Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
File: TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json)
Hash identifier: K2CtuqAWqYjUpeZQZYw4dvr2hifZs2UtxOGeeb7bZa0=
Subject key identifier: FC:53:2F:36:B2:0D:BC:17:C8:94:3F:02:D2:EC:FE:3A:62:00:B6:31
Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Certificate serial: 019DA30A495AE6377FB79584DAD44FD6E853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
Manifest number: 0B43
Signing time: Sun 19 Apr 2026 00:00:53 +0000
Manifest this update: Sun 19 Apr 2026 00:00:53 +0000
Manifest next update: Mon 20 Apr 2026 00:00:53 +0000
Files and hashes: 1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: zaqMDww6imqdG7Db3tleDLwXnbvjHDg3BmTZnKnySa0=)
2: hQjM_kfrNcmziZNp3dS3dVTcWQg.roa (hash: 7Img7nOCsZGXCyMuGVQnUnTQzFC5NzgthKFgO50X3go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:49:5a:e6:37:7f:b7:95:84:da:d4:4f:d6:e8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Validity
Not Before: Apr 19 00:00:53 2026 GMT
Not After : Apr 20 00:00:53 2026 GMT
Subject: CN=fc532f36b20dbc17c8943f02d2ecfe3a6200b631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:69:c8:f8:87:12:7e:8d:18:f8:2e:c1:98:
fb:f8:1f:c5:3f:b5:79:9c:f6:18:49:c3:3f:43:7f:
f8:93:7b:b4:45:dd:d0:0a:ac:66:06:1d:25:db:ce:
3b:fd:e3:f9:04:52:8a:61:21:7d:0d:b0:70:cf:62:
b2:36:08:d8:c1:7f:1c:2e:9a:03:ca:73:71:8f:88:
c3:ab:13:be:23:e0:53:c1:5b:cc:bd:27:a5:a2:d7:
15:42:65:84:07:24:ac:f0:45:17:c9:ea:46:b7:2b:
2e:32:c7:74:fd:6a:33:8c:4f:8d:76:8c:39:93:39:
48:69:1d:09:2a:d7:ed:25:a5:e2:67:c1:46:95:3b:
79:35:ed:28:c6:70:63:ac:2b:0b:42:63:3f:8c:59:
ba:6f:80:ca:ae:eb:01:07:80:1e:aa:82:a0:a5:5d:
01:5e:77:e0:ad:56:1c:56:01:52:7e:50:d6:a8:88:
3c:6e:51:98:d2:bf:05:52:d5:82:2d:7b:e9:ad:d7:
13:4d:82:90:b4:d4:09:96:3f:40:0b:35:ca:21:fe:
01:17:6e:7c:58:e5:eb:18:be:09:35:53:51:31:e7:
9d:dd:2b:f3:d0:0e:42:14:f0:02:d4:3a:27:f3:05:
a1:f2:a4:e8:1f:9a:35:a6:43:0c:27:13:6a:d2:a8:
ee:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:53:2F:36:B2:0D:BC:17:C8:94:3F:02:D2:EC:FE:3A:62:00:B6:31
X509v3 Authority Key Identifier:
keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:36:f3:7f:bc:24:4d:99:b4:5d:19:cf:93:89:8f:77:b9:e9:
c2:d8:52:78:51:7f:44:11:03:ff:c7:63:4b:91:3e:92:21:28:
81:44:89:a6:40:8e:af:38:9d:4b:3a:01:d9:16:6d:12:7c:24:
1b:f9:14:2d:1a:db:54:ce:b4:b4:63:41:66:a4:72:c7:89:dd:
b2:ec:ea:30:75:df:bf:4f:43:e2:91:00:7f:34:22:9d:ff:de:
4c:b4:9d:d3:77:81:45:c8:b5:9e:13:22:90:4f:42:b5:54:68:
94:a2:b3:99:ed:ba:de:8c:64:5c:3c:54:24:3d:be:b3:52:a8:
59:b1:16:be:96:fd:52:df:1a:90:0c:d0:47:e8:e1:a5:0a:8d:
c5:4a:85:ba:09:0e:f8:a2:4e:f3:5e:71:8b:a7:e9:74:01:1c:
b6:2d:e5:88:fe:6f:dd:a6:17:18:e1:ed:7d:d5:89:67:30:1b:
4a:25:d8:23:84:21:9e:76:70:32:f5:87:bb:27:3c:2c:1e:92:
8b:c5:94:04:26:51:1d:75:2d:38:53:e1:61:4c:22:66:e3:a2:
ff:12:88:63:06:c3:da:c5:88:99:6c:e7:d3:d6:3b:f4:ed:f2:
c6:2b:20:07:4c:54:47:af:de:33:4e:e9:71:9f:42:75:3a:c6:
50:47:97:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:04:28 2026 by rpki-client