
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File: Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier: Zsj6EGK4cTZmsSS2RQoBSaWcys+yKabg7ZpkFcZy6Wk=
Subject key identifier: AC:5D:9E:F1:D1:E9:99:5F:77:E7:C3:A7:A7:D7:C1:F3:5D:66:94:C5
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer: /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial: 01A001A65D2EA816E60FAA63960E06B2F3B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 19:01:15 +0000
Manifest this update: Fri 14 Aug 2026 19:01:15 +0000
Manifest next update: Sat 15 Aug 2026 19:01:15 +0000
Files and hashes: 1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: KSygYW+5vW8UgcNEQa69fcA32EVB/boBauXi5Q7JNiw=)
2: owMZq8FjMrGcWydVPo2XzsNX_wE.roa (hash: oerV8Rk8gelATCf/K/1z5Pi6X6k6wK997b4CHySJpco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:5d:2e:a8:16:e6:0f:aa:63:96:0e:06:b2:f3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Validity
Not Before: Aug 14 19:01:15 2026 GMT
Not After : Aug 15 19:01:15 2026 GMT
Subject: CN=ac5d9ef1d1e9995f77e7c3a7a7d7c1f35d6694c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:a9:d8:db:8e:4d:5c:f6:da:7b:64:1c:f7:
73:b2:19:f0:ac:6d:e3:74:ce:15:ec:24:9a:34:2d:
bf:54:c9:91:07:dd:b2:e7:5b:49:63:da:2b:92:e0:
3d:e7:12:ab:4a:05:1d:9f:01:4e:1e:4a:63:f3:1c:
24:df:df:99:11:41:33:75:f8:cf:eb:db:74:68:9c:
b5:3d:4b:0d:ac:c7:44:6a:8b:76:bf:8c:49:b2:46:
8e:e0:48:2b:67:7a:26:2d:54:ab:0f:5d:be:da:18:
5a:eb:13:88:26:6c:46:3a:9b:58:9e:0a:32:62:cc:
7b:b5:16:35:3d:78:d5:29:97:2a:83:d5:1a:63:a6:
f9:fc:06:e1:5e:15:ea:14:1b:fb:87:cd:f5:78:eb:
c7:d2:f0:e0:cd:01:59:d0:d6:09:7d:45:77:3e:ca:
29:2e:46:46:ea:93:f8:e5:e5:49:1b:83:5b:d4:7e:
8b:da:e9:18:2a:33:34:2e:c2:8b:ec:b4:7a:64:8c:
58:85:7a:54:56:ee:43:7c:56:71:62:28:36:31:26:
8b:a9:dd:7d:19:fc:7b:c6:01:cd:67:22:b4:98:b7:
56:ba:76:bb:89:05:05:e3:24:53:a8:09:41:a1:18:
5d:44:8b:93:81:93:a5:bc:2c:bf:c1:25:a2:68:71:
54:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5D:9E:F1:D1:E9:99:5F:77:E7:C3:A7:A7:D7:C1:F3:5D:66:94:C5
X509v3 Authority Key Identifier:
keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:57:ea:b9:33:45:e4:e5:da:d4:a3:5c:75:53:c3:6e:49:16:
a8:9c:19:4d:01:2f:19:ea:fa:89:95:88:d8:37:db:98:a8:d9:
29:48:dd:0a:d8:27:70:55:d0:6d:96:3c:44:3d:ba:ee:d7:ad:
c7:1a:92:56:be:33:0d:e9:52:b3:f8:1e:b9:53:6f:e5:fa:e1:
d7:0e:90:95:d5:ef:80:3e:76:36:c6:ad:aa:94:35:2a:b9:70:
48:31:d7:b9:19:51:98:61:bc:2f:29:29:1b:89:a8:fc:5c:f3:
6f:b0:b8:89:35:91:17:bb:33:ff:3e:0a:6e:ca:6d:d7:1c:28:
dc:a3:e4:b3:43:75:da:ef:a7:f2:56:66:b3:2f:c8:56:04:15:
6e:62:89:97:4f:ad:fd:37:2f:b7:2e:f8:11:b3:22:fd:0f:7a:
d3:31:ea:93:46:5e:16:0c:13:df:a5:8f:c5:fd:82:63:75:a6:
86:6f:87:e6:33:f3:ce:7e:de:61:75:90:8c:49:08:f8:c7:08:
5b:41:28:65:e6:a2:5c:52:a0:9d:70:4f:89:f3:c2:6f:c1:bb:
c5:96:ce:6a:7b:37:68:11:cc:b2:06:ca:3d:87:44:c6:da:91:
f7:40:a7:ee:ac:24:22:d2:79:86:8a:07:e7:91:92:30:78:3c:
17:a7:bc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:14:41 2026 by rpki-client