Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
File: TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft (raw, json)
Hash identifier: xnDgcqPySfktN8w4HLF9R26N9TuSF9VnZZkcXGa74iY=
Subject key identifier: F6:46:29:0D:AE:29:E3:05:04:3A:46:25:92:44:CD:31:30:0D:47:40
Authority key identifier: 4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
Certificate issuer: /CN=4c6319fe7859c342f7cd9f711306f56590828d60
Certificate serial: 019D378946853DF525E9A12CB37C468EC920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
Manifest number: 0DB8
Signing time: Sun 29 Mar 2026 03:00:36 +0000
Manifest this update: Sun 29 Mar 2026 03:00:36 +0000
Manifest next update: Mon 30 Mar 2026 03:00:36 +0000
Files and hashes: 1: GX1eu_6zpwR6clx_FqqeJBPN_Mo.roa (hash: inOvGcMs2Q+xEP7avmV2EhXxbklbjFv+dUq+zEBdcig=)
2: P7kPB37r9r72-mJgBxJftOWF64M.roa (hash: 2/cBpl7XQw4f9+xbj+/dYArmRAIbH19CMO7EVq172A8=)
3: TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl (hash: 4iF5Wd3eZu6Uw8lZwn+8ApD7oTPtqnk4054HYCKiI6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:46:85:3d:f5:25:e9:a1:2c:b3:7c:46:8e:c9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6319fe7859c342f7cd9f711306f56590828d60
Validity
Not Before: Mar 29 03:00:36 2026 GMT
Not After : Mar 30 03:00:36 2026 GMT
Subject: CN=f646290dae29e305043a46259244cd31300d4740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:41:2b:d3:af:dc:c9:aa:cc:e8:06:9f:ef:2f:
90:e8:a4:91:04:d1:71:2d:4b:75:f8:c7:a6:51:c0:
d1:66:c2:7e:9e:7e:1b:1e:dc:29:a0:0e:ba:e3:30:
4d:84:86:9a:34:43:d8:ec:67:c7:52:be:2e:11:e2:
f0:15:0d:fd:bc:6f:3f:e3:ac:24:e8:f3:26:42:fd:
d9:66:41:c0:51:81:84:54:68:69:b1:c4:ef:64:a3:
5a:cb:07:90:7e:85:40:55:b2:60:9b:81:dd:fd:5a:
cd:5e:21:93:84:b7:14:ce:fb:11:9d:4b:e9:9b:ba:
b8:82:56:4a:54:c0:23:8f:b2:38:a2:32:24:df:82:
a1:d8:d1:d2:17:e5:c7:19:a2:29:d5:ce:d9:1b:be:
19:d0:90:fe:e8:ca:06:06:e3:1b:c2:ae:6a:86:ae:
8b:94:7e:86:92:76:e2:f5:ff:49:ca:c5:87:10:a1:
1d:a9:49:6c:31:2f:7d:e6:75:4c:c4:44:4a:69:53:
05:11:37:f4:6e:10:1f:c0:9d:4c:80:da:82:ed:55:
16:d6:30:01:cc:12:ba:a7:27:18:86:2e:0c:14:fa:
c9:2a:c4:ed:29:ce:22:bc:83:e9:b2:fa:c2:ad:7d:
12:c1:f2:26:2b:83:f7:81:fe:2c:84:dc:f6:43:09:
9f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:46:29:0D:AE:29:E3:05:04:3A:46:25:92:44:CD:31:30:0D:47:40
X509v3 Authority Key Identifier:
keyid:4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b7:87:81:d3:32:56:b5:a7:48:25:79:3c:39:8a:40:b6:ab:
ed:ec:46:cf:61:da:9d:45:4b:a0:d5:06:78:32:df:73:9d:c4:
0a:d0:ea:e4:07:94:75:ac:97:9b:2e:81:2c:d5:18:5a:e5:f7:
a1:eb:5c:da:bf:92:8e:d6:86:4d:b9:07:04:2d:e0:66:a6:1b:
79:d7:91:63:a1:90:19:f0:0d:c2:14:87:72:38:38:a5:21:fc:
25:7a:b5:f2:4e:7b:b2:5b:8b:7d:ba:ce:41:b5:26:50:f0:7d:
a9:ce:f9:6f:f5:52:49:6d:14:f4:d3:bd:c4:4b:b2:0e:62:97:
36:a9:30:06:43:8e:33:0d:34:db:c6:34:74:d3:4d:5d:b7:53:
28:d8:18:1e:24:c4:c9:7b:8f:75:5e:73:23:ca:e2:4c:93:ee:
ca:b9:36:8c:13:df:28:dc:fb:48:c6:30:73:5c:a2:f7:7f:a2:
35:56:f4:f2:80:f5:f1:57:6b:35:27:69:20:c2:05:46:40:0e:
6a:87:de:3c:49:45:21:ac:52:36:a4:14:0b:8b:11:ea:0c:0e:
87:71:22:24:97:f4:a5:89:cc:02:e6:bc:9a:91:86:cb:06:14:
c4:b5:f1:cf:45:e7:46:65:ea:ba:72:81:a8:a9:9c:f9:41:a7:
7e:43:47:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:12 2026 by rpki-client