Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
File: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft (raw, json)
Hash identifier: zwT4L7B3dVL6OkGA2VJDms3+4NajjlaKI6EEf0shAD8=
Subject key identifier: 34:75:A7:4E:2A:9A:BB:9A:02:1E:2E:F0:CD:70:FF:C3:CB:FF:32:95
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Certificate issuer: /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial: 019D2138F55037AD862B477200E5ACB1A9C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
Manifest number: 1887
Signing time: Tue 24 Mar 2026 19:01:14 +0000
Manifest this update: Tue 24 Mar 2026 19:01:14 +0000
Manifest next update: Wed 25 Mar 2026 19:01:14 +0000
Files and hashes: 1: IDKw72UDV4fBvKey2_GXU4YBDRA.roa (hash: qTZQ2NPnaEey/BLWGhLNERBs92D0ttnILDap5h0iO4A=)
2: LfKEiBUYG-rD2066F2HvQK8WvPg.roa (hash: P6VfgqJ5zT/fBeMm4CrVPEyhOWX2kuGJJ1u66qFZ3ms=)
3: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl (hash: L3KdeZNDz8IbtcI52u139yAp0Lsex8Ldkv0mXKFro8Q=)
4: UrbBvwlHu4uSvs0RYok_mjpcJHQ.roa (hash: zeDYSU9xRwUTl0+MDt61kl2HDTZsB77vtuzNNebemko=)
5: ukZM-3_xV-iFuOqVLRRZDpxgm-s.roa (hash: vg+eKlX0YTyZM3VY4Qut9mEJDRF4SsmNGim25sAbw6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 15:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:21:38:f5:50:37:ad:86:2b:47:72:00:e5:ac:b1:a9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Validity
Not Before: Mar 24 19:01:14 2026 GMT
Not After : Mar 25 19:01:14 2026 GMT
Subject: CN=3475a74e2a9abb9a021e2ef0cd70ffc3cbff3295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:d8:1f:d3:6f:0a:75:ab:1d:0b:62:80:6d:
b7:6c:01:ca:f9:11:33:f4:4f:12:ab:06:5f:40:80:
47:ff:45:b5:89:bb:9b:69:db:7d:e8:d7:93:fc:a8:
02:15:70:ae:a7:47:a4:4a:95:9a:63:f0:0c:b9:d3:
26:8a:a9:23:14:b2:0d:f2:af:58:ab:5c:f0:4f:7d:
08:2a:73:aa:ed:12:f6:a2:8e:10:94:3c:39:0f:40:
07:cf:44:f5:68:61:7b:db:53:d2:d3:b6:0f:c7:bc:
fa:70:64:40:f6:04:9d:ff:f6:66:95:3d:32:18:e9:
d2:57:4b:cd:a9:4f:55:ac:93:d9:55:34:44:d2:d4:
ec:f8:20:35:72:b0:fc:64:33:97:ac:ea:40:6e:82:
2c:73:ce:00:6a:25:23:18:12:3a:b3:7f:b9:9d:d0:
e0:75:eb:42:87:71:1c:4c:31:78:8a:db:70:1d:6c:
62:4f:3d:46:7c:30:bc:49:2a:7e:34:48:f3:ab:dd:
73:54:18:6b:22:8e:dc:ce:46:f6:00:6c:09:a4:47:
d1:d2:f6:d4:a9:f2:f8:d9:48:4a:92:8a:19:45:d8:
39:01:09:04:e4:4d:c9:31:3e:c7:40:87:3e:c6:60:
84:40:37:00:23:4a:f4:ea:cb:bd:42:9c:2d:8e:32:
a6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:75:A7:4E:2A:9A:BB:9A:02:1E:2E:F0:CD:70:FF:C3:CB:FF:32:95
