Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
File: S_TZ-mawCKCMO47YLDgmfh0hJVA.mft (raw, json)
Hash identifier: 2V3xp1ZbhLGCcctEVIs9ahumRPkmnY4jY4Q2mO7hKtA=
Subject key identifier: 62:27:29:F4:BF:80:ED:87:A4:09:49:13:B3:37:16:B5:E7:A8:ED:AD
Authority key identifier: 4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
Certificate issuer: /CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Certificate serial: 019D389BB5CE7CB724D96C987B16F16B5C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:00:21 +0000
Manifest this update: Sun 29 Mar 2026 08:00:21 +0000
Manifest next update: Mon 30 Mar 2026 08:00:21 +0000
Files and hashes: 1: S_TZ-mawCKCMO47YLDgmfh0hJVA.crl (hash: GxMzksAKvp/cjx7WH/oRM6Y5BkXPmTbmnkjIQC0ozc8=)
2: WKEZ5BQSR1ehG9mZ_bxEUph3mMQ.roa (hash: uO4Surv+TiXY3EdSL2CRo2M9bmF0VI8nDJjKmqF1qxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b5:ce:7c:b7:24:d9:6c:98:7b:16:f1:6b:5c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Validity
Not Before: Mar 29 08:00:21 2026 GMT
Not After : Mar 30 08:00:21 2026 GMT
Subject: CN=622729f4bf80ed87a4094913b33716b5e7a8edad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:55:86:0e:b1:da:c5:ea:34:ed:37:fa:7e:dd:
43:a3:52:d0:4b:39:64:d0:06:f6:da:86:e1:10:09:
7d:4a:8e:52:6c:d0:3d:58:99:59:b1:16:c1:4c:39:
f3:66:b9:04:d1:e5:e8:17:84:15:58:83:e6:81:14:
bc:ad:ce:91:8d:6e:73:2f:ef:19:d5:2f:a7:ec:05:
b2:a7:12:8f:ed:8e:6b:01:4a:a0:73:51:35:9b:41:
a5:41:ec:df:df:ce:d3:8b:31:0a:2e:a6:d0:84:f9:
03:95:57:f6:32:f1:3f:1b:ee:96:51:01:12:a2:75:
f5:35:0a:aa:a3:da:ee:8a:07:08:9f:73:75:3f:43:
80:cb:65:1a:d8:01:21:65:d1:5c:ff:50:8b:ee:84:
e7:ca:20:51:47:32:02:2d:dd:5e:d1:7a:29:95:3c:
95:b5:ed:36:d6:20:14:6c:bd:8d:43:e6:91:8a:03:
77:f1:99:8a:0b:f1:e9:4d:34:58:de:db:16:80:96:
25:0f:e3:58:e2:1b:48:88:0f:5c:4b:42:86:a4:b5:
fa:cd:e9:32:a7:c6:e8:12:3f:72:da:0e:22:21:e9:
05:11:59:4e:1f:dc:bb:b1:14:4b:31:93:dd:61:9c:
03:96:1a:19:ed:13:c1:f4:9d:03:9b:9b:12:5d:c7:
59:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:27:29:F4:BF:80:ED:87:A4:09:49:13:B3:37:16:B5:E7:A8:ED:AD
X509v3 Authority Key Identifier:
keyid:4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:83:22:82:d6:0c:41:42:04:53:e2:fd:3b:8a:06:89:17:47:
69:3a:56:5d:b8:1a:28:ef:17:9b:d5:e7:96:42:d0:d6:a1:ee:
bb:af:31:f3:fd:bb:6d:19:f8:1b:14:29:d3:80:70:c6:2d:c1:
