Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
File: TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json)
Hash identifier: WemBQGzwOroBp5hGbwgZS5yUwc313NX+03K/X938Txo=
Subject key identifier: DC:87:98:13:2D:2D:52:77:6B:8F:7F:63:91:24:64:94:72:C0:30:18
Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Certificate serial: 019FAC77006DF8448294CF7D1B9BD06E13D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
Manifest number: 0C51
Signing time: Wed 29 Jul 2026 06:01:47 +0000
Manifest this update: Wed 29 Jul 2026 06:01:47 +0000
Manifest next update: Thu 30 Jul 2026 06:01:47 +0000
Files and hashes: 1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: OlCeUOkTb6y9LwT4pspxfBz7vgwVvTzSCX4o1B9cuMQ=)
2: hQjM_kfrNcmziZNp3dS3dVTcWQg.roa (hash: 7Img7nOCsZGXCyMuGVQnUnTQzFC5NzgthKFgO50X3go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:77:00:6d:f8:44:82:94:cf:7d:1b:9b:d0:6e:13:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Validity
Not Before: Jul 29 06:01:47 2026 GMT
Not After : Jul 30 06:01:47 2026 GMT
Subject: CN=dc8798132d2d52776b8f7f639124649472c03018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ca:ba:2c:1f:e3:26:cc:ac:08:16:55:6f:29:
64:72:d3:83:58:72:89:02:6d:a7:c2:b4:d0:94:59:
9f:c2:34:36:12:7f:28:da:39:a7:69:53:e4:91:96:
dd:a8:f6:37:18:c5:09:30:fe:3f:1c:48:8d:3a:7f:
c5:ec:56:46:bd:c0:7e:6d:ca:ac:e5:91:06:35:3d:
ab:93:07:30:f7:71:ff:78:0a:f6:6f:06:2e:e7:85:
3a:a3:98:47:9d:21:ec:53:01:72:80:63:c7:2f:fe:
c6:62:76:9a:cf:db:d6:bf:61:b9:28:d9:d3:a3:89:
03:c4:c1:df:d3:9f:25:de:84:b0:a7:02:26:cb:08:
9d:b2:76:c7:71:32:65:37:66:2b:ee:fa:d1:df:b2:
9e:3a:37:f9:d6:43:e3:31:4f:13:a9:2e:49:84:0a:
a2:19:c7:1a:48:72:8b:89:7b:31:52:0f:7f:78:fe:
72:73:e4:71:74:55:e2:96:d0:6e:0c:ad:d3:09:4b:
e1:1f:f6:27:9d:e6:1d:cc:d4:bf:6d:6d:8a:d5:8a:
95:f6:1c:c4:c3:a1:51:5f:22:41:06:ff:a8:76:b3:
ea:c6:db:e8:10:88:c6:b2:d6:3e:f3:ea:a0:05:42:
94:c2:b3:2b:17:4e:0a:07:cc:58:30:62:5b:64:ce:
1c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:87:98:13:2D:2D:52:77:6B:8F:7F:63:91:24:64:94:72:C0:30:18
X509v3 Authority Key Identifier:
keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:28:f7:90:69:18:22:5f:f0:81:fe:0d:33:8d:09:d3:1d:02:
9d:7c:7c:03:04:8a:4e:e8:dc:15:fb:b2:7f:53:7f:7d:87:ec:
82:57:4f:a8:af:7b:9e:b6:66:4c:d5:78:7e:d0:32:f8:f4:d1:
14:5c:4d:35:31:1d:61:ae:19:75:58:63:aa:a8:f9:99:29:74:
80:e1:44:a3:77:9a:d3:eb:2a:fa:32:0b:81:17:19:7c:d1:00:
2c:37:6e:fc:0e:34:ce:ae:4e:46:bc:6e:cc:09:cb:90:53:3b:
a8:49:9b:ba:02:a2:71:91:ac:a6:9b:a1:fd:17:16:f0:4c:e3:
94:18:d4:73:18:27:b1:f8:27:5e:e8:d7:b3:4f:4f:c6:3b:6f:
2f:e2:47:d2:bf:9f:ad:b9:f5:86:8b:fe:e0:b5:0d:be:0d:f2:
a4:62:68:de:1c:e0:9a:f3:5d:34:ea:ba:f8:73:96:69:a9:f2:
c5:16:da:e7:d5:93:a6:12:4a:d7:ab:6b:2f:46:67:08:04:11:
c3:39:17:0a:ca:1b:84:19:24:be:83:54:70:e2:62:7c:48:8a:
8f:10:16:db:c7:1a:04:e8:4d:27:42:59:f2:c0:31:e3:17:4e:
a8:a7:cd:96:1e:e9:4c:53:fb:7e:ca:d2:86:64:66:60:bc:58:
f6:f5:4a:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdwBt+ESClM99G5vQbhPXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkOTE5NzZhYjA2YmZmYWYzZTI4Zjg0Mjg2ZGIzZWUyMDNl
MDdkNWUwHhcNMjYwNzI5MDYwMTQ3WhcNMjYwNzMwMDYwMTQ3WjAzMTEwLwYDVQQD
EyhkYzg3OTgxMzJkMmQ1Mjc3NmI4ZjdmNjM5MTI0NjQ5NDcyYzAzMDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosq6LB/jJsysCBZVbylkctODWHKJ
Am2nwrTQlFmfwjQ2En8o2jmnaVPkkZbdqPY3GMUJMP4/HEiNOn/F7FZGvcB+bcqs
5ZEGNT2rkwcw93H/eAr2bwYu54U6o5hHnSHsUwFygGPHL/7GYnaaz9vWv2G5KNnT
o4kDxMHf058l3oSwpwImywidsnbHcTJlN2Yr7vrR37KeOjf51kPjMU8TqS5JhAqi
GccaSHKLiXsxUg9/eP5yc+RxdFXiltBuDK3TCUvhH/YnneYdzNS/bW2K1YqV9hzE
w6FRXyJBBv+odrPqxtvoEIjGstY+8+qgBUKUwrMrF04KB8xYMGJbZM4cuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyHmBMtLVJ3a49/Y5EkZJRywDAYMB8GA1UdIwQY
MBaAFE2Rl2qwa/+vPij4QobbPuID4H1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFpHWGFyQnJfNjgtS1BoQ2h0cy00Z1BnZlY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi82ZDdjOWYtM2MwZC00ZjhkLTk4YTAt
NDg2YzA2ZWRlZmVhLzEvVFpHWGFyQnJfNjgtS1BoQ2h0cy00Z1BnZlY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi82ZDdjOWYtM2MwZC00ZjhkLTk4YTAtNDg2YzA2ZWRlZmVh
LzEvVFpHWGFyQnJfNjgtS1BoQ2h0cy00Z1BnZlY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyj3kGkY
Il/wgf4NM40J0x0CnXx8AwSKTujcFfuyf1N/fYfsgldPqK97nrZmTNV4ftAy+PTR
FFxNNTEdYa4ZdVhjqqj5mSl0gOFEo3ea0+sq+jILgRcZfNEALDdu/A40zq5ORrxu
zAnLkFM7qEmbugKicZGsppuh/RcW8EzjlBjUcxgnsfgnXujXs09PxjtvL+JH0r+f
rbn1hov+4LUNvg3ypGJo3hzgmvNdNOq6+HOWaanyxRba59WTphJK16trL0ZnCAQR
wzkXCsobhBkkvoNUcOJifEiKjxAW28caBOhNJ0JZ8sAx4xdOqKfNlh7pTFP7fsrS
hmRmYLxY9vVK8w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:50:13 2026 by rpki-client