Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
File: TzVzzX1WHNN-DzMfbKON6SAgQrI.mft (raw, json)
Hash identifier: hQzcqRYafMEI0XySDfsbdGCybtSqkD8qJpRqO2iaveo=
Subject key identifier: 04:89:A6:B0:94:71:F6:39:1A:52:D6:58:13:C9:3B:B9:CA:57:A1:BA
Authority key identifier: 4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
Certificate issuer: /CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Certificate serial: 01A166B4E23FD0B97DE559DA9D000C68037D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
Manifest number: 0FD0
Signing time: Fri 23 Oct 2026 03:01:32 +0000
Manifest this update: Fri 23 Oct 2026 03:01:32 +0000
Manifest next update: Sat 24 Oct 2026 03:01:32 +0000
Files and hashes: 1: 64yTSgcbmjpKAYlvmgIcfumrEFE.roa (hash: 55p0izKTNl/c/EZ7S9t+Y7oaqYI6l5T9RwPtRmB8IuY=)
2: TzVzzX1WHNN-DzMfbKON6SAgQrI.crl (hash: KO60jSLOjdtHBGiD55QrtQt5hUmpOMApRfRfgPE5D3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:b4:e2:3f:d0:b9:7d:e5:59:da:9d:00:0c:68:03:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Validity
Not Before: Oct 23 03:01:32 2026 GMT
Not After : Oct 24 03:01:32 2026 GMT
Subject: CN=0489a6b09471f6391a52d65813c93bb9ca57a1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ae:ce:c6:f0:b1:f2:10:e4:72:1c:25:1f:60:
b4:d8:eb:a5:35:fb:fe:cc:a9:59:22:6c:e0:e4:dc:
f5:46:ba:9a:fc:87:1f:01:b3:a1:71:1d:78:62:52:
2e:6c:88:fd:f0:56:83:83:37:ce:d7:af:84:b0:5c:
d8:3d:26:ec:6e:22:a2:29:e2:9a:20:05:37:b3:4c:
58:cc:a9:8a:08:e4:f9:d0:f1:f0:7b:75:77:aa:ec:
25:05:ca:86:d5:55:d5:18:06:ca:d0:7c:33:86:1e:
4a:a2:83:c6:46:64:74:5e:60:16:36:b6:cf:e0:64:
41:95:1d:e1:4f:08:7c:89:42:57:ad:5d:64:b9:2b:
5a:53:37:2f:1b:ff:4d:24:80:fb:c0:42:72:55:e8:
2f:31:df:01:a6:bb:04:39:97:e8:97:be:a7:77:13:
04:a5:47:9d:f5:aa:d3:e5:df:64:45:e8:31:3e:d9:
12:ff:ad:3e:6e:f1:c2:32:62:28:c5:23:02:05:42:
ae:95:1c:e8:c6:d9:e5:95:af:0c:fc:78:d6:18:c0:
38:50:90:17:2f:9c:cf:2f:b3:e1:de:13:f3:d5:da:
27:52:27:05:b6:af:35:84:60:eb:08:5e:e5:d4:08:
f9:55:18:b2:4e:b9:79:ad:1a:60:ca:c4:9b:e4:b8:
0d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:89:A6:B0:94:71:F6:39:1A:52:D6:58:13:C9:3B:B9:CA:57:A1:BA
X509v3 Authority Key Identifier:
keyid:4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a9:b2:34:5b:d2:7d:57:8b:94:c9:cf:17:03:9f:3e:8b:49:
1d:00:a5:60:25:bc:8d:f5:9f:53:39:3a:ae:c8:f2:4d:e3:a2:
1b:a0:b6:0c:5f:fb:47:6a:bf:d3:5b:0f:1a:37:a8:3d:fa:18:
3d:df:b3:4d:01:4c:d3:5d:4e:19:0a:32:a1:f0:de:30:10:67:
21:a6:21:6e:9c:e5:f9:93:27:1b:3f:c9:1b:6b:29:2b:38:20:
93:45:f1:59:b0:3b:c2:2f:7d:57:de:a1:59:00:4f:83:94:bb:
dd:40:6c:f6:c8:92:f9:38:3f:39:a7:e5:49:84:d0:3e:12:d1:
48:57:39:20:ff:57:a8:02:d1:b5:b8:37:8e:37:bf:ec:1a:ec:
8f:90:28:e8:d8:93:fc:c8:3d:3f:83:ec:f6:4c:6d:74:0d:43:
6c:f6:6d:5f:83:2c:7e:eb:e5:54:6c:12:0e:f0:dc:6f:54:2f:
37:1c:7b:d0:be:65:b3:80:84:2d:b6:1a:e2:64:84:69:95:73:
94:03:03:52:e0:26:5e:2d:66:ab:81:45:1d:03:e0:f5:e3:a0:
3e:97:71:52:11:b9:9b:ba:3f:1a:ad:88:57:53:2d:94:d9:ce:
06:d6:4b:88:e8:8e:aa:c9:7d:d2:e7:84:c2:9c:2a:81:67:70:
42:1f:5e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 06:09:14 2026 by rpki-client