Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
File: TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json)
Hash identifier: MLZzbUovK3KWLP6HsbZ7fWag4aBFIWzb1QF1lJ0N/3A=
Subject key identifier: 9C:0E:C2:0C:A3:81:03:D3:1F:22:5D:B5:A5:1B:BB:F9:D8:1F:24:01
Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Certificate serial: 01A0D5DDDA53C0CCD3EBE490FA024CB91559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
Manifest number: 0CEB
Signing time: Fri 25 Sep 2026 00:01:21 +0000
Manifest this update: Fri 25 Sep 2026 00:01:21 +0000
Manifest next update: Sat 26 Sep 2026 00:01:21 +0000
Files and hashes: 1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: IiZlOf8RWhs5L1E7EbBR+EhK1cOEhyn+lWdQ7B9+I5c=)
2: hQjM_kfrNcmziZNp3dS3dVTcWQg.roa (hash: 7Img7nOCsZGXCyMuGVQnUnTQzFC5NzgthKFgO50X3go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:da:53:c0:cc:d3:eb:e4:90:fa:02:4c:b9:15:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Validity
Not Before: Sep 25 00:01:21 2026 GMT
Not After : Sep 26 00:01:21 2026 GMT
Subject: CN=9c0ec20ca38103d31f225db5a51bbbf9d81f2401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:f1:ad:8e:43:ed:3c:56:a6:1b:b0:4b:02:
0c:f3:63:0a:e8:df:4e:d2:61:7e:4c:fb:74:7a:cd:
92:97:c6:c7:76:e1:9e:eb:de:14:9b:5b:f4:0b:f0:
a8:9a:5e:12:27:f2:45:97:d5:bf:96:18:dc:05:ef:
4a:42:88:cb:e9:f2:2f:3d:72:d9:89:bc:75:6c:6b:
75:0c:80:17:45:d1:06:91:4c:74:dd:c6:1b:cd:e9:
be:36:27:c7:77:26:1f:fc:ef:10:5e:bd:ce:d5:78:
b7:94:e0:e8:ff:99:c2:87:30:2a:d0:de:d2:60:38:
45:01:53:ef:c8:8f:a1:f5:2f:93:a3:19:10:f6:69:
60:23:4b:1d:21:8a:83:15:95:1d:ef:06:e3:25:f9:
72:89:a4:05:a7:b1:5b:62:3b:92:af:8b:ef:6c:3a:
44:b0:a0:fe:f6:db:16:9b:8f:4b:bd:c6:43:97:09:
a8:15:6a:9e:4c:a3:80:08:05:0a:d1:8b:15:de:fe:
24:41:e2:41:a9:82:f5:95:b2:4f:26:74:2f:93:cc:
1b:f2:74:51:53:b4:89:85:08:3a:19:90:82:23:16:
6a:e5:8d:c4:10:36:a2:7e:67:3c:95:82:60:bd:6c:
b5:13:f9:14:f1:f0:d2:d9:23:f3:1e:d3:fe:66:16:
73:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0E:C2:0C:A3:81:03:D3:1F:22:5D:B5:A5:1B:BB:F9:D8:1F:24:01
X509v3 Authority Key Identifier:
keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:da:77:e2:0d:93:7d:81:86:94:52:d2:a6:aa:9f:6f:ae:27:
77:43:2c:f5:c5:3a:31:91:32:d3:04:7b:26:6f:fd:da:44:62:
aa:d3:31:e6:4b:b9:08:33:3d:cd:7a:8b:a8:1a:aa:3a:d4:b0:
c3:8c:c5:c6:c7:2d:e0:b1:2a:b7:38:5b:54:24:8e:bc:a0:5a:
97:ea:12:c2:18:bc:f8:1e:c3:ad:ae:11:3d:e0:c8:25:5f:6e:
c7:e9:ab:ff:ba:2a:76:b2:f8:e3:fb:42:ae:c5:1d:fb:76:da:
e5:2e:f8:7c:c9:70:24:8d:e1:53:14:de:4a:66:fb:f6:65:45:
bb:9e:3d:43:de:f8:14:46:9f:d9:39:b0:d9:6f:fd:1c:ae:0d:
21:7a:ac:a1:e0:64:98:5d:1e:0f:d6:6f:5c:ff:16:24:0c:c5:
cd:8a:f3:20:1d:d0:99:cb:4a:59:3e:31:52:15:f7:b2:f2:5f:
25:18:51:38:fd:60:38:1b:92:75:5b:7a:c9:e6:55:ca:a3:a6:
86:c9:cb:6b:91:0f:8d:be:ea:7f:28:4f:a9:e1:2d:6d:40:fd:
f2:0c:e0:17:bb:c8:62:62:53:a8:99:52:2e:d6:7c:e7:02:12:
7e:9c:3f:81:1e:f6:59:a0:09:c5:0b:47:37:56:4f:15:f1:e7:
47:e5:c4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:04:16 2026 by rpki-client