X509v3 Authority Key Identifier:
keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d2:74:b8:c9:72:d8:ac:41:4a:2a:7d:65:0f:ff:b5:2f:ed:
54:f6:20:da:f4:3e:c6:3f:00:cf:cb:a8:6c:61:55:d0:d3:ea:
c1:5c:fd:60:11:37:83:96:37:7c:9d:e3:c6:4c:19:e5:5d:b0:
2a:2b:52:02:bd:70:c6:c4:c7:3e:c1:96:2b:e6:5a:9d:f0:3f:
ff:95:0f:15:f8:69:07:c5:61:a5:d2:19:07:7d:e4:ae:8b:02:
7f:49:cc:ef:3f:06:91:4c:ce:f5:15:e5:55:3d:73:16:f3:b0:
25:85:fa:4f:36:40:6b:89:bb:8c:38:0a:54:6b:c9:b2:2f:ab:
ee:bf:d6:68:d5:fc:40:1d:2a:b6:f1:55:e5:6a:6a:bc:12:a6:
89:95:61:e7:44:5d:1f:2b:5a:54:f0:1a:7b:37:73:58:55:55:
05:2d:cb:05:f2:2a:76:df:06:ef:16:60:2a:99:d5:b4:85:92:
89:e9:ee:e8:7d:02:47:4f:6e:79:7d:c5:0e:ba:af:0f:7d:25:
23:27:95:cc:81:0c:ee:b8:05:65:1f:41:d5:5d:03:ea:fe:58:
88:5b:3b:4e:6d:06:54:db:5c:ff:dd:b2:6b:4b:15:09:86:c0:
99:06:3b:ec:9f:75:eb:3f:02:f5:11:f7:3b:23:b8:c0:06:74:
2d:75:da:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0hOPVQN62GK0dyAOWssanCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMzJiOWVmZjlmMDJjN2NhYmUxOTk1YTJkYjUwOWQ4MjU4
ZDM1ZmMwHhcNMjYwMzI0MTkwMTE0WhcNMjYwMzI1MTkwMTE0WjAzMTEwLwYDVQQD
EygzNDc1YTc0ZTJhOWFiYjlhMDIxZTJlZjBjZDcwZmZjM2NiZmYzMjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttbYH9NvCnWrHQtigG23bAHK+REz
9E8SqwZfQIBH/0W1ibubadt96NeT/KgCFXCup0ekSpWaY/AMudMmiqkjFLIN8q9Y
q1zwT30IKnOq7RL2oo4QlDw5D0AHz0T1aGF721PS07YPx7z6cGRA9gSd//ZmlT0y
GOnSV0vNqU9VrJPZVTRE0tTs+CA1crD8ZDOXrOpAboIsc84AaiUjGBI6s3+5ndDg
detCh3EcTDF4ittwHWxiTz1GfDC8SSp+NEjzq91zVBhrIo7czkb2AGwJpEfR0vbU
qfL42UhKkooZRdg5AQkE5E3JMT7HQIc+xmCEQDcAI0r06su9QpwtjjKm2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDR1p04qmruaAh4u8M1w/8PL/zKVMB8GA1UdIwQY
MBaAFE8yue/58Cx8q+GZWi21CdgljTX8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNzJjNGUtNmY1ZC00NzVlLTliZTkt
YzQwNzNjMTNmZjdjLzEvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xNzJjNGUtNmY1ZC00NzVlLTliZTktYzQwNzNjMTNmZjdj
LzEvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9J0uMly
2KxBSip9ZQ//tS/tVPYg2vQ+xj8Az8uobGFV0NPqwVz9YBE3g5Y3fJ3jxkwZ5V2w
KitSAr1wxsTHPsGWK+ZanfA//5UPFfhpB8VhpdIZB33krosCf0nM7z8GkUzO9RXl
VT1zFvOwJYX6TzZAa4m7jDgKVGvJsi+r7r/WaNX8QB0qtvFV5WpqvBKmiZVh50Rd
HytaVPAaezdzWFVVBS3LBfIqdt8G7xZgKpnVtIWSienu6H0CR09ueX3FDrqvD30l
IyeVzIEM7rgFZR9B1V0D6v5YiFs7Tm0GVNtc/92ya0sVCYbAmQY77J916z8C9RH3
OyO4wAZ0LXXaIg==
-----END CERTIFICATE-----
Generated at Wed Mar 25 00:02:17 2026 by rpki-client