88:a9:4a:86:5c:8c:01:96:c6:cf:2b:99:44:07:39:88:c5:00:
27:62:db:01:14:69:8d:e6:c6:a1:b7:94:23:f1:6d:97:6d:68:
45:89:e0:ac:07:ac:15:33:39:e0:d9:b7:a5:91:d9:9a:db:d3:
fc:71:e3:db:06:d0:7c:46:fc:de:df:31:2b:93:d8:1b:e7:4f:
9b:5a:6b:14:9c:23:dc:ff:e5:fc:dc:41:a3:a6:8a:e6:91:92:
2c:f3:bc:bd:b2:49:e7:3c:6d:48:88:13:25:61:4a:cb:45:e9:
12:1e:3a:5a:82:00:6c:08:fd:e1:6b:3a:95:5b:8f:2e:2a:34:
4e:ee:96:c8:a0:72:c5:82:e4:58:ad:11:7e:ad:bc:6f:c8:44:
cd:2b:fc:83:a5:a4:cf:ba:29:3e:18:38:b9:86:13:ec:84:56:
24:15:98:d6:7c:48:a4:47:18:88:50:d1:5c:36:e3:33:5f:fa:
c0:4c:48:18:e0:a3:44:51:b2:36:79:5b:fa:48:08:1e:1b:85:
16:73:7d:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m7XOfLck2WyYexbxa1xQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZjRkOWZhNjZiMDA4YTA4YzNiOGVkODJjMzgyNjdlMWQy
MTI1NTAwHhcNMjYwMzI5MDgwMDIxWhcNMjYwMzMwMDgwMDIxWjAzMTEwLwYDVQQD
Eyg2MjI3MjlmNGJmODBlZDg3YTQwOTQ5MTNiMzM3MTZiNWU3YThlZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVWGDrHaxeo07Tf6ft1Do1LQSzlk
0Ab22obhEAl9So5SbNA9WJlZsRbBTDnzZrkE0eXoF4QVWIPmgRS8rc6RjW5zL+8Z
1S+n7AWypxKP7Y5rAUqgc1E1m0GlQezf387TizEKLqbQhPkDlVf2MvE/G+6WUQES
onX1NQqqo9ruigcIn3N1P0OAy2Ua2AEhZdFc/1CL7oTnyiBRRzICLd1e0XoplTyV
te021iAUbL2NQ+aRigN38ZmKC/HpTTRY3tsWgJYlD+NY4htIiA9cS0KGpLX6zeky
p8boEj9y2g4iIekFEVlOH9y7sRRLMZPdYZwDlhoZ7RPB9J0Dm5sSXcdZxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGInKfS/gO2HpAlJE7M3FrXnqO2tMB8GA1UdIwQY
MBaAFEv02fpmsAigjDuO2Cw4Jn4dISVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU19UWi1tYXdDS0NNTzQ3WUxEZ21maDBoSlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lODEwY2QtNjQ5Ny00ZDhhLTkxYTUt
YmY1NzM4NzY2MmEwLzEvU19UWi1tYXdDS0NNTzQ3WUxEZ21maDBoSlZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lODEwY2QtNjQ5Ny00ZDhhLTkxYTUtYmY1NzM4NzY2MmEw
LzEvU19UWi1tYXdDS0NNTzQ3WUxEZ21maDBoSlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALoMigtYM
QUIEU+L9O4oGiRdHaTpWXbgaKO8Xm9XnlkLQ1qHuu68x8/27bRn4GxQp04Bwxi3B
iKlKhlyMAZbGzyuZRAc5iMUAJ2LbARRpjebGobeUI/Ftl21oRYngrAesFTM54Nm3
pZHZmtvT/HHj2wbQfEb83t8xK5PYG+dPm1prFJwj3P/l/NxBo6aK5pGSLPO8vbJJ
5zxtSIgTJWFKy0XpEh46WoIAbAj94Ws6lVuPLio0Tu6WyKByxYLkWK0Rfq28b8hE
zSv8g6Wkz7opPhg4uYYT7IRWJBWY1nxIpEcYiFDRXDbjM1/6wExIGOCjRFGyNnlb
+kgIHhuFFnN9zQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:53 2026 by rpki-client