Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
File: TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json)
Hash identifier: Etq/SntdQZi16kPqbZZ2cpiReytv4HKVNjdgPdcDL40=
Subject key identifier: 0A:73:0E:FB:C6:76:26:F6:C7:10:83:68:76:30:DA:B9:93:07:3E:13
Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Certificate serial: 019EC2C9C9F1B232B06BA01BBF27E40D3CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
Manifest number: 0BD8
Signing time: Sat 13 Jun 2026 21:01:04 +0000
Manifest this update: Sat 13 Jun 2026 21:01:04 +0000
Manifest next update: Sun 14 Jun 2026 21:01:04 +0000
Files and hashes: 1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: eUmMDz1l/mejjNyv5pQaz/C8HRSbImWW+VqP2qm03Uo=)
2: hQjM_kfrNcmziZNp3dS3dVTcWQg.roa (hash: 7Img7nOCsZGXCyMuGVQnUnTQzFC5NzgthKFgO50X3go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:c9:f1:b2:32:b0:6b:a0:1b:bf:27:e4:0d:3c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Validity
Not Before: Jun 13 21:01:04 2026 GMT
Not After : Jun 14 21:01:04 2026 GMT
Subject: CN=0a730efbc67626f6c71083687630dab993073e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:be:78:49:9d:26:32:18:1e:1e:2f:bd:97:c4:
7f:c2:4a:51:cd:eb:45:13:8d:15:dc:b0:15:c7:b2:
13:1c:7a:ed:8a:e6:c1:8e:4e:5c:3a:0b:e7:e8:3a:
87:5b:48:73:70:08:79:70:3d:5b:52:87:fe:6e:ae:
fb:b2:47:f6:ca:98:9c:bd:44:54:d3:d4:34:ee:a4:
e0:39:60:35:03:85:b6:a0:fa:22:94:13:7f:60:a3:
8a:cb:ca:14:e7:6e:29:c0:26:b0:76:48:c4:27:8b:
b6:73:e4:08:a3:de:f4:85:0a:d5:68:1f:d9:c2:f3:
ad:25:46:63:19:13:62:10:1a:60:db:54:63:5d:35:
49:e4:51:b7:79:26:e4:a7:e6:e7:6c:1d:5b:ef:9d:
b2:15:c9:0c:18:ae:1d:36:1e:85:b4:2b:b1:d8:34:
9e:a2:6a:9e:92:3e:b5:5f:c7:2b:33:92:ed:20:54:
76:d3:27:2a:4a:83:a9:80:f1:79:75:17:31:2b:c1:
95:81:f8:22:e0:c0:60:56:33:97:35:59:31:b1:0e:
01:7a:ad:33:74:d0:c0:f5:1d:f5:4f:12:d7:a2:e5:
9e:74:b6:ff:69:3e:92:ed:43:b1:67:27:68:d8:80:
f7:e0:4a:29:a4:81:39:f3:1a:bb:89:25:13:40:cf:
6c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:73:0E:FB:C6:76:26:F6:C7:10:83:68:76:30:DA:B9:93:07:3E:13
X509v3 Authority Key Identifier:
keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f4:5c:cb:06:99:0f:09:2f:65:02:5d:ba:e9:97:c7:8e:5a:
e3:0c:7a:be:56:cf:a0:33:ce:c7:f9:2b:6c:50:16:e9:f0:5d:
58:c8:93:73:07:f8:14:35:8e:99:b3:0c:65:cd:4e:32:e1:cd:
db:f9:34:d6:30:7b:ee:1c:99:f2:a9:7c:ef:86:8e:b8:6a:46:
81:2d:d1:96:47:a6:cc:f6:d4:44:80:b2:23:f6:b2:03:56:13:
5c:4e:c5:8b:b6:93:c3:f5:a7:0b:47:25:0d:a2:8c:75:b3:85:
bc:14:b1:87:ce:d7:27:2c:c5:ef:bf:45:ad:b5:e3:41:06:26:
16:df:ed:ee:d3:c5:4c:e6:60:17:08:33:f6:c2:3e:79:50:41:
e5:e3:3c:be:8c:bd:f1:1e:7e:9d:3a:ba:13:5a:e5:36:0f:a1:
88:56:6e:4b:ff:56:44:d9:c4:91:91:0d:a0:83:b9:a8:f3:35:
d4:60:06:f6:88:63:f7:bb:6e:b0:d1:ed:dd:d0:16:0c:92:41:
bd:d2:f2:fa:cf:a4:d6:e5:31:56:d2:41:fe:80:2f:bc:a9:38:
31:85:ab:e5:45:96:84:b5:ce:b9:c1:90:09:03:83:72:0b:78:
56:bd:11:5e:d6:42:f4:0d:cd:bc:67:b7:4e:c7:50:11:57:71:
74:8b:84:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:44:32 2026 by rpki-client