authority Key Identifier:
keyid:4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:a5:89:ce:03:2a:d6:de:be:6c:03:f2:04:e6:e5:43:41:78:
f6:9c:a7:7f:6c:7f:35:35:84:78:20:33:47:ef:7e:fd:4f:f9:
f0:51:4d:f2:21:cb:87:64:a2:39:89:7f:8d:5b:09:ff:60:c8:
17:2f:e4:2d:69:90:11:2b:da:dc:4f:6b:5f:ce:f9:ac:81:31:
d8:e6:36:d1:92:1e:f2:0d:44:bd:8b:a8:87:36:85:1a:05:80:
b3:2b:cb:4e:8a:29:8e:11:06:b3:b9:3b:d3:99:40:13:4a:a0:
39:62:6b:5d:df:ef:38:ca:99:a2:8e:19:94:67:a9:ae:e9:e7:
08:2d:46:c9:7b:f1:82:9e:32:b8:09:91:ae:09:97:54:e7:bb:
8e:c6:d3:07:8c:ed:b6:e1:68:c6:59:68:23:9f:da:c5:52:d0:
81:1f:d6:c6:5d:b6:ef:f9:ba:d3:35:fe:6a:45:41:5b:81:c3:
37:fe:e5:97:75:40:a7:ea:ae:e8:b4:47:0f:17:80:ea:45:f8:
f2:55:7a:d1:fa:97:23:b7:30:d9:01:5b:44:b8:6b:a3:32:d0:
4e:7d:18:7f:62:30:9e:fe:6d:e6:e0:07:0a:60:97:66:6c:b9:
23:3b:04:93:25:06:3b:81:c1:ba:55:98:61:7c:ca:14:80:5b:
57:8a:be:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:41:00 2026 by rpki-client